This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json) Hash identifier: XIJyzVqm+6J9naU1jWE3j+YV6wQhr5Lhup5bAjr7jHQ= Subject key identifier: A3:E5:81:4C:21:80:A5:A8:62:AC:30:F1:DC:D4:1A:EC:8C:92:47:B6 Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019AF0BF757EFF41E9486F7909E279B77A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft Manifest number: 138E Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=) 2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=) 3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=) 4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=) 5: jSjfKvzyOnWZuydcXt3rIa9SA5M.roa (hash: vLtsL1YPKmn6qXZiRbrjcjOEo4/Oi9668rEJ8VN4zCs=) 6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: upjD+Q6bOqLovbQM8S+/ar2tK6YUl0YgVAeqgRbPeBI=) 7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:75:7e:ff:41:e9:48:6f:79:09:e2:79:b7:7a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=a3e5814c2180a5a862ac30f1dcd41aec8c9247b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:55:0e:5e:1a:77:54:44:00:69:e4:1e:02: 2b:7d:5d:a1:7f:0b:36:87:24:90:b0:c7:bf:d5:b1: 37:04:59:99:63:d8:97:61:7d:a0:37:b3:09:5b:e9: 0b:b0:56:e6:97:04:b9:95:e5:af:6c:af:38:24:59: 42:d6:bf:b8:b3:0c:23:fb:08:31:46:c2:45:13:81: 13:f3:79:2b:e6:d1:0d:13:c3:2b:45:5d:49:54:33: a1:7f:9c:a0:f5:3f:fc:0f:7d:5a:73:18:a4:fa:1c: e4:1e:6e:04:9c:04:49:39:11:60:10:f4:48:ec:be: 49:c5:a4:07:19:04:7f:11:6b:8b:0d:fa:9d:01:41: 89:30:17:c2:ba:a1:dd:87:bf:52:ae:11:dc:2f:26: 63:ae:48:af:67:ea:ac:8c:33:aa:c5:29:94:7b:5e: 8e:a2:08:0c:c5:51:a8:ec:2f:f6:9e:fd:e5:c2:3b: da:1b:3f:2a:2f:ad:6e:8b:e1:0f:f9:8a:4e:35:48: 60:08:46:04:33:58:b5:76:10:7c:c2:82:16:7b:b6: cc:9a:02:5c:67:58:37:60:8e:06:10:40:e3:1e:59: dd:fa:9b:c7:3b:24:63:d8:aa:9e:e8:d0:8f:66:3a: 0a:c8:03:56:f5:74:97:a2:63:0b:38:d2:3d:af:b5: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:81:4C:21:80:A5:A8:62:AC:30:F1:DC:D4:1A:EC:8C:92:47:B6 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b7:40:12:da:4f:4d:1e:d7:80:6f:ae:91:a2:64:28:98:04: 91:87:04:cb:54:fa:0b:0e:7e:e2:1a:6a:0c:8b:41:9d:13:2d: e0:80:98:4a:8e:16:5b:d6:59:53:bc:82:9a:2e:b7:7b:d4:43: 81:ac:ce:92:8d:5c:28:a6:57:c4:d4:6c:e4:11:1e:35:08:e1: ea:f7:22:d9:ff:3b:e0:3b:f0:6a:b4:5b:d4:53:5b:be:09:8e: c4:54:1a:13:88:56:7c:d2:21:2a:08:be:96:65:2d:23:17:52: a0:15:27:b7:21:af:3a:26:83:b2:64:e4:de:91:b6:a0:12:46: 31:de:4a:1b:7b:96:6c:83:25:35:1c:77:52:79:cc:b7:f3:37: f3:9d:e1:1c:c2:6a:d3:40:f6:50:3f:aa:e0:69:8f:95:03:37: f5:02:c3:a9:28:bd:6f:18:b3:95:89:72:92:43:3c:76:70:61: 0f:40:ef:44:8a:23:07:df:b8:93:e0:73:98:9c:ec:8b:1a:84: cb:a3:e6:fe:a7:8b:07:05:b6:87:d4:6f:03:4c:47:5d:a7:0a: b2:91:9b:16:54:97:b3:70:91:1e:a0:0d:05:aa:ae:38:0a:1f: 26:c0:c7:a8:64:2a:c4:33:43:4f:93:94:42:cb:3e:50:fc:8a: e3:d0:0b:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3V+/0HpSG95CeJ5t3oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhhM2U1ODE0YzIxODBhNWE4NjJhYzMwZjFkY2Q0MWFlYzhjOTI0N2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3hVDl4ad1REAGnkHgIrfV2hfws2 hySQsMe/1bE3BFmZY9iXYX2gN7MJW+kLsFbmlwS5leWvbK84JFlC1r+4swwj+wgx RsJFE4ET83kr5tENE8MrRV1JVDOhf5yg9T/8D31acxik+hzkHm4EnARJORFgEPRI 7L5JxaQHGQR/EWuLDfqdAUGJMBfCuqHdh79SrhHcLyZjrkivZ+qsjDOqxSmUe16O oggMxVGo7C/2nv3lwjvaGz8qL61ui+EP+YpONUhgCEYEM1i1dhB8woIWe7bMmgJc Z1g3YI4GEEDjHlnd+pvHOyRj2Kqe6NCPZjoKyANW9XSXomMLONI9r7W4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPlgUwhgKWoYqww8dzUGuyMkke2MB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrdAEtpP TR7XgG+ukaJkKJgEkYcEy1T6Cw5+4hpqDItBnRMt4ICYSo4WW9ZZU7yCmi63e9RD gazOko1cKKZXxNRs5BEeNQjh6vci2f874DvwarRb1FNbvgmOxFQaE4hWfNIhKgi+ lmUtIxdSoBUntyGvOiaDsmTk3pG2oBJGMd5KG3uWbIMlNRx3UnnMt/M3853hHMJq 00D2UD+q4GmPlQM39QLDqSi9bxizlYlykkM8dnBhD0DvRIojB9+4k+BzmJzsixqE y6Pm/qeLBwW2h9RvA0xHXacKspGbFlSXs3CRHqANBaquOAofJsDHqGQqxDNDT5OU Qss+UPyK49AL5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:00 2025 by rpki-client