This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json) Hash identifier: FbRna7N/VoNy4hp+eEZ/dS1U0LgZmTZ5K5/fKFvzftw= Subject key identifier: AD:0E:00:D6:EC:80:AB:71:A7:B7:BB:DA:79:64:85:C6:49:D1:80:E2 Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019B39EA9EA52CE623E4812CC37262D20778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 04:00:35 +0000 Manifest this update: Sat 20 Dec 2025 04:00:35 +0000 Manifest next update: Sun 21 Dec 2025 04:00:35 +0000 Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=) 2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: /Dgtu3xymm9w6iX4yNnbSBA8xCnLDDLvywyV0h4zyNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:9e:a5:2c:e6:23:e4:81:2c:c3:72:62:d2:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Dec 20 04:00:35 2025 GMT Not After : Dec 21 04:00:35 2025 GMT Subject: CN=ad0e00d6ec80ab71a7b7bbda796485c649d180e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:06:79:a7:22:39:82:60:a1:72:5b:1b:5c: 64:30:ed:e1:77:19:2c:13:d4:d1:03:56:5b:16:da: ad:73:84:b5:51:51:d7:7e:92:b9:33:6c:06:38:12: fa:64:03:fb:98:0d:ca:0f:a2:3d:cc:c6:27:a6:96: 60:23:03:6a:53:fb:a0:94:60:8a:d5:b9:49:e2:c1: 54:45:7d:8d:61:fc:43:a0:47:5c:ec:17:60:88:c9: 21:d1:46:98:a7:6e:e8:b3:41:be:25:64:07:ce:cf: ee:81:11:1e:77:71:f3:1c:e8:2e:9e:9a:1a:e6:ab: fe:b3:e9:46:40:c4:c0:4c:2b:24:7a:b1:81:f1:23: d1:f3:67:d4:d4:2b:d4:31:53:b5:9a:e1:85:38:d9: ab:07:71:89:46:88:8c:fa:a6:18:8e:d4:04:4d:4c: c9:a5:a2:e6:ec:f9:25:5d:e5:71:88:e1:b5:be:69: 82:94:ae:06:2d:24:7e:76:95:b8:2f:f9:80:01:20: a4:a1:d1:82:9f:b3:35:15:6b:1c:7f:b9:fd:7f:c4: 21:eb:0c:59:41:b1:fe:c2:e8:0a:5b:d0:79:63:57: 78:cd:a3:22:17:c9:a7:51:49:3c:b9:a6:d0:81:ee: a6:14:87:11:1e:d6:97:e5:bc:ef:d8:f2:ed:f8:a9: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0E:00:D6:EC:80:AB:71:A7:B7:BB:DA:79:64:85:C6:49:D1:80:E2 X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e3:05:10:b4:ef:6d:9c:61:c9:09:69:d7:2a:5e:c1:9f:2c: 8e:02:8d:d6:4b:13:5b:7e:e1:be:bd:0a:e5:17:31:19:ba:d9: f5:fb:80:b7:d9:35:8f:4b:18:aa:0b:26:ea:7f:e3:fd:94:e0: 7e:b6:9e:2d:f0:d6:32:26:e2:d5:bc:66:26:68:34:bd:c5:d7: 71:d6:40:07:58:96:92:66:9f:dd:f8:52:33:c6:c5:49:58:63: ec:ec:92:84:5d:62:5e:74:16:96:cb:1f:e4:6d:a3:ba:a1:07: d5:0c:0b:f5:f5:e1:59:0b:86:58:04:11:8d:24:e0:9a:52:2d: 26:a2:4f:f3:b0:ea:d9:c5:97:1b:22:e8:17:d6:06:f3:1b:80: 5e:7e:ca:4a:68:05:5c:63:fa:e3:9e:58:de:3f:48:42:46:1f: a0:25:93:af:12:2a:00:d6:73:d2:4e:6d:f9:16:fd:8f:f1:32: f2:fd:21:17:a8:fa:fb:0d:e8:b4:75:d4:fd:65:ed:13:54:dc: aa:0b:63:31:04:22:df:32:9d:f6:c4:61:55:88:35:b6:08:27: 0c:ea:1f:d0:b0:c1:54:50:88:94:40:c1:f6:fa:fb:9c:7a:a2: 15:66:94:39:9a:b5:3a:2b:db:46:f7:09:20:ee:d0:14:62:9b: 83:66:16:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56p6lLOYj5IEsw3Ji0gd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjUxMjIwMDQwMDM1WhcNMjUxMjIxMDQwMDM1WjAzMTEwLwYDVQQD EyhhZDBlMDBkNmVjODBhYjcxYTdiN2JiZGE3OTY0ODVjNjQ5ZDE4MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVgGeaciOYJgoXJbG1xkMO3hdxks E9TRA1ZbFtqtc4S1UVHXfpK5M2wGOBL6ZAP7mA3KD6I9zMYnppZgIwNqU/uglGCK 1blJ4sFURX2NYfxDoEdc7BdgiMkh0UaYp27os0G+JWQHzs/ugREed3HzHOgunpoa 5qv+s+lGQMTATCskerGB8SPR82fU1CvUMVO1muGFONmrB3GJRoiM+qYYjtQETUzJ paLm7PklXeVxiOG1vmmClK4GLSR+dpW4L/mAASCkodGCn7M1FWscf7n9f8Qh6wxZ QbH+wugKW9B5Y1d4zaMiF8mnUUk8uabQge6mFIcRHtaX5bzv2PLt+KmR5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0OANbsgKtxp7e72nlkhcZJ0YDiMB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleMFELTv bZxhyQlp1ypewZ8sjgKN1ksTW37hvr0K5RcxGbrZ9fuAt9k1j0sYqgsm6n/j/ZTg fraeLfDWMibi1bxmJmg0vcXXcdZAB1iWkmaf3fhSM8bFSVhj7OyShF1iXnQWlssf 5G2juqEH1QwL9fXhWQuGWAQRjSTgmlItJqJP87Dq2cWXGyLoF9YG8xuAXn7KSmgF XGP6455Y3j9IQkYfoCWTrxIqANZz0k5t+Rb9j/Ey8v0hF6j6+w3otHXU/WXtE1Tc qgtjMQQi3zKd9sRhVYg1tggnDOof0LDBVFCIlEDB9vr7nHqiFWaUOZq1OivbRvcJ IO7QFGKbg2YWvA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:17:32 2025 by rpki-client