This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json) Hash identifier: TqCtmK/iQVkOxvd9ZbFpUVDYcGHWD2dF7rYPkc4qrpo= Subject key identifier: 90:E4:1B:F4:8A:9A:23:3A:FC:C3:04:93:8C:5D:EB:55:6E:5F:9E:89 Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019B51BDA7C6859F72A35F98DFB63C443705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 19:02:22 +0000 Manifest this update: Wed 24 Dec 2025 19:02:22 +0000 Manifest next update: Thu 25 Dec 2025 19:02:22 +0000 Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=) 2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: Zy1ZzpeMH3D8y7MFUycc25EdtMemb2H3EO91VMuGs70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:a7:c6:85:9f:72:a3:5f:98:df:b6:3c:44:37:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Dec 24 19:02:22 2025 GMT Not After : Dec 25 19:02:22 2025 GMT Subject: CN=90e41bf48a9a233afcc304938c5deb556e5f9e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:b4:be:03:ba:35:1d:17:ff:e6:2c:2d:a9: 86:e2:44:09:32:01:2e:63:38:1e:16:35:69:87:65: 30:d1:d2:32:4b:05:a7:ea:b4:8d:a6:55:59:76:9f: 63:40:32:3d:29:4d:f3:b1:12:eb:d4:e8:e6:58:f4: 5b:4a:4a:cf:d8:71:46:0b:3d:f1:ea:73:c8:6f:62: 97:e8:e4:c2:e0:79:ff:1d:ef:ef:9b:a7:a8:a8:1d: df:e3:e7:47:b9:cf:14:78:a2:12:55:cd:02:6a:6f: ce:79:f0:13:4d:03:b0:20:34:97:69:b0:62:7b:c0: 27:f4:cf:68:cf:b2:8c:42:11:d4:27:38:26:b3:b1: 1d:2f:5f:a6:49:e4:ad:4a:9f:be:dc:68:b5:d8:bb: 4c:f3:7c:cd:3c:4b:76:5b:df:a2:46:20:ec:7c:33: 98:69:a1:f1:82:ec:e5:83:a9:e4:07:a2:83:a1:83: eb:95:a9:d7:92:19:15:5e:02:b1:26:d1:5b:83:3c: 77:82:ca:d0:92:dd:09:f5:f5:85:d5:5f:52:d4:45: ff:51:42:13:d9:07:29:b2:54:68:06:93:9e:e3:e4: 34:5e:5a:d1:b4:c5:25:d2:59:99:7d:f2:56:e2:11: 5d:42:ef:66:b1:57:ee:0f:eb:51:07:bc:7b:f2:78: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:1B:F4:8A:9A:23:3A:FC:C3:04:93:8C:5D:EB:55:6E:5F:9E:89 X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a7:fb:d1:fa:64:80:dc:86:74:25:60:49:7d:3d:77:6f:0f: 92:fb:da:38:e4:a9:be:f0:64:1d:42:f7:22:85:61:3d:7d:87: a4:6f:39:47:a7:9e:5d:7f:68:0e:95:0f:d4:57:68:b6:e8:17: 01:2d:9a:82:bf:9e:87:83:ad:c8:a2:ae:aa:1b:0a:4e:7c:13: 7e:a6:e2:a4:9d:d9:2b:82:43:ba:34:58:a4:5d:d9:33:ef:47: aa:2a:c8:98:59:4a:b7:52:2b:9d:ff:24:a1:61:47:94:c6:55: ca:4c:a0:9e:6a:5b:20:78:b2:0b:a9:4a:ed:87:fc:14:22:75: db:08:88:2e:10:fa:c2:e4:da:f0:ae:81:87:62:8f:07:08:6f: a0:ae:92:94:50:95:51:bf:c3:a0:fd:c9:1c:78:5f:bb:45:e9: 17:3d:53:69:f0:ce:75:cc:9c:f7:fe:dc:40:0e:28:b6:5f:29: 6b:ab:f6:2f:7b:dc:35:98:96:8c:65:47:66:09:5d:ee:10:e4: 33:67:ca:8a:fb:ef:7b:67:08:f9:eb:2d:10:ea:a9:b8:3f:1a: b0:c5:2a:f5:f9:81:86:b4:f3:55:3a:27:37:db:c9:25:59:40: 06:71:b3:2f:af:dc:63:2c:1c:e3:9b:44:8b:0a:0b:23:81:47: 06:fd:9e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvafGhZ9yo1+Y37Y8RDcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjUxMjI0MTkwMjIyWhcNMjUxMjI1MTkwMjIyWjAzMTEwLwYDVQQD Eyg5MGU0MWJmNDhhOWEyMzNhZmNjMzA0OTM4YzVkZWI1NTZlNWY5ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvS0vgO6NR0X/+YsLamG4kQJMgEu YzgeFjVph2Uw0dIySwWn6rSNplVZdp9jQDI9KU3zsRLr1OjmWPRbSkrP2HFGCz3x 6nPIb2KX6OTC4Hn/He/vm6eoqB3f4+dHuc8UeKISVc0Cam/OefATTQOwIDSXabBi e8An9M9oz7KMQhHUJzgms7EdL1+mSeStSp++3Gi12LtM83zNPEt2W9+iRiDsfDOY aaHxguzlg6nkB6KDoYPrlanXkhkVXgKxJtFbgzx3gsrQkt0J9fWF1V9S1EX/UUIT 2QcpslRoBpOe4+Q0XlrRtMUl0lmZffJW4hFdQu9msVfuD+tRB7x78ngpDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDkG/SKmiM6/MMEk4xd61VuX56JMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqf70fpk gNyGdCVgSX09d28PkvvaOOSpvvBkHUL3IoVhPX2HpG85R6eeXX9oDpUP1FdotugX AS2agr+eh4OtyKKuqhsKTnwTfqbipJ3ZK4JDujRYpF3ZM+9HqirImFlKt1Irnf8k oWFHlMZVykygnmpbIHiyC6lK7Yf8FCJ12wiILhD6wuTa8K6Bh2KPBwhvoK6SlFCV Ub/DoP3JHHhfu0XpFz1TafDOdcyc9/7cQA4otl8pa6v2L3vcNZiWjGVHZgld7hDk M2fKivvve2cI+estEOqpuD8asMUq9fmBhrTzVTonN9vJJVlABnGzL6/cYywc45tE iwoLI4FHBv2eEg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:14:04 2025 by rpki-client