This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: /DyoOuCfFTYPmazVx6As3fs9AJ37MMEwDSiMk1cVSSI=
Subject key identifier: 36:06:6D:FE:96:AB:D1:DB:E3:BC:06:64:1A:9F:A1:94:F1:9D:FA:8F
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019AF24019841F9F647342D86D584A14012B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 06:01:18 +0000
Manifest this update: Sat 06 Dec 2025 06:01:18 +0000
Manifest next update: Sun 07 Dec 2025 06:01:18 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: GVTyDz1imIK3C4BeXII7zVN1ef4wrVhwhIS/rk+TpmA=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:19:84:1f:9f:64:73:42:d8:6d:58:4a:14:01:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Dec 6 06:01:18 2025 GMT
Not After : Dec 7 06:01:18 2025 GMT
Subject: CN=36066dfe96abd1dbe3bc06641a9fa194f19dfa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:35:4b:5e:85:f4:71:2d:76:3e:1b:a5:e6:
da:74:b5:82:e1:d8:04:17:5b:a1:ee:e6:43:71:9c:
33:e4:6d:b9:f7:f7:19:cb:06:99:06:50:0b:3f:38:
30:5f:2a:08:18:d8:bb:c9:55:a5:f5:3b:9a:88:3b:
12:fe:45:8c:d3:70:3e:fc:11:40:d4:fa:8a:71:e2:
fa:09:da:3c:80:ac:ee:38:90:aa:79:9f:41:18:d2:
3c:ed:c1:b6:3a:91:c7:45:f7:c3:96:11:37:66:78:
31:fc:5d:95:96:ef:be:60:80:0f:fa:9c:bf:fd:96:
31:c5:7c:cb:24:41:25:11:ee:b1:05:cc:7f:94:da:
38:ee:bf:86:0e:55:f0:7f:01:1a:11:26:7c:15:ed:
08:0c:fe:30:b0:d8:f0:04:b5:23:07:dc:28:6f:1d:
bb:5d:b9:48:12:6f:bc:0a:88:eb:7e:f9:8a:3c:fd:
0c:d9:3a:df:03:17:94:11:d0:51:b2:26:e3:bc:eb:
0b:da:86:ad:5a:cc:a2:48:59:b7:61:98:76:52:60:
08:5c:f2:9e:43:d7:d7:96:3d:54:46:09:ee:ac:bf:
29:22:88:5c:27:c9:76:92:ff:79:04:df:be:d7:8e:
44:bb:9b:05:ca:83:b0:0e:32:bd:6d:2f:cf:55:6b:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:6D:FE:96:AB:D1:DB:E3:BC:06:64:1A:9F:A1:94:F1:9D:FA:8F
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fb:a1:01:88:56:2c:79:a6:4a:02:ba:84:62:fc:e2:7a:31:
8f:8d:0e:e9:4e:8f:c3:1a:c8:11:28:23:84:83:09:fb:a4:a4:
c6:5c:da:ca:c1:03:78:72:ca:ae:47:51:92:5b:a4:61:f4:94:
6d:22:04:5c:70:bb:21:ff:32:7d:00:22:bd:5e:ab:46:0f:3c:
92:cf:b2:78:a8:53:3c:0b:ca:77:2e:29:08:e4:e8:19:3b:b5:
50:53:ac:44:de:2b:15:f4:9b:0c:1d:98:b7:9f:e8:e8:fc:aa:
60:98:01:ab:9b:b3:2d:eb:60:6c:42:74:3f:b4:7c:af:e6:16:
b3:b5:74:1b:44:ce:20:21:94:8a:c6:e3:5d:7c:3b:f6:32:2e:
0d:27:77:a8:35:a2:5a:6b:08:6f:24:bc:a1:8d:16:7d:00:30:
5b:49:ea:d7:91:2e:82:ae:a0:63:3c:68:56:ff:48:52:a3:df:
5a:2d:cf:99:5b:83:d4:0a:ae:95:dc:44:91:a7:80:45:94:fc:
8b:b0:96:a9:d6:c4:48:b8:b0:00:61:74:14:26:04:22:65:21:
1c:64:1e:1b:f8:98:0e:ae:fd:e2:ae:33:e1:9b:a2:b5:11:e5:
b7:71:4c:ab:6c:04:ff:25:cc:b8:da:84:3e:9c:ae:1c:89:54:
68:11:c0:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryQBmEH59kc0LYbVhKFAErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5
MTk1MTMwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD
EygzNjA2NmRmZTk2YWJkMWRiZTNiYzA2NjQxYTlmYTE5NGYxOWRmYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv01S16F9HEtdj4bpebadLWC4dgE
F1uh7uZDcZwz5G259/cZywaZBlALPzgwXyoIGNi7yVWl9TuaiDsS/kWM03A+/BFA
1PqKceL6Cdo8gKzuOJCqeZ9BGNI87cG2OpHHRffDlhE3Zngx/F2Vlu++YIAP+py/
/ZYxxXzLJEElEe6xBcx/lNo47r+GDlXwfwEaESZ8Fe0IDP4wsNjwBLUjB9wobx27
XblIEm+8CojrfvmKPP0M2TrfAxeUEdBRsibjvOsL2oatWsyiSFm3YZh2UmAIXPKe
Q9fXlj1URgnurL8pIohcJ8l2kv95BN++145Eu5sFyoOwDjK9bS/PVWvPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYGbf6Wq9Hb47wGZBqfoZTxnfqPMB8GA1UdIwQY
MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt
NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4
LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPuhAYhW
LHmmSgK6hGL84noxj40O6U6PwxrIESgjhIMJ+6SkxlzaysEDeHLKrkdRklukYfSU
bSIEXHC7If8yfQAivV6rRg88ks+yeKhTPAvKdy4pCOToGTu1UFOsRN4rFfSbDB2Y
t5/o6PyqYJgBq5uzLetgbEJ0P7R8r+YWs7V0G0TOICGUisbjXXw79jIuDSd3qDWi
WmsIbyS8oY0WfQAwW0nq15Eugq6gYzxoVv9IUqPfWi3PmVuD1AquldxEkaeARZT8
i7CWqdbESLiwAGF0FCYEImUhHGQeG/iYDq794q4z4ZuitRHlt3FMq2wE/yXMuNqE
PpyuHIlUaBHA2w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:30:13 2025 by rpki-client