This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json) Hash identifier: RKecBpxqNgBc86G5QgcIJqb9wyO1paV5SkI38k50/hA= Subject key identifier: 89:CF:84:63:1E:E3:D0:15:B9:2B:47:C7:0C:08:59:1E:C0:B7:85:A1 Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Certificate serial: 019AF12DE041B8721E17F7237BDEDFAB31F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: O0nwJxyuB/iP3yKcy2j2g9QNvPvGIoKZjq1i5/6+tdU=) 2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e0:41:b8:72:1e:17:f7:23:7b:de:df:ab:31:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=89cf84631ee3d015b92b47c70c08591ec0b785a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:4e:aa:e2:ef:cc:91:8d:75:f3:48:66:2b: d7:19:f2:58:36:c5:bf:9b:26:b5:2f:28:2b:cf:f6: fe:0c:65:9e:1c:8f:c9:fc:91:59:d9:9d:af:f2:20: 11:32:1d:cf:fb:8c:9f:b7:20:ea:2a:9d:a7:90:70: da:40:43:73:7d:07:9a:ef:fe:ac:1c:65:40:e8:9a: d3:1e:32:10:fa:8b:5a:e3:db:b5:5b:c0:83:88:3c: 94:2f:f6:f7:48:2a:a5:cd:a3:7f:61:15:d3:f9:af: 80:b7:6d:df:af:99:86:67:3f:e3:cb:09:21:98:d4: f6:ae:f0:9b:41:95:3d:4a:f3:d9:47:a2:2b:dc:23: 62:f6:56:74:65:2c:10:c7:d7:e7:d1:ab:ec:09:07: 87:ab:76:53:b5:78:a0:28:cc:79:f6:6b:fe:64:6e: 6b:78:59:3e:93:30:8c:2a:e8:6b:bd:71:aa:35:9c: 95:1b:a1:3f:a8:7b:13:f9:bf:bb:35:b4:88:64:59: 11:81:18:4e:6c:37:7d:2b:5c:b5:5f:f4:94:df:96: 23:9f:40:e3:ad:ea:50:78:e1:e9:bd:9d:1c:d6:15: 9e:0c:1b:a4:6c:e4:5f:50:96:1e:c9:52:a1:ef:dc: a0:e5:72:8a:ba:37:2b:f0:14:b8:4b:49:e2:e6:14: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:84:63:1E:E3:D0:15:B9:2B:47:C7:0C:08:59:1E:C0:B7:85:A1 X509v3 Authority Key Identifier: keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:dd:7b:e1:c1:94:8a:b6:89:db:db:3a:8d:6f:8f:85:77: 4c:78:75:c3:c4:e2:71:88:be:71:27:c7:6a:a0:fe:8c:95:41: 22:d8:f1:3b:83:48:02:e0:22:99:ba:0f:f0:66:f3:d7:80:23: 60:e7:85:34:b7:73:76:56:f3:b0:ed:9d:d1:14:6c:39:1b:e0: 29:6a:09:e8:20:60:f3:7e:0a:fb:d0:ee:17:3f:cf:92:b8:4b: 89:fc:94:ec:be:c1:03:1c:89:68:a3:58:a6:c4:20:c2:2b:49: a4:b4:df:60:d3:b8:d6:1c:7d:e4:e5:ec:79:29:b4:15:cb:99: 5d:38:01:fc:b9:77:d3:78:f6:2b:7b:0e:8c:4c:91:5e:58:c5: 6b:42:25:a5:7e:71:a1:a3:b5:db:e6:0d:d5:b4:a5:21:eb:b3: f2:2f:e2:4a:1c:69:e2:a5:3e:77:cb:34:d7:c9:0d:1e:ac:4f: b0:ee:48:cb:2f:51:67:54:5a:f7:e5:64:ac:e6:ca:5f:9f:15: e9:d5:8f:4c:5f:c9:0d:2e:80:41:09:75:2d:52:6e:0b:4a:cf: 18:d1:a6:66:e7:7c:01:b9:4c:26:fd:de:0c:8a:d6:a5:0a:0a: 87:c5:ed:ef:ac:ac:53:53:e7:7f:9c:e8:21:38:ca:f6:f6:a4: df:4e:f9:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeBBuHIeF/cje97fqzHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTc5YjM5ZDFjMWQyOGY1MDYzY2E5MjFkNjAwN2UzNjNl MWM2MGIwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD Eyg4OWNmODQ2MzFlZTNkMDE1YjkyYjQ3YzcwYzA4NTkxZWMwYjc4NWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljpOquLvzJGNdfNIZivXGfJYNsW/ mya1Lygrz/b+DGWeHI/J/JFZ2Z2v8iARMh3P+4yftyDqKp2nkHDaQENzfQea7/6s HGVA6JrTHjIQ+ota49u1W8CDiDyUL/b3SCqlzaN/YRXT+a+At23fr5mGZz/jywkh mNT2rvCbQZU9SvPZR6Ir3CNi9lZ0ZSwQx9fn0avsCQeHq3ZTtXigKMx59mv+ZG5r eFk+kzCMKuhrvXGqNZyVG6E/qHsT+b+7NbSIZFkRgRhObDd9K1y1X/SU35Yjn0Dj repQeOHpvZ0c1hWeDBukbORfUJYeyVKh79yg5XKKujcr8BS4S0ni5hRfrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInPhGMe49AVuStHxwwIWR7At4WhMB8GA1UdIwQY MBaAFJYXmznRwdKPUGPKkh1gB+Nj4cYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWIt YTBiNDkzMGNiZDFlLzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZGRmOTQtOGQ1MS00MWNkLThhNWItYTBiNDkzMGNiZDFl LzEvbGhlYk9kSEIwbzlRWThxU0hXQUg0MlBoeGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXfde+HB lIq2idvbOo1vj4V3THh1w8TicYi+cSfHaqD+jJVBItjxO4NIAuAimboP8Gbz14Aj YOeFNLdzdlbzsO2d0RRsORvgKWoJ6CBg834K+9DuFz/PkrhLifyU7L7BAxyJaKNY psQgwitJpLTfYNO41hx95OXseSm0FcuZXTgB/Ll303j2K3sOjEyRXljFa0IlpX5x oaO12+YN1bSlIeuz8i/iShxp4qU+d8s018kNHqxPsO5Iyy9RZ1Ra9+VkrObKX58V 6dWPTF/JDS6AQQl1LVJuC0rPGNGmZud8AblMJv3eDIrWpQoKh8Xt76ysU1Pnf5zo ITjK9vak3075Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:44 2025 by rpki-client