This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json) Hash identifier: 204GXDTNLUz29rM3BBMG6MDKHWGKgh5z2bocYVrrkoU= Subject key identifier: D3:D4:87:AE:25:03:D6:08:BF:ED:4A:7B:10:5B:73:6F:FC:E3:A0:93 Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513 Certificate serial: 019B3D911259166BD776B06945736C644B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: jyDQAhcUvV9LAoknokOM54aYQUKWe0njSM2pgubGU1M=) 2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=) 3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=) 4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:12:59:16:6b:d7:76:b0:69:45:73:6c:64:4b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513 Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=d3d487ae2503d608bfed4a7b105b736ffce3a093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:2b:c4:3c:b4:ef:1f:58:62:05:52:f8:5e: b1:17:5a:65:4f:71:14:87:57:8a:ab:82:74:8a:d9: 53:83:10:85:22:71:7c:c2:55:65:41:08:fb:2d:d0: ad:11:d4:ab:42:f0:8c:cf:79:75:22:40:fd:b2:e3: 12:a0:23:9d:83:e9:3c:95:42:ed:46:be:fe:e9:db: fc:5e:06:7b:dd:f7:40:a0:f7:35:2c:33:f0:b1:c0: a5:9e:d6:67:97:8b:00:49:9f:70:35:12:67:b9:cd: 9b:e2:7c:ba:17:ad:de:6e:32:30:85:3b:ab:09:f9: 00:81:0f:5b:be:6f:7c:32:a4:94:21:c3:1c:e3:4a: a0:3a:50:50:b9:2d:ee:1c:0e:d7:27:d7:63:56:ab: ca:32:fb:13:c9:72:11:cd:4d:c0:8f:46:3e:a0:eb: 06:3a:1f:54:b7:a5:77:9a:7d:79:62:9b:48:ec:f2: 74:f5:40:b9:76:73:de:13:44:39:0c:78:be:1a:00: 69:1c:39:4e:f5:ec:a7:ca:60:8c:bb:ed:b3:2f:0e: 99:cb:a5:dc:e2:94:47:f8:03:c2:cd:69:50:ac:b5: 8c:41:6a:28:31:69:14:4a:cc:c1:42:d2:dc:7e:39: 24:f0:36:06:fe:16:fa:d7:f1:04:88:3c:81:96:cb: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:87:AE:25:03:D6:08:BF:ED:4A:7B:10:5B:73:6F:FC:E3:A0:93 X509v3 Authority Key Identifier: keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:89:4e:35:6e:84:9c:30:36:a1:86:c6:79:c0:c1:35:e4:ed: f9:e7:dd:18:68:90:c5:ac:49:2a:ae:7e:8a:b5:7a:f3:0b:55: f2:1b:c5:39:ea:2d:23:c6:84:2f:24:7b:fc:1c:42:e1:27:ea: 34:22:7e:56:8e:cb:99:9a:a1:44:f7:8c:13:b9:d4:82:78:5c: 76:71:84:e0:82:6a:a5:e6:3d:dd:bc:e9:87:d5:15:a0:7b:9b: 83:79:cf:c9:5e:db:a8:fd:ca:1d:13:c3:e3:92:5e:ee:c0:28: de:ac:02:61:2a:df:d2:76:2c:97:44:34:6e:63:8e:c0:39:b8: a6:34:7e:de:6b:2a:5d:95:be:84:fb:3b:a8:ed:b4:bd:aa:99: 89:2e:50:88:79:d1:1b:ea:12:4d:36:9a:74:06:e7:64:fe:d8: 58:d0:3b:48:a5:b5:dd:95:ce:ff:ef:17:5f:fa:08:5d:a3:9b: 1b:9d:fc:0e:8e:7c:5e:ab:a0:81:c1:34:54:1d:32:03:9e:ce: c9:fc:dd:a4:b7:40:59:75:65:d9:1a:ed:bc:c8:78:11:36:c1: 42:2f:57:c8:7d:39:48:cd:79:03:06:8b:fc:67:3b:b9:69:5c: 73:65:b8:9a:26:99:2b:8d:0d:ae:fa:2a:9a:0b:d8:3a:17:de: 7f:cb:57:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRJZFmvXdrBpRXNsZEt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5 MTk1MTMwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD EyhkM2Q0ODdhZTI1MDNkNjA4YmZlZDRhN2IxMDViNzM2ZmZjZTNhMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEIrxDy07x9YYgVS+F6xF1plT3EU h1eKq4J0itlTgxCFInF8wlVlQQj7LdCtEdSrQvCMz3l1IkD9suMSoCOdg+k8lULt Rr7+6dv8XgZ73fdAoPc1LDPwscClntZnl4sASZ9wNRJnuc2b4ny6F63ebjIwhTur CfkAgQ9bvm98MqSUIcMc40qgOlBQuS3uHA7XJ9djVqvKMvsTyXIRzU3Aj0Y+oOsG Oh9Ut6V3mn15YptI7PJ09UC5dnPeE0Q5DHi+GgBpHDlO9eynymCMu+2zLw6Zy6Xc 4pRH+APCzWlQrLWMQWooMWkUSszBQtLcfjkk8DYG/hb61/EEiDyBlsviuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPUh64lA9YIv+1KexBbc2/846CTMB8GA1UdIwQY MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4 LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALolONW6E nDA2oYbGecDBNeTt+efdGGiQxaxJKq5+irV68wtV8hvFOeotI8aELyR7/BxC4Sfq NCJ+Vo7LmZqhRPeME7nUgnhcdnGE4IJqpeY93bzph9UVoHubg3nPyV7bqP3KHRPD 45Je7sAo3qwCYSrf0nYsl0Q0bmOOwDm4pjR+3msqXZW+hPs7qO20vaqZiS5QiHnR G+oSTTaadAbnZP7YWNA7SKW13ZXO/+8XX/oIXaObG538Do58XquggcE0VB0yA57O yfzdpLdAWXVl2RrtvMh4ETbBQi9XyH05SM15AwaL/Gc7uWlcc2W4miaZK40Nrvoq mgvYOhfef8tXiA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:13 2025 by rpki-client