This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: fkwTIH3Ahm10JxIOVjuOcyVM4rRmP+Wxf3VaUK00ZiU= Subject key identifier: BF:CF:99:62:3B:88:1F:CC:E2:6F:92:D0:DE:8F:CA:6D:81:8D:62:C0 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B3A5870D5E1D8806DFEF481F7F791CC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0DF1 Signing time: Sat 20 Dec 2025 06:00:33 +0000 Manifest this update: Sat 20 Dec 2025 06:00:33 +0000 Manifest next update: Sun 21 Dec 2025 06:00:33 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: PQy5QJFK5vsQOoss+WOuHL18J4t+KZZ+DVRbOrVPuqc=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (hash: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:70:d5:e1:d8:80:6d:fe:f4:81:f7:f7:91:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 20 06:00:33 2025 GMT Not After : Dec 21 06:00:33 2025 GMT Subject: CN=bfcf99623b881fcce26f92d0de8fca6d818d62c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:86:e0:44:00:28:48:33:67:7a:ab:5b:da: 92:f7:c5:cf:cb:5c:13:31:ca:26:16:6b:2f:7d:c7: 54:14:60:0c:d9:bc:3d:4d:83:5c:12:e5:49:4b:18: c3:ab:b7:da:3b:4d:1e:d4:94:f2:e5:e9:57:ce:c6: 17:42:af:79:e9:3d:8d:0e:04:a1:82:7e:42:2c:3c: c6:22:c0:97:81:72:67:5b:d5:f8:57:ab:94:94:65: ea:01:e9:90:8d:80:5c:0c:31:85:2a:13:1e:e2:d4: c2:b0:3f:4d:6b:84:cb:39:5d:e5:17:3c:d7:73:1e: db:d6:b8:a9:e7:d0:0d:5c:9d:8c:dc:ba:38:69:e5: c6:24:cf:83:28:70:4d:7f:fe:46:dc:26:63:49:72: 59:b6:03:0b:19:3a:30:fb:89:69:61:7b:29:76:92: 66:c8:c4:81:a8:0e:f3:ac:0a:67:74:c5:47:a5:25: cb:93:08:72:b9:c5:45:b6:5a:35:6e:e0:74:b7:bc: 19:dc:39:3e:69:a4:47:1f:55:6c:1e:bf:b0:93:f2: 1c:3f:39:db:21:17:78:21:1f:81:f7:26:a0:37:3e: fa:7f:c5:d2:05:6b:0b:3b:19:73:f1:c5:8e:30:c9: f8:e6:ca:60:60:10:56:dc:df:54:e1:95:55:ee:92: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:99:62:3B:88:1F:CC:E2:6F:92:D0:DE:8F:CA:6D:81:8D:62:C0 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ee:44:d4:ca:b5:97:b8:0a:7b:c5:56:29:1a:21:44:8c:bb: 09:3b:9b:f7:b6:a8:b5:32:2b:94:4e:b7:fe:a0:8c:17:90:75: 8e:23:20:79:b7:00:a4:97:a9:6b:45:08:2b:bf:8d:5f:56:cf: bd:08:bf:77:bb:4a:69:a4:bf:dc:40:97:f2:03:f0:0d:b0:5b: 13:b9:0e:08:f0:7c:1c:20:58:94:29:6b:a4:00:75:80:4c:b1: cb:9e:1d:6a:d7:e8:4d:1c:af:d9:7d:9b:5b:42:d1:86:01:38: 03:92:a6:83:ab:3f:e4:44:0a:7b:87:4b:bd:9a:79:7f:7a:c1: ed:e8:83:26:fa:ff:81:3f:5d:12:d5:8d:73:80:f9:bc:1c:10: f8:2b:2e:d6:6d:16:3e:d3:a9:17:67:62:16:d4:6e:82:3c:a3: 5d:f0:af:cd:6a:c7:d9:b6:3d:0c:58:c8:b8:8a:91:95:29:04: 3f:a9:84:2c:d3:49:a9:23:61:fd:12:56:e7:4c:a3:ef:37:23: 41:f0:d6:94:b0:de:c0:62:f0:00:6d:22:93:a3:b1:f3:94:af: 16:35:71:e2:dc:dd:20:29:79:19:f9:12:b7:26:d5:e1:f5:91: aa:ed:b2:91:dc:3b:71:02:82:79:e0:76:e9:7c:4e:a1:f6:3c: 2a:54:06:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHDV4diAbf70gff3kcyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjIwMDYwMDMzWhcNMjUxMjIxMDYwMDMzWjAzMTEwLwYDVQQD EyhiZmNmOTk2MjNiODgxZmNjZTI2ZjkyZDBkZThmY2E2ZDgxOGQ2MmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHGG4EQAKEgzZ3qrW9qS98XPy1wT McomFmsvfcdUFGAM2bw9TYNcEuVJSxjDq7faO00e1JTy5elXzsYXQq956T2NDgSh gn5CLDzGIsCXgXJnW9X4V6uUlGXqAemQjYBcDDGFKhMe4tTCsD9Na4TLOV3lFzzX cx7b1rip59ANXJ2M3Lo4aeXGJM+DKHBNf/5G3CZjSXJZtgMLGTow+4lpYXspdpJm yMSBqA7zrApndMVHpSXLkwhyucVFtlo1buB0t7wZ3Dk+aaRHH1VsHr+wk/IcPznb IRd4IR+B9yagNz76f8XSBWsLOxlz8cWOMMn45spgYBBW3N9U4ZVV7pLZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/PmWI7iB/M4m+S0N6Pym2BjWLAMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju5E1Mq1 l7gKe8VWKRohRIy7CTub97aotTIrlE63/qCMF5B1jiMgebcApJepa0UIK7+NX1bP vQi/d7tKaaS/3ECX8gPwDbBbE7kOCPB8HCBYlClrpAB1gEyxy54datfoTRyv2X2b W0LRhgE4A5Kmg6s/5EQKe4dLvZp5f3rB7eiDJvr/gT9dEtWNc4D5vBwQ+Csu1m0W PtOpF2diFtRugjyjXfCvzWrH2bY9DFjIuIqRlSkEP6mELNNJqSNh/RJW50yj7zcj QfDWlLDewGLwAG0ik6Ox85SvFjVx4tzdICl5GfkStybV4fWRqu2ykdw7cQKCeeB2 6XxOofY8KlQGEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:46:07 2025 by rpki-client