This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json) Hash identifier: yr9nEKkhSs5Dzi2iTYfJIs1bG9zXnXTuoY+hM0u4BNM= Subject key identifier: 00:97:01:B6:7C:72:C9:C1:77:E7:04:11:21:17:3F:24:4E:D5:1D:4F Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c Certificate serial: 019B5A51CE024BB733994012CF31C20496E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 11:01:09 +0000 Manifest this update: Fri 26 Dec 2025 11:01:09 +0000 Manifest next update: Sat 27 Dec 2025 11:01:09 +0000 Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=) 2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: gKb7B3SG2fa5M0dGiqtnJ/8LIPVyBhXA9bupnvWEra4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ce:02:4b:b7:33:99:40:12:cf:31:c2:04:96:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c Validity Not Before: Dec 26 11:01:09 2025 GMT Not After : Dec 27 11:01:09 2025 GMT Subject: CN=009701b67c72c9c177e7041121173f244ed51d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:b9:04:cd:8c:eb:88:41:0b:be:72:84:95: a9:58:db:bc:27:b3:43:78:71:bb:da:e9:07:35:68: ab:63:0f:e1:1e:f7:e9:ef:7b:38:20:52:f5:f3:75: 3e:5b:cc:35:e3:38:d0:12:25:30:f0:81:8e:5a:f0: 38:f6:ed:da:c0:eb:76:7f:27:ba:6f:c9:cf:28:b6: ce:a6:8f:23:b0:a6:36:e3:c3:8f:b8:0a:e7:73:9f: 4e:21:c7:d0:74:b2:42:83:60:b4:91:d3:e3:26:59: a3:61:64:96:5e:d9:ff:9b:b2:af:e7:19:6c:7b:82: 3c:53:74:88:4e:b0:c7:e8:2e:0e:a5:f7:aa:6c:d8: 4a:4a:59:38:0c:ff:9f:16:d9:9d:2e:59:6b:ef:54: 04:fe:5d:f1:ed:53:d9:0a:ea:58:84:19:e5:18:02: 42:24:00:cf:b4:1d:e9:51:8a:82:c3:54:fa:9f:3b: eb:29:e6:fe:e0:4f:30:26:32:79:5d:02:da:70:5f: 3d:b8:c5:fb:55:6c:56:0e:e9:b2:45:aa:09:68:59: e1:16:df:a6:18:cb:02:31:c5:64:f1:dc:59:aa:7a: 11:03:d7:52:50:2a:18:86:1d:40:00:ca:e6:06:22: 9c:01:0f:a9:20:ad:2f:55:ec:0a:36:2d:d8:ac:85: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:01:B6:7C:72:C9:C1:77:E7:04:11:21:17:3F:24:4E:D5:1D:4F X509v3 Authority Key Identifier: keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:63:0a:d8:85:c5:6d:39:9c:07:c4:5e:fc:cd:d0:a1:3c:43: 85:28:74:f5:05:c2:30:4b:66:30:7a:de:da:ba:45:62:a7:06: df:34:9c:22:3f:6f:7d:7d:e8:c3:82:18:f4:b3:f4:c1:56:7d: 59:eb:82:4d:18:6e:0b:80:0f:6b:1b:b5:2a:ed:84:54:e4:1f: aa:e2:db:32:03:ee:d7:56:cf:a7:b3:83:18:df:2b:00:d6:cc: 7d:61:25:35:bb:28:cf:f4:8e:34:01:a6:1c:01:31:8e:cf:f6: 76:86:bc:79:25:d1:3e:03:d0:25:46:40:fc:b3:5c:95:c6:a6: 92:a0:b6:5e:8b:91:aa:fc:67:2d:23:e5:89:94:99:5c:9e:7e: 14:33:22:28:f7:5a:96:85:b2:c9:97:c0:80:4b:aa:7d:66:09: ce:af:08:41:59:5a:86:b6:3d:32:d4:f8:a3:cf:ef:6c:f3:bf: 8e:84:c9:00:88:30:f3:00:76:ac:b0:00:91:8a:12:86:71:a1: db:b4:d0:3a:a3:39:74:33:fa:b3:f1:a6:c8:88:37:d5:3f:c3: 4e:f0:28:13:5c:00:af:62:05:a8:9a:f6:ef:ed:35:26:42:f3: 24:60:1a:45:b1:42:13:f6:7b:00:28:2d:5a:81:dd:0a:96:17: e2:d8:42:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUc4CS7czmUASzzHCBJbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx OGQ2NWMwHhcNMjUxMjI2MTEwMTA5WhcNMjUxMjI3MTEwMTA5WjAzMTEwLwYDVQQD EygwMDk3MDFiNjdjNzJjOWMxNzdlNzA0MTEyMTE3M2YyNDRlZDUxZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxK5BM2M64hBC75yhJWpWNu8J7ND eHG72ukHNWirYw/hHvfp73s4IFL183U+W8w14zjQEiUw8IGOWvA49u3awOt2fye6 b8nPKLbOpo8jsKY248OPuArnc59OIcfQdLJCg2C0kdPjJlmjYWSWXtn/m7Kv5xls e4I8U3SITrDH6C4OpfeqbNhKSlk4DP+fFtmdLllr71QE/l3x7VPZCupYhBnlGAJC JADPtB3pUYqCw1T6nzvrKeb+4E8wJjJ5XQLacF89uMX7VWxWDumyRaoJaFnhFt+m GMsCMcVk8dxZqnoRA9dSUCoYhh1AAMrmBiKcAQ+pIK0vVewKNi3YrIUSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACXAbZ8csnBd+cEESEXPyRO1R1PMB8GA1UdIwQY MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5 LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGMK2IXF bTmcB8Re/M3QoTxDhSh09QXCMEtmMHre2rpFYqcG3zScIj9vfX3ow4IY9LP0wVZ9 WeuCTRhuC4APaxu1Ku2EVOQfquLbMgPu11bPp7ODGN8rANbMfWElNbsoz/SONAGm HAExjs/2doa8eSXRPgPQJUZA/LNclcamkqC2XouRqvxnLSPliZSZXJ5+FDMiKPda loWyyZfAgEuqfWYJzq8IQVlahrY9MtT4o8/vbPO/joTJAIgw8wB2rLAAkYoShnGh 27TQOqM5dDP6s/GmyIg31T/DTvAoE1wAr2IFqJr27+01JkLzJGAaRbFCE/Z7ACgt WoHdCpYX4thCRA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:05 2025 by rpki-client