This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json) Hash identifier: RqON6y3ykoMh25yXfUY7/dz8QX7bexw4jJekN71zeoE= Subject key identifier: C1:81:58:35:E9:BF:29:34:DD:A2:9E:D9:B6:CB:B2:49:54:03:C4:60 Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Certificate serial: 019B35D717DD067E0ED3E2B3D21FF635AD0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 09:00:47 +0000 Manifest this update: Fri 19 Dec 2025 09:00:47 +0000 Manifest next update: Sat 20 Dec 2025 09:00:47 +0000 Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=) 2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: YeITEq3RcTzuH/2VaNSkIx6TTurnpysn6xu0d8MqPZk=) 3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:17:dd:06:7e:0e:d3:e2:b3:d2:1f:f6:35:ad:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90 Validity Not Before: Dec 19 09:00:47 2025 GMT Not After : Dec 20 09:00:47 2025 GMT Subject: CN=c1815835e9bf2934dda29ed9b6cbb2495403c460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:a2:28:48:80:43:6f:75:9b:bd:df:2c:3a: ae:0c:d2:72:8a:2f:28:63:5a:43:7c:1c:1c:c0:30: 2b:53:17:cb:fd:b9:b3:3b:bf:82:ca:c2:32:58:fc: 29:a8:45:dc:34:98:0a:b4:22:a4:ae:fb:e9:71:b9: 9d:89:4c:fd:0b:26:f8:a3:d5:86:40:73:f7:a3:77: 37:1c:47:50:03:d7:e3:68:39:ae:5a:f1:cf:2c:e4: 97:ed:2a:7e:93:55:c1:37:91:4a:58:c3:cd:40:c7: 0b:44:23:f3:75:1f:7c:20:5e:d7:23:25:00:47:fd: 80:c2:8b:d6:67:28:a7:cb:c6:a2:c2:86:3b:b8:71: 78:14:66:3f:87:94:36:7d:c9:64:69:46:82:02:cd: a0:93:5e:20:97:65:19:b8:5b:bb:93:6c:c0:49:b7: 0f:2b:6c:ec:20:79:d0:ea:f5:b1:72:c1:80:a1:1b: da:06:3d:95:ad:89:40:d3:55:3e:28:37:1e:9e:a0: 0e:c7:49:a7:f3:43:63:30:23:b5:19:f7:c6:6d:15: 54:3a:89:d3:8e:6f:99:b3:60:31:15:23:ce:65:8c: 6b:8e:f4:85:aa:08:3a:30:a1:d6:f2:5b:fa:2f:6f: 96:0e:38:93:fa:be:0c:63:f4:c4:f1:bf:4b:c9:40: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:81:58:35:E9:BF:29:34:DD:A2:9E:D9:B6:CB:B2:49:54:03:C4:60 X509v3 Authority Key Identifier: keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:4a:05:65:2e:8c:ab:f9:04:c9:af:b7:09:fa:88:eb:c6: 84:3e:cf:4a:6b:b6:44:ed:43:33:57:51:0e:f5:2d:a5:93:2b: 3e:b3:7d:28:1d:8a:10:a3:76:4a:87:17:37:38:b3:9a:fd:2b: db:c8:3b:ad:1c:f9:48:7e:f3:33:81:df:73:5b:8c:18:72:20: f1:27:ea:56:3c:3b:ed:b3:80:a3:50:f1:df:66:08:1d:6f:f1: 1b:83:7e:fe:1b:05:3d:82:2e:cb:3d:94:a0:80:02:91:17:e4: ad:aa:0f:0a:fd:c6:28:ac:bb:6a:a6:95:19:69:4e:12:42:20: 9f:2f:df:15:e7:e2:99:5c:92:f7:b0:85:4f:ea:19:4a:d8:2e: cf:38:06:7d:32:15:7b:f2:e3:04:0a:c9:19:ce:b2:ba:ae:47: fd:5d:e3:65:0d:c1:95:4e:79:61:9c:3a:f8:bb:26:45:4c:b4: 14:b6:39:19:cd:62:fa:23:a4:b3:69:d7:63:50:b5:0a:c5:93: 30:d5:ba:87:c9:69:0d:e3:63:48:26:50:e6:36:06:4c:64:57: 74:be:db:ec:8d:12:62:9b:19:e8:67:dd:08:4c:8c:04:53:55: 65:26:2b:57:e1:30:ae:23:0f:d3:d9:1b:e1:1a:6e:db:69:1b: d8:36:6c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11xfdBn4O0+Kz0h/2Na0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTk5NjZjMGVhNWRmM2E5ODdmODM2NTUyNGI1MTI4Y2Jh N2ZjOTAwHhcNMjUxMjE5MDkwMDQ3WhcNMjUxMjIwMDkwMDQ3WjAzMTEwLwYDVQQD EyhjMTgxNTgzNWU5YmYyOTM0ZGRhMjllZDliNmNiYjI0OTU0MDNjNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyOiKEiAQ291m73fLDquDNJyii8o Y1pDfBwcwDArUxfL/bmzO7+CysIyWPwpqEXcNJgKtCKkrvvpcbmdiUz9Cyb4o9WG QHP3o3c3HEdQA9fjaDmuWvHPLOSX7Sp+k1XBN5FKWMPNQMcLRCPzdR98IF7XIyUA R/2AwovWZyiny8aiwoY7uHF4FGY/h5Q2fclkaUaCAs2gk14gl2UZuFu7k2zASbcP K2zsIHnQ6vWxcsGAoRvaBj2VrYlA01U+KDcenqAOx0mn80NjMCO1GffGbRVUOonT jm+Zs2AxFSPOZYxrjvSFqgg6MKHW8lv6L2+WDjiT+r4MY/TE8b9LyUBNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGBWDXpvyk03aKe2bbLsklUA8RgMB8GA1UdIwQY MBaAFC4ZlmwOpd86mH+DZVJLUSjLp/yQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMt MzZiNWRkYTlmYmU4LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMtMzZiNWRkYTlmYmU4 LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0NKBWUu jKv5BMmvtwn6iOvGhD7PSmu2RO1DM1dRDvUtpZMrPrN9KB2KEKN2SocXNzizmv0r 28g7rRz5SH7zM4Hfc1uMGHIg8SfqVjw77bOAo1Dx32YIHW/xG4N+/hsFPYIuyz2U oIACkRfkraoPCv3GKKy7aqaVGWlOEkIgny/fFefimVyS97CFT+oZStguzzgGfTIV e/LjBArJGc6yuq5H/V3jZQ3BlU55YZw6+LsmRUy0FLY5Gc1i+iOks2nXY1C1CsWT MNW6h8lpDeNjSCZQ5jYGTGRXdL7b7I0SYpsZ6GfdCEyMBFNVZSYrV+EwriMP09kb 4Rpu22kb2DZsGw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:03 2025 by rpki-client