This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json) Hash identifier: /Dlr4sfSK4MK4bg1EmxSvPsxHiwSLzB/f40AaGfkHA8= Subject key identifier: 82:90:EE:92:C0:8E:D2:BB:69:22:F5:D9:EC:D4:03:7B:08:07:6C:70 Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c Certificate serial: 019B620B51224E568C39F4C7CBDEA0479F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 23:01:07 +0000 Manifest this update: Sat 27 Dec 2025 23:01:07 +0000 Manifest next update: Sun 28 Dec 2025 23:01:07 +0000 Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=) 2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: 9SpBcjAiPjgM/fL5QTxpKmIL3zF1WtLhPHFsK2RihrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:51:22:4e:56:8c:39:f4:c7:cb:de:a0:47:9f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c Validity Not Before: Dec 27 23:01:07 2025 GMT Not After : Dec 28 23:01:07 2025 GMT Subject: CN=8290ee92c08ed2bb6922f5d9ecd4037b08076c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:31:3a:a2:43:b1:e5:c2:9f:11:ce:82:c6: 80:3b:bb:7b:65:1e:b8:73:01:37:ed:04:42:07:72: a1:1d:77:97:9a:73:ae:b3:c8:a6:a0:2d:60:7b:b3: 18:a2:f9:31:a1:89:79:fa:81:81:a8:c6:9f:6b:53: ec:b1:b5:9c:82:e1:3a:c4:69:6a:14:22:37:7f:b8: cf:99:d7:00:de:84:b7:51:2e:a7:3a:27:f7:d6:30: 58:79:1f:1e:79:d6:f7:f1:cc:f8:b1:aa:47:4d:4c: 9a:2b:0e:5f:53:e9:1c:fb:a3:17:e8:3a:b6:79:30: c3:ac:78:99:4b:a9:98:95:32:9e:fc:b9:8f:35:1f: cf:f1:9f:3f:4e:76:99:64:1a:cb:17:fe:cf:89:a2: db:48:0c:cd:06:85:c8:94:28:0a:19:33:f1:a9:75: 40:dc:59:72:6f:84:15:3f:25:a9:b4:f0:bc:25:6c: 3d:3d:ba:c7:e6:98:42:ae:89:de:96:48:4a:02:91: d8:1a:73:5b:51:e9:8f:33:04:e3:32:c6:10:4b:d4: f4:e4:22:24:0b:a9:82:bc:6e:36:b4:58:0a:c6:63: cd:cc:75:ad:70:cf:b7:e5:32:31:d4:25:2c:37:78: d4:66:34:eb:59:35:96:0c:5d:22:6e:62:ca:02:6a: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:EE:92:C0:8E:D2:BB:69:22:F5:D9:EC:D4:03:7B:08:07:6C:70 X509v3 Authority Key Identifier: keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0f:96:9c:3c:b6:97:d2:78:92:9e:84:ae:b5:69:b9:43:ce: 52:5f:cc:3c:ba:c8:a2:81:ae:8d:e5:2b:0a:52:6a:ad:03:89: 58:16:d6:36:d5:76:cc:6d:3d:8f:d8:59:b0:b9:21:c1:68:d4: a0:30:d8:5a:e6:04:04:c7:65:25:25:ad:2a:1a:8e:fc:d8:77: 30:92:96:eb:da:fd:e7:be:3f:17:13:17:b9:27:ef:c2:d0:9b: a1:01:3f:e6:58:14:7b:37:d2:28:53:da:07:eb:ef:cb:dd:78: a4:a8:39:54:35:ff:3a:ad:8d:ed:3c:bf:e7:ea:68:4b:70:4a: c0:91:b6:76:ba:9a:13:c6:bd:54:81:ae:35:dc:41:93:ec:50: 64:cb:84:dd:ab:14:96:56:e4:08:12:a1:03:8e:b9:86:09:4b: 38:0a:55:e6:a3:b1:0c:aa:2d:fe:15:bd:42:90:91:88:1b:61: db:47:6a:38:00:c9:4b:a8:fe:4a:53:ed:64:64:8c:df:ec:7d: 6a:bc:c0:fd:4f:d8:aa:f5:31:ab:a9:c7:dd:55:20:f2:bd:f9: 39:58:e4:90:e1:8a:2d:af:d1:df:e0:a2:b2:50:73:ac:28:1e: 32:c4:99:e6:43:b5:6d:f6:00:8d:fa:49:39:9a:b6:9b:31:23: 5c:52:57:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC1EiTlaMOfTHy96gR5+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx OGQ2NWMwHhcNMjUxMjI3MjMwMTA3WhcNMjUxMjI4MjMwMTA3WjAzMTEwLwYDVQQD Eyg4MjkwZWU5MmMwOGVkMmJiNjkyMmY1ZDllY2Q0MDM3YjA4MDc2YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLoxOqJDseXCnxHOgsaAO7t7ZR64 cwE37QRCB3KhHXeXmnOus8imoC1ge7MYovkxoYl5+oGBqMafa1PssbWcguE6xGlq FCI3f7jPmdcA3oS3US6nOif31jBYeR8eedb38cz4sapHTUyaKw5fU+kc+6MX6Dq2 eTDDrHiZS6mYlTKe/LmPNR/P8Z8/TnaZZBrLF/7PiaLbSAzNBoXIlCgKGTPxqXVA 3Flyb4QVPyWptPC8JWw9PbrH5phCronelkhKApHYGnNbUemPMwTjMsYQS9T05CIk C6mCvG42tFgKxmPNzHWtcM+35TIx1CUsN3jUZjTrWTWWDF0ibmLKAmqwrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKQ7pLAjtK7aSL12ezUA3sIB2xwMB8GA1UdIwQY MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5 LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ+WnDy2 l9J4kp6ErrVpuUPOUl/MPLrIooGujeUrClJqrQOJWBbWNtV2zG09j9hZsLkhwWjU oDDYWuYEBMdlJSWtKhqO/Nh3MJKW69r9574/FxMXuSfvwtCboQE/5lgUezfSKFPa B+vvy914pKg5VDX/Oq2N7Ty/5+poS3BKwJG2drqaE8a9VIGuNdxBk+xQZMuE3asU llbkCBKhA465hglLOApV5qOxDKot/hW9QpCRiBth20dqOADJS6j+SlPtZGSM3+x9 arzA/U/YqvUxq6nH3VUg8r35OVjkkOGKLa/R3+CislBzrCgeMsSZ5kO1bfYAjfpJ OZq2mzEjXFJXkQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:33 2025 by rpki-client