This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json) Hash identifier: Zk+pt1pMKOdUHutXVIH3HwGZfIL1TBj+R235QKomjJY= Subject key identifier: 78:85:B2:41:04:04:45:40:26:EB:88:C5:F7:E8:70:2F:4E:E6:DF:A5 Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019B9FA1096C29EC07CA8743DDD0F1F83334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft Manifest number: 0D97 Signing time: Thu 08 Jan 2026 22:01:29 +0000 Manifest this update: Thu 08 Jan 2026 22:01:29 +0000 Manifest next update: Fri 09 Jan 2026 22:01:29 +0000 Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 6FKjnvp+cbkFp92O8riT0yUTBVIWWDdOeS038tpFZCU=) 2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:a1:09:6c:29:ec:07:ca:87:43:dd:d0:f1:f8:33:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Jan 8 22:01:29 2026 GMT Not After : Jan 9 22:01:29 2026 GMT Subject: CN=7885b2410404454026eb88c5f7e8702f4ee6dfa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:aa:13:65:ca:49:02:f1:72:59:37:4e:3f: 42:95:68:09:cd:bc:8b:8c:e8:92:03:1b:f9:6b:94: eb:04:bf:b4:4c:24:1b:02:cc:87:cd:87:6c:19:f3: 79:1b:26:2a:3a:82:6f:9e:dc:78:45:c2:90:4b:f7: 7b:91:d7:56:49:ef:6b:58:a2:84:70:9d:4c:0e:1c: 8e:88:20:8e:7e:52:d2:fe:58:37:1c:59:00:7a:57: 60:33:2b:49:f7:0b:8b:a8:d3:83:c2:a5:5e:84:ab: e6:45:f7:51:4a:a7:1c:b5:0d:c7:a6:a4:85:a2:ce: f9:73:0b:94:2f:9e:01:ed:47:d2:23:13:74:d4:65: 95:f4:6b:55:d4:e5:06:20:7a:56:66:1b:53:a1:1b: a8:b9:90:04:37:b2:ed:6a:3d:32:51:02:81:69:29: a0:fb:87:ba:db:c5:36:ab:71:93:6e:ba:ec:ea:30: f7:5d:14:d8:4f:24:80:5d:e9:a4:12:90:28:89:87: 0e:da:af:f7:4c:04:ed:14:f8:6d:09:8a:7a:59:87: 0a:64:ef:ab:c6:4c:c8:75:e9:67:6b:fc:cf:c6:a8: 41:17:c6:1f:72:e6:41:dc:f0:83:f9:b5:ae:81:d9: 33:81:8d:20:90:ea:8c:78:3d:c9:87:9a:bc:bf:76: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:B2:41:04:04:45:40:26:EB:88:C5:F7:E8:70:2F:4E:E6:DF:A5 X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:61:f1:55:be:4f:ab:ae:cb:40:69:c0:58:70:d2:87:e5:85: b6:8a:e7:58:3d:a8:80:1b:7c:05:9a:fb:85:eb:25:9e:d3:79: b2:62:37:de:93:ef:43:3d:28:b4:3f:f0:b4:54:ed:a5:00:b3: dd:23:2d:c4:1a:c9:76:84:c4:43:f9:27:41:d5:24:84:c4:38: c1:75:b8:a5:39:8f:b8:36:00:0d:67:9b:43:a2:14:69:68:1f: 27:d6:14:13:67:d1:02:72:5c:ec:01:72:df:60:f1:e7:53:4d: 11:cb:3f:93:91:af:16:2c:d4:34:56:cd:9f:d1:53:c9:09:68: f4:7e:31:eb:4e:4c:41:c7:d1:e2:a4:a7:d4:9c:ee:da:ba:a6: 56:37:ce:49:70:ff:46:74:8e:aa:20:8f:55:4d:80:38:57:f3: 51:3d:27:a6:c7:ed:a2:b7:43:16:66:ae:71:e7:26:20:d4:4b: f1:fc:79:6f:b3:d7:a6:e3:bd:c3:d1:c1:9f:a1:1a:2e:89:a1: 3a:fd:2b:ab:e5:3b:56:5b:75:c4:0b:15:5f:fd:e3:f8:08:38: 92:df:e3:80:21:25:45:06:32:4d:b5:b8:3b:b9:bd:5f:a8:d6: d4:98:b8:9e:42:11:16:b0:07:68:a1:b4:04:b7:9c:fa:30:ef: ab:62:89:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufoQlsKewHyodD3dDx+DM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjYwMTA4MjIwMTI5WhcNMjYwMTA5MjIwMTI5WjAzMTEwLwYDVQQD Eyg3ODg1YjI0MTA0MDQ0NTQwMjZlYjg4YzVmN2U4NzAyZjRlZTZkZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsliqE2XKSQLxclk3Tj9ClWgJzbyL jOiSAxv5a5TrBL+0TCQbAsyHzYdsGfN5GyYqOoJvntx4RcKQS/d7kddWSe9rWKKE cJ1MDhyOiCCOflLS/lg3HFkAeldgMytJ9wuLqNODwqVehKvmRfdRSqcctQ3HpqSF os75cwuUL54B7UfSIxN01GWV9GtV1OUGIHpWZhtToRuouZAEN7Ltaj0yUQKBaSmg +4e628U2q3GTbrrs6jD3XRTYTySAXemkEpAoiYcO2q/3TATtFPhtCYp6WYcKZO+r xkzIdelna/zPxqhBF8YfcuZB3PCD+bWugdkzgY0gkOqMeD3Jh5q8v3bZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiFskEEBEVAJuuIxffocC9O5t+lMB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmHxVb5P q67LQGnAWHDSh+WFtornWD2ogBt8BZr7heslntN5smI33pPvQz0otD/wtFTtpQCz 3SMtxBrJdoTEQ/knQdUkhMQ4wXW4pTmPuDYADWebQ6IUaWgfJ9YUE2fRAnJc7AFy 32Dx51NNEcs/k5GvFizUNFbNn9FTyQlo9H4x605MQcfR4qSn1Jzu2rqmVjfOSXD/ RnSOqiCPVU2AOFfzUT0npsftordDFmaucecmINRL8fx5b7PXpuO9w9HBn6EaLomh Ov0rq+U7Vlt1xAsVX/3j+Ag4kt/jgCElRQYyTbW4O7m9X6jW1Ji4nkIRFrAHaKG0 BLec+jDvq2KJMA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:57:56 2026 by rpki-client