This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json) Hash identifier: ukupVZDdxgqCg2P0ngSmT7ltwxgoAquLarRk97XXOJo= Subject key identifier: CD:A5:53:B3:42:40:85:D3:AE:C9:44:24:BB:7F:51:05:9B:0A:C2:87 Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019B4091FDD8B22F88430F3507B0D3D7C354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft Manifest number: 0AA9 Signing time: Sun 21 Dec 2025 11:01:08 +0000 Manifest this update: Sun 21 Dec 2025 11:01:08 +0000 Manifest next update: Mon 22 Dec 2025 11:01:08 +0000 Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=) 2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: OzOx0VuhWroB4Fvvq+tySgXzNDeoYYAaANa4mVA6qZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:fd:d8:b2:2f:88:43:0f:35:07:b0:d3:d7:c3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Dec 21 11:01:08 2025 GMT Not After : Dec 22 11:01:08 2025 GMT Subject: CN=cda553b3424085d3aec94424bb7f51059b0ac287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:f4:6b:6a:c4:7a:83:0e:6a:e8:b2:a7:fd: e2:5e:bf:f2:92:92:4b:25:51:5f:87:82:30:ed:d9: 3a:1e:89:00:6d:d3:9f:d6:7e:b3:ec:89:a4:ca:10: 6a:b0:bf:ff:89:8e:b2:7d:eb:f6:42:e7:4d:71:0a: 94:43:7a:8b:21:35:4b:1b:aa:d5:88:e0:70:80:0a: 7d:5a:ae:02:dd:88:6e:17:7e:e5:e1:2d:21:84:1a: d2:6f:dd:ba:f2:e4:d0:a5:36:5f:7f:b6:0b:60:7e: 28:4b:23:83:ab:77:4b:df:eb:e1:67:56:04:01:28: 5a:fd:05:19:25:88:57:a3:c4:b7:19:2f:d1:14:4e: bd:6f:f4:63:69:bb:d6:c2:5e:f2:c0:84:b9:ab:0e: 5e:bf:ff:b5:5b:5c:9f:82:98:30:4e:f4:cd:ec:6a: f6:b5:95:11:2b:5b:21:c0:07:26:25:fd:58:5c:35: 22:98:e8:b8:45:75:d4:9b:60:c8:13:36:ef:d5:54: 35:4c:c6:55:2c:ff:1f:e5:2d:bd:b1:80:61:be:73: 97:47:a2:3d:53:97:34:6c:e1:77:8b:f7:bf:e7:ed: a8:26:f0:be:4c:63:44:8b:1e:15:88:5d:e8:8e:82: 71:a8:7f:87:f4:e9:77:9c:f3:e1:4c:a1:01:05:36: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:53:B3:42:40:85:D3:AE:C9:44:24:BB:7F:51:05:9B:0A:C2:87 X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:67:31:0f:69:04:fc:28:23:cb:e9:b8:6d:9d:14:30:50:3b: 15:ff:90:c4:d6:11:a0:85:bd:67:8d:e4:3a:fe:ce:6c:80:e2: 34:6e:87:40:86:81:ee:58:48:67:46:6a:bb:7c:d3:0f:f0:cf: 4c:06:8a:3b:93:42:21:7f:e4:30:86:63:c8:7b:26:7c:fe:c5: 67:1c:ce:20:9e:43:4b:57:4d:3a:1b:9a:db:04:06:9e:4e:7c: cf:f5:27:ab:b6:02:42:e2:52:72:5c:db:b8:9b:0c:34:68:77: 2f:6a:b1:a7:d2:48:03:80:b4:84:56:e8:46:c7:07:26:79:39: a4:5d:89:a3:2b:65:ce:27:8a:d4:ed:93:37:19:d6:ed:14:4f: c2:c3:85:0d:d2:81:76:c9:de:84:9c:2a:c4:07:37:75:40:d4: 56:14:fd:f7:46:cb:dd:67:7e:30:5c:b6:af:da:dc:6b:15:89: f2:ab:53:ee:1f:36:2f:63:a1:e0:f0:fd:e1:df:13:ac:8d:78: 85:c6:d1:da:9c:8c:18:25:34:8e:5b:10:42:d9:61:f3:bb:5d: e3:44:2e:2d:ae:88:f9:e9:b2:e2:f9:05:f4:17:17:71:79:0a: 2c:6d:14:dc:83:9d:83:53:4c:19:65:db:ed:d7:6f:27:d7:56: 31:2a:0b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkf3Ysi+IQw81B7DT18NUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjUxMjIxMTEwMTA4WhcNMjUxMjIyMTEwMTA4WjAzMTEwLwYDVQQD EyhjZGE1NTNiMzQyNDA4NWQzYWVjOTQ0MjRiYjdmNTEwNTliMGFjMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzD0a2rEeoMOauiyp/3iXr/ykpJL JVFfh4Iw7dk6HokAbdOf1n6z7ImkyhBqsL//iY6yfev2QudNcQqUQ3qLITVLG6rV iOBwgAp9Wq4C3YhuF37l4S0hhBrSb9268uTQpTZff7YLYH4oSyODq3dL3+vhZ1YE ASha/QUZJYhXo8S3GS/RFE69b/RjabvWwl7ywIS5qw5ev/+1W1yfgpgwTvTN7Gr2 tZURK1shwAcmJf1YXDUimOi4RXXUm2DIEzbv1VQ1TMZVLP8f5S29sYBhvnOXR6I9 U5c0bOF3i/e/5+2oJvC+TGNEix4ViF3ojoJxqH+H9Ol3nPPhTKEBBTYEnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2lU7NCQIXTrslEJLt/UQWbCsKHMB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2cxD2kE /Cgjy+m4bZ0UMFA7Ff+QxNYRoIW9Z43kOv7ObIDiNG6HQIaB7lhIZ0Zqu3zTD/DP TAaKO5NCIX/kMIZjyHsmfP7FZxzOIJ5DS1dNOhua2wQGnk58z/Unq7YCQuJSclzb uJsMNGh3L2qxp9JIA4C0hFboRscHJnk5pF2JoytlzieK1O2TNxnW7RRPwsOFDdKB dsnehJwqxAc3dUDUVhT990bL3Wd+MFy2r9rcaxWJ8qtT7h82L2Oh4PD94d8TrI14 hcbR2pyMGCU0jlsQQtlh87td40QuLa6I+emy4vkF9BcXcXkKLG0U3IOdg1NMGWXb 7ddvJ9dWMSoLZA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:47 2025 by rpki-client