This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json) Hash identifier: pfG2dZTsVdU7nc8RdHBVu/QELgT8oQH8Bvycns2cN38= Subject key identifier: BB:CB:84:58:D7:4B:C5:05:46:8A:4B:4E:06:BB:8F:A6:91:DE:02:EC Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Certificate serial: 019B733579147D761B193750CC1CF0E16A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 07:00:42 +0000 Manifest this update: Wed 31 Dec 2025 07:00:42 +0000 Manifest next update: Thu 01 Jan 2026 07:00:42 +0000 Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: J6OONoyMEg35bBGZeaSXMCfNoGG8zB73gDgb9KsX4jo=) 2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:79:14:7d:76:1b:19:37:50:cc:1c:f0:e1:6a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Validity Not Before: Dec 31 07:00:42 2025 GMT Not After : Jan 1 07:00:42 2026 GMT Subject: CN=bbcb8458d74bc505468a4b4e06bb8fa691de02ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:61:fd:6a:0f:63:f0:80:3c:09:2d:ca:9e: bd:87:e9:ae:c0:80:4f:0c:cd:c1:66:09:c2:a7:16: dd:2c:c0:f3:5c:51:60:45:7e:3d:a6:c1:ef:e5:f6: f8:09:a3:a3:5b:e3:d0:06:9d:31:bd:fc:61:64:07: 22:69:62:2e:cc:77:8b:34:c0:60:fa:b8:dd:b3:02: b1:4d:52:04:7c:71:9c:19:25:d1:2e:51:1f:e7:39: bd:40:e5:bb:a5:a1:38:10:1a:aa:26:81:bc:4f:b5: 14:29:90:bf:30:89:9a:67:6c:99:7b:5f:a0:da:67: 0f:f6:c4:96:3d:dc:3d:32:b8:b2:2f:36:11:a9:61: e9:03:89:69:96:94:a2:d6:03:d1:f5:ca:8b:93:dd: d7:5c:34:9e:c9:bf:f5:d2:c5:ab:f9:59:51:28:3a: 23:df:04:35:23:ff:38:ca:30:bd:b3:ef:29:c9:9f: 85:cc:41:ad:6b:70:1d:9b:dc:aa:ac:b4:b5:20:5d: 2a:83:bf:84:f3:82:13:a3:03:04:49:78:91:74:26: cf:d6:3b:05:bf:ac:c0:32:81:df:e4:95:5c:cb:81: d0:9c:f2:65:85:88:b5:82:d1:94:05:71:93:e7:57: 6d:1e:0d:a1:0c:69:b8:58:6b:d2:38:b5:d8:59:99: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:84:58:D7:4B:C5:05:46:8A:4B:4E:06:BB:8F:A6:91:DE:02:EC X509v3 Authority Key Identifier: keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:f3:19:26:ee:cf:85:ab:8f:95:2f:c1:13:62:85:c5:16:33: 68:93:19:4c:0c:93:0e:50:06:e2:3c:05:5f:d1:70:59:a3:5a: 6a:d0:72:dd:3c:bc:72:1e:8e:26:a9:2b:62:82:8b:98:19:90: 9b:1c:01:4d:90:76:ef:f9:70:9c:95:d2:c1:70:65:53:1c:7d: b8:58:ac:76:40:ea:8a:26:b4:df:48:3f:9a:28:96:6d:38:e6: 60:6f:80:a6:32:0a:d2:af:f2:5f:62:9e:d6:4a:c6:33:58:66: 75:d0:76:85:fd:e2:cb:67:c4:2c:04:c7:7b:80:3d:43:df:eb: 35:7c:fd:50:a1:d6:6a:f7:9e:e5:5e:35:c6:13:da:20:06:85: 49:b6:b4:22:fa:7e:59:b9:b2:72:8d:d7:c2:14:41:2f:fb:6f: 7b:c8:c7:4d:ca:47:f6:4f:d1:39:89:42:a8:bb:00:34:95:37: d9:89:4f:b0:af:84:62:f4:2c:74:3b:b4:7d:d9:ad:9b:f9:70: ea:09:83:3e:e4:83:ea:c1:25:76:2d:24:fe:74:93:1e:aa:c8: d6:df:aa:4c:ea:ff:52:bb:e8:5a:df:7e:15:39:01:64:8d:2e: 2a:4e:19:13:31:10:96:2c:5f:34:0b:ee:d9:56:8c:db:d6:19: 51:0a:c0:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNXkUfXYbGTdQzBzw4WpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3 YTg0ZGUwHhcNMjUxMjMxMDcwMDQyWhcNMjYwMTAxMDcwMDQyWjAzMTEwLwYDVQQD EyhiYmNiODQ1OGQ3NGJjNTA1NDY4YTRiNGUwNmJiOGZhNjkxZGUwMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulNh/WoPY/CAPAktyp69h+muwIBP DM3BZgnCpxbdLMDzXFFgRX49psHv5fb4CaOjW+PQBp0xvfxhZAciaWIuzHeLNMBg +rjdswKxTVIEfHGcGSXRLlEf5zm9QOW7paE4EBqqJoG8T7UUKZC/MImaZ2yZe1+g 2mcP9sSWPdw9MriyLzYRqWHpA4lplpSi1gPR9cqLk93XXDSeyb/10sWr+VlRKDoj 3wQ1I/84yjC9s+8pyZ+FzEGta3Adm9yqrLS1IF0qg7+E84ITowMESXiRdCbP1jsF v6zAMoHf5JVcy4HQnPJlhYi1gtGUBXGT51dtHg2hDGm4WGvSOLXYWZltuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvLhFjXS8UFRopLTga7j6aR3gLsMB8GA1UdIwQY MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7PMZJu7P hauPlS/BE2KFxRYzaJMZTAyTDlAG4jwFX9FwWaNaatBy3Ty8ch6OJqkrYoKLmBmQ mxwBTZB27/lwnJXSwXBlUxx9uFisdkDqiia030g/miiWbTjmYG+ApjIK0q/yX2Ke 1krGM1hmddB2hf3iy2fELATHe4A9Q9/rNXz9UKHWavee5V41xhPaIAaFSba0Ivp+ Wbmyco3XwhRBL/tve8jHTcpH9k/ROYlCqLsANJU32YlPsK+EYvQsdDu0fdmtm/lw 6gmDPuSD6sEldi0k/nSTHqrI1t+qTOr/UrvoWt9+FTkBZI0uKk4ZEzEQlixfNAvu 2VaM29YZUQrAcg== -----END CERTIFICATE-----Generated at Wed Dec 31 09:12:05 2025 by rpki-client