This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json) Hash identifier: tDiqknJUPg4Fqo0B8bZEEAAhVoo4834CfLvhARttu6Q= Subject key identifier: A8:C1:7C:F9:B9:B8:94:31:0E:8E:66:D2:9A:E5:52:BA:2B:6C:74:64 Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019B115CA644646DA5AD137F56631A26DCDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 07:00:43 +0000 Manifest this update: Fri 12 Dec 2025 07:00:43 +0000 Manifest next update: Sat 13 Dec 2025 07:00:43 +0000 Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=) 2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: d3BYkhocZNTDD1E7gbdzqNLyNJmqUvJLcFrkP0hF5sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:a6:44:64:6d:a5:ad:13:7f:56:63:1a:26:dc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Dec 12 07:00:43 2025 GMT Not After : Dec 13 07:00:43 2025 GMT Subject: CN=a8c17cf9b9b894310e8e66d29ae552ba2b6c7464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:fe:b1:2c:ff:74:48:0e:fb:66:f7:7e:39: 0d:1d:63:2d:6c:de:ad:6e:f1:45:03:22:86:76:42: 86:26:3b:65:a5:c6:fa:7d:3a:76:3a:39:45:02:ca: 91:0c:94:22:0a:04:d2:62:88:93:2f:86:02:b3:c7: a4:55:9b:3c:e0:92:35:21:de:dd:c8:60:4e:f6:df: 51:d1:45:f8:00:23:04:44:da:d2:bd:f6:a2:a1:49: d2:cc:ca:7a:a7:0c:d4:9a:7d:02:85:44:87:4e:38: d7:f9:2a:e6:d5:b1:1a:1c:ac:64:72:1f:ff:cd:02: 29:76:de:12:14:9e:d7:5a:82:cf:d9:b8:f7:a5:8f: 29:91:21:5e:cd:e6:56:20:9c:2c:2e:37:f4:0d:2e: 84:ab:a7:57:e9:0b:f4:77:a9:e2:4f:8c:63:4e:ee: 4b:f6:a4:65:d2:2d:0a:68:9f:4c:50:21:cb:2b:f2: 28:ee:d3:54:54:50:7e:fe:2d:39:5d:98:a2:b6:68: f6:62:08:a6:bd:84:a6:c9:05:30:22:34:59:69:be: 34:c5:62:f3:70:f5:42:fc:fa:d2:c7:ec:b3:32:ee: 7f:ef:e3:88:4a:bf:04:46:4c:f9:2a:31:8f:92:1a: 99:8d:46:dd:8d:5c:21:d2:6e:22:39:32:88:44:ff: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C1:7C:F9:B9:B8:94:31:0E:8E:66:D2:9A:E5:52:BA:2B:6C:74:64 X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1a:f9:d0:7d:3e:37:1c:9e:f6:bc:0a:8f:4b:73:48:0e:19: f5:2e:83:aa:ed:62:fe:73:b3:1f:a7:16:55:ca:fa:92:2b:1b: 4b:ce:2a:ce:87:b8:fc:d4:ff:38:69:5a:2f:5b:55:f4:4d:f4: 77:27:57:50:f9:53:12:a5:de:d1:a8:14:c6:ea:4a:bf:55:30: 41:7a:23:98:56:26:86:7e:5e:8c:7b:a7:b3:49:e4:9b:8e:76: 04:8c:1a:02:c1:d8:53:c1:4d:0c:2e:5e:d5:81:c6:42:27:76: d6:0c:bc:8e:a4:ac:77:e8:e0:89:55:c4:8d:f9:fd:72:36:4d: b6:9f:a1:5e:03:ba:ca:57:ba:d1:14:7c:23:d6:e7:27:2e:72: 1d:fd:00:84:8e:5d:06:a6:5e:ee:e7:2d:bf:98:77:15:25:7f: eb:5b:40:17:1d:21:da:fa:60:f7:72:22:49:05:e1:8f:05:d0: 07:4d:ac:a3:42:b4:d4:8a:64:67:69:40:f4:7c:c3:e6:4e:76: f3:c7:af:05:c3:33:bb:84:66:c2:08:d3:1e:4a:bf:52:04:16: 0e:dd:d8:24:60:56:43:6a:af:35:03:8a:c4:f6:68:46:4e:e9: b7:a4:c1:b9:2e:64:a3:20:a2:c3:bc:3d:8b:08:60:3b:46:0e: 2f:0a:7d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXKZEZG2lrRN/VmMaJtzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjUxMjEyMDcwMDQzWhcNMjUxMjEzMDcwMDQzWjAzMTEwLwYDVQQD EyhhOGMxN2NmOWI5Yjg5NDMxMGU4ZTY2ZDI5YWU1NTJiYTJiNmM3NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhv+sSz/dEgO+2b3fjkNHWMtbN6t bvFFAyKGdkKGJjtlpcb6fTp2OjlFAsqRDJQiCgTSYoiTL4YCs8ekVZs84JI1Id7d yGBO9t9R0UX4ACMERNrSvfaioUnSzMp6pwzUmn0ChUSHTjjX+Srm1bEaHKxkch// zQIpdt4SFJ7XWoLP2bj3pY8pkSFezeZWIJwsLjf0DS6Eq6dX6Qv0d6niT4xjTu5L 9qRl0i0KaJ9MUCHLK/Io7tNUVFB+/i05XZiitmj2YgimvYSmyQUwIjRZab40xWLz cPVC/PrSx+yzMu5/7+OISr8ERkz5KjGPkhqZjUbdjVwh0m4iOTKIRP8rhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjBfPm5uJQxDo5m0prlUrorbHRkMB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxr50H0+ Nxye9rwKj0tzSA4Z9S6Dqu1i/nOzH6cWVcr6kisbS84qzoe4/NT/OGlaL1tV9E30 dydXUPlTEqXe0agUxupKv1UwQXojmFYmhn5ejHuns0nkm452BIwaAsHYU8FNDC5e 1YHGQid21gy8jqSsd+jgiVXEjfn9cjZNtp+hXgO6yle60RR8I9bnJy5yHf0AhI5d BqZe7uctv5h3FSV/61tAFx0h2vpg93IiSQXhjwXQB02so0K01IpkZ2lA9HzD5k52 88evBcMzu4RmwgjTHkq/UgQWDt3YJGBWQ2qvNQOKxPZoRk7pt6TBuS5koyCiw7w9 iwhgO0YOLwp9eA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:30 2025 by rpki-client