This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json) Hash identifier: QNwEoRMiAAbu0zSvR4MqT6fTZqb5Qv9m7d7fRAQvnHs= Subject key identifier: 36:2A:C4:31:F1:B7:61:61:43:A3:E4:FF:36:98:23:79:30:EF:64:DF Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019AF240079BD84C56CFA76AA810F02E157A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft Manifest number: 0D3D Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: aPcYpzxeWZxIMSoZcUhEDQ7b7A1LL0x7Bn6awUMlerA=) 2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:07:9b:d8:4c:56:cf:a7:6a:a8:10:f0:2e:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=362ac431f1b7616143a3e4ff3698237930ef64df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bf:6f:e0:eb:c3:71:33:cc:c4:fa:3c:d3:5c: 8f:f7:07:bf:85:b1:5b:43:a2:a1:9b:92:70:57:89: e1:9d:67:2b:2e:8f:10:f2:71:bc:89:80:7e:ac:df: 2c:fe:7e:6e:35:fa:d1:0e:b5:2c:0a:e7:2e:61:c7: 3e:24:c6:74:ef:65:3e:b2:de:87:78:ca:26:c4:ac: f5:0c:3c:6c:64:30:d4:d5:86:58:8d:5c:f0:d6:0c: 77:6d:41:95:fe:87:6d:af:c9:36:19:21:e8:37:c9: fe:1e:ab:8e:72:e2:51:37:16:5c:98:62:b0:e5:25: a3:f9:fb:a8:a5:e5:fe:38:a3:e8:da:56:ea:c4:06: 06:fb:05:d5:be:54:e6:7d:33:2d:07:70:ad:80:c6: b5:15:4b:59:b4:f5:34:07:a8:97:35:4b:ec:aa:4e: d9:62:7b:d9:8b:45:23:d8:59:c5:f0:2d:37:cc:3a: b9:3f:69:ca:d9:ec:aa:9d:75:5e:b2:62:a5:74:fb: 51:87:f5:94:e2:da:06:06:38:a1:ef:d3:b8:ab:b5: 81:2e:14:60:b8:88:80:7e:19:1e:e4:e8:5c:70:b6: 13:46:f0:16:f0:5e:f9:23:dc:d7:1d:5e:7e:91:05: 29:35:d9:09:b2:3f:55:87:34:1a:3a:ef:2e:d2:7a: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2A:C4:31:F1:B7:61:61:43:A3:E4:FF:36:98:23:79:30:EF:64:DF X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:64:d7:d6:88:ad:84:e8:8e:cd:c8:d4:9c:c9:6e:a3:9a: fe:34:8b:f8:cb:bb:50:bf:a8:56:0b:dc:0c:55:bf:70:46:4b: 9c:55:22:e4:4a:64:f4:f9:78:f6:40:b2:fa:fc:55:08:fe:7b: 62:09:f5:48:38:34:1f:03:8f:19:3f:6d:05:01:89:40:54:ee: 04:d6:22:0a:5c:80:71:c5:32:fe:0c:b7:58:15:38:ff:de:d7: 96:be:f9:f3:1c:bc:5c:ff:46:04:0b:96:bb:f4:7f:04:be:30: e5:62:06:b2:2c:99:a8:18:e4:e9:7a:e4:1e:12:30:26:ee:66: 69:bf:0e:f7:c3:b0:7f:75:65:ee:f5:64:c7:7b:3b:66:55:f3: d7:b2:fe:df:66:bb:b9:f1:80:a2:f6:4e:8c:40:f7:7c:0c:1b: 17:3c:5a:f5:48:48:82:ff:33:46:35:cd:e0:bc:06:d7:e7:fc: 79:2a:6f:db:cc:c3:bc:56:2f:57:3c:a5:1f:52:ec:c0:20:bd: ca:a0:f2:2e:dc:a4:c8:4e:23:84:60:f2:54:6c:8c:f8:2d:f0: e4:17:8b:ca:e9:57:69:e2:c2:e0:39:31:0d:45:bd:d6:89:e9: 89:fd:05:07:d0:65:47:e5:b1:86:b8:eb:27:17:44:4c:4b:c9: 33:06:f3:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAeb2ExWz6dqqBDwLhV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EygzNjJhYzQzMWYxYjc2MTYxNDNhM2U0ZmYzNjk4MjM3OTMwZWY2NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L9v4OvDcTPMxPo801yP9we/hbFb Q6Khm5JwV4nhnWcrLo8Q8nG8iYB+rN8s/n5uNfrRDrUsCucuYcc+JMZ072U+st6H eMomxKz1DDxsZDDU1YZYjVzw1gx3bUGV/odtr8k2GSHoN8n+HquOcuJRNxZcmGKw 5SWj+fuopeX+OKPo2lbqxAYG+wXVvlTmfTMtB3CtgMa1FUtZtPU0B6iXNUvsqk7Z YnvZi0Uj2FnF8C03zDq5P2nK2eyqnXVesmKldPtRh/WU4toGBjih79O4q7WBLhRg uIiAfhke5OhccLYTRvAW8F75I9zXHV5+kQUpNdkJsj9VhzQaOu8u0nosxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYqxDHxt2FhQ6Pk/zaYI3kw72TfMB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMhk19aI rYTojs3I1JzJbqOa/jSL+Mu7UL+oVgvcDFW/cEZLnFUi5Epk9Pl49kCy+vxVCP57 Ygn1SDg0HwOPGT9tBQGJQFTuBNYiClyAccUy/gy3WBU4/97Xlr758xy8XP9GBAuW u/R/BL4w5WIGsiyZqBjk6XrkHhIwJu5mab8O98Owf3Vl7vVkx3s7ZlXz17L+32a7 ufGAovZOjED3fAwbFzxa9UhIgv8zRjXN4LwG1+f8eSpv28zDvFYvVzylH1LswCC9 yqDyLtykyE4jhGDyVGyM+C3w5BeLyulXaeLC4DkxDUW91onpif0FB9BlR+Wxhrjr JxdETEvJMwbzCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:57 2025 by rpki-client