This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: st+y4bp71qQBxStwEJ9qUMNX4mCMZI+ygi3HeJurOlg= Subject key identifier: C2:97:03:1C:FB:F4:55:45:0C:46:A2:A5:C5:F5:B1:E3:1B:20:69:DA Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B329F03383E8344611A780BF05F38AF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0DED Signing time: Thu 18 Dec 2025 18:00:40 +0000 Manifest this update: Thu 18 Dec 2025 18:00:40 +0000 Manifest next update: Fri 19 Dec 2025 18:00:40 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: 5oUQV6qxQWmbgLXvqOR6x7qMVJfK56/t4s6G82T46FM=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: fT8PqrrHFdeL6RPAjK_QqVtkY5U.roa (hash: EdNppWYe0lfaiYboPQqTv59YS9lpRdN9I3wPP2GcUXA=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9f:03:38:3e:83:44:61:1a:78:0b:f0:5f:38:af:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Dec 18 18:00:40 2025 GMT Not After : Dec 19 18:00:40 2025 GMT Subject: CN=c297031cfbf455450c46a2a5c5f5b1e31b2069da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:f4:2a:ba:9a:d0:7e:5c:2d:30:b5:95:a0: e7:be:eb:cf:64:0a:ec:08:b2:3f:60:41:77:19:18: 7e:23:6d:32:4e:1d:a6:d1:2b:41:8f:45:61:e9:2f: 18:f7:1a:9c:4a:30:ef:6a:28:34:39:00:9e:e7:47: de:5f:1e:69:ee:95:1a:c9:07:a6:da:9c:dd:24:79: e6:d3:a8:8a:44:b2:57:c4:04:74:5c:55:d1:35:b3: bd:e0:d1:20:e3:b2:0f:97:7c:88:98:c6:54:2c:8d: 34:8b:7d:26:6d:f7:d4:fb:a1:de:d4:60:0d:89:a7: b7:97:1e:cf:af:73:40:5f:a8:1e:4f:a6:c0:5a:67: f0:82:0f:9a:f9:16:7c:74:e4:f3:c8:71:6f:cd:c0: eb:1a:62:76:4e:7c:ec:7c:2a:08:63:a6:c5:61:c8: 2b:6d:99:22:09:cc:ad:82:12:25:25:59:ba:c5:bb: 00:42:57:3d:91:9b:5d:40:d4:b2:29:fa:ee:1a:26: eb:f2:44:66:dc:14:27:d0:83:30:e2:e9:f8:02:23: f9:4e:2f:cc:0b:bf:c0:8e:1f:40:96:2c:ea:05:08: a5:0a:c7:6a:d6:93:12:c7:7c:f2:81:fb:2f:aa:f1: 14:66:ad:99:6a:89:9a:78:5a:94:7a:26:d3:e0:7e: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:97:03:1C:FB:F4:55:45:0C:46:A2:A5:C5:F5:B1:E3:1B:20:69:DA X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:81:cb:07:0b:9a:99:bf:07:6a:93:91:8b:d1:df:ab:8c:44: 13:a1:7b:61:6c:d5:5f:90:69:c5:0e:1a:b6:b0:d3:8b:10:dd: 78:36:dc:e1:f7:d7:f8:09:25:6a:3f:3b:08:b3:d6:52:b9:a9: 4d:9d:75:34:be:a1:10:98:26:8c:40:0a:17:a1:ad:d4:0c:f3: 7a:6c:96:4a:15:98:4f:ab:bd:23:e2:1c:9d:51:0f:bf:4c:62: a0:67:1c:7b:0a:4d:a1:43:b9:f7:f7:6e:98:d1:6c:b3:af:8d: 38:a8:0e:a7:ba:01:e9:68:f4:f7:45:ff:d7:1e:49:2d:35:4f: 77:99:4a:8b:f5:f3:21:e8:85:37:ed:2d:ec:a6:6a:28:ef:14: 57:f0:64:1d:42:4a:6c:92:25:7a:d1:8b:36:5b:9f:d1:38:ac: 3a:6c:d5:28:10:37:98:50:cc:bf:81:9a:6c:ee:f6:1f:1e:62: 88:42:04:38:f6:a1:11:f0:f1:62:b9:19:98:9c:4c:eb:3c:32: c4:e7:10:99:09:db:ef:94:e3:8b:bc:45:6a:0b:9f:90:ac:b5: 30:10:97:3f:60:1d:56:6c:65:00:28:8d:b2:be:99:de:6c:06: f2:b4:29:2e:74:fe:af:45:68:05:1a:9f:e9:28:1f:18:4c:01: 69:d4:73:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynwM4PoNEYRp4C/BfOK9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMjE4MTgwMDQwWhcNMjUxMjE5MTgwMDQwWjAzMTEwLwYDVQQD EyhjMjk3MDMxY2ZiZjQ1NTQ1MGM0NmEyYTVjNWY1YjFlMzFiMjA2OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/0Krqa0H5cLTC1laDnvuvPZArs CLI/YEF3GRh+I20yTh2m0StBj0Vh6S8Y9xqcSjDvaig0OQCe50feXx5p7pUayQem 2pzdJHnm06iKRLJXxAR0XFXRNbO94NEg47IPl3yImMZULI00i30mbffU+6He1GAN iae3lx7Pr3NAX6geT6bAWmfwgg+a+RZ8dOTzyHFvzcDrGmJ2TnzsfCoIY6bFYcgr bZkiCcytghIlJVm6xbsAQlc9kZtdQNSyKfruGibr8kRm3BQn0IMw4un4AiP5Ti/M C7/Ajh9AlizqBQilCsdq1pMSx3zygfsvqvEUZq2ZaomaeFqUeibT4H7MCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKXAxz79FVFDEaipcX1seMbIGnaMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIHLBwua mb8HapORi9Hfq4xEE6F7YWzVX5BpxQ4atrDTixDdeDbc4ffX+Aklaj87CLPWUrmp TZ11NL6hEJgmjEAKF6Gt1AzzemyWShWYT6u9I+IcnVEPv0xioGccewpNoUO59/du mNFss6+NOKgOp7oB6Wj090X/1x5JLTVPd5lKi/XzIeiFN+0t7KZqKO8UV/BkHUJK bJIletGLNluf0TisOmzVKBA3mFDMv4GabO72Hx5iiEIEOPahEfDxYrkZmJxM6zwy xOcQmQnb75Tji7xFagufkKy1MBCXP2AdVmxlACiNsr6Z3mwG8rQpLnT+r0VoBRqf 6SgfGEwBadRz9A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:58:29 2025 by rpki-client