This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json) Hash identifier: 7ThTbRyxumtaX6P8Alni3Lsi1Ad0u5rqqVG6SJCxzwE= Subject key identifier: 2D:2F:CD:17:73:BE:48:47:0E:B3:93:B9:FF:42:78:00:23:40:48:1C Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019B3D907AD608ABF358CFA43ADA98033B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft Manifest number: 0D64 Signing time: Sat 20 Dec 2025 21:00:37 +0000 Manifest this update: Sat 20 Dec 2025 21:00:37 +0000 Manifest next update: Sun 21 Dec 2025 21:00:37 +0000 Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: Iu23AimIXpmm7UiVSx8ctmvdSqLq8tqUPCJIaaVKWBw=) 2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:7a:d6:08:ab:f3:58:cf:a4:3a:da:98:03:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Dec 20 21:00:37 2025 GMT Not After : Dec 21 21:00:37 2025 GMT Subject: CN=2d2fcd1773be48470eb393b9ff4278002340481c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:04:eb:56:a6:a3:b7:f6:33:a2:16:bf:5b: d4:dc:49:e7:19:1d:75:e2:56:14:fe:11:7a:2b:11: 36:0c:9c:fc:89:e6:a5:ca:f2:d4:e6:53:22:f0:2e: 1c:fa:ad:a4:6b:21:fc:10:00:1d:98:a2:9a:ba:4d: fe:42:12:3e:d8:4e:5c:dd:99:2e:e8:1a:97:4e:b4: 7f:61:77:be:29:b4:8a:20:25:71:cd:70:d4:d4:b7: bc:2f:07:6d:16:e9:56:22:72:ab:69:ce:4a:fb:66: 88:18:90:fd:fa:7f:fc:32:e1:63:59:53:fb:b6:4d: 13:0a:57:bb:6b:31:08:7b:e3:00:d3:11:7d:93:5a: 1b:8d:7d:4e:4b:58:ad:93:c1:a9:cf:fb:d6:98:ce: 8d:5a:7c:f3:24:2f:7b:b6:a3:de:c9:2b:a2:2e:16: 0a:cc:54:2b:dd:13:d8:68:c1:e9:d5:c7:e9:77:57: d6:c0:b5:00:78:41:57:9d:4a:d1:f6:3c:66:c9:3b: cf:f2:0f:8a:3f:f5:f4:63:1b:30:91:1b:ac:8f:c6: b0:be:9a:3d:c1:b3:ba:c9:e3:c1:96:b1:53:49:2f: a1:3f:74:bf:bf:26:5c:9d:3c:2c:6d:77:16:b0:5e: 7c:ed:b6:8f:40:93:5a:1c:2b:9d:34:21:a1:11:c5: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2F:CD:17:73:BE:48:47:0E:B3:93:B9:FF:42:78:00:23:40:48:1C X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:43:6f:b6:20:31:06:55:1e:aa:c0:30:14:85:67:4a:7c:89: 29:54:49:c4:c0:44:94:50:53:c1:e5:4f:1b:98:15:c1:ab:97: c9:16:ea:42:d0:44:0f:56:33:f0:a7:05:31:13:73:82:fb:3e: 6c:71:54:bb:ef:7e:37:87:64:f7:32:6a:48:f2:f3:9d:a6:a4: b4:ec:9f:4d:56:df:f9:8d:2e:43:38:b0:8c:ec:22:6c:97:fe: ac:51:90:b2:a8:ef:9e:b5:79:cb:95:a8:e5:49:3d:c6:c4:5f: b0:28:5a:92:4f:06:17:8d:81:cd:b6:1f:78:0d:7b:35:cf:a9: c9:e9:53:ab:26:64:1e:27:95:5b:8d:1a:7c:58:00:b9:56:3a: 88:99:b2:84:e1:e8:fe:62:5d:9f:c0:18:72:99:43:cb:db:c9: 2a:b7:a1:70:4e:10:11:ec:2e:91:6d:09:0a:2d:b2:2a:58:66: 45:ac:e5:1f:b4:73:b2:f1:6e:3d:05:65:68:25:9d:7d:b2:ca: fa:f7:ed:09:76:af:52:7a:99:ad:13:11:78:4f:46:50:b4:46: a6:43:e8:b2:fd:d0:11:bd:e7:3f:43:1e:e9:6c:13:55:83:08: 7e:2e:8e:b9:91:aa:86:7f:e7:35:ca:ae:a3:4c:f9:a8:51:7d: 70:05:0e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHrWCKvzWM+kOtqYAzuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjUxMjIwMjEwMDM3WhcNMjUxMjIxMjEwMDM3WjAzMTEwLwYDVQQD EygyZDJmY2QxNzczYmU0ODQ3MGViMzkzYjlmZjQyNzgwMDIzNDA0ODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJgE61amo7f2M6IWv1vU3EnnGR11 4lYU/hF6KxE2DJz8iealyvLU5lMi8C4c+q2kayH8EAAdmKKauk3+QhI+2E5c3Zku 6BqXTrR/YXe+KbSKICVxzXDU1Le8LwdtFulWInKrac5K+2aIGJD9+n/8MuFjWVP7 tk0TCle7azEIe+MA0xF9k1objX1OS1itk8Gpz/vWmM6NWnzzJC97tqPeySuiLhYK zFQr3RPYaMHp1cfpd1fWwLUAeEFXnUrR9jxmyTvP8g+KP/X0YxswkRusj8awvpo9 wbO6yePBlrFTSS+hP3S/vyZcnTwsbXcWsF587baPQJNaHCudNCGhEcWh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0vzRdzvkhHDrOTuf9CeAAjQEgcMB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUNvtiAx BlUeqsAwFIVnSnyJKVRJxMBElFBTweVPG5gVwauXyRbqQtBED1Yz8KcFMRNzgvs+ bHFUu+9+N4dk9zJqSPLznaaktOyfTVbf+Y0uQziwjOwibJf+rFGQsqjvnrV5y5Wo 5Uk9xsRfsChakk8GF42BzbYfeA17Nc+pyelTqyZkHieVW40afFgAuVY6iJmyhOHo /mJdn8AYcplDy9vJKrehcE4QEewukW0JCi2yKlhmRazlH7RzsvFuPQVlaCWdfbLK +vftCXavUnqZrRMReE9GULRGpkPosv3QEb3nP0Me6WwTVYMIfi6OuZGqhn/nNcqu o0z5qFF9cAUO4g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:23 2025 by rpki-client