This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json) Hash identifier: dJaVZLuWobrCzis6fnsZw8jSe6Sst0auDBAlybG6s1s= Subject key identifier: 76:DC:41:6D:CE:41:62:FB:A4:E1:3D:06:42:6C:66:F4:E5:C5:07:76 Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019B0F374DF7D74D2D654E139F3F5548C24D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft Manifest number: 0D4C Signing time: Thu 11 Dec 2025 21:00:41 +0000 Manifest this update: Thu 11 Dec 2025 21:00:41 +0000 Manifest next update: Fri 12 Dec 2025 21:00:41 +0000 Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: Z+HjASFURAeGDIfs8vfpxHjjCan+EIobiK88ZKYPIz8=) 2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:4d:f7:d7:4d:2d:65:4e:13:9f:3f:55:48:c2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Dec 11 21:00:41 2025 GMT Not After : Dec 12 21:00:41 2025 GMT Subject: CN=76dc416dce4162fba4e13d06426c66f4e5c50776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:b5:a3:ad:b4:f4:e9:4e:24:42:a7:4a:d0: cf:1b:ee:d8:2a:30:ac:dd:a0:7c:f9:bf:e7:0c:ee: 2e:f9:d0:84:17:7c:a1:c3:e7:43:43:b9:e3:23:fd: bf:6d:4f:21:b4:3a:ef:d3:14:fd:9f:ac:39:fc:2c: 56:91:c6:44:78:73:65:23:f7:0a:f1:5a:ce:4f:df: f4:99:e4:e2:c4:1c:3f:e9:3c:02:2e:16:2d:65:51: da:0f:f3:ec:52:a6:1b:49:4b:45:f5:6f:3d:2b:a1: f1:fb:76:da:97:c5:fb:06:97:54:87:ac:55:b9:8d: 50:99:ef:ec:70:de:47:ea:47:a2:38:44:25:7c:19: 41:0a:64:55:66:6e:08:16:87:38:85:6a:ca:99:a0: 85:02:fe:39:d3:1b:18:d0:ee:ce:5e:00:ba:86:e2: 22:77:9a:80:7c:56:65:84:09:41:ff:70:ba:37:99: a7:d6:a2:ff:00:68:d6:1a:55:f9:d5:05:f0:03:e6: eb:84:ee:11:a5:65:db:72:c7:95:46:0c:57:54:2e: 9c:db:5e:18:77:51:23:f6:6b:f9:94:53:4b:6b:11: 40:07:39:0f:e5:90:ff:8c:d0:f4:78:58:c3:38:fc: da:12:c1:23:f9:68:21:73:a0:63:d4:a5:be:00:3f: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DC:41:6D:CE:41:62:FB:A4:E1:3D:06:42:6C:66:F4:E5:C5:07:76 X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d3:9a:ed:3b:a5:bd:32:01:47:6e:8f:82:a2:2d:cd:e5:4d: 5a:a1:d9:56:de:4d:2b:14:7d:ed:36:3e:c0:fd:91:ee:ac:7a: a8:14:e4:a5:43:9a:c5:ad:f0:8c:58:8f:60:59:e8:99:34:6e: d1:e8:5e:58:61:87:56:93:0a:9c:ef:ac:15:ff:a6:7e:db:53: be:4d:38:01:3e:80:87:cf:3d:57:0d:08:e2:b0:d8:7f:f9:e2: 21:9a:07:69:e6:35:e9:ac:f2:bc:bc:6d:a7:e8:28:9c:e6:23: c5:72:c6:f5:3e:e0:cf:6a:0b:24:0c:14:31:db:ca:23:e4:bb: d5:29:39:6f:a7:2e:a4:04:68:41:c0:98:e0:14:b8:b0:88:cd: 96:84:e2:9a:5e:58:77:3f:9e:c0:ea:28:d4:15:09:fc:e0:2f: 65:69:07:17:ff:02:9f:7f:1f:fd:8c:c6:5d:eb:ff:c7:b3:fd: e9:ec:20:53:7d:c1:c6:4a:bf:a7:e7:e7:b5:98:f9:39:dd:b7: 14:68:b6:4e:d8:d1:92:8c:19:ba:4c:b6:3e:bb:60:14:d5:aa: d7:6e:3e:6b:ba:10:17:58:07:7b:47:46:89:11:d3:c7:1b:47: 26:38:7f:6e:3f:f2:dc:3d:6d:4e:0e:3d:53:1a:16:62:52:9b: 1b:40:ac:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN033100tZU4Tnz9VSMJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjUxMjExMjEwMDQxWhcNMjUxMjEyMjEwMDQxWjAzMTEwLwYDVQQD Eyg3NmRjNDE2ZGNlNDE2MmZiYTRlMTNkMDY0MjZjNjZmNGU1YzUwNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3K1o6209OlOJEKnStDPG+7YKjCs 3aB8+b/nDO4u+dCEF3yhw+dDQ7njI/2/bU8htDrv0xT9n6w5/CxWkcZEeHNlI/cK 8VrOT9/0meTixBw/6TwCLhYtZVHaD/PsUqYbSUtF9W89K6Hx+3bal8X7BpdUh6xV uY1Qme/scN5H6keiOEQlfBlBCmRVZm4IFoc4hWrKmaCFAv450xsY0O7OXgC6huIi d5qAfFZlhAlB/3C6N5mn1qL/AGjWGlX51QXwA+brhO4RpWXbcseVRgxXVC6c214Y d1Ej9mv5lFNLaxFABzkP5ZD/jND0eFjDOPzaEsEj+Wghc6Bj1KW+AD9mwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbcQW3OQWL7pOE9BkJsZvTlxQd2MB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9Oa7Tul vTIBR26PgqItzeVNWqHZVt5NKxR97TY+wP2R7qx6qBTkpUOaxa3wjFiPYFnomTRu 0eheWGGHVpMKnO+sFf+mfttTvk04AT6Ah889Vw0I4rDYf/niIZoHaeY16azyvLxt p+gonOYjxXLG9T7gz2oLJAwUMdvKI+S71Sk5b6cupARoQcCY4BS4sIjNloTiml5Y dz+ewOoo1BUJ/OAvZWkHF/8Cn38f/YzGXev/x7P96ewgU33Bxkq/p+fntZj5Od23 FGi2TtjRkowZuky2PrtgFNWq124+a7oQF1gHe0dGiRHTxxtHJjh/bj/y3D1tTg49 UxoWYlKbG0Csdw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:52 2025 by rpki-client