This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json) Hash identifier: iJMsWwddXeemygAfngv9T1kyMTvJmefpdjmOqHFwZ9o= Subject key identifier: 2F:7B:2C:AD:3C:0C:8A:8C:F7:4D:33:15:33:60:9F:3F:EA:88:F4:7A Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019B465CFA715B5588F5D1DEF1BE66FC955E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 14:00:56 +0000 Manifest this update: Mon 22 Dec 2025 14:00:56 +0000 Manifest next update: Tue 23 Dec 2025 14:00:56 +0000 Files and hashes: 1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=) 2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=) 3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=) 4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: YLNq9Np175Jig33rJkoLya0dLwcbvHnUOApKFt/TrwU=) 5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=) 6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:fa:71:5b:55:88:f5:d1:de:f1:be:66:fc:95:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Dec 22 14:00:56 2025 GMT Not After : Dec 23 14:00:56 2025 GMT Subject: CN=2f7b2cad3c0c8a8cf74d331533609f3fea88f47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:62:c5:28:6a:c6:da:2d:66:5f:6e:4c:16: f7:77:5f:90:ff:f9:96:f1:97:dd:68:51:7a:4c:64: 07:0c:b4:bf:06:2e:89:02:37:b7:0f:49:12:4b:31: da:3a:6f:e1:0f:d1:5a:4b:70:c2:e1:de:bb:96:4e: 06:55:4a:b5:16:9a:02:cb:0f:1f:b3:12:0f:a5:f1: 08:9d:f4:2b:8e:2f:8f:e1:c8:45:08:0d:93:f4:95: dc:1c:1d:05:a7:10:eb:26:67:01:b1:22:90:5d:9e: 16:c2:b8:06:32:7a:4f:d2:6c:5f:aa:dc:15:71:e3: 73:56:5a:32:1a:4e:ee:cf:e2:83:17:40:14:ab:25: fb:1c:48:af:90:92:44:af:53:45:a4:ed:2f:49:e6: 2d:2d:5c:c5:fc:c8:7a:33:44:eb:a4:1b:eb:ed:b9: 98:e4:ad:a9:60:fc:d3:cc:b0:97:e5:d9:11:b2:47: cf:3a:73:29:7e:cd:80:a6:8b:72:7b:d5:d3:a6:39: 16:29:f3:d6:fc:9c:a4:cf:de:a4:a2:92:3f:30:0f: fa:6a:28:2c:1d:c5:33:c8:2b:39:b7:8c:73:e2:bb: ce:30:f0:4b:8a:73:b6:f2:96:3b:86:24:f9:8e:50: ad:3d:a7:91:cf:03:b0:fa:7b:b9:69:ca:33:78:70: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7B:2C:AD:3C:0C:8A:8C:F7:4D:33:15:33:60:9F:3F:EA:88:F4:7A X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:c6:76:9c:22:5e:66:69:84:56:eb:24:dc:b9:93:54:0b: ac:05:0f:26:3e:7a:ef:da:4e:e2:84:30:7a:03:94:b7:10:a0: 65:67:2f:3a:45:c5:b7:33:69:d9:d2:e1:e3:29:f4:6c:ff:24: 66:30:db:bd:57:5c:91:c3:e2:91:c5:15:d0:65:a3:c3:4c:f8: e3:57:f4:83:5e:b1:51:a0:4c:46:74:dc:e4:ee:37:d8:86:ac: 4a:ac:5a:8b:71:4f:c9:3b:00:fa:68:71:39:da:ab:22:89:42: be:2f:74:ab:cd:1d:74:37:b6:b6:08:42:09:49:de:b5:01:29: c5:5b:ad:51:d6:e0:3e:08:bc:1b:49:c9:88:58:d2:41:b8:6a: 7f:0b:19:d8:ad:44:96:0f:7a:0f:3d:41:26:b9:e1:5b:1b:6d: 9f:a4:f5:fe:d8:45:5a:e1:1c:2b:34:79:eb:6c:93:7d:b8:10: bf:e7:1b:4c:25:f5:b9:49:5d:b3:b1:62:a4:0a:b3:5d:4f:d6: 78:07:ac:7b:de:02:cc:e1:d4:48:cd:fd:a5:79:83:f5:61:1f: bc:98:98:fc:e6:57:f4:48:c5:f4:24:13:2c:19:8d:7c:98:db: 38:a2:6e:08:4c:36:a4:7c:e5:88:0b:f8:4d:42:20:0a:f7:eb: 7b:a7:e9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXPpxW1WI9dHe8b5m/JVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjUxMjIyMTQwMDU2WhcNMjUxMjIzMTQwMDU2WjAzMTEwLwYDVQQD EygyZjdiMmNhZDNjMGM4YThjZjc0ZDMzMTUzMzYwOWYzZmVhODhmNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNixShqxtotZl9uTBb3d1+Q//mW 8ZfdaFF6TGQHDLS/Bi6JAje3D0kSSzHaOm/hD9FaS3DC4d67lk4GVUq1FpoCyw8f sxIPpfEInfQrji+P4chFCA2T9JXcHB0FpxDrJmcBsSKQXZ4WwrgGMnpP0mxfqtwV ceNzVloyGk7uz+KDF0AUqyX7HEivkJJEr1NFpO0vSeYtLVzF/Mh6M0TrpBvr7bmY 5K2pYPzTzLCX5dkRskfPOnMpfs2Apotye9XTpjkWKfPW/Jykz96kopI/MA/6aigs HcUzyCs5t4xz4rvOMPBLinO28pY7hiT5jlCtPaeRzwOw+nu5acozeHAkCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC97LK08DIqM900zFTNgnz/qiPR6MB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9PGdpwi XmZphFbrJNy5k1QLrAUPJj5679pO4oQwegOUtxCgZWcvOkXFtzNp2dLh4yn0bP8k ZjDbvVdckcPikcUV0GWjw0z441f0g16xUaBMRnTc5O432IasSqxai3FPyTsA+mhx OdqrIolCvi90q80ddDe2tghCCUnetQEpxVutUdbgPgi8G0nJiFjSQbhqfwsZ2K1E lg96Dz1BJrnhWxttn6T1/thFWuEcKzR562yTfbgQv+cbTCX1uUlds7FipAqzXU/W eAese94CzOHUSM39pXmD9WEfvJiY/OZX9EjF9CQTLBmNfJjbOKJuCEw2pHzliAv4 TUIgCvfre6fpgA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:52:33 2025 by rpki-client