This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json) Hash identifier: S35xKt0QfmlgbvqEcjG68DbsZjr1We7NXPTFPRhDKh0= Subject key identifier: A5:5A:51:41:56:1B:32:A8:26:8B:90:16:1A:C1:15:78:C4:07:75:11 Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Certificate serial: 019AF0880C7F466028249112826AE6AB40FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft Manifest number: 116C Signing time: Fri 05 Dec 2025 22:00:39 +0000 Manifest this update: Fri 05 Dec 2025 22:00:39 +0000 Manifest next update: Sat 06 Dec 2025 22:00:39 +0000 Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=) 2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: FG+5NMzVzQbvGbv0gc2d79WeMRkQPuWyFLGV0Q8uvGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0c:7f:46:60:28:24:91:12:82:6a:e6:ab:40:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b Validity Not Before: Dec 5 22:00:39 2025 GMT Not After : Dec 6 22:00:39 2025 GMT Subject: CN=a55a5141561b32a8268b90161ac11578c4077511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:85:84:59:d8:ff:01:47:01:4c:c1:9c:f1: b6:b8:56:b3:96:58:18:b3:c6:26:77:b2:e3:f0:4a: 05:56:37:5a:bc:23:b3:e4:1f:9d:95:dd:c4:b0:1d: 4b:1e:64:5d:d6:59:cb:8c:2d:aa:76:2a:99:63:c4: 71:c7:59:53:5d:9f:da:c1:01:9b:53:42:9f:00:c6: 2a:0a:25:42:f5:27:26:e9:8b:bc:c8:89:81:b7:16: 75:8e:90:68:5f:ee:9a:16:c1:a6:14:ee:a0:72:6c: 12:21:9f:33:57:9c:c0:0f:55:63:bd:89:5a:2a:1d: 9f:59:d8:9a:10:19:8f:a6:3d:c5:1c:b9:6e:09:59: 72:49:29:90:2a:4f:43:c6:1c:b1:ea:c8:61:5a:f4: 8c:87:42:37:c1:8f:cf:c3:99:c6:48:a6:5f:77:c6: 6a:bf:35:d5:b4:02:e3:dc:50:09:88:b5:e9:06:e5: 67:fb:65:76:12:db:36:b7:2d:1e:83:d2:f8:69:7d: 08:4f:62:60:00:18:ad:51:30:2d:69:1a:52:73:ce: f6:8c:12:c7:5e:42:7d:43:cd:fe:bc:6a:71:7d:6b: e0:e0:08:f9:4d:9d:98:a8:f7:4c:88:67:18:9f:cf: b7:19:8e:ee:48:68:3a:ba:38:ea:08:80:ee:f7:1f: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:51:41:56:1B:32:A8:26:8B:90:16:1A:C1:15:78:C4:07:75:11 X509v3 Authority Key Identifier: keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:81:f0:76:67:be:d0:f0:4f:e0:68:f9:b2:f1:a3:40:ea: 32:cb:e1:cd:e2:a7:2b:fb:ad:a2:09:bd:54:d5:28:d9:e7:9d: 10:c0:d0:73:a1:14:85:fc:31:10:37:01:f4:6c:aa:32:ea:2f: 08:8d:cb:5b:81:2e:ad:2b:14:f6:1e:f1:9e:f1:80:cf:c0:7b: 19:fe:39:19:01:c0:a8:2a:97:df:1a:bf:40:d0:32:ed:94:d9: 7b:be:85:4f:67:62:56:7e:5e:f8:43:26:3e:1d:5e:9f:8d:1c: 51:d7:84:1a:22:e9:54:4c:ba:d1:4d:ad:4d:70:13:bb:95:7a: 0d:47:c2:42:ce:4f:02:ac:4d:11:88:fc:62:8c:a5:60:78:d1: 58:6d:cb:97:f9:b3:0c:7a:99:ff:e6:dd:66:6d:98:35:1d:6b: e5:62:d2:cf:d6:62:15:ff:1a:4d:05:a7:eb:70:31:af:1a:fb: c1:8c:93:d2:17:cf:f7:11:3b:10:fe:54:d0:b6:7d:9d:22:9b: c9:9d:c4:b8:92:a1:e6:85:fc:5a:c1:ab:99:fd:65:7f:d0:31: ed:fa:3f:e6:4c:5b:c6:d5:b4:40:70:4e:a3:74:73:7d:34:a5: 8d:df:b8:a7:b0:2f:32:e4:7c:02:67:39:2a:0b:86:34:d2:6a: 44:98:0e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAx/RmAoJJESgmrmq0D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2 OGFjOWIwHhcNMjUxMjA1MjIwMDM5WhcNMjUxMjA2MjIwMDM5WjAzMTEwLwYDVQQD EyhhNTVhNTE0MTU2MWIzMmE4MjY4YjkwMTYxYWMxMTU3OGM0MDc3NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT6FhFnY/wFHAUzBnPG2uFazllgY s8Ymd7Lj8EoFVjdavCOz5B+dld3EsB1LHmRd1lnLjC2qdiqZY8Rxx1lTXZ/awQGb U0KfAMYqCiVC9Scm6Yu8yImBtxZ1jpBoX+6aFsGmFO6gcmwSIZ8zV5zAD1VjvYla Kh2fWdiaEBmPpj3FHLluCVlySSmQKk9Dxhyx6shhWvSMh0I3wY/Pw5nGSKZfd8Zq vzXVtALj3FAJiLXpBuVn+2V2Ets2ty0eg9L4aX0IT2JgABitUTAtaRpSc872jBLH XkJ9Q83+vGpxfWvg4Aj5TZ2YqPdMiGcYn8+3GY7uSGg6ujjqCIDu9x9c4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVaUUFWGzKoJouQFhrBFXjEB3URMB8GA1UdIwQY MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2+B8HZn vtDwT+Bo+bLxo0DqMsvhzeKnK/utogm9VNUo2eedEMDQc6EUhfwxEDcB9GyqMuov CI3LW4EurSsU9h7xnvGAz8B7Gf45GQHAqCqX3xq/QNAy7ZTZe76FT2diVn5e+EMm Ph1en40cUdeEGiLpVEy60U2tTXATu5V6DUfCQs5PAqxNEYj8YoylYHjRWG3Ll/mz DHqZ/+bdZm2YNR1r5WLSz9ZiFf8aTQWn63Axrxr7wYyT0hfP9xE7EP5U0LZ9nSKb yZ3EuJKh5oX8WsGrmf1lf9Ax7fo/5kxbxtW0QHBOo3RzfTSljd+4p7AvMuR8Amc5 KguGNNJqRJgOXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:29 2025 by rpki-client