This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json) Hash identifier: 3+kvGiOcJqLlGjksiI7LmAGOacrSKa0HQGkLWq/6wH8= Subject key identifier: FA:DF:F5:64:B8:20:B7:78:65:D0:C2:93:60:33:0F:03:DA:3A:4D:F7 Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Certificate serial: 019B2BF919B524F23117709EA74F43715F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft Manifest number: 028F Signing time: Wed 17 Dec 2025 11:01:43 +0000 Manifest this update: Wed 17 Dec 2025 11:01:43 +0000 Manifest next update: Thu 18 Dec 2025 11:01:43 +0000 Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=) 2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: 5EQvI02dR2dJQNkyhqoZ2QWt3Qv+KgIdsjnz9RAvcCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:19:b5:24:f2:31:17:70:9e:a7:4f:43:71:5f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846 Validity Not Before: Dec 17 11:01:43 2025 GMT Not After : Dec 18 11:01:43 2025 GMT Subject: CN=fadff564b820b77865d0c29360330f03da3a4df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:f7:7a:3b:26:37:f4:a3:23:b5:4f:e5:c0: 50:cb:aa:34:df:f8:34:4e:72:14:d5:f6:d6:b6:32: c8:f4:25:e9:1b:c3:d8:78:cd:87:ce:a6:4d:60:15: e0:67:fb:aa:38:c6:85:ae:fe:1d:ff:c5:75:f1:b2: 4b:fa:be:78:d4:81:2d:e6:8e:d9:a4:8c:b2:5e:1c: e3:3b:66:6d:71:24:83:44:02:ad:16:e8:76:1b:5b: d1:5d:24:4d:71:fd:b8:f3:4d:6f:3a:43:b5:f7:6a: 26:40:8a:31:1c:40:35:95:d3:05:7b:63:0b:66:d2: f3:9c:37:19:30:71:d9:17:eb:94:dd:9a:43:5d:7c: c7:49:a5:31:c1:1c:55:7d:6e:da:df:dc:66:ee:26: 5c:e5:97:a7:3f:de:3c:ce:62:4a:bd:c1:06:fc:1f: d0:02:41:6f:c9:71:c8:25:97:ff:05:05:bb:c4:64: 08:b2:4b:a0:89:7f:5f:a4:32:a9:14:be:8c:ab:48: 0a:b7:65:03:cf:78:98:25:56:aa:c0:aa:5c:8f:e2: a8:e0:25:30:cd:6b:ea:ae:58:1a:aa:54:be:29:3d: 0a:a8:a9:84:ef:6e:1b:61:f3:c8:e2:46:cb:38:55: ca:e5:4b:3f:89:2a:56:5d:ec:74:0b:1a:59:4d:a8: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:F5:64:B8:20:B7:78:65:D0:C2:93:60:33:0F:03:DA:3A:4D:F7 X509v3 Authority Key Identifier: keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e9:90:2a:db:b2:21:12:45:55:84:4f:3e:fe:36:34:66:cf: 6a:76:f3:fc:f9:f7:9e:fa:b0:b5:3e:f2:23:35:50:15:4f:e5: b5:66:c1:56:d9:6a:ca:57:66:f5:1f:2a:39:b1:30:ef:60:93: 7e:d2:03:86:fd:f6:bf:5a:c8:c1:0a:0e:4d:b4:c0:f2:fe:f3: 9d:df:98:99:4b:78:29:ec:a6:d0:01:7a:0f:33:39:b9:77:72: 97:ae:96:8c:17:cc:3a:db:e7:e9:ba:41:1d:e8:2b:b9:44:1b: ac:78:d1:f8:68:19:bd:18:07:c5:7d:d8:05:cb:5c:a2:bd:4d: 76:b5:4d:8c:dc:15:4d:c6:b5:f7:46:a3:0e:b7:53:89:bf:61: f8:62:cb:bf:ee:75:62:d6:56:68:38:79:9c:31:5e:b5:b3:cf: ae:4f:a0:c2:b9:a4:ab:04:7f:8a:31:c2:6c:1a:12:8d:85:bd: 5c:11:9a:44:67:0c:35:31:57:09:a4:5c:bf:5b:d5:17:2c:13: 2e:8d:94:c7:39:ac:52:8e:4f:83:ee:66:39:25:53:2d:21:d4: 19:14:dc:a6:bb:bb:04:7e:2b:a4:83:89:1b:a3:fc:f7:ef:b8: e9:8b:24:0d:c8:de:11:75:99:41:5c:48:29:4b:92:69:79:80: f6:d4:dd:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Rm1JPIxF3Cep09DcV9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy ZmY4NDYwHhcNMjUxMjE3MTEwMTQzWhcNMjUxMjE4MTEwMTQzWjAzMTEwLwYDVQQD EyhmYWRmZjU2NGI4MjBiNzc4NjVkMGMyOTM2MDMzMGYwM2RhM2E0ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/3ejsmN/SjI7VP5cBQy6o03/g0 TnIU1fbWtjLI9CXpG8PYeM2HzqZNYBXgZ/uqOMaFrv4d/8V18bJL+r541IEt5o7Z pIyyXhzjO2ZtcSSDRAKtFuh2G1vRXSRNcf24801vOkO192omQIoxHEA1ldMFe2ML ZtLznDcZMHHZF+uU3ZpDXXzHSaUxwRxVfW7a39xm7iZc5ZenP948zmJKvcEG/B/Q AkFvyXHIJZf/BQW7xGQIskugiX9fpDKpFL6Mq0gKt2UDz3iYJVaqwKpcj+Ko4CUw zWvqrlgaqlS+KT0KqKmE724bYfPI4kbLOFXK5Us/iSpWXex0CxpZTaiXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrf9WS4ILd4ZdDCk2AzDwPaOk33MB8GA1UdIwQY MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3 LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjumQKtuy IRJFVYRPPv42NGbPanbz/Pn3nvqwtT7yIzVQFU/ltWbBVtlqyldm9R8qObEw72CT ftIDhv32v1rIwQoOTbTA8v7znd+YmUt4Keym0AF6DzM5uXdyl66WjBfMOtvn6bpB HegruUQbrHjR+GgZvRgHxX3YBctcor1NdrVNjNwVTca190ajDrdTib9h+GLLv+51 YtZWaDh5nDFetbPPrk+gwrmkqwR/ijHCbBoSjYW9XBGaRGcMNTFXCaRcv1vVFywT Lo2UxzmsUo5Pg+5mOSVTLSHUGRTcpru7BH4rpIOJG6P89++46YskDcjeEXWZQVxI KUuSaXmA9tTdmw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:49 2025 by rpki-client