This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json) Hash identifier: 6CjD3NFhzhGQdDVlyLC+/CAuVf24tOY0PiUnMCeF/98= Subject key identifier: 7C:F0:B0:76:34:00:E1:FB:01:5C:C6:17:FC:8C:E6:B9:F8:8D:EA:7C Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019AF35244325227AB80792285CABD121D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:00:46 +0000 Manifest this update: Sat 06 Dec 2025 11:00:46 +0000 Manifest next update: Sun 07 Dec 2025 11:00:46 +0000 Files and hashes: 1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=) 2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=) 3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=) 4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: JLU92nyLQLVPWmGVDltWRtZ0ZO+K/z9b6zPOuqO/5CQ=) 5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=) 6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:44:32:52:27:ab:80:79:22:85:ca:bd:12:1d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Dec 6 11:00:46 2025 GMT Not After : Dec 7 11:00:46 2025 GMT Subject: CN=7cf0b0763400e1fb015cc617fc8ce6b9f88dea7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:66:bd:e3:cf:cb:f7:de:4e:27:3c:cf:3a: d8:0e:24:c5:e8:99:d9:19:2b:fe:24:06:82:85:76: 5e:b4:a1:40:4d:d2:5b:d4:f0:0a:23:df:9a:58:81: b2:3b:c7:d9:1f:aa:c2:85:fc:a9:cb:ad:71:c0:1e: 7a:2f:db:36:0b:f8:c0:18:d2:83:9f:d5:2f:10:a3: 41:5a:21:19:10:ae:5d:80:0b:8b:ab:17:21:b1:2c: 39:03:10:2c:ed:df:7a:95:7c:b0:ad:f8:24:0a:20: 9e:7e:7d:39:6d:83:15:80:42:9d:8d:bf:b1:76:5c: 05:b4:f0:7f:16:13:eb:8c:5a:ef:19:32:2f:26:28: 55:72:cc:84:a9:71:53:54:a3:14:a7:68:77:b2:d8: f0:a9:94:a3:d7:00:ad:ec:88:b4:fd:b2:d5:85:83: 80:ca:d4:8c:92:f3:5b:f3:8a:5d:e5:b1:9c:8a:68: 35:84:f7:45:3e:fd:cb:e7:37:73:58:2b:d7:8c:8f: 3e:ef:0b:be:4a:e4:d6:cc:27:a0:1f:31:fd:c1:e9: c7:24:96:93:ce:4a:0a:1e:b6:0b:2b:08:e0:59:be: 58:6d:a8:23:0d:ee:28:f2:06:8e:31:15:b4:0c:a4: 11:5f:4c:06:08:e3:75:5f:bd:34:b7:6c:db:b8:ef: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:B0:76:34:00:E1:FB:01:5C:C6:17:FC:8C:E6:B9:F8:8D:EA:7C X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b1:53:e2:8d:9b:80:89:e2:f4:df:b8:55:84:21:e7:57:ee: 8d:62:e6:3f:dc:05:8f:4c:33:93:d7:ec:bf:3d:11:9a:32:ff: 67:19:3e:c6:c9:2a:c8:10:14:4f:07:5d:0c:84:28:9c:84:af: ee:db:ec:b9:af:39:f6:00:ed:3f:2e:48:c2:f6:1c:ac:a8:7a: 52:c8:cf:41:49:c6:47:01:a2:86:9a:4f:57:eb:cd:5b:20:70: 40:96:32:bf:1e:0e:8a:ea:e5:fd:58:03:8a:c1:97:02:b7:cc: ec:10:48:9f:86:e3:60:af:51:5d:f0:60:19:50:6e:cc:5a:3e: da:42:88:77:ec:5d:08:bf:d6:79:9e:3f:62:be:9d:b1:37:6c: be:57:73:f9:9d:a4:3a:c1:fd:3d:af:10:6e:94:c3:8e:5d:12: 7c:2f:2b:44:4e:bf:3e:b9:d8:4c:98:e5:0a:22:5b:78:d0:c1: 54:be:8f:46:d3:8d:1c:4a:13:4a:d7:f4:f4:65:2c:c4:73:e6: cb:e9:cd:2e:cc:18:9f:88:8c:7d:56:8a:95:10:ad:ec:a1:28: 60:17:36:60:b3:68:e1:87:97:67:37:ff:49:73:7a:b0:4d:7b: ff:96:ea:d0:36:af:3c:2d:39:e4:78:be:c9:6a:82:42:68:06: b1:a2:fa:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkQyUiergHkihcq9Eh1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjUxMjA2MTEwMDQ2WhcNMjUxMjA3MTEwMDQ2WjAzMTEwLwYDVQQD Eyg3Y2YwYjA3NjM0MDBlMWZiMDE1Y2M2MTdmYzhjZTZiOWY4OGRlYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMtmvePPy/feTic8zzrYDiTF6JnZ GSv+JAaChXZetKFATdJb1PAKI9+aWIGyO8fZH6rChfypy61xwB56L9s2C/jAGNKD n9UvEKNBWiEZEK5dgAuLqxchsSw5AxAs7d96lXywrfgkCiCefn05bYMVgEKdjb+x dlwFtPB/FhPrjFrvGTIvJihVcsyEqXFTVKMUp2h3stjwqZSj1wCt7Ii0/bLVhYOA ytSMkvNb84pd5bGcimg1hPdFPv3L5zdzWCvXjI8+7wu+SuTWzCegHzH9wenHJJaT zkoKHrYLKwjgWb5YbagjDe4o8gaOMRW0DKQRX0wGCON1X700t2zbuO9N8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzwsHY0AOH7AVzGF/yM5rn4jep8MB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7FT4o2b gIni9N+4VYQh51fujWLmP9wFj0wzk9fsvz0RmjL/Zxk+xskqyBAUTwddDIQonISv 7tvsua859gDtPy5IwvYcrKh6UsjPQUnGRwGihppPV+vNWyBwQJYyvx4Oiurl/VgD isGXArfM7BBIn4bjYK9RXfBgGVBuzFo+2kKId+xdCL/WeZ4/Yr6dsTdsvldz+Z2k OsH9Pa8QbpTDjl0SfC8rRE6/PrnYTJjlCiJbeNDBVL6PRtONHEoTStf09GUsxHPm y+nNLswYn4iMfVaKlRCt7KEoYBc2YLNo4YeXZzf/SXN6sE17/5bq0DavPC055Hi+ yWqCQmgGsaL6wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:47 2025 by rpki-client