This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: lr9LLR2KV9ci9sk/06O++jERn75WsqmailGydknfpKI= Subject key identifier: BC:84:BD:B2:D6:5C:B3:F1:0D:2C:69:2C:1E:A2:95:28:26:BA:9F:D5 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B3C0FF4681D2F61AB50CD8DCD0395CCD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1561 Signing time: Sat 20 Dec 2025 14:00:36 +0000 Manifest this update: Sat 20 Dec 2025 14:00:36 +0000 Manifest next update: Sun 21 Dec 2025 14:00:36 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ACIFLqP3u3kY9F8fVzA1UwAzs4.roa (hash: miDGJWAw4E8H7Nz/tiuc73aRtWxu/20E+I7uldsjwpY=) 3: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 4: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 5: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 7f9f6oFCsyqMaDrn4BxD1oYq9+yy9rwCQlP230Nx9fs=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: Msw5lWLcMEnYB6JQ72VGTubuEUo.roa (hash: j3iVppScPPj4RkIHmOn6ItOKTBT6owq12o7XbsNpt4A=) 10: T9R72edvy1b4bR86MCMZkMB1kbA.roa (hash: 00F/9J6JFJf7Y2QryCeap2NumSeGIJgrnJ44y9zetCw=) 11: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 12: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 13: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 14: exrTmGvOj2xClhDCfcsldQif4Z4.roa (hash: 3LtdjnhF9ISRLFDfrOGup/m3oOMZq8ll2E/u+2tZH4g=) 15: fBGiYdPEJOuwr9ZdHcwan8N33nE.roa (hash: kj/eTeZdS5uuZXiqBXZbFGO6B13ngEMgRHZO+Ooss2Q=) 16: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 17: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 18: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f4:68:1d:2f:61:ab:50:cd:8d:cd:03:95:cc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Dec 20 14:00:36 2025 GMT Not After : Dec 21 14:00:36 2025 GMT Subject: CN=bc84bdb2d65cb3f10d2c692c1ea2952826ba9fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bd:5a:ff:55:48:ae:2a:ad:b1:2f:a3:46:48: 78:4a:d3:7f:cf:e7:26:46:4e:43:4d:f4:5b:4d:67: 6a:64:b1:e9:14:78:b9:73:67:46:6f:27:7e:a8:24: df:21:c2:ed:7d:60:a4:54:b4:3c:4f:dc:2c:cc:fa: 6c:af:07:67:ef:da:98:bb:16:2e:e2:be:57:5e:cb: c6:83:1e:97:79:93:77:6f:da:44:ef:8d:62:3b:95: 38:e6:9b:6c:8e:4d:2a:e3:a5:58:b1:b6:01:01:64: b4:ea:1e:46:be:c2:3d:1e:27:53:2b:7a:9f:5a:4b: 32:79:6e:5a:e6:02:7f:f3:c6:cb:7c:ea:5d:86:84: f6:0f:7a:d6:e8:47:88:ae:80:b6:93:b2:53:f0:47: 04:6f:fd:85:9e:8b:35:39:5b:be:c4:14:20:f2:de: e8:89:c6:bf:51:a9:ef:f6:ef:e1:d6:3c:c6:9a:7b: d5:f1:75:41:e5:71:d8:3d:69:98:35:1b:30:2e:e6: a5:57:a8:c5:a4:47:3b:32:87:4a:aa:82:60:b5:73: dd:e9:53:e9:8f:56:91:5e:66:5b:74:df:b0:af:5d: 6b:91:55:ce:77:fb:e1:5c:c4:bc:9a:13:4f:e0:60: f6:9e:42:fe:c2:da:7c:57:f3:a9:d7:9b:bf:59:a6: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:BD:B2:D6:5C:B3:F1:0D:2C:69:2C:1E:A2:95:28:26:BA:9F:D5 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5b:3d:45:36:ad:60:3f:79:83:82:52:5b:f3:56:11:13:9e: d3:8e:e7:7a:a3:fc:5b:a6:ba:ba:04:67:c1:e4:f4:9d:57:e0: fa:51:9a:f6:ce:45:ee:fa:b4:78:d1:a7:80:10:70:ee:02:a1: 92:dc:97:ff:83:31:40:58:e3:6f:85:be:2a:d9:c5:55:dd:c7: ba:74:02:fc:41:f1:05:17:d4:ce:6f:3c:d4:74:df:33:55:26: 98:37:11:ce:26:80:66:f3:66:08:a1:5c:26:43:1c:41:00:24: d9:62:bb:97:1c:29:08:66:38:bd:5e:b0:2e:95:f6:05:5d:7b: 80:58:48:4d:22:e7:a1:05:e6:c4:89:bf:9c:1b:5d:06:73:ba: 9e:4b:0e:26:73:8b:94:19:c8:e1:aa:56:23:74:42:7b:ae:5b: b5:29:fe:d5:63:59:ec:a9:fd:f6:87:77:5e:c0:31:be:86:ec: 44:51:d1:6d:cd:a3:86:c7:61:63:c0:00:fd:b0:a2:b1:c6:68: c1:38:2a:89:a9:c0:8b:cd:5d:b8:f3:af:d5:40:c8:46:d8:d1: 62:6b:36:61:9a:f6:1f:aa:f6:44:37:28:35:a6:39:9c:cd:ef: 12:14:9f:6a:16:89:b7:e8:d3:13:31:be:1f:91:34:e4:22:47: 00:91:47:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/RoHS9hq1DNjc0DlczWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMjIwMTQwMDM2WhcNMjUxMjIxMTQwMDM2WjAzMTEwLwYDVQQD EyhiYzg0YmRiMmQ2NWNiM2YxMGQyYzY5MmMxZWEyOTUyODI2YmE5ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b1a/1VIriqtsS+jRkh4StN/z+cm Rk5DTfRbTWdqZLHpFHi5c2dGbyd+qCTfIcLtfWCkVLQ8T9wszPpsrwdn79qYuxYu 4r5XXsvGgx6XeZN3b9pE741iO5U45ptsjk0q46VYsbYBAWS06h5GvsI9HidTK3qf WksyeW5a5gJ/88bLfOpdhoT2D3rW6EeIroC2k7JT8EcEb/2Fnos1OVu+xBQg8t7o ica/Uanv9u/h1jzGmnvV8XVB5XHYPWmYNRswLualV6jFpEc7ModKqoJgtXPd6VPp j1aRXmZbdN+wr11rkVXOd/vhXMS8mhNP4GD2nkL+wtp8V/Op15u/WaaRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyEvbLWXLPxDSxpLB6ilSgmup/VMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFs9RTat YD95g4JSW/NWEROe047neqP8W6a6ugRnweT0nVfg+lGa9s5F7vq0eNGngBBw7gKh ktyX/4MxQFjjb4W+KtnFVd3HunQC/EHxBRfUzm881HTfM1UmmDcRziaAZvNmCKFc JkMcQQAk2WK7lxwpCGY4vV6wLpX2BV17gFhITSLnoQXmxIm/nBtdBnO6nksOJnOL lBnI4apWI3RCe65btSn+1WNZ7Kn99od3XsAxvobsRFHRbc2jhsdhY8AA/bCiscZo wTgqianAi81duPOv1UDIRtjRYms2YZr2H6r2RDcoNaY5nM3vEhSfahaJt+jTEzG+ H5E05CJHAJFH+Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:41 2025 by rpki-client