This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json) Hash identifier: xmrmhdExXNxbIyIhZD5yGB4qEXaYrOhRmoJVAAqh4eQ= Subject key identifier: A2:10:E4:2E:09:9B:47:17:9D:4C:F6:55:9B:DB:2D:7F:3A:71:8A:20 Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42 Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642 Certificate serial: 019AF31B84DEC7F01A2065C7FBC1CF8A7FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft Manifest number: 122E Signing time: Sat 06 Dec 2025 10:00:58 +0000 Manifest this update: Sat 06 Dec 2025 10:00:58 +0000 Manifest next update: Sun 07 Dec 2025 10:00:58 +0000 Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: U7FCgb0FBSsh/C9zzdkYLDmNgTvkFvrkrlXEwVjsb/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:84:de:c7:f0:1a:20:65:c7:fb:c1:cf:8a:7f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642 Validity Not Before: Dec 6 10:00:58 2025 GMT Not After : Dec 7 10:00:58 2025 GMT Subject: CN=a210e42e099b47179d4cf6559bdb2d7f3a718a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:60:ec:6c:a5:64:bf:0a:7c:6f:26:d1:30: 3e:e4:70:ae:58:6d:04:b4:b8:9a:59:26:2b:34:3d: 0a:fa:1d:82:47:3d:36:98:67:d5:47:16:58:c2:28: e5:a5:28:21:fe:7f:6d:d0:28:0a:e5:d4:a3:1b:ff: 73:52:a4:96:83:b6:84:98:f5:dd:5b:07:21:4b:3c: 88:0d:9d:47:be:53:a1:9c:c3:29:0f:5a:5e:8a:ec: 27:1b:2e:66:c3:f9:38:fc:39:d1:0f:c0:ad:cf:5a: 02:8b:17:95:61:ed:78:6e:96:c9:d8:42:e9:96:fb: 9d:70:f5:90:80:29:69:c1:8a:7c:07:8b:9d:80:39: 4c:3e:e8:55:5e:f8:f3:20:a8:9b:b6:b7:7c:70:ef: fe:15:27:52:6d:08:59:18:ef:4f:d6:c8:8a:c8:7c: e2:b2:f3:85:14:6e:c6:54:fc:63:23:7c:27:79:dd: 51:5f:e5:0f:0f:71:8c:96:ae:83:98:c8:e0:ca:f0: 86:15:2a:ef:d4:0f:28:09:e5:7e:99:58:09:4a:0e: 0a:d5:6e:db:a4:dd:0e:ce:8c:71:05:88:25:1f:68: 91:bd:9b:55:fe:17:ce:30:48:7f:90:44:98:72:07: 9c:1b:1d:53:9c:e8:9c:5e:f7:38:9a:d8:19:ad:ee: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:E4:2E:09:9B:47:17:9D:4C:F6:55:9B:DB:2D:7F:3A:71:8A:20 X509v3 Authority Key Identifier: keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ac:23:ab:39:bd:4b:54:fb:1b:52:e3:bf:b7:29:9d:39:4e: 43:7c:63:cb:0e:58:08:e9:ed:5a:75:24:f5:d0:9b:80:59:95: a9:53:9c:af:3c:da:c1:c3:97:fd:bb:52:76:f5:cc:8e:45:66: 75:dc:33:a3:81:35:1e:14:0d:8e:47:39:de:83:cd:ce:0d:eb: 0d:4e:68:1a:7b:42:6d:44:07:1d:2a:8b:d7:be:e6:9d:2c:a2: 36:aa:00:0e:fe:68:a7:0f:cf:9a:45:9b:f5:37:ea:33:34:e2: 99:93:e6:e3:cb:52:9e:87:16:3a:d3:3c:2c:92:46:54:3f:fe: 04:29:b2:84:93:e8:ae:09:20:79:33:1c:0b:80:32:55:88:8f: 00:cf:5e:2f:9d:65:4c:85:db:c9:60:53:ec:ac:58:7c:bd:5d: 19:d5:40:b5:02:c1:c4:9c:e1:da:d9:57:70:00:da:ec:5c:b1: db:0e:82:6b:c5:e0:f5:da:a1:f2:e2:7d:7b:db:53:e9:61:20: c6:32:12:8c:9c:80:4e:15:f1:6d:40:bb:00:4b:4d:bc:05:54: 87:e2:28:80:21:b3:db:04:a3:bf:78:99:e2:f0:c7:5b:0f:2c: c6:91:83:97:9e:d2:4a:3a:64:e2:01:a6:60:87:b2:71:e5:57: 6d:22:50:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4Tex/AaIGXH+8HPin/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTgxMGQ1YzkxMWI0YTgxMDczZmFlNjM4OTcxYjU3N2Rk N2E2NDIwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD EyhhMjEwZTQyZTA5OWI0NzE3OWQ0Y2Y2NTU5YmRiMmQ3ZjNhNzE4YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+xg7GylZL8KfG8m0TA+5HCuWG0E tLiaWSYrND0K+h2CRz02mGfVRxZYwijlpSgh/n9t0CgK5dSjG/9zUqSWg7aEmPXd WwchSzyIDZ1HvlOhnMMpD1peiuwnGy5mw/k4/DnRD8Ctz1oCixeVYe14bpbJ2ELp lvudcPWQgClpwYp8B4udgDlMPuhVXvjzIKibtrd8cO/+FSdSbQhZGO9P1siKyHzi svOFFG7GVPxjI3wned1RX+UPD3GMlq6DmMjgyvCGFSrv1A8oCeV+mVgJSg4K1W7b pN0OzoxxBYglH2iRvZtV/hfOMEh/kESYcgecGx1TnOicXvc4mtgZre4JZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIQ5C4Jm0cXnUz2VZvbLX86cYogMB8GA1UdIwQY MBaAFC4YENXJEbSoEHP65jiXG1d916ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82OGNlNTEtYmQzZS00Y2QxLWJjYzIt ZGQyYTU4NGE2MmJiLzEvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82OGNlNTEtYmQzZS00Y2QxLWJjYzItZGQyYTU4NGE2MmJi LzEvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6wjqzm9 S1T7G1Ljv7cpnTlOQ3xjyw5YCOntWnUk9dCbgFmVqVOcrzzawcOX/btSdvXMjkVm ddwzo4E1HhQNjkc53oPNzg3rDU5oGntCbUQHHSqL177mnSyiNqoADv5opw/PmkWb 9TfqMzTimZPm48tSnocWOtM8LJJGVD/+BCmyhJPorgkgeTMcC4AyVYiPAM9eL51l TIXbyWBT7KxYfL1dGdVAtQLBxJzh2tlXcADa7Fyx2w6Ca8Xg9dqh8uJ9e9tT6WEg xjISjJyAThXxbUC7AEtNvAVUh+IogCGz2wSjv3iZ4vDHWw8sxpGDl57SSjpk4gGm YIeyceVXbSJQPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:36 2025 by rpki-client