This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json) Hash identifier: 7stFAUHsAcQDLmkb//uRjJcmwgpwjdH8cWesKzt3Zzw= Subject key identifier: 50:0A:86:68:81:E3:A6:A1:FB:6E:74:5F:B1:5A:9C:D7:72:43:B5:D0 Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Certificate serial: 019AF50BA567DBFDED2D39915AD15E1EEB7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft Manifest number: 10F4 Signing time: Sat 06 Dec 2025 19:02:52 +0000 Manifest this update: Sat 06 Dec 2025 19:02:52 +0000 Manifest next update: Sun 07 Dec 2025 19:02:52 +0000 Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=) 2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: PTWmMRkv41fdV38mzdkaYmzNMppWxtXxo0mj05quEKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a5:67:db:fd:ed:2d:39:91:5a:d1:5e:1e:eb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1 Validity Not Before: Dec 6 19:02:52 2025 GMT Not After : Dec 7 19:02:52 2025 GMT Subject: CN=500a866881e3a6a1fb6e745fb15a9cd77243b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:63:d5:e7:03:3a:21:61:44:50:88:68:b1: f3:18:7d:22:5b:4f:86:57:b2:00:32:19:49:36:89: e8:96:cf:65:d0:46:a6:4f:dc:b4:44:4e:64:5e:c5: ac:85:b5:00:72:26:b3:7f:c5:a0:42:01:b5:71:3a: d4:7d:e6:74:3d:b8:8b:09:15:25:83:1c:da:42:22: 43:9f:91:85:fd:69:3c:fb:4b:e9:2c:c4:17:47:fb: 42:c9:b9:ee:68:c5:af:93:13:59:e4:86:44:0e:3e: a0:61:cd:32:04:36:cc:05:43:d2:a3:d0:bb:81:05: fc:66:63:5d:43:c1:e7:60:5d:3d:a1:77:5f:78:5f: 6d:80:4e:45:5c:74:ae:9e:95:82:aa:bb:58:6c:84: 39:d3:54:14:b7:db:6a:94:c1:4f:40:92:67:f5:79: 7f:7f:dc:d9:39:e8:a1:ab:2f:7f:e4:7c:25:72:3e: 65:f4:77:62:c2:94:a5:1c:d2:2c:3c:77:0a:a3:de: 01:84:e2:90:30:9a:6d:bf:68:8c:cb:42:ca:24:83: 5f:73:b0:4c:56:c9:9c:c1:52:a5:88:57:ba:69:0a: b1:c4:ba:a4:84:6b:6f:ce:fb:fa:e0:0c:2d:27:93: 09:a0:7a:bd:5d:bf:02:c7:9a:5d:19:3e:ea:2b:d1: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:86:68:81:E3:A6:A1:FB:6E:74:5F:B1:5A:9C:D7:72:43:B5:D0 X509v3 Authority Key Identifier: keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:97:67:90:a5:9e:73:e7:4c:aa:a5:cd:07:fe:ee:94:4d: fa:f0:5a:e4:89:26:a9:5e:9c:7b:95:8f:c7:31:74:16:0a:77: 62:cc:20:ae:1f:86:20:9f:59:b7:fc:b8:31:5e:0b:b5:42:69: 37:5d:7c:92:57:b9:e1:1a:3b:af:3a:70:c9:a7:1c:e1:e1:4b: b6:e2:16:63:a7:57:50:5a:c3:d0:9b:da:84:0f:d0:d4:1c:34: 39:95:71:d0:5e:05:30:66:65:59:e4:9d:8a:46:a2:96:ff:64: 71:85:45:9b:2c:db:92:55:70:24:8b:2b:0f:4b:e7:4b:c5:5b: 12:79:41:02:44:5c:ef:7f:90:fa:51:cb:9c:24:c6:46:eb:56: 10:dd:c0:9b:37:f0:bf:39:36:86:55:6d:69:2e:e9:1d:95:e7: 7c:43:81:f2:db:61:bd:b4:43:46:d2:fb:05:ad:3a:c6:78:b5: cb:04:95:53:46:cc:69:f6:b6:d3:c9:3a:fc:80:8d:5f:fe:8a: 01:6c:8c:6c:95:d1:de:ef:c4:58:0c:0a:be:82:a9:1b:71:30: b5:e6:77:6f:73:2b:e9:79:29:6e:68:19:08:9a:a3:e7:16:4e: 9f:6e:1e:6c:f7:21:4c:72:9b:18:13:53:35:a8:67:21:31:33: fc:bf:02:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6Vn2/3tLTmRWtFeHut/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2 YmU5YzEwHhcNMjUxMjA2MTkwMjUyWhcNMjUxMjA3MTkwMjUyWjAzMTEwLwYDVQQD Eyg1MDBhODY2ODgxZTNhNmExZmI2ZTc0NWZiMTVhOWNkNzcyNDNiNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkBj1ecDOiFhRFCIaLHzGH0iW0+G V7IAMhlJNonols9l0EamT9y0RE5kXsWshbUAciazf8WgQgG1cTrUfeZ0PbiLCRUl gxzaQiJDn5GF/Wk8+0vpLMQXR/tCybnuaMWvkxNZ5IZEDj6gYc0yBDbMBUPSo9C7 gQX8ZmNdQ8HnYF09oXdfeF9tgE5FXHSunpWCqrtYbIQ501QUt9tqlMFPQJJn9Xl/ f9zZOeihqy9/5Hwlcj5l9HdiwpSlHNIsPHcKo94BhOKQMJptv2iMy0LKJINfc7BM VsmcwVKliFe6aQqxxLqkhGtvzvv64AwtJ5MJoHq9Xb8Cx5pdGT7qK9HBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAKhmiB46ah+250X7FanNdyQ7XQMB8GA1UdIwQY MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt OTdiODljNDdkNTBhLzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTKXZ5Cl nnPnTKqlzQf+7pRN+vBa5IkmqV6ce5WPxzF0Fgp3Yswgrh+GIJ9Zt/y4MV4LtUJp N118kle54Ro7rzpwyacc4eFLtuIWY6dXUFrD0JvahA/Q1Bw0OZVx0F4FMGZlWeSd ikailv9kcYVFmyzbklVwJIsrD0vnS8VbEnlBAkRc73+Q+lHLnCTGRutWEN3Amzfw vzk2hlVtaS7pHZXnfEOB8tthvbRDRtL7Ba06xni1ywSVU0bMafa208k6/ICNX/6K AWyMbJXR3u/EWAwKvoKpG3EwteZ3b3Mr6XkpbmgZCJqj5xZOn24ebPchTHKbGBNT NahnITEz/L8CfQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:27:33 2025 by rpki-client