This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json) Hash identifier: RCYcs166y3O/CeyaKNhd3M16dbuxVdnpcn5UOChxAHk= Subject key identifier: 4C:2F:C0:26:D1:A6:7F:24:7F:3B:39:AB:97:E8:18:10:E3:C3:2E:83 Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Certificate serial: 019B3D22BC6BB09962D70F4F384CD3D0C78F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: aCjIWsZBvZv9hLb3ZSmwvoaCe7v7nI69RcgQoHyqKoI=) 2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:bc:6b:b0:99:62:d7:0f:4f:38:4c:d3:d0:c7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=4c2fc026d1a67f247f3b39ab97e81810e3c32e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:ff:9f:43:f8:0c:93:6e:a7:92:9f:7d:62: a6:4a:65:cd:ee:c5:02:a8:1e:40:8b:65:1f:b3:de: 2f:2e:8d:ee:2a:8e:c5:00:15:1c:f8:83:f6:1b:41: c7:b1:56:91:b6:d6:3d:ff:18:b7:03:1a:0e:14:ae: 18:0e:b0:50:7c:b8:86:42:c1:ae:0a:4c:c4:9b:eb: 29:df:f0:47:2a:ff:64:36:f0:cb:be:01:92:2b:bb: 92:d7:da:d0:a3:7b:68:f2:6a:92:0d:8c:67:22:37: b8:44:84:f3:32:01:d0:eb:08:32:52:ff:8e:02:ea: 4c:41:dc:da:ac:fc:5e:34:ae:e4:3c:2a:cc:c4:a3: 18:d3:4e:da:dd:34:55:7d:7f:c9:1c:bc:d7:0d:1d: f3:2a:91:40:46:10:8e:a7:36:3b:7f:9a:a4:df:49: 17:17:1b:28:61:b1:79:88:7b:aa:8a:f7:91:56:c6: 72:d9:0b:ce:ff:91:f6:10:c8:a7:c4:8a:33:56:ee: a8:19:50:ff:33:38:47:1a:3f:76:73:37:1e:53:fc: 62:57:b5:cc:dd:ec:91:61:45:58:0b:00:c8:5b:53: 48:89:5e:36:83:8f:85:c8:71:f3:24:7d:78:a0:bb: f2:b2:7f:c5:53:6b:8b:cc:25:40:0b:c5:bf:6b:41: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:C0:26:D1:A6:7F:24:7F:3B:39:AB:97:E8:18:10:E3:C3:2E:83 X509v3 Authority Key Identifier: keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7a:cd:f7:53:5c:7a:98:86:c8:4b:cb:73:d9:f6:19:0e:eb: 88:62:a6:69:18:8a:3e:72:5c:6d:be:44:1e:1e:ea:d4:d5:fc: b6:58:9f:b2:36:cc:65:12:dd:69:1e:67:35:08:45:5c:a9:32: bc:ff:06:bf:8b:b2:20:0c:b6:5e:af:fc:4e:be:50:a7:75:f9: dd:58:35:f8:0c:5d:73:bc:ba:95:87:f0:f9:73:ff:c1:bb:47: 2c:1b:94:89:73:d0:d2:96:2d:a5:8a:bf:56:b3:54:04:f5:80: 88:29:bb:e3:1f:a7:80:9b:49:2a:43:3b:2d:2b:2c:78:a2:8b: e4:c6:c9:49:c9:d3:39:25:df:89:07:7b:ca:ca:78:5e:31:41: 73:b4:2c:c4:cb:84:da:c9:9e:f4:2e:65:5e:b2:b1:e3:41:57: 40:5b:bc:f2:72:32:a6:2e:ec:2f:68:71:2c:ab:7f:3f:c0:64: 63:d1:52:7e:76:3e:1a:2d:4f:06:bc:f6:ac:58:88:f6:5b:e0: 23:8f:3e:61:c2:61:03:06:10:0e:a9:f9:ca:1d:96:be:8c:5b: 2b:04:86:70:3d:17:4e:e8:83:06:de:e5:ba:89:c0:80:1c:e2: 7c:02:88:6d:2b:1e:40:e1:22:b3:3e:0c:c5:8c:7f:7b:1e:e5: e1:3e:41:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrxrsJli1w9POEzT0MePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3 YTg0ZGUwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD Eyg0YzJmYzAyNmQxYTY3ZjI0N2YzYjM5YWI5N2U4MTgxMGUzYzMyZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyr/n0P4DJNup5KffWKmSmXN7sUC qB5Ai2Ufs94vLo3uKo7FABUc+IP2G0HHsVaRttY9/xi3AxoOFK4YDrBQfLiGQsGu CkzEm+sp3/BHKv9kNvDLvgGSK7uS19rQo3to8mqSDYxnIje4RITzMgHQ6wgyUv+O AupMQdzarPxeNK7kPCrMxKMY007a3TRVfX/JHLzXDR3zKpFARhCOpzY7f5qk30kX FxsoYbF5iHuqiveRVsZy2QvO/5H2EMinxIozVu6oGVD/MzhHGj92czceU/xiV7XM 3eyRYUVYCwDIW1NIiV42g4+FyHHzJH14oLvysn/FU2uLzCVAC8W/a0HuQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwvwCbRpn8kfzs5q5foGBDjwy6DMB8GA1UdIwQY MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXrN91Nc epiGyEvLc9n2GQ7riGKmaRiKPnJcbb5EHh7q1NX8tlifsjbMZRLdaR5nNQhFXKky vP8Gv4uyIAy2Xq/8Tr5Qp3X53Vg1+Axdc7y6lYfw+XP/wbtHLBuUiXPQ0pYtpYq/ VrNUBPWAiCm74x+ngJtJKkM7LSsseKKL5MbJScnTOSXfiQd7ysp4XjFBc7QsxMuE 2sme9C5lXrKx40FXQFu88nIypi7sL2hxLKt/P8BkY9FSfnY+Gi1PBrz2rFiI9lvg I48+YcJhAwYQDqn5yh2WvoxbKwSGcD0XTuiDBt7luonAgBzifAKIbSseQOEisz4M xYx/ex7l4T5Bnw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:25 2025 by rpki-client