This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json) Hash identifier: dKmp4166yt8LCErd/a5bBAMsa6GzG3Hq5vaECfi6sAc= Subject key identifier: 10:5E:AA:DF:9F:B9:15:54:C2:2D:12:86:E0:84:61:8C:48:4E:6A:0E Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Certificate serial: 019B3BD8F4D66B3DFEC3C5C51C6594CD4B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft Manifest number: 1193 Signing time: Sat 20 Dec 2025 13:00:32 +0000 Manifest this update: Sat 20 Dec 2025 13:00:32 +0000 Manifest next update: Sun 21 Dec 2025 13:00:32 +0000 Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=) 2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: AYcqbojyDwu78Ek1J8lrwW23YN2sYxH02BsoNWD5CF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:f4:d6:6b:3d:fe:c3:c5:c5:1c:65:94:cd:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Validity Not Before: Dec 20 13:00:32 2025 GMT Not After : Dec 21 13:00:32 2025 GMT Subject: CN=105eaadf9fb91554c22d1286e084618c484e6a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:c6:e4:ec:04:d2:a9:e7:10:cb:5c:f7:78: b5:06:a6:1e:c1:7f:35:fb:de:e0:9c:80:dd:b1:6e: 92:cb:68:5a:2a:d8:9b:48:97:f9:1f:39:cf:8a:6d: 88:3f:14:8a:99:eb:f8:66:aa:e5:90:a0:21:74:03: 7f:92:4a:44:2a:7c:f0:9f:c4:55:7b:c9:68:5c:9c: c7:5a:0e:f1:6f:e0:20:cd:8e:6e:bb:cd:f6:93:17: 1c:18:a0:47:8d:f2:c9:b2:89:00:40:aa:45:c7:7b: 5a:c3:62:9f:b7:af:90:30:93:d6:e0:4d:b8:40:97: d0:28:6d:c9:2d:7a:66:34:11:34:e0:2c:fd:7d:21: 8d:01:c4:aa:00:22:9c:da:8b:c9:0a:f9:65:17:d7: 78:56:54:5d:ca:ad:df:b6:33:07:f5:a2:1b:f9:44: 90:b3:03:95:be:fb:13:bb:6c:df:c7:ce:c2:23:63: 98:26:0e:b2:85:6d:9d:8e:76:50:61:da:23:a9:ec: 63:9c:40:fb:d4:a2:26:88:7f:04:ab:d6:4a:e3:7d: 2c:71:33:f8:70:2d:35:5a:86:ff:ed:9b:7e:02:b2: 29:3d:e1:ca:3c:5a:7b:8e:0f:6f:b4:ea:d5:ec:c7: e8:cf:0a:c8:04:6f:44:08:01:cc:c2:55:32:dd:27: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:AA:DF:9F:B9:15:54:C2:2D:12:86:E0:84:61:8C:48:4E:6A:0E X509v3 Authority Key Identifier: keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:50:4d:56:02:1e:b4:ac:c8:3b:75:62:8e:d1:28:58:6a:20: c5:8a:4f:dc:d3:e5:09:9d:bf:1e:00:3d:8e:9d:f0:73:ab:14: 56:1f:cd:a5:3e:c1:67:c9:5e:06:e9:38:b7:74:fc:61:1a:6c: 56:a0:ae:b9:4d:36:28:0a:63:43:ce:d2:bf:c7:4e:06:a7:e9: 8b:0d:af:66:7a:90:9d:2f:01:bf:b8:80:43:ac:e9:0e:8c:5f: c8:16:3c:91:d7:6b:d8:90:3d:4c:da:83:35:f2:f2:a0:a1:66: 68:1c:97:db:18:15:c7:7f:a0:82:da:88:38:03:fc:47:d8:ec: d4:4c:b2:45:13:8e:1c:e7:e6:b8:f2:5e:f3:2d:c6:64:78:4e: 11:93:03:ea:c8:df:ab:5f:9e:75:40:f1:df:d2:22:f8:cf:a9: c7:ac:a6:1b:3f:84:14:5d:90:bb:bc:6b:f1:27:09:ca:34:e6: 86:7d:9e:ec:67:17:e4:f1:8d:a0:a8:d7:8a:fd:c0:18:54:f3: fc:eb:55:cd:67:cf:83:f9:40:4b:9d:8d:90:74:43:8f:df:26: 01:47:41:72:be:9e:23:76:6c:a3:fb:aa:f7:e7:41:df:f1:4f: 82:45:3c:51:4c:c0:a4:85:d4:58:b4:1d:0d:92:76:30:e0:c9: 9f:16:1c:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72PTWaz3+w8XFHGWUzUsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2 OGFjOWIwHhcNMjUxMjIwMTMwMDMyWhcNMjUxMjIxMTMwMDMyWjAzMTEwLwYDVQQD EygxMDVlYWFkZjlmYjkxNTU0YzIyZDEyODZlMDg0NjE4YzQ4NGU2YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW/G5OwE0qnnEMtc93i1BqYewX81 +97gnIDdsW6Sy2haKtibSJf5HznPim2IPxSKmev4ZqrlkKAhdAN/kkpEKnzwn8RV e8loXJzHWg7xb+AgzY5uu832kxccGKBHjfLJsokAQKpFx3taw2Kft6+QMJPW4E24 QJfQKG3JLXpmNBE04Cz9fSGNAcSqACKc2ovJCvllF9d4VlRdyq3ftjMH9aIb+USQ swOVvvsTu2zfx87CI2OYJg6yhW2djnZQYdojqexjnED71KImiH8Eq9ZK430scTP4 cC01Wob/7Zt+ArIpPeHKPFp7jg9vtOrV7MfozwrIBG9ECAHMwlUy3Sd2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBeqt+fuRVUwi0ShuCEYYxITmoOMB8GA1UdIwQY MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1BNVgIe tKzIO3VijtEoWGogxYpP3NPlCZ2/HgA9jp3wc6sUVh/NpT7BZ8leBuk4t3T8YRps VqCuuU02KApjQ87Sv8dOBqfpiw2vZnqQnS8Bv7iAQ6zpDoxfyBY8kddr2JA9TNqD NfLyoKFmaByX2xgVx3+ggtqIOAP8R9js1EyyRROOHOfmuPJe8y3GZHhOEZMD6sjf q1+edUDx39Ii+M+px6ymGz+EFF2Qu7xr8ScJyjTmhn2e7GcX5PGNoKjXiv3AGFTz /OtVzWfPg/lAS52NkHRDj98mAUdBcr6eI3Zso/uq9+dB3/FPgkU8UUzApIXUWLQd DZJ2MODJnxYcWA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:30:00 2025 by rpki-client