This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json) Hash identifier: eGOit2yeE9IABcOdwlPLYxdGenPaat836BFivPJyJ6k= Subject key identifier: DE:3F:76:D1:30:89:57:5D:D1:01:64:1E:FB:A2:B1:13:87:38:D8:26 Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Certificate serial: 019B32D6EF097E131EBEA727C802455DDA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft Manifest number: 1114 Signing time: Thu 18 Dec 2025 19:01:45 +0000 Manifest this update: Thu 18 Dec 2025 19:01:45 +0000 Manifest next update: Fri 19 Dec 2025 19:01:45 +0000 Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=) 2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: vkLd0dXd9tlQHXp6+qzXZljhlq4T+CRlyTnJ2N1NZ/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ef:09:7e:13:1e:be:a7:27:c8:02:45:5d:da:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Validity Not Before: Dec 18 19:01:45 2025 GMT Not After : Dec 19 19:01:45 2025 GMT Subject: CN=de3f76d13089575dd101641efba2b1138738d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:af:98:32:56:2c:a8:e2:96:4f:1d:1d:88: e3:d2:34:f3:57:f6:4d:56:10:c2:ea:65:3c:09:19: b6:f6:ca:5a:03:72:d9:4d:e0:d2:94:8d:3a:ea:4b: 57:43:ba:0f:66:f3:d6:a6:62:3b:11:1c:98:b0:f0: b9:ec:79:ac:0f:05:e1:b4:42:cb:2c:af:f6:0d:5f: d1:5d:3a:de:68:8a:20:c4:7f:87:55:56:7b:f5:3f: 61:b5:23:70:54:d3:b2:99:74:32:92:5c:bb:d3:53: 91:b2:c0:35:b3:ba:6f:f2:1a:76:e6:25:22:54:14: cb:6e:ad:51:fe:8e:a5:2d:5f:0d:65:ee:22:cc:82: 53:93:f5:15:92:ab:1c:cc:b9:66:6b:22:7b:a8:b7: c8:c8:dd:78:24:c2:04:f6:68:dd:f5:3a:e7:bc:bb: 87:6d:06:78:3e:c2:27:81:51:ba:c4:ef:5a:86:f7: c8:e7:a3:f5:66:a0:68:dd:ec:fa:c8:cf:6d:31:7f: a2:1b:62:fc:42:26:75:de:30:94:7a:66:e5:26:fb: fa:e7:91:f7:97:83:ca:fe:22:f8:7e:03:14:5c:f4: fc:c2:6a:54:87:58:d6:44:90:e0:43:28:9b:5f:83: 87:53:a3:ec:62:c1:24:a7:2e:2c:9e:92:68:fc:f2: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3F:76:D1:30:89:57:5D:D1:01:64:1E:FB:A2:B1:13:87:38:D8:26 X509v3 Authority Key Identifier: keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:45:3a:c9:2f:04:3f:7f:21:d8:4e:65:10:36:49:0d:fb:77: 5f:77:28:6a:7a:50:30:f0:e4:01:de:2a:0a:84:11:76:b9:ad: ad:aa:44:78:00:b2:0b:89:d6:fc:8f:57:3e:61:e1:4a:ba:3c: 30:98:5d:c3:aa:68:ba:82:3d:62:44:26:08:02:61:b0:69:04: 00:c6:8d:5e:7d:d7:33:92:77:df:8f:a7:83:03:45:03:63:7f: 3a:15:ca:df:6d:56:c5:82:dc:ad:e2:ea:71:e9:89:f2:76:1d: 67:8a:2b:0f:ef:ec:e7:99:17:e1:28:b3:03:c8:eb:e2:ca:5c: d4:f0:80:04:fd:c5:d6:f0:1b:5f:30:86:8f:f7:e6:3c:4e:ce: 28:6a:55:84:d6:a6:00:29:1b:4e:c2:32:11:54:e8:b5:1f:ed: 60:1f:11:87:fa:ed:29:db:2a:7d:36:8d:16:b9:37:dd:de:67: 01:58:4c:ab:4f:33:97:af:e5:ac:70:27:5d:cf:29:4b:3d:54: 40:02:d7:63:9b:aa:f9:9a:dc:0e:c7:81:0a:89:34:5f:41:fb: 0a:5f:94:9f:d3:ad:23:ac:29:36:c9:6e:1d:5d:56:0e:63:a3: 08:fd:f7:99:e1:41:15:6c:0c:26:d6:1e:3a:a4:c9:32:3a:79: 90:96:7e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1u8JfhMevqcnyAJFXdprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2 YmU5YzEwHhcNMjUxMjE4MTkwMTQ1WhcNMjUxMjE5MTkwMTQ1WjAzMTEwLwYDVQQD EyhkZTNmNzZkMTMwODk1NzVkZDEwMTY0MWVmYmEyYjExMzg3MzhkODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wWvmDJWLKjilk8dHYjj0jTzV/ZN VhDC6mU8CRm29spaA3LZTeDSlI066ktXQ7oPZvPWpmI7ERyYsPC57HmsDwXhtELL LK/2DV/RXTreaIogxH+HVVZ79T9htSNwVNOymXQykly701ORssA1s7pv8hp25iUi VBTLbq1R/o6lLV8NZe4izIJTk/UVkqsczLlmayJ7qLfIyN14JMIE9mjd9TrnvLuH bQZ4PsIngVG6xO9ahvfI56P1ZqBo3ez6yM9tMX+iG2L8QiZ13jCUemblJvv655H3 l4PK/iL4fgMUXPT8wmpUh1jWRJDgQyibX4OHU6PsYsEkpy4snpJo/PLhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4/dtEwiVdd0QFkHvuisROHONgmMB8GA1UdIwQY MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt OTdiODljNDdkNTBhLzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEU6yS8E P38h2E5lEDZJDft3X3coanpQMPDkAd4qCoQRdrmtrapEeACyC4nW/I9XPmHhSro8 MJhdw6pouoI9YkQmCAJhsGkEAMaNXn3XM5J334+ngwNFA2N/OhXK321WxYLcreLq cemJ8nYdZ4orD+/s55kX4SizA8jr4spc1PCABP3F1vAbXzCGj/fmPE7OKGpVhNam ACkbTsIyEVTotR/tYB8Rh/rtKdsqfTaNFrk33d5nAVhMq08zl6/lrHAnXc8pSz1U QALXY5uq+ZrcDseBCok0X0H7Cl+Un9OtI6wpNsluHV1WDmOjCP33meFBFWwMJtYe OqTJMjp5kJZ+Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:01:12 2025 by rpki-client