This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json) Hash identifier: 6vylGencN5aZ3A0cY1sWysGyKxJnfj1NS6weoiK8qPw= Subject key identifier: 44:F4:3C:69:12:7B:80:7E:68:39:FA:27:1D:9C:5D:7A:0D:13:A5:CA Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Certificate serial: 019B2FD5954B98D50CBE40613DD434CF2B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft Manifest number: 0291 Signing time: Thu 18 Dec 2025 05:01:24 +0000 Manifest this update: Thu 18 Dec 2025 05:01:24 +0000 Manifest next update: Fri 19 Dec 2025 05:01:24 +0000 Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=) 2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: pL5p0GnRi/ZItoIiqoDsWte4Jh7vxj5e8sxQ02zAcrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:95:4b:98:d5:0c:be:40:61:3d:d4:34:cf:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Validity Not Before: Dec 18 05:01:24 2025 GMT Not After : Dec 19 05:01:24 2025 GMT Subject: CN=44f43c69127b807e6839fa271d9c5d7a0d13a5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:bc:0f:11:db:28:c4:fa:d1:2a:bb:b9:7c: 43:24:3c:3a:d0:36:15:3b:d1:58:5e:5d:a5:13:8c: 5b:0a:44:1f:52:e2:39:51:0a:8f:b0:6f:7a:d0:f1: ff:c6:86:3e:61:af:45:69:3c:d9:68:eb:30:b0:e9: 97:87:1f:ae:61:e7:a8:29:43:f7:fe:fb:a0:98:77: 80:40:9b:53:37:d7:d2:ff:1f:06:c9:c7:d1:d2:92: 8f:fc:62:f2:ab:0c:7d:e6:b9:40:62:fb:13:57:fb: e2:fa:c8:91:d5:7a:28:25:a6:95:f6:80:ed:c9:e9: d6:6a:ab:5a:f7:e0:5d:0e:43:01:1d:60:85:08:c2: 90:1c:77:a4:c2:46:d2:9f:10:3a:e4:8b:e9:74:28: 80:a5:b0:87:f6:00:df:44:17:fb:57:22:67:5e:9a: d5:b2:ab:51:f2:9b:be:91:c7:7d:5d:48:ae:c8:5c: 3b:0a:0b:d2:91:94:a3:eb:19:65:e1:73:53:98:de: 60:43:db:19:fb:39:d0:e0:ab:39:93:60:54:ad:c3: 8f:81:c3:54:72:e1:d2:27:59:f2:97:a6:5f:8f:c1: ff:49:37:23:0f:4a:c6:87:7b:d2:d3:81:2e:88:d9: d9:e8:53:93:d3:cb:37:f7:36:a9:36:9a:fb:65:97: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F4:3C:69:12:7B:80:7E:68:39:FA:27:1D:9C:5D:7A:0D:13:A5:CA X509v3 Authority Key Identifier: keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:34:0e:cd:9f:22:9d:a5:56:c3:86:e3:3a:b7:d2:95:23:c0: c0:01:41:f1:96:7c:7f:60:a7:3c:39:0c:17:3e:f3:eb:05:9f: 94:8f:25:17:40:7f:08:f4:1e:e3:90:48:20:f4:aa:a9:8b:27: da:a6:29:09:dc:91:37:5f:2f:08:2a:a4:bf:43:bc:e3:5e:33: 49:bf:0e:d0:62:29:85:1b:4d:e0:6b:a8:a9:91:2d:11:de:20: 66:ab:ef:1f:cf:38:6f:c8:c1:bd:ff:56:74:ca:f9:fe:c1:ab: 64:5e:5a:d1:f3:d0:34:6b:91:e9:8f:1c:38:d1:14:22:dd:c6: 3c:9f:d6:ca:fe:c8:70:56:3c:7b:a5:f1:46:26:27:fa:7e:41: bd:38:38:be:72:e6:40:06:ca:9c:ab:4c:0e:a4:00:a4:a7:33: 90:fa:2b:61:8a:34:9b:87:c9:97:fe:1f:a3:62:26:a1:4e:32: 09:f6:92:ff:78:b1:c6:1a:74:04:00:af:cc:e4:07:05:09:ab: 39:42:9f:23:c5:8f:5e:ce:28:13:f4:c4:e3:a3:b9:22:0c:75: ec:c0:87:0c:a1:60:50:8e:58:1b:80:bd:bc:30:0c:0d:7a:6c: 0a:da:ef:70:25:91:1d:4b:4f:e8:44:e6:0e:48:24:81:c9:11: 51:f2:00:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1ZVLmNUMvkBhPdQ0zyuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy ZmY4NDYwHhcNMjUxMjE4MDUwMTI0WhcNMjUxMjE5MDUwMTI0WjAzMTEwLwYDVQQD Eyg0NGY0M2M2OTEyN2I4MDdlNjgzOWZhMjcxZDljNWQ3YTBkMTNhNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsa8DxHbKMT60Sq7uXxDJDw60DYV O9FYXl2lE4xbCkQfUuI5UQqPsG960PH/xoY+Ya9FaTzZaOswsOmXhx+uYeeoKUP3 /vugmHeAQJtTN9fS/x8GycfR0pKP/GLyqwx95rlAYvsTV/vi+siR1XooJaaV9oDt yenWaqta9+BdDkMBHWCFCMKQHHekwkbSnxA65IvpdCiApbCH9gDfRBf7VyJnXprV sqtR8pu+kcd9XUiuyFw7CgvSkZSj6xll4XNTmN5gQ9sZ+znQ4Ks5k2BUrcOPgcNU cuHSJ1nyl6Zfj8H/STcjD0rGh3vS04EuiNnZ6FOT08s39zapNpr7ZZfxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET0PGkSe4B+aDn6Jx2cXXoNE6XKMB8GA1UdIwQY MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3 LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDQOzZ8i naVWw4bjOrfSlSPAwAFB8ZZ8f2CnPDkMFz7z6wWflI8lF0B/CPQe45BIIPSqqYsn 2qYpCdyRN18vCCqkv0O8414zSb8O0GIphRtN4GuoqZEtEd4gZqvvH884b8jBvf9W dMr5/sGrZF5a0fPQNGuR6Y8cONEUIt3GPJ/Wyv7IcFY8e6XxRiYn+n5BvTg4vnLm QAbKnKtMDqQApKczkPorYYo0m4fJl/4fo2ImoU4yCfaS/3ixxhp0BACvzOQHBQmr OUKfI8WPXs4oE/TE46O5Igx17MCHDKFgUI5YG4C9vDAMDXpsCtrvcCWRHUtP6ETm DkgkgckRUfIAEw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:07 2025 by rpki-client