This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: CSMbyOf2mE+E6uUtaUwnTIM5myDmGDKqEWSfpVVFDF8= Subject key identifier: CC:BD:7D:06:D0:36:F2:8E:B4:B4:D3:65:84:20:AE:CB:78:E6:CE:58 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B11CA842B7C6DC46039242563CE89B73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0DDC Signing time: Fri 12 Dec 2025 09:00:43 +0000 Manifest this update: Fri 12 Dec 2025 09:00:43 +0000 Manifest next update: Sat 13 Dec 2025 09:00:43 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: d3Esn7RyqfdGxMjA3i8G62/jFPRfYDt3u7UuLZiXe+A=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (hash: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:84:2b:7c:6d:c4:60:39:24:25:63:ce:89:b7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 12 09:00:43 2025 GMT Not After : Dec 13 09:00:43 2025 GMT Subject: CN=ccbd7d06d036f28eb4b4d3658420aecb78e6ce58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:54:dd:56:58:df:b3:87:1f:51:b2:8a:1c: 6e:d7:10:39:ea:32:98:22:e4:d0:57:6a:d7:c5:28: 5a:c5:e0:ba:a6:6c:d1:fc:7e:02:45:cd:57:63:65: d1:f3:ae:4b:17:cc:f5:f7:fd:63:b1:d9:5e:d5:6b: cb:2b:12:5c:8c:c7:13:f6:da:9b:5c:cf:b1:ac:c9: 6a:27:f4:7c:78:2e:b2:61:57:53:24:84:4d:67:1b: 75:43:8a:92:94:e5:0c:4c:4a:ed:ae:2a:4c:ad:a2: 57:94:37:2f:1e:98:48:fc:22:b3:6f:c5:e4:01:40: d5:49:0b:82:54:8e:df:c9:67:8d:dd:bd:cb:ce:17: ae:6f:b7:e8:e8:a6:b9:14:2f:ff:4b:7e:0a:f0:d6: 8b:6c:53:5c:f0:fc:04:12:58:38:65:d9:37:b5:a4: 7d:4c:a6:f6:ac:d1:b4:9a:e4:cb:aa:e1:f3:80:c3: e6:6c:d3:c1:cd:2c:3e:fa:1c:d7:96:10:c4:9f:cc: 2d:bc:be:3f:ff:dc:26:79:ea:6f:0b:fe:5a:b9:0a: c9:66:96:99:02:83:2f:96:84:08:e6:a6:d0:b3:6c: 05:fb:ab:55:13:6e:8e:6e:68:58:86:82:75:da:85: 27:85:27:9c:0a:51:a2:ce:36:9b:d7:c6:6c:0e:a6: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:7D:06:D0:36:F2:8E:B4:B4:D3:65:84:20:AE:CB:78:E6:CE:58 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:86:18:e3:27:aa:d4:7a:84:d5:f8:dd:04:25:df:d1:f4:78: 4b:31:03:64:63:39:cb:0c:8d:26:78:6a:5e:88:c8:cf:2e:f9: 79:26:78:80:52:9c:91:b0:e9:60:f9:10:78:df:5f:19:bf:88: 01:14:60:59:04:96:fa:46:8c:8d:53:8a:8c:2c:cb:62:a5:e4: 5b:b2:7a:c3:9b:a6:86:86:fb:21:36:57:81:63:ab:e2:74:70: fc:4c:94:0d:50:7d:1e:b1:ec:f6:e2:16:7e:96:bb:59:e3:57: 1c:a7:b4:d2:1d:65:f0:0c:d6:62:3e:16:7a:c4:81:77:dd:6e: 94:ea:07:dd:8d:be:4c:4f:3b:da:ac:5a:97:23:d5:e3:b3:9f: f7:45:58:ca:3a:7b:b6:25:76:c3:ee:29:05:ba:4a:d9:19:7b: 83:7f:d1:7f:64:8f:20:df:e4:ee:36:2b:a3:19:33:07:13:e8: 00:93:da:be:35:61:56:b1:87:93:7d:75:48:31:9a:85:88:1d: f3:cd:29:e3:a4:68:23:01:ad:89:6f:0f:df:3d:9d:bb:b4:4a: a1:e8:8a:58:3b:02:5d:72:e3:b4:2e:e8:cf:0b:53:c5:48:ed: 72:25:ce:fe:64:0b:24:3c:ff:07:da:2c:ad:5d:0f:f9:9c:a7: 2a:db:6d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRyoQrfG3EYDkkJWPOibc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjEyMDkwMDQzWhcNMjUxMjEzMDkwMDQzWjAzMTEwLwYDVQQD EyhjY2JkN2QwNmQwMzZmMjhlYjRiNGQzNjU4NDIwYWVjYjc4ZTZjZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx49U3VZY37OHH1Gyihxu1xA56jKY IuTQV2rXxShaxeC6pmzR/H4CRc1XY2XR865LF8z19/1jsdle1WvLKxJcjMcT9tqb XM+xrMlqJ/R8eC6yYVdTJIRNZxt1Q4qSlOUMTErtripMraJXlDcvHphI/CKzb8Xk AUDVSQuCVI7fyWeN3b3Lzheub7fo6Ka5FC//S34K8NaLbFNc8PwEElg4Zdk3taR9 TKb2rNG0muTLquHzgMPmbNPBzSw++hzXlhDEn8wtvL4//9wmeepvC/5auQrJZpaZ AoMvloQI5qbQs2wF+6tVE26ObmhYhoJ12oUnhSecClGizjab18ZsDqaBLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy9fQbQNvKOtLTTZYQgrst45s5YMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYYY4yeq 1HqE1fjdBCXf0fR4SzEDZGM5ywyNJnhqXojIzy75eSZ4gFKckbDpYPkQeN9fGb+I ARRgWQSW+kaMjVOKjCzLYqXkW7J6w5umhob7ITZXgWOr4nRw/EyUDVB9HrHs9uIW fpa7WeNXHKe00h1l8AzWYj4WesSBd91ulOoH3Y2+TE872qxalyPV47Of90VYyjp7 tiV2w+4pBbpK2Rl7g3/Rf2SPIN/k7jYroxkzBxPoAJPavjVhVrGHk311SDGahYgd 880p46RoIwGtiW8P3z2du7RKoeiKWDsCXXLjtC7ozwtTxUjtciXO/mQLJDz/B9os rV0P+ZynKtttLQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:04:25 2025 by rpki-client