This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json) Hash identifier: zQAE0UteXBUtcpxY1wMdnc2OCWNMXftxW/KedLgtqPQ= Subject key identifier: 83:7F:B6:27:79:DF:DE:BC:B9:5D:1C:0C:6D:04:AC:47:CE:A6:62:FC Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Certificate serial: 019B3D5A27462989DBA95329D96DA06BCE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft Manifest number: 1744 Signing time: Sat 20 Dec 2025 20:01:16 +0000 Manifest this update: Sat 20 Dec 2025 20:01:16 +0000 Manifest next update: Sun 21 Dec 2025 20:01:16 +0000 Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=) 2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: 7p/ZtumlHj0SWyujP607nkkXx9szt9fGc+eLhQU7lBk=) 3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:27:46:29:89:db:a9:53:29:d9:6d:a0:6b:ce:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd Validity Not Before: Dec 20 20:01:16 2025 GMT Not After : Dec 21 20:01:16 2025 GMT Subject: CN=837fb62779dfdebcb95d1c0c6d04ac47cea662fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:06:4b:7e:22:81:af:ff:b8:70:3b:af:62: 4d:e3:4f:93:56:c8:5a:09:e5:d0:b7:92:c9:54:60: 89:f6:22:a8:aa:7e:7a:7b:2b:15:20:2c:3e:21:a9: c8:8a:c3:23:8d:44:85:a5:5f:82:04:82:96:6d:11: b2:77:a3:8b:3b:78:e7:80:b1:56:1a:e6:11:44:d0: 6e:94:fa:a2:e7:2f:3f:38:c0:cf:1c:00:b5:29:d1: 60:ea:bd:5e:97:69:c7:95:55:5d:a8:b8:40:36:ea: 49:4f:06:e5:00:7a:68:22:de:49:f4:b7:22:59:cb: 11:3e:ff:43:12:c9:03:e6:0e:06:91:ea:07:b3:5e: 60:91:51:71:8b:14:41:3a:e6:ed:a2:b7:37:5e:b3: 13:75:d9:a1:f8:15:0b:97:6b:04:89:40:0e:da:3c: 6d:1e:90:ae:90:f4:c2:45:8a:a7:f2:14:6e:c8:24: 7e:5f:1e:66:3f:cf:31:ff:43:c2:fd:3b:25:2e:ae: 4c:89:6a:59:a7:16:8b:ce:0d:6b:f0:1d:49:56:4b: 8e:0e:f1:9e:5c:e2:07:be:6e:b7:71:7b:9c:f3:0b: 2b:b4:12:48:5f:06:af:62:54:28:f0:d9:de:ac:22: 7a:ac:27:1c:d7:b5:48:3a:f6:b8:67:96:35:d1:a5: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7F:B6:27:79:DF:DE:BC:B9:5D:1C:0C:6D:04:AC:47:CE:A6:62:FC X509v3 Authority Key Identifier: keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:63:91:ff:05:5b:37:58:4c:02:59:50:74:f1:6d:3d:de:ed: 97:5b:21:26:14:b3:be:95:f1:34:59:73:af:b2:89:36:62:59: 87:07:14:f4:91:96:fb:78:13:32:4d:50:c8:c0:a5:70:6a:0e: 45:44:a7:61:2d:44:f3:7e:f4:12:89:c7:51:79:64:9b:de:e9: 23:93:85:75:5c:7a:c5:08:fd:b7:39:17:39:28:4d:2d:ff:c5: aa:f8:26:6a:90:cc:bb:6f:72:9e:e9:3c:cf:3b:d0:da:43:e9: d5:e9:cf:d4:1e:81:23:03:c9:73:7e:80:45:69:ad:e5:03:72: de:da:9f:3e:2b:df:9e:9a:32:90:e8:de:3a:4d:62:88:93:e0: d7:62:7f:9e:ee:55:d5:96:4e:2e:28:8f:a7:25:61:ed:28:6d: 6a:59:4e:6a:01:c5:33:21:04:10:37:ae:0c:7b:ff:bd:6c:d0: f9:23:67:18:59:a6:ae:2f:21:10:4f:25:30:1a:0c:e9:1b:07: 54:67:a2:76:04:10:25:73:ed:7b:f0:0e:2c:03:9e:16:67:7a: 9d:32:74:17:68:bb:fc:57:cf:74:99:d2:0b:63:04:ff:9d:bf: 15:33:db:36:3a:9e:05:ca:d9:36:f8:62:22:b1:bf:11:91:a2: 3e:84:c3:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WidGKYnbqVMp2W2ga849MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk MmI5ZGQwHhcNMjUxMjIwMjAwMTE2WhcNMjUxMjIxMjAwMTE2WjAzMTEwLwYDVQQD Eyg4MzdmYjYyNzc5ZGZkZWJjYjk1ZDFjMGM2ZDA0YWM0N2NlYTY2MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dcGS34iga//uHA7r2JN40+TVsha CeXQt5LJVGCJ9iKoqn56eysVICw+IanIisMjjUSFpV+CBIKWbRGyd6OLO3jngLFW GuYRRNBulPqi5y8/OMDPHAC1KdFg6r1el2nHlVVdqLhANupJTwblAHpoIt5J9Lci WcsRPv9DEskD5g4GkeoHs15gkVFxixRBOubtorc3XrMTddmh+BULl2sEiUAO2jxt HpCukPTCRYqn8hRuyCR+Xx5mP88x/0PC/TslLq5MiWpZpxaLzg1r8B1JVkuODvGe XOIHvm63cXuc8wsrtBJIXwavYlQo8NnerCJ6rCcc17VIOva4Z5Y10aW+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN/tid53968uV0cDG0ErEfOpmL8MB8GA1UdIwQY MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5 LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWOR/wVb N1hMAllQdPFtPd7tl1shJhSzvpXxNFlzr7KJNmJZhwcU9JGW+3gTMk1QyMClcGoO RUSnYS1E8370EonHUXlkm97pI5OFdVx6xQj9tzkXOShNLf/FqvgmapDMu29ynuk8 zzvQ2kPp1enP1B6BIwPJc36ARWmt5QNy3tqfPivfnpoykOjeOk1iiJPg12J/nu5V 1ZZOLiiPpyVh7ShtallOagHFMyEEEDeuDHv/vWzQ+SNnGFmmri8hEE8lMBoM6RsH VGeidgQQJXPte/AOLAOeFmd6nTJ0F2i7/FfPdJnSC2ME/52/FTPbNjqeBcrZNvhi IrG/EZGiPoTDkw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:05:56 2025 by rpki-client