This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json) Hash identifier: q2ZAXAWUABv3R0rBAM7a7U9B5SECtYeOC+qqKwysXbU= Subject key identifier: B7:B6:0B:5A:47:3B:58:B0:CA:A6:A9:22:96:F1:CD:EE:EF:F7:E5:0C Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Certificate serial: 019B2740DEAB0A8953C1641F3D05BCEFDB42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 13:02:01 +0000 Manifest this update: Tue 16 Dec 2025 13:02:01 +0000 Manifest next update: Wed 17 Dec 2025 13:02:01 +0000 Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=) 2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: cIvgUK7mbbJCrEffLkZzPFu8gdyRyTfVt3ygVKL1zQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:de:ab:0a:89:53:c1:64:1f:3d:05:bc:ef:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b Validity Not Before: Dec 16 13:02:01 2025 GMT Not After : Dec 17 13:02:01 2025 GMT Subject: CN=b7b60b5a473b58b0caa6a92296f1cdeeeff7e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:9c:48:c6:af:2c:15:40:cb:cf:10:cf:38: ae:83:bc:bd:e2:09:c2:e8:0f:6a:22:d8:6c:3e:1f: 79:17:71:61:37:98:a3:52:81:24:c9:8a:14:26:e1: 24:8a:46:a4:f9:04:a0:a2:0f:83:1e:c4:9e:17:e1: b6:bf:a3:91:6e:5c:81:38:c4:50:87:7c:a2:ea:94: fa:2d:78:a6:5b:30:ff:2f:84:c0:57:cd:95:23:25: 94:02:ed:22:a4:1c:65:2b:14:52:67:50:5a:3e:ec: 30:e9:cb:c9:0f:3a:85:b6:5a:90:b3:6c:ac:1d:7e: 61:6d:03:d8:39:00:c2:29:cf:43:60:28:e5:90:b7: 30:89:c4:b9:b9:50:7c:f2:a0:d1:95:12:1b:81:0c: f1:34:4c:5a:9a:b0:28:01:01:dc:66:a6:9a:4d:d4: fa:a4:48:4d:59:a7:a6:0b:05:90:6c:78:ef:6b:b4: 8d:75:18:cb:ba:41:92:2c:8b:e1:f2:25:8b:1f:fe: fd:6e:72:49:82:b6:37:09:38:60:61:f5:98:32:bd: 03:a2:6c:e4:5a:4c:2c:2c:3b:3d:aa:8e:b5:e8:f0: 89:ef:ed:25:b3:c5:c5:7d:51:be:19:84:6b:5b:07: 49:5a:44:f4:d8:d4:21:d2:cf:21:ae:50:e0:30:b9: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B6:0B:5A:47:3B:58:B0:CA:A6:A9:22:96:F1:CD:EE:EF:F7:E5:0C X509v3 Authority Key Identifier: keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7f:62:d7:0f:98:d5:fb:a1:b7:4f:7c:12:02:41:8d:de:51: 1a:9b:90:e8:90:90:6c:24:cc:4b:d6:49:1c:db:01:87:87:44: e1:24:7c:69:5f:1e:53:c9:f2:45:5f:11:cf:41:cf:8e:e5:72: 22:1a:d6:91:1e:8c:0c:b9:ee:68:b3:96:ad:90:b7:e0:b6:89: b7:26:35:8b:48:79:56:08:c9:70:dc:53:07:ae:13:12:79:05: 9c:67:f0:45:10:c5:19:26:3c:e1:99:c6:b7:d0:71:47:cb:bb: 2e:84:e6:1b:90:4b:f3:f2:d6:08:59:18:47:4d:16:48:17:4e: c2:84:2c:2f:37:80:8d:1a:2a:d9:af:16:1d:85:3f:9d:dd:e6: 00:58:2c:59:94:e9:79:80:5d:11:fc:be:30:a3:d1:22:05:5c: b6:80:77:7d:c8:69:65:d1:c2:dc:5f:14:dc:0f:ee:2a:9f:43: c2:45:b4:19:4a:ae:30:60:97:f7:0b:af:f7:6a:90:08:a1:d3: 93:35:dd:7f:5f:59:bb:a6:7c:eb:3a:52:f2:8b:09:be:eb:19: 17:b8:fc:79:41:24:bb:b3:1f:c9:31:5e:73:85:fd:74:ca:27: 55:b2:8f:0f:9a:30:d2:07:a3:dc:39:1d:d7:50:d4:76:37:1a: 88:33:ad:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQN6rColTwWQfPQW879tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Yjg1ZTVhYzA1NWExMjE4OGFlNTBjZGIwMDdmYTQ4OGI2 YWE4OGIwHhcNMjUxMjE2MTMwMjAxWhcNMjUxMjE3MTMwMjAxWjAzMTEwLwYDVQQD EyhiN2I2MGI1YTQ3M2I1OGIwY2FhNmE5MjI5NmYxY2RlZWVmZjdlNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nmcSMavLBVAy88Qzziug7y94gnC 6A9qIthsPh95F3FhN5ijUoEkyYoUJuEkikak+QSgog+DHsSeF+G2v6ORblyBOMRQ h3yi6pT6LXimWzD/L4TAV82VIyWUAu0ipBxlKxRSZ1BaPuww6cvJDzqFtlqQs2ys HX5hbQPYOQDCKc9DYCjlkLcwicS5uVB88qDRlRIbgQzxNExamrAoAQHcZqaaTdT6 pEhNWaemCwWQbHjva7SNdRjLukGSLIvh8iWLH/79bnJJgrY3CThgYfWYMr0Domzk WkwsLDs9qo616PCJ7+0ls8XFfVG+GYRrWwdJWkT02NQh0s8hrlDgMLlqEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe2C1pHO1iwyqapIpbxze7v9+UMMB8GA1UdIwQY MBaAFJW4XlrAVaEhiK5QzbAH+kiLaqiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMt MjE4M2JjMzg0NGQyLzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGFlZTgtNDFhOC00ZWU3LWFlNGMtMjE4M2JjMzg0NGQy LzEvbGJoZVdzQlZvU0dJcmxETnNBZjZTSXRxcUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX9i1w+Y 1fuht098EgJBjd5RGpuQ6JCQbCTMS9ZJHNsBh4dE4SR8aV8eU8nyRV8Rz0HPjuVy IhrWkR6MDLnuaLOWrZC34LaJtyY1i0h5VgjJcNxTB64TEnkFnGfwRRDFGSY84ZnG t9BxR8u7LoTmG5BL8/LWCFkYR00WSBdOwoQsLzeAjRoq2a8WHYU/nd3mAFgsWZTp eYBdEfy+MKPRIgVctoB3fchpZdHC3F8U3A/uKp9DwkW0GUquMGCX9wuv92qQCKHT kzXdf19Zu6Z86zpS8osJvusZF7j8eUEku7MfyTFec4X9dMonVbKPD5ow0gej3Dkd 11DUdjcaiDOtjQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:14:42 2025 by rpki-client