This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json) Hash identifier: D+V7VMDVVWBZrAHBo9Mtwu2FHf1YfdxXZAa4VI4qYfo= Subject key identifier: 90:E0:DA:5B:CF:B4:AA:81:04:62:B4:27:AC:F3:4B:04:5D:53:D8:DD Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Certificate serial: 019B4DDF8DD99C8151A3752B9E0AF63D3381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 01:00:55 +0000 Manifest this update: Wed 24 Dec 2025 01:00:55 +0000 Manifest next update: Thu 25 Dec 2025 01:00:55 +0000 Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: pwUgDco5WizKigXu7113W923B3JzdujC7jEB/XhVY10=) 2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:8d:d9:9c:81:51:a3:75:2b:9e:0a:f6:3d:33:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Validity Not Before: Dec 24 01:00:55 2025 GMT Not After : Dec 25 01:00:55 2025 GMT Subject: CN=90e0da5bcfb4aa810462b427acf34b045d53d8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:80:3f:f8:bc:fe:e5:33:51:43:7f:05:bd: 8f:e5:11:b5:c1:9d:21:a1:c1:7f:b7:cb:ab:f5:09: 48:ad:59:e3:9a:58:85:c8:64:a6:3b:cf:72:54:9b: a4:ce:38:c3:d6:b5:07:67:01:ed:3b:67:9c:3e:2d: c3:91:34:cf:cf:54:a6:b2:3c:24:cd:17:a9:8e:f4: 77:05:d7:63:df:8b:fd:7d:33:ac:5d:17:3a:d6:73: 13:03:3b:ca:a5:90:da:37:81:9b:27:34:18:cd:da: 2a:bf:fc:dc:41:05:bc:20:0e:80:4b:0f:79:f9:bd: 59:6a:53:10:a6:32:08:35:36:af:71:a2:4b:6b:c6: ed:b2:79:86:5e:40:6d:7c:04:0c:60:fe:f4:ce:0f: 4b:1e:55:0f:5d:2c:d4:e7:a7:ee:ce:46:52:2a:e4: fa:12:c4:f7:2f:81:f7:c1:18:82:6e:6f:23:2e:92: 0a:65:05:ff:55:a7:ae:52:9c:4b:48:68:86:09:44: c6:71:59:24:8f:8d:ad:95:d3:4d:03:95:06:66:6c: 00:36:67:c3:3a:0f:ca:85:85:cd:af:86:10:59:dc: f1:2b:80:20:1d:8b:15:5c:1a:50:36:93:24:0a:71: bf:8e:94:4d:61:4b:95:a1:08:27:0a:9a:7a:4f:1a: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E0:DA:5B:CF:B4:AA:81:04:62:B4:27:AC:F3:4B:04:5D:53:D8:DD X509v3 Authority Key Identifier: keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:96:9b:8a:c7:b7:06:0b:22:da:2e:0b:16:8a:ad:bc:87:40: 3b:a6:be:be:40:08:0b:d5:ca:b0:b0:f6:9e:83:27:7e:a0:9c: 5a:1d:60:dd:eb:89:3c:4e:3f:61:7d:db:e7:1a:d6:e5:04:c4: 46:66:86:f3:9d:33:8c:e8:24:fa:b0:29:ef:41:b7:24:15:54: 43:20:85:7f:ca:1c:e1:f0:9f:2f:ae:d1:2b:6c:86:51:70:6f: db:d5:16:b7:e6:14:13:ff:fa:e7:c1:6c:46:7e:f2:50:9d:5c: cb:46:b2:60:e7:a9:61:06:f3:c0:ba:c3:30:ac:1b:3e:b9:d2: d6:af:7c:87:0e:ae:6f:68:60:6e:65:e4:65:b8:ef:24:ab:98: 82:03:c5:c8:1e:e6:e0:05:ce:e0:70:c4:29:aa:c3:2e:b4:84: 59:42:0e:1b:d8:21:cf:c8:57:06:95:b0:47:f3:12:15:fe:30: e2:b6:ff:ff:53:54:55:86:cf:ad:c2:14:17:82:05:ef:ac:34: 74:ea:cb:f9:21:a6:ad:20:01:41:b2:2f:d1:ee:11:f2:2e:72: 9d:ec:d2:67:e8:f4:75:19:08:89:f7:74:df:98:80:8e:e3:aa: 43:a0:d5:c7:96:c8:61:19:6d:ce:c9:a6:05:6c:b7:71:13:6e: d3:67:49:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN343ZnIFRo3Urngr2PTOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl MWM2MGIwHhcNMjUxMjI0MDEwMDU1WhcNMjUxMjI1MDEwMDU1WjAzMTEwLwYDVQQD Eyg5MGUwZGE1YmNmYjRhYTgxMDQ2MmI0MjdhY2YzNGIwNDVkNTNkOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVmAP/i8/uUzUUN/Bb2P5RG1wZ0h ocF/t8ur9QlIrVnjmliFyGSmO89yVJukzjjD1rUHZwHtO2ecPi3DkTTPz1Smsjwk zRepjvR3Bddj34v9fTOsXRc61nMTAzvKpZDaN4GbJzQYzdoqv/zcQQW8IA6ASw95 +b1ZalMQpjIINTavcaJLa8btsnmGXkBtfAQMYP70zg9LHlUPXSzU56fuzkZSKuT6 EsT3L4H3wRiCbm8jLpIKZQX/VaeuUpxLSGiGCUTGcVkkj42tldNNA5UGZmwANmfD Og/KhYXNr4YQWdzxK4AgHYsVXBpQNpMkCnG/jpRNYUuVoQgnCpp6TxrnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDg2lvPtKqBBGK0J6zzSwRdU9jdMB8GA1UdIwQY MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5abise3 Bgsi2i4LFoqtvIdAO6a+vkAIC9XKsLD2noMnfqCcWh1g3euJPE4/YX3b5xrW5QTE RmaG850zjOgk+rAp70G3JBVUQyCFf8oc4fCfL67RK2yGUXBv29UWt+YUE//658Fs Rn7yUJ1cy0ayYOepYQbzwLrDMKwbPrnS1q98hw6ub2hgbmXkZbjvJKuYggPFyB7m 4AXO4HDEKarDLrSEWUIOG9ghz8hXBpWwR/MSFf4w4rb//1NUVYbPrcIUF4IF76w0 dOrL+SGmrSABQbIv0e4R8i5ynezSZ+j0dRkIifd035iAjuOqQ6DVx5bIYRltzsmm BWy3cRNu02dJdg== -----END CERTIFICATE-----Generated at Wed Dec 24 03:36:34 2025 by rpki-client