This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json) Hash identifier: HLV6qet+gXsQGSWgVlLHyxFUQto5qkbLK+N/IBlFGSg= Subject key identifier: 30:4A:E9:02:D3:27:C3:67:45:B4:B8:15:84:96:98:7C:1A:7E:D2:6C Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019B1D99924C7EE95BE4DB51346FA16522C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 16:02:42 +0000 Manifest this update: Sun 14 Dec 2025 16:02:42 +0000 Manifest next update: Mon 15 Dec 2025 16:02:42 +0000 Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=) 2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: 5hEKBO0vUTZ8gDRfT5zp6aZbvsyzwU43RhdDIQ6mBzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:92:4c:7e:e9:5b:e4:db:51:34:6f:a1:65:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Dec 14 16:02:42 2025 GMT Not After : Dec 15 16:02:42 2025 GMT Subject: CN=304ae902d327c36745b4b8158496987c1a7ed26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:69:dc:fb:0d:5b:91:f3:35:92:d0:7d:1a: e9:3d:2b:89:b3:6d:56:e1:93:2c:42:86:f4:68:c0: cc:f6:40:9b:c5:43:05:ae:f1:cd:a6:93:de:4f:ef: 67:1a:20:17:99:c3:48:84:95:bb:97:79:55:be:db: b1:6f:74:e7:03:f8:9a:d3:21:e2:76:b8:80:a3:a0: 8c:c2:5c:b5:ef:b6:0f:a9:d1:87:ca:9c:d3:be:73: 4a:e6:ca:e0:ca:a7:99:62:44:cb:21:07:c4:f8:91: c5:ad:90:64:09:60:f5:cf:76:47:bf:f6:15:4a:f2: 9a:a5:56:63:6f:9c:92:0b:9a:10:16:9c:52:87:90: 79:59:fa:84:2b:af:1b:c0:c6:85:5c:c7:c6:90:e5: f2:f6:c8:5c:0f:ea:d1:b2:22:08:86:5c:6b:a7:b7: 1e:f4:8e:00:1c:0e:43:f9:c0:d9:c5:99:74:c2:59: 71:11:f1:40:a0:71:cb:03:88:1d:00:10:88:e5:4e: 0b:7f:e3:8a:47:bc:b8:9a:83:73:00:98:ca:9b:84: ac:e2:66:4e:4a:6f:67:f7:4a:08:fc:7a:88:a3:bd: ce:07:fb:11:b3:ed:1e:ad:73:d7:eb:3f:a9:a2:7d: 76:05:dc:8c:d9:b7:d6:4c:0a:bc:c1:75:29:87:37: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:E9:02:D3:27:C3:67:45:B4:B8:15:84:96:98:7C:1A:7E:D2:6C X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ea:cd:f2:31:df:4f:2e:3a:97:1b:65:21:8c:53:6a:a1:1e: 48:d7:c2:d2:3a:df:aa:59:6f:27:b0:bb:8b:4c:ab:e2:4f:41: e9:21:d6:ee:4f:7f:de:25:08:25:dd:ab:0e:67:8f:b9:8c:f0: 95:85:7e:9e:d8:8c:04:50:56:2b:52:8e:4e:86:6e:8e:c8:59: 1c:16:ba:19:95:0b:fd:ad:12:00:e2:16:dc:0e:55:fb:79:52: be:57:ae:c1:8d:26:89:bd:5f:ad:ad:e9:5e:50:ee:e6:74:08: da:48:1d:ba:df:22:3d:bf:00:15:78:14:5f:0b:85:75:bd:14: da:77:96:92:b8:45:26:5d:33:c8:cc:01:d5:2f:8c:6a:c2:81: 20:d6:9f:2d:fd:e0:0c:44:1a:b6:c3:8d:94:f5:9a:d8:6c:53: c3:9b:eb:73:1b:28:8b:c0:61:92:b7:20:5c:d5:6e:cf:4c:1b: 0f:c3:2a:c3:4b:d5:93:5f:bc:22:12:88:6b:2d:f3:c5:b3:f6: 93:6c:26:68:b6:4d:f9:a9:07:93:1b:aa:36:ae:28:97:f9:51: 6f:46:8a:7e:56:9e:13:f5:91:39:f3:92:57:d0:2e:27:96:12: 94:1d:12:43:54:15:07:28:02:28:1f:64:7c:17:05:ee:60:9d: c7:2f:3b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmZJMfulb5NtRNG+hZSLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjUxMjE0MTYwMjQyWhcNMjUxMjE1MTYwMjQyWjAzMTEwLwYDVQQD EygzMDRhZTkwMmQzMjdjMzY3NDViNGI4MTU4NDk2OTg3YzFhN2VkMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZp3PsNW5HzNZLQfRrpPSuJs21W 4ZMsQob0aMDM9kCbxUMFrvHNppPeT+9nGiAXmcNIhJW7l3lVvtuxb3TnA/ia0yHi driAo6CMwly177YPqdGHypzTvnNK5srgyqeZYkTLIQfE+JHFrZBkCWD1z3ZHv/YV SvKapVZjb5ySC5oQFpxSh5B5WfqEK68bwMaFXMfGkOXy9shcD+rRsiIIhlxrp7ce 9I4AHA5D+cDZxZl0wllxEfFAoHHLA4gdABCI5U4Lf+OKR7y4moNzAJjKm4Ss4mZO Sm9n90oI/HqIo73OB/sRs+0erXPX6z+pon12BdyM2bfWTAq8wXUphzcjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBK6QLTJ8NnRbS4FYSWmHwaftJsMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhurN8jHf Ty46lxtlIYxTaqEeSNfC0jrfqllvJ7C7i0yr4k9B6SHW7k9/3iUIJd2rDmePuYzw lYV+ntiMBFBWK1KOToZujshZHBa6GZUL/a0SAOIW3A5V+3lSvleuwY0mib1fra3p XlDu5nQI2kgdut8iPb8AFXgUXwuFdb0U2neWkrhFJl0zyMwB1S+MasKBINafLf3g DEQatsONlPWa2GxTw5vrcxsoi8BhkrcgXNVuz0wbD8Mqw0vVk1+8IhKIay3zxbP2 k2wmaLZN+akHkxuqNq4ol/lRb0aKflaeE/WROfOSV9AuJ5YSlB0SQ1QVBygCKB9k fBcF7mCdxy87rw== -----END CERTIFICATE-----Generated at Mon Dec 15 00:29:19 2025 by rpki-client