This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json) Hash identifier: 9Wj+Su9uYwG0HJew65a63cfwT9rhIEaOeEJVWniuEWg= Subject key identifier: 9A:35:0C:8A:79:AD:CB:DC:FC:6C:F9:98:08:46:D4:EB:CF:C1:FD:CE Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c Certificate serial: 019AF3F7138A9BA43AD2E9C35A4DF752B689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:00:47 +0000 Manifest this update: Sat 06 Dec 2025 14:00:47 +0000 Manifest next update: Sun 07 Dec 2025 14:00:47 +0000 Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=) 2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: Rbw4XOavD2Ker9XgvayzgH7hlG1gd8RHQhFzsEI5K30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:13:8a:9b:a4:3a:d2:e9:c3:5a:4d:f7:52:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c Validity Not Before: Dec 6 14:00:47 2025 GMT Not After : Dec 7 14:00:47 2025 GMT Subject: CN=9a350c8a79adcbdcfc6cf9980846d4ebcfc1fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:18:4a:13:ba:65:e5:86:df:ff:39:98:83: e1:02:72:95:d7:7b:4a:3d:da:aa:8a:f0:54:79:30: 01:e2:71:dd:1d:9c:ad:86:01:1c:2e:a7:ae:35:a3: 6e:5a:c1:2d:06:18:1a:b8:18:49:31:29:ec:21:2a: e8:fd:ab:c1:36:a5:48:fa:49:78:49:75:10:8b:60: d4:77:29:94:3f:2d:6a:b9:ef:be:54:88:12:07:a1: 95:89:e0:b8:c0:cc:df:53:51:26:15:1c:bb:d9:6d: ff:ea:bb:64:98:01:6a:55:5c:28:fd:37:13:f3:57: 29:f2:8c:83:76:5c:e2:58:c3:c6:69:7a:91:66:90: 1a:dc:81:de:b0:94:6a:65:14:f4:0e:a3:30:01:af: 23:dd:85:89:52:a8:9d:69:46:dc:01:30:28:2c:78: 8e:db:43:1b:ae:6d:c2:75:92:1d:f7:5f:a7:76:34: 53:58:b9:7a:db:9f:d3:f4:69:93:8a:33:c8:19:7a: f7:83:f0:62:f3:df:0f:e0:3e:99:85:46:04:67:55: e9:6e:e8:5d:7f:47:4d:5f:59:76:42:78:64:75:75: 73:f8:d2:c2:4a:99:14:4c:5d:19:18:da:f3:1d:f7: 0e:b6:bd:49:63:f1:35:6f:33:c5:a9:52:44:b8:22: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:0C:8A:79:AD:CB:DC:FC:6C:F9:98:08:46:D4:EB:CF:C1:FD:CE X509v3 Authority Key Identifier: keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f9:5e:8a:59:c6:05:70:b0:26:d8:71:a3:79:c3:6f:11:bf: 87:70:17:5b:fa:ff:a7:e7:b5:f2:29:c5:a5:79:4f:8c:5e:f8: ba:3f:92:b6:38:81:47:1c:bc:25:7b:3e:6e:9c:07:eb:cb:c3: cf:42:a4:7a:62:78:a6:97:4a:f2:d0:8b:52:04:a7:ba:57:c0: 73:1e:1b:bd:aa:4a:a3:a0:9d:7d:24:03:bf:66:08:78:43:b7: 01:41:aa:f1:37:ca:03:b6:a6:1f:d5:da:c2:33:3f:40:44:f9: 2e:65:5a:2c:4d:6a:30:87:2d:9e:c2:9f:4b:f0:79:2e:6d:87: 11:94:0e:7f:cf:0f:55:71:91:98:4a:3e:23:a1:15:3a:5f:92: 19:ce:bc:49:d7:2a:18:d0:b6:14:f2:63:b5:ae:38:5f:fa:6a: 33:c4:22:f1:f4:57:0e:98:b3:43:33:67:9c:c1:9c:a7:22:f7: 72:ab:c4:f6:ea:31:55:01:8d:66:52:df:b4:16:23:d2:ab:e4: 35:46:07:f6:68:0b:be:ec:d0:d6:19:a6:11:1c:03:f1:34:e3: 1e:ca:c9:ae:e3:cb:48:ab:2c:22:9f:96:bf:85:80:4a:a7:11: f9:10:2f:de:79:f4:67:6b:0b:15:a6:96:b8:ad:4b:d3:aa:f6: 99:af:78:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xOKm6Q60unDWk33UraJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx OGQ2NWMwHhcNMjUxMjA2MTQwMDQ3WhcNMjUxMjA3MTQwMDQ3WjAzMTEwLwYDVQQD Eyg5YTM1MGM4YTc5YWRjYmRjZmM2Y2Y5OTgwODQ2ZDRlYmNmYzFmZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTUYShO6ZeWG3/85mIPhAnKV13tK PdqqivBUeTAB4nHdHZythgEcLqeuNaNuWsEtBhgauBhJMSnsISro/avBNqVI+kl4 SXUQi2DUdymUPy1que++VIgSB6GVieC4wMzfU1EmFRy72W3/6rtkmAFqVVwo/TcT 81cp8oyDdlziWMPGaXqRZpAa3IHesJRqZRT0DqMwAa8j3YWJUqidaUbcATAoLHiO 20Mbrm3CdZId91+ndjRTWLl625/T9GmTijPIGXr3g/Bi898P4D6ZhUYEZ1Xpbuhd f0dNX1l2QnhkdXVz+NLCSpkUTF0ZGNrzHfcOtr1JY/E1bzPFqVJEuCKW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo1DIp5rcvc/Gz5mAhG1OvPwf3OMB8GA1UdIwQY MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5 LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/leilnG BXCwJthxo3nDbxG/h3AXW/r/p+e18inFpXlPjF74uj+StjiBRxy8JXs+bpwH68vD z0KkemJ4ppdK8tCLUgSnulfAcx4bvapKo6CdfSQDv2YIeEO3AUGq8TfKA7amH9Xa wjM/QET5LmVaLE1qMIctnsKfS/B5Lm2HEZQOf88PVXGRmEo+I6EVOl+SGc68Sdcq GNC2FPJjta44X/pqM8Qi8fRXDpizQzNnnMGcpyL3cqvE9uoxVQGNZlLftBYj0qvk NUYH9mgLvuzQ1hmmERwD8TTjHsrJruPLSKssIp+Wv4WASqcR+RAv3nn0Z2sLFaaW uK1L06r2ma94MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:46 2025 by rpki-client