This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json) Hash identifier: yBPB3RoZ5QK3gEyH9yY2c1+gP3XaKblsL7GR7+mh2Is= Subject key identifier: FE:20:22:59:19:32:FE:6B:6D:15:C6:92:C7:F8:82:C3:0C:52:B4:B3 Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Certificate serial: 019AF20989BFC6E53EA4D4CA79A4446C4BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft Manifest number: 0271 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=) 2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: vH6oALfatCoYrdH+Ryi0iSI1ZnyotEh03JTFXjOQ9GI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:89:bf:c6:e5:3e:a4:d4:ca:79:a4:44:6c:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=fe2022591932fe6b6d15c692c7f882c30c52b4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:f3:8b:cb:0b:c0:1e:21:f4:33:d4:31:92: 58:cb:50:7e:18:92:9a:f9:2d:76:f6:4b:fc:77:61: 34:7d:4f:06:a6:55:16:6d:07:c8:a6:d0:7e:f1:69: 2d:a4:32:e3:5c:a3:fc:c9:c6:db:59:df:f8:07:b1: 2d:e6:0a:92:7e:04:31:23:85:03:e2:01:28:61:dc: c5:78:9e:19:e5:e3:b4:f1:af:48:cd:a7:ac:e5:f6: 3c:ff:ba:1e:55:8b:2c:40:cf:ab:e5:31:b7:7d:fd: 51:c0:38:3d:2a:74:c7:2f:1a:5a:44:c1:19:61:37: d6:f2:ce:c1:cd:ee:a3:b6:3c:30:1f:e7:dd:fe:e3: ac:49:cc:b6:a7:e4:f6:27:fd:d0:4e:a5:3a:37:b6: 76:25:79:11:0e:19:05:1f:97:19:d1:ac:3c:18:8f: e3:cd:3d:23:e4:af:19:8b:0f:e7:b5:b3:55:7b:e5: ee:10:45:06:1e:70:ac:2d:c0:1d:40:23:d2:8b:db: 0d:c1:97:d7:43:51:4c:01:fd:f6:a0:4a:f7:a7:e8: 3c:c5:f9:06:39:2e:91:92:30:c5:0d:c3:69:c0:11: 49:9d:10:3f:d1:03:1a:47:57:01:5b:97:22:c0:ec: eb:d3:13:67:cc:5d:c8:d3:dd:96:5f:df:28:87:06: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:22:59:19:32:FE:6B:6D:15:C6:92:C7:F8:82:C3:0C:52:B4:B3 X509v3 Authority Key Identifier: keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:df:89:ee:79:1c:3d:27:ba:20:68:54:5a:b5:ea:a2:85:a7: d6:de:a2:2e:52:32:4a:68:0d:3f:70:47:84:44:55:a0:51:81: 84:30:fb:f8:9b:c8:d7:4a:b0:b6:48:5b:b1:6e:aa:9c:8b:e4: e8:f2:f1:0e:4a:6a:09:f0:b7:cd:9a:42:0e:9b:7c:44:95:0b: 1b:a9:23:fe:03:f2:c2:1c:31:cd:02:07:83:16:fd:b1:b0:93: 12:9b:2c:39:84:a0:aa:0b:54:b6:6d:9c:b2:04:92:cb:0e:3a: 69:82:02:52:48:e5:d5:9f:96:64:0b:ce:5a:45:92:41:bf:cb: 3e:66:3d:19:77:4f:60:28:fd:f6:5d:ee:77:fe:86:05:be:07: f2:a1:50:7a:b3:0f:28:83:0c:9c:f3:6b:ef:fe:aa:3a:c0:84: a0:73:60:0b:cd:05:95:65:9e:c3:58:2e:6f:a1:84:3e:5a:6e: d2:71:b8:d0:ff:fa:47:18:b3:79:b6:b2:51:47:5a:0b:3d:9e: 2a:8c:cf:7d:3f:12:d8:f3:ab:57:b9:51:77:f2:e3:82:8f:56: 31:cc:7b:aa:4d:2a:e4:63:52:bc:21:36:13:13:18:0e:61:68: 1a:e8:f5:3d:ab:d5:f4:60:d2:d1:35:4b:06:b9:11:f2:a2:bf: 5f:b1:87:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYm/xuU+pNTKeaREbEv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy ZmY4NDYwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhmZTIwMjI1OTE5MzJmZTZiNmQxNWM2OTJjN2Y4ODJjMzBjNTJiNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Dzi8sLwB4h9DPUMZJYy1B+GJKa +S129kv8d2E0fU8GplUWbQfIptB+8WktpDLjXKP8ycbbWd/4B7Et5gqSfgQxI4UD 4gEoYdzFeJ4Z5eO08a9Izaes5fY8/7oeVYssQM+r5TG3ff1RwDg9KnTHLxpaRMEZ YTfW8s7Bze6jtjwwH+fd/uOsScy2p+T2J/3QTqU6N7Z2JXkRDhkFH5cZ0aw8GI/j zT0j5K8Ziw/ntbNVe+XuEEUGHnCsLcAdQCPSi9sNwZfXQ1FMAf32oEr3p+g8xfkG OS6RkjDFDcNpwBFJnRA/0QMaR1cBW5ciwOzr0xNnzF3I092WX98ohwbt1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4gIlkZMv5rbRXGksf4gsMMUrSzMB8GA1UdIwQY MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3 LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9+J7nkc PSe6IGhUWrXqooWn1t6iLlIySmgNP3BHhERVoFGBhDD7+JvI10qwtkhbsW6qnIvk 6PLxDkpqCfC3zZpCDpt8RJULG6kj/gPywhwxzQIHgxb9sbCTEpssOYSgqgtUtm2c sgSSyw46aYICUkjl1Z+WZAvOWkWSQb/LPmY9GXdPYCj99l3ud/6GBb4H8qFQerMP KIMMnPNr7/6qOsCEoHNgC80FlWWew1gub6GEPlpu0nG40P/6RxizebayUUdaCz2e KozPfT8S2POrV7lRd/Ljgo9WMcx7qk0q5GNSvCE2ExMYDmFoGuj1PavV9GDS0TVL BrkR8qK/X7GH5A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:02 2025 by rpki-client