This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json) Hash identifier: aj3m/FS6xGdHpkczYSUD8qSDxQA8Qy9z7aZf1kFEO9I= Subject key identifier: B1:C3:48:96:1B:0E:4E:28:C0:6D:4A:FD:AE:CD:D0:45:DC:21:AA:3D Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b Certificate serial: 019B766D899778631B6EE036D8CDDA6C435E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 22:00:48 +0000 Manifest this update: Wed 31 Dec 2025 22:00:48 +0000 Manifest next update: Thu 01 Jan 2026 22:00:48 +0000 Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: /o3JudtJVsXYicgQZ235uHG1n1P7bPpWNhLOlONZZ3o=) 2: qxUZWESkWfPvrh5nMLtmisJ-xm0.roa (hash: QiH9IyXND+kMiLoL1S1ImhCqyZcezaR+0IjNSX+Zg6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:89:97:78:63:1b:6e:e0:36:d8:cd:da:6c:43:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b Validity Not Before: Dec 31 22:00:48 2025 GMT Not After : Jan 1 22:00:48 2026 GMT Subject: CN=b1c348961b0e4e28c06d4afdaecdd045dc21aa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:7c:af:40:63:eb:a7:34:a8:e2:a8:e1:29: 6e:f7:c1:79:bc:0d:63:8f:fa:dd:fc:59:16:5b:6e: ff:2a:02:b9:a7:05:3b:3d:71:95:f8:9d:93:42:91: 0a:96:d0:8d:86:7c:0a:20:91:9c:93:06:a0:3c:90: 81:3d:da:45:5c:b6:c2:fd:31:79:ca:9f:d7:a0:b3: d5:6a:a1:5e:4b:ae:b8:27:3f:1e:e2:4f:03:bc:27: 30:36:4b:f9:98:21:24:8f:f7:68:a4:88:dd:4e:d7: 57:0e:9b:ca:19:43:19:90:e9:79:ee:e9:07:c9:58: e1:aa:0d:4b:13:5e:29:58:cc:24:38:d6:21:57:99: bb:38:bc:3f:42:60:a7:f0:19:fa:bb:ac:d2:27:eb: 4e:e6:50:b9:ed:4e:ac:90:46:b6:ba:29:17:19:0b: 11:7c:a4:52:3c:80:41:32:0b:54:d1:3c:f7:8f:e2: ba:69:e2:55:eb:24:3e:0e:70:d8:21:ff:d8:44:55: 09:0f:34:bb:dc:f4:f3:1f:b3:18:67:df:89:64:8b: f4:2f:2d:ed:4e:7b:bc:49:53:1f:62:e9:94:5f:03: 16:b8:96:ee:a4:0f:62:04:90:ea:be:f4:63:47:b0: 27:ef:07:19:84:b3:1c:10:ec:c2:b1:35:db:3e:cf: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:48:96:1B:0E:4E:28:C0:6D:4A:FD:AE:CD:D0:45:DC:21:AA:3D X509v3 Authority Key Identifier: keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:52:2a:52:ae:84:1d:e7:13:c3:cf:64:bf:e7:ac:56:aa:04: 43:b4:a9:ab:8a:58:6c:7a:21:c9:49:fd:91:57:b0:1f:63:11: 3b:cf:df:37:f7:0d:49:55:21:a1:57:71:c1:db:dc:83:09:de: 87:3e:17:da:d7:56:31:9c:14:6d:20:d5:23:d6:4c:e2:12:61: 6a:94:95:1a:15:af:53:a3:ab:ea:e9:36:eb:41:b9:86:22:f5: 21:c9:a1:51:e9:f3:bd:95:91:3a:5b:9d:9c:2b:27:58:55:67: cd:95:6b:0b:9a:ff:8c:5f:53:da:bc:c3:b4:af:15:1d:7e:a9: 1d:d3:97:a5:8d:50:73:03:b8:f4:50:40:ba:bc:ef:66:f3:c6: 3d:20:d0:91:2c:4a:0e:7b:ae:1d:dc:05:93:b9:0a:bc:ed:fc: 41:42:c0:06:91:19:3a:06:8c:42:16:48:36:f4:6c:23:b5:de: 09:e9:1c:02:6c:b7:11:fc:c5:37:84:5b:24:3b:af:6a:0b:f1: 74:6a:70:6c:91:d9:d3:6d:2a:8e:9b:f3:14:71:11:34:5d:24: 59:49:bb:65:11:10:74:03:06:0c:39:02:69:24:90:ae:ae:bb: 33:6d:f6:da:17:cf:00:21:1f:2b:70:b7:4d:b6:7d:62:b4:03: 06:06:21:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bYmXeGMbbuA22M3abENeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy ZGY3MWIwHhcNMjUxMjMxMjIwMDQ4WhcNMjYwMTAxMjIwMDQ4WjAzMTEwLwYDVQQD EyhiMWMzNDg5NjFiMGU0ZTI4YzA2ZDRhZmRhZWNkZDA0NWRjMjFhYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQF8r0Bj66c0qOKo4Slu98F5vA1j j/rd/FkWW27/KgK5pwU7PXGV+J2TQpEKltCNhnwKIJGckwagPJCBPdpFXLbC/TF5 yp/XoLPVaqFeS664Jz8e4k8DvCcwNkv5mCEkj/dopIjdTtdXDpvKGUMZkOl57ukH yVjhqg1LE14pWMwkONYhV5m7OLw/QmCn8Bn6u6zSJ+tO5lC57U6skEa2uikXGQsR fKRSPIBBMgtU0Tz3j+K6aeJV6yQ+DnDYIf/YRFUJDzS73PTzH7MYZ9+JZIv0Ly3t Tnu8SVMfYumUXwMWuJbupA9iBJDqvvRjR7An7wcZhLMcEOzCsTXbPs/rowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHDSJYbDk4owG1K/a7N0EXcIao9MB8GA1UdIwQY MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt YTJmNDI1NjAwZGIzLzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFIqUq6E HecTw89kv+esVqoEQ7Spq4pYbHohyUn9kVewH2MRO8/fN/cNSVUhoVdxwdvcgwne hz4X2tdWMZwUbSDVI9ZM4hJhapSVGhWvU6Or6uk260G5hiL1IcmhUenzvZWROlud nCsnWFVnzZVrC5r/jF9T2rzDtK8VHX6pHdOXpY1QcwO49FBAurzvZvPGPSDQkSxK DnuuHdwFk7kKvO38QULABpEZOgaMQhZINvRsI7XeCekcAmy3EfzFN4RbJDuvagvx dGpwbJHZ020qjpvzFHERNF0kWUm7ZREQdAMGDDkCaSSQrq67M2322hfPACEfK3C3 TbZ9YrQDBgYh3Q== -----END CERTIFICATE-----Generated at Thu Jan 1 03:51:27 2026 by rpki-client