This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json) Hash identifier: UAF2sgY5BNql37Ctms0OMdbXI923P4rIRcpZO+7H55k= Subject key identifier: A8:A4:B9:B2:68:0C:6D:81:45:3A:B6:16:F6:50:8D:8F:22:59:77:78 Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b Certificate serial: 019AF12DF59753210A950102EF99D6B1010F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft Manifest number: 0488 Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: 8l8I+o4LzdnBg3WU3hCYJg5ruK0OGlcmdmEBfQtyyjs=) 2: q6uLwCPUOFh0yPpYrfw-G5laCq4.roa (hash: P69J+km/g8LXq0BVXp4jTkXxFAbXvFeOKCLpK5Pw804=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f5:97:53:21:0a:95:01:02:ef:99:d6:b1:01:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=a8a4b9b2680c6d81453ab616f6508d8f22597778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0a:04:a0:cf:cf:cd:3a:79:9f:81:4f:d3:6f: 16:b5:50:64:2e:5a:e5:72:a0:55:5d:2e:be:fa:f3: a1:89:b1:3b:c1:21:2f:4b:34:ae:de:e8:25:fd:99: a9:57:88:86:65:06:9a:39:c2:9b:b3:de:39:da:4c: 2c:2a:6b:31:62:6a:1f:d9:05:4c:96:38:e6:1e:de: 24:3f:94:37:72:0d:b9:9d:12:36:bf:a8:8e:de:8b: 2b:d6:c8:71:d1:96:1f:0c:39:9c:e9:a0:b8:4e:8e: a5:20:70:5a:39:01:b6:65:35:dd:ab:75:8f:9a:67: bc:75:3c:4d:45:eb:a5:dd:bd:9e:0e:bb:e8:b2:19: d8:60:42:a7:58:db:58:e3:36:54:35:4e:0c:7d:29: 8a:39:6c:31:72:33:1b:a6:dd:86:c2:26:bc:c9:9b: 0f:8b:07:72:37:1e:25:e7:da:79:06:f0:12:65:f4: 0b:14:bc:e2:e2:f7:61:f5:bf:14:08:d1:e3:3d:6a: af:ee:07:c4:9c:40:72:66:c8:9a:1b:3f:eb:44:06: 97:f9:a7:c8:e4:45:67:44:b4:5c:5e:c1:f8:c0:7c: 24:78:76:3f:cc:e7:36:91:0c:50:86:2e:d4:21:a5: e8:8c:59:80:bb:28:97:c4:29:1c:76:fe:93:93:4f: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:B9:B2:68:0C:6D:81:45:3A:B6:16:F6:50:8D:8F:22:59:77:78 X509v3 Authority Key Identifier: keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:14:c3:59:2b:fb:2d:ae:8d:96:a6:bc:6b:c0:d0:23:d5: 0b:3f:6c:58:c3:a8:37:3f:67:cb:fd:d4:1b:df:63:74:d8:1a: e9:9e:49:53:5d:ce:7f:aa:eb:aa:7c:26:3a:57:ff:b0:80:6a: 3c:70:9b:21:d6:20:0e:be:c6:7d:87:d4:d1:5f:90:0f:ba:7d: 8f:21:fb:55:13:5d:35:e1:85:6c:ae:16:8c:ca:18:85:89:76: 92:b3:d8:b6:a9:61:8e:69:f7:91:39:f7:f9:ed:90:f9:e5:7d: be:43:af:37:7e:d2:59:49:7d:09:11:8f:41:c8:c6:10:c1:25: 17:7f:8d:b5:e8:1c:c3:56:c1:c6:40:8b:cf:3e:c2:d8:0d:d7: 4e:56:cf:ed:e5:ef:13:b8:14:5e:63:06:20:40:56:a1:06:6c: 10:f3:b7:95:03:a3:70:cb:c6:83:e1:b1:cb:d3:e2:c6:02:e9: 5a:93:f1:d2:a7:9c:55:45:c3:5f:3b:f6:7c:ea:bb:64:93:a5: 60:94:e8:f1:50:5e:1a:53:48:9c:c9:4e:09:c9:61:68:38:99: 45:c7:af:df:28:bf:1f:c9:4c:fc:40:66:15:8d:fc:7a:22:f7: 12:a1:7e:90:8a:56:57:f0:60:92:4d:86:3b:3f:7c:35:91:ab: 57:f1:c7:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfWXUyEKlQEC75nWsQEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTEyZTJjNjFkMmE4MGU3YzQzODVjNjA4NThjOTFkNzVm MzFlN2IwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EyhhOGE0YjliMjY4MGM2ZDgxNDUzYWI2MTZmNjUwOGQ4ZjIyNTk3Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7woEoM/PzTp5n4FP028WtVBkLlrl cqBVXS6++vOhibE7wSEvSzSu3ugl/ZmpV4iGZQaaOcKbs9452kwsKmsxYmof2QVM ljjmHt4kP5Q3cg25nRI2v6iO3osr1shx0ZYfDDmc6aC4To6lIHBaOQG2ZTXdq3WP mme8dTxNReul3b2eDrvoshnYYEKnWNtY4zZUNU4MfSmKOWwxcjMbpt2Gwia8yZsP iwdyNx4l59p5BvASZfQLFLzi4vdh9b8UCNHjPWqv7gfEnEByZsiaGz/rRAaX+afI 5EVnRLRcXsH4wHwkeHY/zOc2kQxQhi7UIaXojFmAuyiXxCkcdv6Tk09NOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKikubJoDG2BRTq2FvZQjY8iWXd4MB8GA1UdIwQY MBaAFC4RLixh0qgOfEOFxghYyR118x57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEt OTZkMjI4NjFhOTIyLzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEtOTZkMjI4NjFhOTIy LzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX60Uw1kr +y2ujZamvGvA0CPVCz9sWMOoNz9ny/3UG99jdNga6Z5JU13Of6rrqnwmOlf/sIBq PHCbIdYgDr7GfYfU0V+QD7p9jyH7VRNdNeGFbK4WjMoYhYl2krPYtqlhjmn3kTn3 +e2Q+eV9vkOvN37SWUl9CRGPQcjGEMElF3+Ntegcw1bBxkCLzz7C2A3XTlbP7eXv E7gUXmMGIEBWoQZsEPO3lQOjcMvGg+Gxy9PixgLpWpPx0qecVUXDXzv2fOq7ZJOl YJTo8VBeGlNInMlOCclhaDiZRcev3yi/H8lM/EBmFY38eiL3EqF+kIpWV/Bgkk2G Oz98NZGrV/HH5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:55 2025 by rpki-client