This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json) Hash identifier: Zm24Ff7PrtvNNbHrpNItCv323R+J0ABWb6p+BultOJY= Subject key identifier: D6:89:89:37:71:1A:83:F4:6A:9A:66:61:EC:67:AC:EC:D0:71:65:D0 Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Certificate serial: 019AF1D23632B3F14D15B55B0CB069B2FB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: SWg1rLqpI/hmSE/wN/FZZVvjIORhhFB1NzQZDh9N0TA=) 2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:36:32:b3:f1:4d:15:b5:5b:0c:b0:69:b2:fb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=d6898937711a83f46a9a6661ec67acecd07165d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:0d:9d:80:8e:77:c5:39:63:5a:50:24:3f: c5:e1:00:db:fe:ce:b2:f0:b4:8e:1d:15:bc:a7:62: 89:88:fb:74:b7:61:74:40:f6:26:45:72:49:37:e3: 83:16:ad:1a:06:92:5c:eb:9b:3e:7c:3b:96:87:93: 7e:76:1a:48:e9:9f:aa:13:59:b2:3c:a2:89:8f:2f: f5:39:22:13:40:80:b0:85:29:4a:5a:2e:46:02:c8: d1:a0:e5:ef:3f:1d:46:ab:8d:af:b1:da:7a:a9:36: 34:61:46:d6:76:5d:90:ed:63:2e:36:5a:5f:c9:c0: ac:e6:e6:27:8d:47:30:cc:b7:de:16:85:03:d2:94: d0:96:fc:ea:71:2c:77:16:e4:8d:24:31:aa:f7:95: 8d:3f:15:da:ee:cb:27:ff:fc:1b:5e:7f:92:52:b3: 0a:4a:50:89:a5:48:7e:87:3f:77:b5:c2:ef:04:0f: e8:71:61:05:02:be:ff:e4:13:be:f6:a1:33:6c:43: a2:7a:7d:15:8b:ae:d1:b4:55:65:c3:0f:59:ad:3f: 1c:39:8e:67:76:4e:92:37:4d:b3:0f:92:ae:e9:ac: 50:a7:3a:0f:f9:74:2e:16:4c:14:8a:f0:69:2d:c4: 8d:19:4f:04:f8:21:c7:ea:95:c2:5b:41:b7:26:f7: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:89:89:37:71:1A:83:F4:6A:9A:66:61:EC:67:AC:EC:D0:71:65:D0 X509v3 Authority Key Identifier: keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ea:67:91:19:f2:e9:c2:87:5f:0b:ed:69:e5:96:a0:61:5c: 6e:8f:35:07:67:8b:0a:46:c1:b0:29:e6:28:c4:db:68:7d:00: 28:46:ba:32:d4:0d:3d:37:77:02:ee:32:9d:93:12:5d:39:e0: ca:39:2b:d0:c0:19:cd:89:3e:54:53:08:cf:a0:37:5f:d5:68: 14:74:46:bf:9d:e4:a7:7e:7d:c1:e7:8c:a7:ec:6b:e2:3c:87: c1:8b:d5:aa:d5:69:f9:d1:3a:d8:a4:18:d3:a9:a4:06:61:5a: db:14:c4:da:69:21:40:77:2e:4e:e0:d8:59:45:e2:ad:6a:d8: be:27:0e:1d:54:6c:22:7f:67:56:92:48:88:55:b2:7a:80:c9: 81:1b:46:15:8c:fa:90:fb:f3:61:05:c7:14:68:1c:3c:fe:2e: 9c:57:f1:df:73:88:f9:e7:e8:23:be:fd:5a:05:12:ca:41:12: 51:dd:e1:2b:c5:17:31:81:4f:f9:9e:d2:9f:2f:03:1b:cd:e6: 93:45:81:b9:39:93:19:ea:81:86:a2:d1:05:2d:48:55:3a:68: 89:e8:54:4a:68:4e:76:58:eb:a3:7a:bb:0a:eb:4e:4c:60:95: 52:f3:c0:62:ec:d4:ba:82:11:46:75:ae:35:00:f9:5b:df:67: 66:8d:00:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jYys/FNFbVbDLBpsvtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3 YTg0ZGUwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EyhkNjg5ODkzNzcxMWE4M2Y0NmE5YTY2NjFlYzY3YWNlY2QwNzE2NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6INnYCOd8U5Y1pQJD/F4QDb/s6y 8LSOHRW8p2KJiPt0t2F0QPYmRXJJN+ODFq0aBpJc65s+fDuWh5N+dhpI6Z+qE1my PKKJjy/1OSITQICwhSlKWi5GAsjRoOXvPx1Gq42vsdp6qTY0YUbWdl2Q7WMuNlpf ycCs5uYnjUcwzLfeFoUD0pTQlvzqcSx3FuSNJDGq95WNPxXa7ssn//wbXn+SUrMK SlCJpUh+hz93tcLvBA/ocWEFAr7/5BO+9qEzbEOien0Vi67RtFVlww9ZrT8cOY5n dk6SN02zD5Ku6axQpzoP+XQuFkwUivBpLcSNGU8E+CHH6pXCW0G3JvdqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaJiTdxGoP0appmYexnrOzQcWXQMB8GA1UdIwQY MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAupnkRny 6cKHXwvtaeWWoGFcbo81B2eLCkbBsCnmKMTbaH0AKEa6MtQNPTd3Au4ynZMSXTng yjkr0MAZzYk+VFMIz6A3X9VoFHRGv53kp359weeMp+xr4jyHwYvVqtVp+dE62KQY 06mkBmFa2xTE2mkhQHcuTuDYWUXirWrYvicOHVRsIn9nVpJIiFWyeoDJgRtGFYz6 kPvzYQXHFGgcPP4unFfx33OI+efoI779WgUSykESUd3hK8UXMYFP+Z7Sny8DG83m k0WBuTmTGeqBhqLRBS1IVTpoiehUSmhOdljro3q7CutOTGCVUvPAYuzUuoIRRnWu NQD5W99nZo0AaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:19 2025 by rpki-client