This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json) Hash identifier: EhmfUGFjspqeWZiCoE7VuNRNTvRrZZgQKrBsgELj7jU= Subject key identifier: 14:DA:E1:4C:31:FA:CC:82:D1:2E:BB:F3:85:CD:B4:73:FD:6E:8A:CD Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b Certificate serial: 019B4BF23123E923380D8AFD17216C9E45A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 16:02:01 +0000 Manifest this update: Tue 23 Dec 2025 16:02:01 +0000 Manifest next update: Wed 24 Dec 2025 16:02:01 +0000 Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: aFTp5L7GXVKvJFTpryXcJyG2o0ssw90FFCrsgUKdZCw=) 2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:31:23:e9:23:38:0d:8a:fd:17:21:6c:9e:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b Validity Not Before: Dec 23 16:02:01 2025 GMT Not After : Dec 24 16:02:01 2025 GMT Subject: CN=14dae14c31facc82d12ebbf385cdb473fd6e8acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:b6:19:91:b6:1f:6c:d6:14:f0:d0:9e:a0: 94:15:74:2c:ed:8e:d6:d8:62:a1:e0:ec:64:02:c7: f3:ca:ff:86:5e:43:e6:71:4e:02:10:ee:67:85:2d: 16:67:31:55:6b:63:66:75:9c:9a:21:b3:5e:79:04: 7e:1b:8d:1a:b8:49:b6:7a:2b:40:3a:39:a7:41:c5: 82:e4:82:57:b5:d5:54:0d:9b:b4:8c:d4:14:db:cf: 5d:e7:fb:2f:26:cc:d8:82:05:1d:47:08:d4:8d:f6: 93:88:f5:33:1c:5a:3e:9c:c6:99:a8:36:51:61:85: 4f:4d:e1:00:61:ea:db:57:a3:0a:4d:2e:20:4d:cb: 17:82:0f:97:5a:57:6e:3f:a9:b6:4d:27:fa:ba:08: 00:b6:29:17:03:44:d5:1a:04:ae:13:25:b8:5f:8c: 73:de:9c:4a:53:7d:77:79:b7:96:f1:fb:4c:3d:c2: a7:f4:07:23:bc:c7:d8:f6:81:fb:cb:7f:d3:3e:e1: 01:72:27:86:5c:47:6b:0a:58:3c:23:c1:59:95:5e: 60:5c:2f:e1:58:ea:87:6b:2a:9c:8e:19:16:b1:70: 87:24:a8:09:8e:90:80:12:b8:e5:b6:73:e6:2e:c8: dc:e3:65:c1:e6:b3:14:67:57:a9:df:89:24:4c:d1: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DA:E1:4C:31:FA:CC:82:D1:2E:BB:F3:85:CD:B4:73:FD:6E:8A:CD X509v3 Authority Key Identifier: keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:6f:14:7c:38:a5:2f:ea:a4:32:e1:c0:63:02:9e:03:9e: 8a:83:0d:37:bb:33:68:05:e5:2c:6b:2e:fa:aa:b3:ea:35:a1: 51:5b:a0:b1:99:58:24:a8:df:73:b7:59:7d:5a:e9:21:40:8b: ab:30:94:82:25:68:2c:0e:1a:4d:f8:20:8e:04:74:10:05:c6: c4:ef:8a:f1:39:93:20:90:07:aa:44:ea:e5:44:cb:5f:10:43: 42:f6:88:16:67:00:f1:44:7e:68:08:e7:ed:00:8b:a3:06:4c: f7:d8:8f:af:3e:b4:85:a0:a8:50:a3:f8:fd:6e:27:81:0a:89: 57:68:e5:81:45:0e:b2:03:8b:38:bb:b5:12:9f:67:3a:ef:82: 83:41:c0:29:a6:f6:9b:82:fe:0f:0c:38:6c:4b:c9:0f:b8:98: 6d:0b:55:60:c0:ea:18:fb:bf:5b:c9:68:08:7d:77:36:e1:19: 48:7f:8c:31:0f:8d:92:24:23:08:c2:0d:b5:ef:27:71:8b:cc: ea:d4:dc:22:b0:e7:69:ce:eb:54:29:54:31:7a:e2:9e:f1:dc: 01:23:27:48:4f:07:19:92:2f:8b:9b:03:0f:af:1b:b4:0b:2c: 46:a4:b8:e7:ee:74:47:4f:21:5d:0e:82:e3:78:6f:75:aa:df: bd:ab:dd:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8jEj6SM4DYr9FyFsnkWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy ZGY3MWIwHhcNMjUxMjIzMTYwMjAxWhcNMjUxMjI0MTYwMjAxWjAzMTEwLwYDVQQD EygxNGRhZTE0YzMxZmFjYzgyZDEyZWJiZjM4NWNkYjQ3M2ZkNmU4YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxO2GZG2H2zWFPDQnqCUFXQs7Y7W 2GKh4OxkAsfzyv+GXkPmcU4CEO5nhS0WZzFVa2NmdZyaIbNeeQR+G40auEm2eitA OjmnQcWC5IJXtdVUDZu0jNQU289d5/svJszYggUdRwjUjfaTiPUzHFo+nMaZqDZR YYVPTeEAYerbV6MKTS4gTcsXgg+XWlduP6m2TSf6uggAtikXA0TVGgSuEyW4X4xz 3pxKU313ebeW8ftMPcKn9AcjvMfY9oH7y3/TPuEBcieGXEdrClg8I8FZlV5gXC/h WOqHayqcjhkWsXCHJKgJjpCAErjltnPmLsjc42XB5rMUZ1ep34kkTNFQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTa4Uwx+syC0S6784XNtHP9borNMB8GA1UdIwQY MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt YTJmNDI1NjAwZGIzLzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcNvFHw4 pS/qpDLhwGMCngOeioMNN7szaAXlLGsu+qqz6jWhUVugsZlYJKjfc7dZfVrpIUCL qzCUgiVoLA4aTfggjgR0EAXGxO+K8TmTIJAHqkTq5UTLXxBDQvaIFmcA8UR+aAjn 7QCLowZM99iPrz60haCoUKP4/W4ngQqJV2jlgUUOsgOLOLu1Ep9nOu+Cg0HAKab2 m4L+Dww4bEvJD7iYbQtVYMDqGPu/W8loCH13NuEZSH+MMQ+NkiQjCMINte8ncYvM 6tTcIrDnac7rVClUMXrinvHcASMnSE8HGZIvi5sDD68btAssRqS45+50R08hXQ6C 43hvdarfvavdCQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:48:22 2025 by rpki-client