This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: kV3zWf4VWv62FyYQ9VWjU7riYqHoBcIhAACzAHMT828= Subject key identifier: A6:6B:84:AE:F9:CF:92:39:9C:69:55:FE:D3:81:20:BF:4D:97:9F:61 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019AF4D2B958725BA2CE5415BBB1303D4BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0DCD Signing time: Sat 06 Dec 2025 18:00:41 +0000 Manifest this update: Sat 06 Dec 2025 18:00:41 +0000 Manifest next update: Sun 07 Dec 2025 18:00:41 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: /9PTG7pI5Etxsdyw2uRytP1a/C+zxjCDsxzSpa0vtj0=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (hash: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b9:58:72:5b:a2:ce:54:15:bb:b1:30:3d:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 6 18:00:41 2025 GMT Not After : Dec 7 18:00:41 2025 GMT Subject: CN=a66b84aef9cf92399c6955fed38120bf4d979f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:14:9f:72:54:81:02:4f:c7:2a:17:44:93:cc: 9b:da:2b:02:a3:8c:bd:a1:72:55:f7:d1:e3:59:2e: bb:22:52:f3:1b:0d:b0:cc:d8:97:16:5a:64:23:71: b3:45:70:90:3a:ef:a8:6e:db:5b:ca:a0:dc:72:76: f6:2c:fa:cf:7c:3e:18:9f:e0:27:f0:ca:6f:cd:9f: 16:ff:98:f2:6c:5c:73:be:08:69:b5:44:ba:3f:1a: 01:7f:f3:7d:7f:f3:20:c0:68:9e:72:81:ce:17:52: 9d:ae:01:ad:56:de:a4:49:c5:71:8b:6c:65:80:35: 17:dd:2c:57:c6:76:d5:c9:6b:64:bc:13:e8:8f:48: c9:87:7b:ba:df:60:dd:f8:65:1e:34:80:b9:b0:20: e4:17:a4:f7:43:7d:da:bc:5f:9b:30:43:4e:d8:d8: 27:6a:69:f1:7c:67:fa:16:f9:b5:40:b0:21:24:54: 60:d6:c1:4f:c5:75:68:c7:f4:12:5f:b7:eb:97:cc: d8:f9:60:fd:92:a2:65:de:14:5a:39:21:55:87:c1: ed:f0:e2:0f:4a:af:fd:b9:59:4a:0f:6f:e2:8a:47: 5f:40:a5:ef:73:08:99:80:f8:22:3c:aa:78:07:ff: 51:49:2a:8b:83:42:04:bb:07:94:3a:9b:c3:67:41: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6B:84:AE:F9:CF:92:39:9C:69:55:FE:D3:81:20:BF:4D:97:9F:61 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:48:4f:c1:0e:46:6f:fc:7b:7f:eb:87:bf:30:9b:f6:15:40: 4e:35:8a:a7:a1:cd:b8:52:ae:55:12:43:4d:e5:04:06:a0:81: a2:4d:be:f1:63:7d:5d:b5:36:0f:62:12:5b:f6:f8:ed:7e:d1: d7:02:50:65:2f:3d:46:71:7f:29:37:50:1c:9c:b9:4c:6a:b4: db:91:80:d8:87:09:f1:e9:a6:39:59:44:23:3e:b0:86:73:71: 65:db:a5:a0:f7:a0:1b:b9:b6:58:be:9b:46:f8:fb:bc:aa:7b: ee:1d:8e:0d:49:30:60:6a:5b:9e:4e:36:88:a3:39:3b:f0:9e: ef:5d:58:29:ee:21:ff:da:e8:3b:40:02:59:2f:8a:32:c4:ff: ec:b7:37:30:f5:04:3c:9d:10:37:b5:af:c7:5d:9d:c0:b0:41: 02:25:cf:24:11:d9:bf:9e:13:bc:d0:56:4f:bd:81:0c:9f:8d: 41:33:9d:86:93:1f:a7:c3:c8:69:22:39:c0:2d:23:47:2b:c1: cd:bc:14:29:08:02:19:2d:ea:b4:0b:6e:9a:e8:0f:a0:6f:41: 9a:00:19:05:1b:b5:f7:d3:09:6c:87:fa:4a:57:a7:28:7c:4e: 94:98:7e:42:31:71:9e:ce:3b:24:6d:c9:dc:6d:8f:f8:b2:87: fc:32:51:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rlYcluizlQVu7EwPUv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjA2MTgwMDQxWhcNMjUxMjA3MTgwMDQxWjAzMTEwLwYDVQQD EyhhNjZiODRhZWY5Y2Y5MjM5OWM2OTU1ZmVkMzgxMjBiZjRkOTc5ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RSfclSBAk/HKhdEk8yb2isCo4y9 oXJV99HjWS67IlLzGw2wzNiXFlpkI3GzRXCQOu+obttbyqDccnb2LPrPfD4Yn+An 8MpvzZ8W/5jybFxzvghptUS6PxoBf/N9f/MgwGiecoHOF1KdrgGtVt6kScVxi2xl gDUX3SxXxnbVyWtkvBPoj0jJh3u632Dd+GUeNIC5sCDkF6T3Q33avF+bMENO2Ngn amnxfGf6Fvm1QLAhJFRg1sFPxXVox/QSX7frl8zY+WD9kqJl3hRaOSFVh8Ht8OIP Sq/9uVlKD2/iikdfQKXvcwiZgPgiPKp4B/9RSSqLg0IEuweUOpvDZ0El2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZrhK75z5I5nGlV/tOBIL9Nl59hMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0hPwQ5G b/x7f+uHvzCb9hVATjWKp6HNuFKuVRJDTeUEBqCBok2+8WN9XbU2D2ISW/b47X7R 1wJQZS89RnF/KTdQHJy5TGq025GA2IcJ8emmOVlEIz6whnNxZduloPegG7m2WL6b Rvj7vKp77h2ODUkwYGpbnk42iKM5O/Ce711YKe4h/9roO0ACWS+KMsT/7Lc3MPUE PJ0QN7Wvx12dwLBBAiXPJBHZv54TvNBWT72BDJ+NQTOdhpMfp8PIaSI5wC0jRyvB zbwUKQgCGS3qtAtumugPoG9BmgAZBRu199MJbIf6SlenKHxOlJh+QjFxns47JG3J 3G2P+LKH/DJR1g== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:28 2025 by rpki-client