This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json) Hash identifier: St6xVrDgT6P/625vNZvxQVhlvWcM3lj6bgD/NckH/cc= Subject key identifier: AB:B7:3A:D8:DE:5A:AE:B4:30:80:45:7B:3E:C4:68:D1:B3:54:01:71 Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24 Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124 Certificate serial: 019B4EF20BCBB01AA2ADBA243602B11DF8E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft Manifest number: 0713 Signing time: Wed 24 Dec 2025 06:00:44 +0000 Manifest this update: Wed 24 Dec 2025 06:00:44 +0000 Manifest next update: Thu 25 Dec 2025 06:00:44 +0000 Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: hjhGzAgiT5vc3SGEeGEitq8+/fqhJ05iTjggeGPkCU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:0b:cb:b0:1a:a2:ad:ba:24:36:02:b1:1d:f8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124 Validity Not Before: Dec 24 06:00:44 2025 GMT Not After : Dec 25 06:00:44 2025 GMT Subject: CN=abb73ad8de5aaeb43080457b3ec468d1b3540171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:59:62:b7:3b:3a:3f:f3:a3:95:58:8e:32: ef:41:f4:5b:d9:85:40:1a:99:0e:70:5c:ec:c2:b0: fb:9f:b3:25:64:a7:f1:36:68:3f:e4:29:f7:f7:69: 28:e6:30:75:c2:a2:c0:a0:1b:fe:23:30:f1:bb:1d: 73:1f:5a:75:f5:b8:ec:22:9c:7b:1a:ed:53:a4:d2: 51:dc:a8:99:ac:fa:06:40:7a:d5:43:9d:b6:1e:4e: 4c:5b:aa:1c:aa:21:f2:8a:e0:46:59:6c:85:2d:7b: b5:07:96:47:21:77:41:ed:64:bc:61:f1:c2:47:50: 0f:74:57:7d:97:e4:7d:39:e4:62:cd:b4:4e:ec:30: bd:e3:a8:6c:01:69:9e:4e:40:0a:81:29:cb:5b:f1: 68:29:1c:51:53:4a:59:76:6a:95:16:4b:ea:83:47: 6c:89:83:8e:e9:ee:63:2c:ee:6f:6a:26:9f:de:09: 22:96:70:4d:af:aa:da:f8:46:c1:1a:1c:97:f5:c4: 6a:ad:56:ba:88:ea:00:96:95:42:80:c1:9a:e2:d6: ef:5a:ef:0c:06:b7:4a:9e:cc:7a:b8:e4:4f:26:87: 83:b2:fe:94:68:6c:f1:b9:83:e0:56:d3:54:e8:3c: 8b:e8:57:c7:8e:bb:72:0c:1f:fe:70:17:f4:88:35: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:3A:D8:DE:5A:AE:B4:30:80:45:7B:3E:C4:68:D1:B3:54:01:71 X509v3 Authority Key Identifier: keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:84:14:77:1e:9c:4c:3d:37:fa:a0:53:ee:41:8b:a4:0d: 7d:81:c9:a0:90:7d:a6:5a:cc:ec:e8:47:1f:8a:83:30:88:b7: 7a:d3:fc:e3:b2:d3:d1:0c:67:ab:c3:44:6d:a4:16:51:cb:40: 26:58:29:e6:09:e4:c8:61:93:1e:45:b7:4f:67:a1:ba:26:4a: b4:ef:f2:3b:c8:ed:00:e7:fb:9a:8f:e3:39:c0:d9:db:74:5d: f7:1c:22:53:8c:c2:83:dc:e7:ba:65:90:04:de:1f:11:dc:f5: ed:9f:06:94:ab:71:d0:35:72:4e:fa:80:00:4c:8a:8f:31:83: 5c:89:e7:e8:64:9e:0b:59:7e:29:76:72:a1:17:2b:ce:7b:de: 47:6b:b7:ee:34:a0:2d:e3:a3:6b:d1:e5:c0:7d:15:4a:db:56: e8:76:e5:9a:da:a6:19:23:25:94:e9:1f:96:cf:18:0d:eb:ee: f8:75:67:73:3b:2e:c8:77:97:1a:42:a6:5d:e2:dc:34:30:a9: 8d:63:a6:10:17:f0:e9:5b:e2:e2:35:8b:3c:a0:dd:6b:1b:fe: 64:f0:28:99:f7:98:1d:48:3a:29:40:4d:da:f0:55:dd:f7:f9: e2:4c:30:f0:32:eb:50:69:3a:31:a2:91:6a:8d:bf:d7:54:b5: dc:9d:a3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8gvLsBqirbokNgKxHfjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx N2YxMjQwHhcNMjUxMjI0MDYwMDQ0WhcNMjUxMjI1MDYwMDQ0WjAzMTEwLwYDVQQD EyhhYmI3M2FkOGRlNWFhZWI0MzA4MDQ1N2IzZWM0NjhkMWIzNTQwMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrZZYrc7Oj/zo5VYjjLvQfRb2YVA GpkOcFzswrD7n7MlZKfxNmg/5Cn392ko5jB1wqLAoBv+IzDxux1zH1p19bjsIpx7 Gu1TpNJR3KiZrPoGQHrVQ522Hk5MW6ocqiHyiuBGWWyFLXu1B5ZHIXdB7WS8YfHC R1APdFd9l+R9OeRizbRO7DC946hsAWmeTkAKgSnLW/FoKRxRU0pZdmqVFkvqg0ds iYOO6e5jLO5vaiaf3gkilnBNr6ra+EbBGhyX9cRqrVa6iOoAlpVCgMGa4tbvWu8M BrdKnsx6uORPJoeDsv6UaGzxuYPgVtNU6DyL6FfHjrtyDB/+cBf0iDXz/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKu3OtjeWq60MIBFez7EaNGzVAFxMB8GA1UdIwQY MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2 LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYiEFHce nEw9N/qgU+5Bi6QNfYHJoJB9plrM7OhHH4qDMIi3etP847LT0Qxnq8NEbaQWUctA Jlgp5gnkyGGTHkW3T2ehuiZKtO/yO8jtAOf7mo/jOcDZ23Rd9xwiU4zCg9znumWQ BN4fEdz17Z8GlKtx0DVyTvqAAEyKjzGDXInn6GSeC1l+KXZyoRcrznveR2u37jSg LeOja9HlwH0VSttW6HblmtqmGSMllOkfls8YDevu+HVnczsuyHeXGkKmXeLcNDCp jWOmEBfw6Vvi4jWLPKDdaxv+ZPAomfeYHUg6KUBN2vBV3ff54kww8DLrUGk6MaKR ao2/11S13J2j3w== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:18 2025 by rpki-client