This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: dkHOhbze1mXLpbdFH13uIgOEsHaX4at6rrWzaCc2HP0= Subject key identifier: 25:A4:67:AD:DF:1B:07:24:DD:E5:0B:EF:90:E0:AC:1E:70:8A:2B:D2 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B2EC23798B21F0F8B40FB76A55DEA6B9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0DEB Signing time: Thu 18 Dec 2025 00:00:38 +0000 Manifest this update: Thu 18 Dec 2025 00:00:38 +0000 Manifest next update: Fri 19 Dec 2025 00:00:38 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: mwytz5e7Jqpc1ndkN5oiJ78tW7XVopXBxGHIUJBEnQg=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (hash: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:37:98:b2:1f:0f:8b:40:fb:76:a5:5d:ea:6b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 18 00:00:38 2025 GMT Not After : Dec 19 00:00:38 2025 GMT Subject: CN=25a467addf1b0724dde50bef90e0ac1e708a2bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:2f:bb:3c:dd:3a:31:fb:4d:ed:c7:ef:3f: 46:58:fd:a5:a1:ef:1d:b2:cf:1f:e9:74:13:2c:3b: 9f:0e:4a:70:f3:6e:d7:ee:c6:35:d4:9e:54:a1:85: fc:76:f9:60:ed:7e:36:50:32:73:44:f3:96:76:d4: 56:45:97:2c:f7:67:2b:0c:f4:0a:52:f5:68:79:c2: 0a:ac:b4:86:e2:6a:e9:97:66:f6:35:1f:b8:82:6d: ce:20:94:98:28:bb:f7:f7:51:5d:0f:1a:7f:d6:ea: 3b:52:d9:0a:ec:a7:0d:88:dc:4b:3d:a0:51:c5:41: e0:37:5e:af:cb:3e:e4:e6:45:6b:9a:39:d2:3c:18: d0:69:f0:af:5f:d4:2d:61:87:b0:c6:49:80:f2:61: 72:11:29:83:ea:e9:ba:ca:17:27:18:c0:8b:b9:8c: 34:81:c8:f6:f2:f6:3f:2e:3c:9b:d0:e0:22:70:1d: fc:dc:82:2d:49:26:a1:79:36:96:ac:e5:d6:65:8a: 69:24:b9:60:c0:4f:5b:ca:38:01:49:f6:87:a4:d1: 80:3c:16:d9:de:af:4c:46:e4:5f:6d:8c:75:70:d4: e7:2e:5b:3f:be:c0:cb:b5:57:a9:92:c5:8d:c9:38: 37:6b:8a:1c:e7:37:cc:fc:74:60:24:bd:87:f6:4f: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:67:AD:DF:1B:07:24:DD:E5:0B:EF:90:E0:AC:1E:70:8A:2B:D2 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:bc:b3:33:d5:d4:b1:7d:72:95:54:69:78:c8:d2:d5:36: 9a:1a:10:e6:db:49:0e:c4:33:b5:ea:f5:43:a8:94:5f:6b:8e: e2:31:7d:36:fa:da:2a:ae:14:ff:4a:22:f3:85:8a:47:8c:09: 57:0b:35:cc:96:67:89:77:ef:06:f4:27:6b:b9:48:4f:97:db: 04:eb:e6:4d:57:b1:51:43:ed:d0:3a:ec:40:54:ac:9a:50:ad: b2:de:1c:42:3d:95:ac:cf:ae:42:e3:4b:60:18:44:e5:79:5a: 91:75:75:42:c5:4c:68:a6:2c:5e:1b:ba:e2:a6:78:e7:bb:a3: 98:bc:3d:74:1c:76:1c:a0:2f:4f:ec:a8:35:1c:36:4d:8e:99: 2f:e5:2a:e9:43:6f:cf:38:ec:4f:12:0f:d6:2c:04:cd:14:b7: 9d:e3:c8:e1:6d:05:c6:69:16:12:7d:12:73:3e:6d:59:50:5e: da:e9:07:41:22:43:e5:1b:ec:fc:c4:70:2e:ef:f3:b7:fb:ec: 79:86:2a:ad:57:d1:bc:62:0f:ae:c5:3b:26:12:9a:3d:9f:de: 4f:78:97:65:32:24:8e:4c:d1:85:69:34:00:a5:8e:62:4d:22: 7c:6a:6d:70:97:79:9c:b7:98:52:3b:da:78:20:92:2e:55:f4: b2:d5:86:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwjeYsh8Pi0D7dqVd6mucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjE4MDAwMDM4WhcNMjUxMjE5MDAwMDM4WjAzMTEwLwYDVQQD EygyNWE0NjdhZGRmMWIwNzI0ZGRlNTBiZWY5MGUwYWMxZTcwOGEyYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlogvuzzdOjH7Te3H7z9GWP2loe8d ss8f6XQTLDufDkpw827X7sY11J5UoYX8dvlg7X42UDJzRPOWdtRWRZcs92crDPQK UvVoecIKrLSG4mrpl2b2NR+4gm3OIJSYKLv391FdDxp/1uo7UtkK7KcNiNxLPaBR xUHgN16vyz7k5kVrmjnSPBjQafCvX9QtYYewxkmA8mFyESmD6um6yhcnGMCLuYw0 gcj28vY/Ljyb0OAicB383IItSSaheTaWrOXWZYppJLlgwE9byjgBSfaHpNGAPBbZ 3q9MRuRfbYx1cNTnLls/vsDLtVepksWNyTg3a4oc5zfM/HRgJL2H9k91LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWkZ63fGwck3eUL75DgrB5wiivSMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMe8szPV 1LF9cpVUaXjI0tU2mhoQ5ttJDsQzter1Q6iUX2uO4jF9NvraKq4U/0oi84WKR4wJ Vws1zJZniXfvBvQna7lIT5fbBOvmTVexUUPt0DrsQFSsmlCtst4cQj2VrM+uQuNL YBhE5XlakXV1QsVMaKYsXhu64qZ457ujmLw9dBx2HKAvT+yoNRw2TY6ZL+Uq6UNv zzjsTxIP1iwEzRS3nePI4W0FxmkWEn0Scz5tWVBe2ukHQSJD5Rvs/MRwLu/zt/vs eYYqrVfRvGIPrsU7JhKaPZ/eT3iXZTIkjkzRhWk0AKWOYk0ifGptcJd5nLeYUjva eCCSLlX0stWGow== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:41 2025 by rpki-client