This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json) Hash identifier: thuOYPqbyrUvdLKd5qTJvSkIzTy5l+TOdvHv3jHuXi4= Subject key identifier: AE:C6:E1:8D:CA:CC:B5:88:06:C4:E2:6C:E9:75:15:F6:3B:F3:BC:FD Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019B5B9B62139A8D4D94B72F48247984D371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft Manifest number: 0AB7 Signing time: Fri 26 Dec 2025 17:01:08 +0000 Manifest this update: Fri 26 Dec 2025 17:01:08 +0000 Manifest next update: Sat 27 Dec 2025 17:01:08 +0000 Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=) 2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: s4dF/A8RzaFj/tzk+/8JYU49py2P9ScSbpygLyzHeFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:62:13:9a:8d:4d:94:b7:2f:48:24:79:84:d3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Dec 26 17:01:08 2025 GMT Not After : Dec 27 17:01:08 2025 GMT Subject: CN=aec6e18dcaccb58806c4e26ce97515f63bf3bcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:b9:32:9f:5a:c8:5c:af:c7:c7:30:7e:ab: 26:c3:45:d0:3c:7b:f7:86:f3:08:9b:80:11:90:46: bd:61:2e:46:64:7d:cd:49:2e:c6:a6:f3:2a:9f:9b: 28:8c:4f:1e:a9:58:91:94:c8:90:35:36:78:89:b6: d5:dc:d4:a5:9c:6b:a4:b8:e8:56:6b:20:85:c0:fe: 31:ad:01:ce:c5:6d:59:ef:89:21:63:71:ca:88:8d: ac:51:ca:83:2b:ce:04:c6:b9:e7:ff:72:a5:e9:49: 84:b3:38:10:88:5d:42:1b:f2:8a:a9:3f:d0:b2:46: fd:e0:56:0a:4c:d9:6e:24:d7:1a:07:b1:84:82:12: e5:66:0d:36:95:3e:f1:7d:35:94:41:19:56:d8:db: e4:3b:97:70:de:63:73:12:d6:52:b3:75:49:f6:00: 7c:79:90:6a:c3:6e:7b:16:72:cc:67:6a:3d:04:d0: 34:39:ff:88:c5:68:2e:9c:85:c6:4e:16:cc:6f:b9: 49:ec:25:70:02:21:6a:53:66:55:68:f6:29:eb:87: b8:06:98:f9:15:53:59:b4:53:ea:92:68:af:b8:7b: ec:57:a1:87:af:b0:77:2c:69:76:a1:66:ef:96:22: 8e:9e:68:9c:71:30:5c:89:bf:87:4b:c8:cb:79:4c: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:E1:8D:CA:CC:B5:88:06:C4:E2:6C:E9:75:15:F6:3B:F3:BC:FD X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:bc:0e:11:40:a0:8b:66:a2:6f:ca:f4:15:4d:6f:1d:5d: 2c:1f:85:89:a8:61:4a:d8:5f:89:d3:a5:d1:97:2a:b5:ba:91: ca:05:1e:f8:3a:c2:61:86:c0:f5:62:dd:83:cd:8a:a8:e2:bb: ec:03:ad:89:5a:4e:71:e8:78:f6:f4:0d:c6:71:8c:a2:78:2e: e6:aa:77:31:0a:d8:ff:44:54:c5:75:a2:35:47:4c:f6:f4:e8: 24:38:52:9b:7d:88:a2:32:10:2e:67:9e:cd:83:e7:20:2e:3d: 5c:60:aa:ca:9a:7c:23:f3:49:45:ce:69:ab:d3:53:22:a0:23: 6b:2d:cc:56:9e:40:c2:96:a0:22:2b:2f:7e:75:af:52:21:da: 0b:0a:20:20:a3:ff:e1:9b:9b:ee:c6:54:b4:11:8d:77:44:cc: 6f:c9:3a:93:2d:28:c4:5e:5c:27:7f:74:a5:8f:29:26:0b:14: 8f:d5:1f:8d:d2:4f:78:24:62:8d:75:05:21:08:a9:fb:c1:85: cc:ec:b8:24:fe:a0:07:40:0b:16:73:ef:a0:bb:ad:0c:d1:b0: 5b:2b:f9:df:ba:aa:ae:b9:97:56:45:35:63:6a:9f:83:a9:29: 71:69:fe:9e:2f:88:79:22:75:17:fa:d4:96:da:6d:8b:77:34: 3f:ed:91:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbm2ITmo1NlLcvSCR5hNNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjUxMjI2MTcwMTA4WhcNMjUxMjI3MTcwMTA4WjAzMTEwLwYDVQQD EyhhZWM2ZTE4ZGNhY2NiNTg4MDZjNGUyNmNlOTc1MTVmNjNiZjNiY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYS5Mp9ayFyvx8cwfqsmw0XQPHv3 hvMIm4ARkEa9YS5GZH3NSS7GpvMqn5sojE8eqViRlMiQNTZ4ibbV3NSlnGukuOhW ayCFwP4xrQHOxW1Z74khY3HKiI2sUcqDK84Exrnn/3Kl6UmEszgQiF1CG/KKqT/Q skb94FYKTNluJNcaB7GEghLlZg02lT7xfTWUQRlW2NvkO5dw3mNzEtZSs3VJ9gB8 eZBqw257FnLMZ2o9BNA0Of+IxWgunIXGThbMb7lJ7CVwAiFqU2ZVaPYp64e4Bpj5 FVNZtFPqkmivuHvsV6GHr7B3LGl2oWbvliKOnmiccTBcib+HS8jLeUyPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7G4Y3KzLWIBsTibOl1FfY787z9MB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb+8DhFA oItmom/K9BVNbx1dLB+FiahhSthfidOl0ZcqtbqRygUe+DrCYYbA9WLdg82KqOK7 7AOtiVpOceh49vQNxnGMongu5qp3MQrY/0RUxXWiNUdM9vToJDhSm32IojIQLmee zYPnIC49XGCqypp8I/NJRc5pq9NTIqAjay3MVp5AwpagIisvfnWvUiHaCwogIKP/ 4Zub7sZUtBGNd0TMb8k6ky0oxF5cJ390pY8pJgsUj9UfjdJPeCRijXUFIQip+8GF zOy4JP6gB0ALFnPvoLutDNGwWyv537qqrrmXVkU1Y2qfg6kpcWn+ni+IeSJ1F/rU ltpti3c0P+2R2g== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:45 2025 by rpki-client