This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json) Hash identifier: 2Ki4ylhWiUdSHa0ygG7k2HzFQEU3SZUDqSYbicDx8D8= Subject key identifier: 03:83:CC:28:F1:B1:8A:0A:26:29:F8:D4:4C:C0:C2:95:BD:67:20:EA Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Certificate serial: 019AF163DDED023B4C368688FE7D0056C33F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft Manifest number: 0E98 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: O8xQyf4SlO_QA8u4YHx9nqfuT4c.roa (hash: WyDwMMx1y5LT2GHueRZtXWT+BMFzzrzU6Km40azPSxA=) 2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: fByAnLrvQ/jwNMto0PNq2TpRwfz5fUXO03OTbpxipDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:ed:02:3b:4c:36:86:88:fe:7d:00:56:c3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=0383cc28f1b18a0a2629f8d44cc0c295bd6720ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:3e:20:31:92:37:b0:c9:fb:41:8c:31:7d: 52:bc:51:73:e6:63:93:2e:ed:b5:7f:b0:69:9e:c2: 7b:09:23:cf:12:a5:8e:5e:30:2c:af:b7:ee:e5:ab: 0c:e8:00:79:13:55:08:bb:b3:cd:2b:3c:84:d0:0e: 56:70:16:35:d1:f0:15:8d:aa:b0:02:f8:aa:c1:af: 97:1d:34:44:94:fd:1e:9c:25:f6:c3:9f:7c:01:68: ea:87:ed:ec:ea:aa:90:16:6a:58:2d:6e:41:64:91: b7:7c:08:ce:75:10:03:b9:5a:7f:a2:95:6f:d7:aa: 88:41:d5:2f:15:72:74:6d:8a:20:f9:f6:8b:61:6e: 79:12:e7:8b:58:e1:be:4a:d4:9c:50:83:d3:86:5a: ec:03:2c:c6:bf:d2:5f:c5:ad:47:d7:c6:71:99:86: f8:63:19:9f:1c:bc:d2:d4:fa:f7:87:60:37:bb:87: cf:53:85:4b:72:78:7f:d6:ab:4d:94:93:76:5a:1d: 3c:5a:9c:98:c6:0a:66:75:c7:53:ec:36:48:6b:25: 5c:f4:9e:bf:8d:bf:ff:03:08:73:51:1d:c9:0d:4a: 39:5c:e4:90:97:50:77:7d:e2:26:18:5f:8c:54:78: d5:d8:16:16:43:3b:73:11:df:3a:5b:f7:e1:82:3a: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:CC:28:F1:B1:8A:0A:26:29:F8:D4:4C:C0:C2:95:BD:67:20:EA X509v3 Authority Key Identifier: keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:31:c6:2a:a5:4b:05:e6:5d:8d:63:84:ff:ca:26:a4:73: 76:40:5f:12:1d:24:03:4a:63:8e:94:f7:be:5f:d7:86:7c:71: 1a:75:5e:c1:8f:9c:34:8d:23:c2:4e:75:69:fc:dd:7c:a1:2b: 7b:ee:9a:40:1a:49:31:f3:9e:94:df:68:3b:f1:18:9c:93:41: 87:68:bb:8e:46:98:9d:c4:9b:f1:fb:d2:2c:a4:4e:4b:ea:2c: 3b:97:1d:0b:08:a4:d2:de:45:a3:2d:3c:06:d7:97:2c:e3:2c: 82:88:36:49:e9:e3:1d:db:bd:db:0a:a1:06:92:fe:b5:fe:8d: 54:3a:05:db:46:bb:fe:0a:c1:06:df:d4:f7:9d:18:c9:93:6c: 64:dd:8c:9d:99:1e:4f:8b:0d:c5:ba:9f:bf:1d:60:4b:2b:c3: d7:4e:b5:e7:ea:4d:a8:85:de:8f:0a:27:63:e3:ab:0d:ab:42: 5f:d2:ce:7e:f9:7f:87:4f:00:ec:53:19:0b:af:85:9e:1b:98: 4b:96:e6:ac:25:82:56:aa:a4:9b:d9:7b:8c:ae:c6:01:fc:c7: 75:6c:90:68:12:a5:d2:72:1a:d6:6e:7e:85:8e:1a:1e:4b:13: 5e:6a:54:a8:29:83:60:c0:99:1b:44:64:95:c4:84:06:92:01: 4b:d7:b6:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY93tAjtMNoaI/n0AVsM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj NWNkNjcwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EygwMzgzY2MyOGYxYjE4YTBhMjYyOWY4ZDQ0Y2MwYzI5NWJkNjcyMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrU+IDGSN7DJ+0GMMX1SvFFz5mOT Lu21f7BpnsJ7CSPPEqWOXjAsr7fu5asM6AB5E1UIu7PNKzyE0A5WcBY10fAVjaqw Aviqwa+XHTRElP0enCX2w598AWjqh+3s6qqQFmpYLW5BZJG3fAjOdRADuVp/opVv 16qIQdUvFXJ0bYog+faLYW55EueLWOG+StScUIPThlrsAyzGv9Jfxa1H18ZxmYb4 YxmfHLzS1Pr3h2A3u4fPU4VLcnh/1qtNlJN2Wh08WpyYxgpmdcdT7DZIayVc9J6/ jb//AwhzUR3JDUo5XOSQl1B3feImGF+MVHjV2BYWQztzEd86W/fhgjoLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAODzCjxsYoKJin41EzAwpW9ZyDqMB8GA1UdIwQY MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt MmFiZGIyMTk0MWJjLzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5Exxiql SwXmXY1jhP/KJqRzdkBfEh0kA0pjjpT3vl/XhnxxGnVewY+cNI0jwk51afzdfKEr e+6aQBpJMfOelN9oO/EYnJNBh2i7jkaYncSb8fvSLKROS+osO5cdCwik0t5Foy08 BteXLOMsgog2SenjHdu92wqhBpL+tf6NVDoF20a7/grBBt/U950YyZNsZN2MnZke T4sNxbqfvx1gSyvD10615+pNqIXejwonY+OrDatCX9LOfvl/h08A7FMZC6+FnhuY S5bmrCWCVqqkm9l7jK7GAfzHdWyQaBKl0nIa1m5+hY4aHksTXmpUqCmDYMCZG0Rk lcSEBpIBS9e2MA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:41 2025 by rpki-client