This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json) Hash identifier: kB8LVW7IKipUm5wvWTJHCtXAdgv4iTM/JQD1o8XSoNM= Subject key identifier: 89:E8:0B:DA:17:70:C5:20:5B:F4:4A:BA:57:68:52:3C:5B:D7:66:D1 Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Certificate serial: 019B4136AFE52AD14B9A3E8F29A6AE4580CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft Manifest number: 1746 Signing time: Sun 21 Dec 2025 14:01:01 +0000 Manifest this update: Sun 21 Dec 2025 14:01:01 +0000 Manifest next update: Mon 22 Dec 2025 14:01:01 +0000 Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=) 2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: c3pM/MdQqXg1tUPU27bZwDvkTqvL6aSbY3HJKFZM6kk=) 3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:af:e5:2a:d1:4b:9a:3e:8f:29:a6:ae:45:80:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Validity Not Before: Dec 21 14:01:01 2025 GMT Not After : Dec 22 14:01:01 2025 GMT Subject: CN=89e80bda1770c5205bf44aba5768523c5bd766d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:4c:be:0b:75:cf:63:a3:22:41:12:d4:ca: 7d:44:56:58:bb:ce:75:11:f1:47:0a:81:fd:52:ce: 7a:5c:cf:30:bd:3b:90:1d:25:4b:0c:ee:e4:ee:03: 37:17:24:d0:f1:b4:2e:0f:fe:22:7e:3c:8b:e7:79: a6:9e:6e:96:28:ce:9c:4c:fe:29:20:b9:e0:9e:87: 11:c1:07:d9:f6:63:c9:dd:05:b6:b6:0b:ba:5e:c9: 1e:4a:53:e9:87:50:12:e9:35:6c:14:0c:d6:84:a1: 43:78:f3:00:79:b5:1e:04:6a:34:6b:50:a9:7a:7d: a2:0f:fd:65:ae:4c:67:d0:91:6a:68:ca:35:d5:dc: d8:3c:06:bc:a4:1b:9d:17:0e:01:2c:da:d8:ed:2d: 48:a2:60:8b:d9:fd:ec:fe:90:8c:0c:b5:9c:ef:8d: ba:e2:c3:35:53:86:25:ff:a9:12:bd:38:b3:75:03: 08:64:66:d5:bf:4c:1c:35:2e:1e:e2:c4:9d:b6:34: df:e0:37:ed:51:4d:d5:25:01:11:05:7b:72:37:51: e3:a6:b5:08:62:84:50:70:db:13:56:49:56:99:be: a2:70:6d:f5:18:62:74:76:c2:55:20:5b:c6:e2:a6: d1:68:9a:b1:c8:70:68:c6:81:46:96:77:0f:a6:7d: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E8:0B:DA:17:70:C5:20:5B:F4:4A:BA:57:68:52:3C:5B:D7:66:D1 X509v3 Authority Key Identifier: keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:d0:d5:51:07:a1:aa:19:8a:bc:f8:a2:c4:84:27:03:cb: 7e:af:65:89:08:07:99:8f:c1:b1:8d:0c:29:a5:47:7e:3b:22: 14:84:af:d4:c9:44:a3:75:08:a5:68:45:21:82:e8:81:9a:e0: cd:0c:d7:89:38:e3:a0:3f:44:6e:47:6d:6a:ac:6b:22:64:d3: c2:4c:11:4e:5e:01:3a:f1:fd:81:6c:ce:7c:78:13:4d:a7:d5: 49:99:fe:ff:44:d2:09:e6:06:b0:38:71:1b:e9:a4:d1:95:b2: 1c:d3:ca:b9:50:d1:88:73:e3:7d:81:64:6d:bb:21:74:1a:7e: 3c:06:dd:56:37:19:8c:f6:73:45:f5:b4:aa:6a:77:a0:f7:7c: 3d:75:9e:6f:cd:c8:88:5a:49:2c:de:6a:7c:35:e9:f7:9a:2a: ec:ca:9d:42:bf:6e:ee:be:7e:2e:73:5f:ed:cf:fc:67:0c:36: c4:a3:62:d3:90:bd:8e:0d:33:12:e9:3d:55:2c:ba:34:e9:48: f3:79:5e:43:d1:16:4d:47:83:82:57:ea:35:bb:73:13:af:35: 38:67:50:a2:3c:bc:ea:ff:0e:46:70:e4:57:2d:77:65:db:dc: fd:32:18:2e:33:a5:d6:0f:0f:1d:19:ad:28:9c:6e:b0:f2:c3: 21:9f:df:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNq/lKtFLmj6PKaauRYDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk MmI5ZGQwHhcNMjUxMjIxMTQwMTAxWhcNMjUxMjIyMTQwMTAxWjAzMTEwLwYDVQQD Eyg4OWU4MGJkYTE3NzBjNTIwNWJmNDRhYmE1NzY4NTIzYzViZDc2NmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKtMvgt1z2OjIkES1Mp9RFZYu851 EfFHCoH9Us56XM8wvTuQHSVLDO7k7gM3FyTQ8bQuD/4ifjyL53mmnm6WKM6cTP4p ILngnocRwQfZ9mPJ3QW2tgu6XskeSlPph1AS6TVsFAzWhKFDePMAebUeBGo0a1Cp en2iD/1lrkxn0JFqaMo11dzYPAa8pBudFw4BLNrY7S1IomCL2f3s/pCMDLWc7426 4sM1U4Yl/6kSvTizdQMIZGbVv0wcNS4e4sSdtjTf4DftUU3VJQERBXtyN1HjprUI YoRQcNsTVklWmb6icG31GGJ0dsJVIFvG4qbRaJqxyHBoxoFGlncPpn01hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInoC9oXcMUgW/RKuldoUjxb12bRMB8GA1UdIwQY MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5 LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWfQ1VEH oaoZirz4osSEJwPLfq9liQgHmY/BsY0MKaVHfjsiFISv1MlEo3UIpWhFIYLogZrg zQzXiTjjoD9EbkdtaqxrImTTwkwRTl4BOvH9gWzOfHgTTafVSZn+/0TSCeYGsDhx G+mk0ZWyHNPKuVDRiHPjfYFkbbshdBp+PAbdVjcZjPZzRfW0qmp3oPd8PXWeb83I iFpJLN5qfDXp95oq7MqdQr9u7r5+LnNf7c/8Zww2xKNi05C9jg0zEuk9VSy6NOlI 83leQ9EWTUeDglfqNbtzE681OGdQojy86v8ORnDkVy13Zdvc/TIYLjOl1g8PHRmt KJxusPLDIZ/fPA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:24 2025 by rpki-client