This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json) Hash identifier: hiwvYKIeKMTGusS4TNrVpvGzlITyHTspS//eoGdj21o= Subject key identifier: 95:5E:2E:33:8F:CA:6D:32:74:F1:34:B1:FA:C9:8E:94:D0:27:24:9B Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Certificate serial: 019AF1648CF9BA94820B68EC092E7928B6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft Manifest number: 0A80 Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=) 2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: U+egFsuv/MqasFbG86/t15IxNhByZ5/xUhLRlX0c8HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8c:f9:ba:94:82:0b:68:ec:09:2e:79:28:b6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=955e2e338fca6d3274f134b1fac98e94d027249b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:52:68:18:20:8d:9d:da:24:bb:af:39:fe: 42:a0:c0:bc:c4:9d:b4:8f:6d:5c:8d:25:bb:c6:ce: fc:13:4c:fc:35:ea:91:3b:dc:6f:5f:40:52:5f:b6: 4b:34:a2:f7:95:70:41:0a:f1:63:f7:a6:a2:9b:21: a8:fb:e3:f0:22:e5:c5:95:83:0f:97:b1:fb:e5:a3: 57:1a:8c:1b:57:fd:8e:22:cf:b0:e4:40:b7:2e:63: aa:88:95:6e:5f:13:e6:c2:5d:99:b8:04:ba:23:99: 14:07:a4:a8:24:d4:29:80:c7:99:a4:08:df:0d:ed: e1:82:a4:30:d2:74:9f:18:a9:90:bc:98:f7:13:35: 27:a8:e9:bd:ec:98:9a:fd:38:8d:40:91:86:bf:40: 24:0c:59:c4:21:57:66:ee:65:88:0b:2f:07:c2:13: 14:70:ac:04:c6:6b:21:f6:cb:11:b8:21:a3:72:69: 2d:c4:40:42:5e:d1:cf:88:f0:f3:7c:b0:f6:0a:82: c4:08:2e:94:ba:f8:53:f2:32:1c:e2:b9:87:6a:98: 11:64:67:bc:fa:e9:ca:be:38:8a:d1:7d:66:20:fc: ef:68:2a:06:fb:75:3d:f4:59:23:62:09:d2:78:1e: e3:e2:31:7d:50:d6:4a:f6:cd:5b:d1:00:c5:aa:a2: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:2E:33:8F:CA:6D:32:74:F1:34:B1:FA:C9:8E:94:D0:27:24:9B X509v3 Authority Key Identifier: keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4c:b8:cc:0b:76:b9:54:dd:e2:a6:3e:0d:4f:aa:f8:1b:82: 9b:e7:ee:87:0a:df:68:de:b1:f2:47:6f:1a:6b:73:b6:7b:c2: d0:1b:21:27:3e:83:e0:17:93:8e:a8:6c:79:1a:1e:93:8c:f5: 21:18:fe:ad:d3:1d:19:41:99:d2:2e:6d:25:38:c8:72:32:19: 80:62:c1:67:a8:a0:e6:63:7f:94:71:80:23:43:4e:f0:e0:54: 64:34:42:7f:98:ab:55:41:a3:a4:3a:32:f1:b7:56:fd:1f:3a: 55:f0:22:e9:d0:32:21:ef:88:55:46:4f:9d:a0:31:07:dc:76: e5:20:0f:2e:66:71:95:3c:e8:9a:a3:88:67:92:fe:3d:21:56: d1:7d:05:6c:8e:7f:a1:06:e3:91:03:5e:7f:3c:e9:6a:21:55: 3e:3d:4e:08:70:8d:29:3b:ec:ea:e8:75:97:f4:11:af:98:8a: 14:eb:a7:52:e7:97:7c:6d:b6:e4:dd:ba:df:4b:46:8a:09:81: 3a:35:b8:2c:a9:a4:96:af:ae:6b:71:30:99:14:60:a8:91:84: 46:f4:71:84:11:d6:d6:7d:38:20:c7:79:a9:84:7a:40:6e:9a: 1c:07:d9:98:8d:64:59:b0:e5:78:8d:9e:29:09:6d:09:e2:2e: 62:09:e4:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIz5upSCC2jsCS55KLbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj NmU5ZWIwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD Eyg5NTVlMmUzMzhmY2E2ZDMyNzRmMTM0YjFmYWM5OGU5NGQwMjcyNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTxSaBggjZ3aJLuvOf5CoMC8xJ20 j21cjSW7xs78E0z8NeqRO9xvX0BSX7ZLNKL3lXBBCvFj96aimyGo++PwIuXFlYMP l7H75aNXGowbV/2OIs+w5EC3LmOqiJVuXxPmwl2ZuAS6I5kUB6SoJNQpgMeZpAjf De3hgqQw0nSfGKmQvJj3EzUnqOm97Jia/TiNQJGGv0AkDFnEIVdm7mWICy8HwhMU cKwExmsh9ssRuCGjcmktxEBCXtHPiPDzfLD2CoLECC6UuvhT8jIc4rmHapgRZGe8 +unKvjiK0X1mIPzvaCoG+3U99FkjYgnSeB7j4jF9UNZK9s1b0QDFqqLW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVeLjOPym0ydPE0sfrJjpTQJySbMB8GA1UdIwQY MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0y4zAt2 uVTd4qY+DU+q+BuCm+fuhwrfaN6x8kdvGmtztnvC0BshJz6D4BeTjqhseRoek4z1 IRj+rdMdGUGZ0i5tJTjIcjIZgGLBZ6ig5mN/lHGAI0NO8OBUZDRCf5irVUGjpDoy 8bdW/R86VfAi6dAyIe+IVUZPnaAxB9x25SAPLmZxlTzomqOIZ5L+PSFW0X0FbI5/ oQbjkQNefzzpaiFVPj1OCHCNKTvs6uh1l/QRr5iKFOunUueXfG225N2630tGigmB OjW4LKmklq+ua3EwmRRgqJGERvRxhBHW1n04IMd5qYR6QG6aHAfZmI1kWbDleI2e KQltCeIuYgnk9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:24 2025 by rpki-client