This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json) Hash identifier: 7rpw7zUsDCz0QbTh1frSKJwDToOxwDRgJzhqQVOapL8= Subject key identifier: A8:72:D6:C5:20:E0:CE:07:35:0D:9B:ED:57:75:76:5C:D3:04:54:BA Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Certificate serial: 019AF6531ECF39BFF53989174BE5DAC4CA5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft Manifest number: 16F5 Signing time: Sun 07 Dec 2025 01:00:33 +0000 Manifest this update: Sun 07 Dec 2025 01:00:33 +0000 Manifest next update: Mon 08 Dec 2025 01:00:33 +0000 Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=) 2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 5lRUAuT1I8bPd019x7rhwaaUe1Eg9S2WPlRePtrEhLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:1e:cf:39:bf:f5:39:89:17:4b:e5:da:c4:ca:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5 Validity Not Before: Dec 7 01:00:33 2025 GMT Not After : Dec 8 01:00:33 2025 GMT Subject: CN=a872d6c520e0ce07350d9bed5775765cd30454ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:27:87:6e:31:b8:b3:e6:c3:cd:11:71:db: f4:e4:a4:ec:01:14:cf:07:b6:9a:f7:60:e8:50:b2: e2:81:e0:fb:a8:4c:a0:47:d9:7a:b9:f5:b0:32:21: 50:d8:dd:e3:e0:68:8b:17:ea:11:19:ac:8a:62:a5: 94:92:d7:27:f1:0a:cc:fa:4a:e5:ba:68:e3:16:67: 54:ac:f4:3b:79:c5:f0:ec:5e:cf:b8:2f:fd:0a:f0: 6b:00:62:f0:79:e6:19:25:02:44:a9:f1:03:4f:8a: 05:d4:49:4f:a8:fa:cc:8d:a6:84:a2:32:0c:04:b7: bd:33:5c:da:db:e9:56:a1:d8:c5:9a:99:fa:49:3a: 1c:b2:15:f4:d1:f0:03:9e:b2:ca:c2:8c:dd:5f:b7: 92:17:b4:52:3c:7d:3d:7b:42:c6:ef:8e:7e:48:17: f3:47:fc:dd:7a:68:53:bc:92:0a:ad:ef:db:54:89: ad:ab:a9:c7:29:07:d0:a5:7c:7d:36:f0:f1:9e:24: 79:03:19:a8:ab:e0:4d:10:4b:6a:7a:56:8f:ea:d0: 54:c1:26:5b:e6:31:ce:04:0c:88:38:9c:62:c1:35: 11:f0:9b:e6:db:a7:e8:9d:cc:3a:24:02:2b:15:24: 9b:75:3f:5a:a9:5e:4f:34:a7:5c:a6:93:ca:84:4e: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:D6:C5:20:E0:CE:07:35:0D:9B:ED:57:75:76:5C:D3:04:54:BA X509v3 Authority Key Identifier: keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:87:7f:ee:c2:6a:b7:99:41:45:64:a0:15:e7:b5:2f:4b:01: 05:10:9e:f6:14:a9:c2:0c:57:b2:62:3d:21:a8:d1:c0:b5:2a: ed:42:e5:91:cb:cb:6a:6b:64:33:81:a9:2a:9a:7d:5d:0f:f5: 26:e1:15:06:ae:51:6e:90:da:19:2e:ee:e1:ec:61:d8:17:56: b4:a8:16:33:c7:e4:5f:e2:52:5b:13:c8:6e:66:dc:ff:76:ac: c8:74:05:8d:64:e3:8a:73:5d:bc:8d:37:a9:69:25:7a:f7:35: 9e:91:d8:92:19:3d:b0:5a:7f:0b:a7:98:7a:34:11:8e:a8:d5: 02:e8:7e:bd:58:0c:9d:75:7f:76:fe:07:a3:20:7a:2a:2e:49: 68:18:18:c7:22:85:ce:ac:78:1f:fd:9c:25:da:4d:92:a6:c0: f0:aa:07:59:86:4c:37:66:4c:81:c3:3d:15:2a:2d:48:ac:f1: b2:d0:1f:37:2a:44:55:61:9f:7f:21:13:82:2a:48:c0:7d:11: e5:2c:6d:07:fe:94:d3:7d:2c:62:c3:07:43:2e:43:30:b3:ea: 09:b9:27:84:a4:c9:e1:b7:d8:0c:ee:49:31:c3:9f:72:30:ab: de:0d:a2:bf:50:13:04:6e:d6:d1:22:2e:c0:95:f5:93:c6:55: 47:04:81:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2Ux7POb/1OYkXS+XaxMpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh ZDAxYzUwHhcNMjUxMjA3MDEwMDMzWhcNMjUxMjA4MDEwMDMzWjAzMTEwLwYDVQQD EyhhODcyZDZjNTIwZTBjZTA3MzUwZDliZWQ1Nzc1NzY1Y2QzMDQ1NGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvsnh24xuLPmw80Rcdv05KTsARTP B7aa92DoULLigeD7qEygR9l6ufWwMiFQ2N3j4GiLF+oRGayKYqWUktcn8QrM+krl umjjFmdUrPQ7ecXw7F7PuC/9CvBrAGLweeYZJQJEqfEDT4oF1ElPqPrMjaaEojIM BLe9M1za2+lWodjFmpn6STocshX00fADnrLKwozdX7eSF7RSPH09e0LG745+SBfz R/zdemhTvJIKre/bVImtq6nHKQfQpXx9NvDxniR5Axmoq+BNEEtqelaP6tBUwSZb 5jHOBAyIOJxiwTUR8Jvm26foncw6JAIrFSSbdT9aqV5PNKdcppPKhE7RbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhy1sUg4M4HNQ2b7Vd1dlzTBFS6MB8GA1UdIwQY MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZId/7sJq t5lBRWSgFee1L0sBBRCe9hSpwgxXsmI9IajRwLUq7ULlkcvLamtkM4GpKpp9XQ/1 JuEVBq5RbpDaGS7u4exh2BdWtKgWM8fkX+JSWxPIbmbc/3asyHQFjWTjinNdvI03 qWklevc1npHYkhk9sFp/C6eYejQRjqjVAuh+vVgMnXV/dv4HoyB6Ki5JaBgYxyKF zqx4H/2cJdpNkqbA8KoHWYZMN2ZMgcM9FSotSKzxstAfNypEVWGffyETgipIwH0R 5SxtB/6U030sYsMHQy5DMLPqCbknhKTJ4bfYDO5JMcOfcjCr3g2iv1ATBG7W0SIu wJX1k8ZVRwSBVA== -----END CERTIFICATE-----Generated at Sun Dec 7 08:10:20 2025 by rpki-client