This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json) Hash identifier: YbdYc4dHCBN2LhGlwOnuG5FWXQsRVk/annVYNACkOsw= Subject key identifier: 18:B5:D1:1E:FA:92:9A:7F:55:45:EF:D5:EF:FF:F9:64:B6:5B:36:47 Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019AF50B0DBA714535BA384FF7751CC81071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:13 +0000 Manifest this update: Sat 06 Dec 2025 19:02:13 +0000 Manifest next update: Sun 07 Dec 2025 19:02:13 +0000 Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=) 2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: +vJ1TXSRJ4Yg5sGsv7q30uwr79H/jnL4UCafjgZYDn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:0d:ba:71:45:35:ba:38:4f:f7:75:1c:c8:10:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Dec 6 19:02:13 2025 GMT Not After : Dec 7 19:02:13 2025 GMT Subject: CN=18b5d11efa929a7f5545efd5effff964b65b3647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:3c:e7:bc:ad:89:20:86:e0:bd:93:66:da: 74:b5:bc:66:57:6f:48:c8:e2:61:d4:1c:b8:0f:81: 28:dd:7e:f8:bf:0e:55:4b:40:a8:65:e9:87:b1:da: 0f:e4:e7:12:78:ef:ab:36:c0:ae:28:3d:e5:d4:7c: d6:ad:b1:b8:26:4b:50:58:e0:82:30:a2:19:3e:43: 5b:88:e4:93:d0:b6:45:f9:05:e7:c5:0f:5e:53:93: eb:4a:48:c0:c4:20:b6:5b:88:72:de:d0:1b:51:55: 49:26:76:ff:b5:78:60:a1:40:d8:b3:b6:10:57:0f: f4:e0:0c:f7:41:ab:99:71:79:6d:de:e7:a4:06:2f: c5:a2:b8:2f:24:5c:3c:79:8b:99:9d:01:5d:a8:cc: 8c:89:86:1c:c2:ef:58:8c:2f:c4:c9:71:bf:45:2a: 10:8c:6a:f9:a8:93:83:f5:67:63:5c:a2:0b:1e:8c: 8b:0d:f4:11:bb:e6:0c:a6:fd:5e:bd:80:c4:9d:a6: 71:1d:7c:d5:0a:78:08:de:59:39:2a:74:57:a5:bd: f3:ab:1b:9b:57:71:64:8e:a0:c0:72:f8:83:b2:d6: 65:72:ad:b7:2e:aa:90:d0:8d:07:77:2c:5f:67:02: bb:50:69:d4:e8:b5:e6:ea:df:f1:33:85:33:0e:11: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:D1:1E:FA:92:9A:7F:55:45:EF:D5:EF:FF:F9:64:B6:5B:36:47 X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:52:9f:0a:d2:3e:14:7e:8a:da:8d:fe:f5:23:7a:fb:ab:0d: 52:81:94:1f:b3:85:49:52:2f:57:33:90:6c:97:be:5a:e4:36: 0d:45:4f:8c:6e:f0:f9:78:b9:ca:c6:bd:bb:09:3b:b6:62:36: 83:3e:9a:6e:23:2b:1a:90:c5:4e:73:99:b5:c7:21:db:95:c1: 6a:3c:56:99:ba:18:5d:f3:bf:f2:17:9b:46:55:46:7d:b4:1f: c9:f6:1f:be:17:80:d6:b3:5c:ad:ca:de:9f:80:ed:e1:9d:c4: 28:ff:ed:08:d0:d9:ee:f3:2b:94:0e:00:46:c1:88:1d:10:3f: eb:c6:22:72:9c:09:cf:6c:43:9c:19:a0:b9:62:ce:c2:d6:75: 03:2f:53:fb:8e:7c:3a:60:cc:82:ae:63:b8:3e:18:cf:31:35: 04:22:b0:09:91:ff:60:99:e3:cf:59:51:3e:a4:0e:45:22:7b: bd:e7:87:5f:95:a1:3d:5c:94:10:d6:69:f5:3f:8d:7d:35:a6: 52:2c:02:c0:4e:bd:9b:af:a2:ca:0e:c6:b6:cd:3f:0f:98:cf: d3:67:95:cb:b2:07:36:9b:d1:1e:3c:00:b2:27:63:b6:3e:5f: d4:24:62:30:2f:74:4a:0c:cf:e1:3b:1a:a0:1c:82:22:65:69: 6c:04:ea:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cw26cUU1ujhP93UcyBBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjUxMjA2MTkwMjEzWhcNMjUxMjA3MTkwMjEzWjAzMTEwLwYDVQQD EygxOGI1ZDExZWZhOTI5YTdmNTU0NWVmZDVlZmZmZjk2NGI2NWIzNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRg857ytiSCG4L2TZtp0tbxmV29I yOJh1By4D4Eo3X74vw5VS0CoZemHsdoP5OcSeO+rNsCuKD3l1HzWrbG4JktQWOCC MKIZPkNbiOST0LZF+QXnxQ9eU5PrSkjAxCC2W4hy3tAbUVVJJnb/tXhgoUDYs7YQ Vw/04Az3QauZcXlt3uekBi/ForgvJFw8eYuZnQFdqMyMiYYcwu9YjC/EyXG/RSoQ jGr5qJOD9WdjXKILHoyLDfQRu+YMpv1evYDEnaZxHXzVCngI3lk5KnRXpb3zqxub V3FkjqDAcviDstZlcq23LqqQ0I0HdyxfZwK7UGnU6LXm6t/xM4UzDhFzrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi10R76kpp/VUXv1e//+WS2WzZHMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVKfCtI+ FH6K2o3+9SN6+6sNUoGUH7OFSVIvVzOQbJe+WuQ2DUVPjG7w+Xi5ysa9uwk7tmI2 gz6abiMrGpDFTnOZtcch25XBajxWmboYXfO/8hebRlVGfbQfyfYfvheA1rNcrcre n4Dt4Z3EKP/tCNDZ7vMrlA4ARsGIHRA/68YicpwJz2xDnBmguWLOwtZ1Ay9T+458 OmDMgq5juD4YzzE1BCKwCZH/YJnjz1lRPqQORSJ7veeHX5WhPVyUENZp9T+NfTWm UiwCwE69m6+iyg7Gts0/D5jP02eVy7IHNpvRHjwAsidjtj5f1CRiMC90SgzP4Tsa oByCImVpbATqZA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:42 2025 by rpki-client