This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft File: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json) Hash identifier: 7vHOLnX5FvjFN4IzLxJ9SBahpmp9lFJNV31oU8K/pUA= Subject key identifier: 04:D4:3F:70:1D:F7:DC:93:77:7E:B6:25:0B:E7:34:57:2E:ED:84:2F Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Certificate serial: 019AF276FDF103DE01D44F748C33AB182E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: 6P7Ptj8gwVT126EIQeNDLMmBGFv2yQIT/0jN4yzQ8uA=) 2: RfAA1xaR3Se-RvvvQKJJ2gMoa-w.roa (hash: ZjUwK6nsqDf3RG0U3GrfbUxp0iL0zaNbRBEGccx3Ch0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fd:f1:03:de:01:d4:4f:74:8c:33:ab:18:2e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=04d43f701df7dc93777eb6250be734572eed842f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:f4:36:ba:bc:c1:4a:1e:4d:cf:f4:e3:e9: c0:5e:ee:1e:b2:f5:df:03:27:82:ad:2c:76:1a:1b: da:5c:37:fd:c5:15:29:54:e6:5d:79:e5:3a:bb:0e: ba:ae:ac:c6:a6:09:43:32:9e:66:ca:8e:b0:8f:74: 25:c2:a4:bf:f4:2c:64:c3:14:b5:03:07:54:34:b9: 3d:cd:8d:89:d8:5d:2a:9b:93:70:6d:d1:39:e3:80: 2c:d5:78:20:ca:a7:78:89:0c:f9:69:82:15:4d:64: 38:99:64:03:28:45:4f:c7:65:df:2e:5a:44:f6:25: 2a:ef:1e:05:1d:36:ee:70:6f:18:01:af:1f:e2:53: 81:32:0d:4a:c3:1a:dc:da:bb:ad:4d:29:06:e0:e5: e6:b2:c6:4b:28:24:ae:f4:cb:f7:b2:52:97:81:5d: 0c:8c:a4:e9:bb:00:29:74:93:ac:5c:af:87:6a:e9: da:92:ea:79:b5:15:59:c4:55:86:b1:eb:a1:6d:15: 85:d9:1c:83:31:c8:82:a0:6f:0a:52:84:0f:e6:8e: 09:3e:ad:b7:8a:85:ce:d4:7c:6d:53:5f:70:51:b7: c0:95:8d:1f:aa:56:62:ce:94:57:4e:00:7f:c9:77: 77:e3:a9:3f:e1:b8:29:b1:d0:98:af:6c:9c:43:9b: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D4:3F:70:1D:F7:DC:93:77:7E:B6:25:0B:E7:34:57:2E:ED:84:2F X509v3 Authority Key Identifier: keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c7:46:3c:f1:c2:4b:0c:6b:3b:3b:1a:c8:29:16:e9:ba:64: 47:4d:1b:dc:d2:68:de:48:4b:8a:ba:3f:71:58:a3:43:4b:c0: 24:47:2a:0f:06:b7:e1:18:4f:d2:d7:26:c7:33:e0:bc:c9:54: 0c:31:7d:0b:68:2f:ab:46:fd:96:22:80:cf:df:5b:fc:2b:50: 01:06:0d:18:eb:2c:a8:b3:48:85:d2:d1:fb:68:0f:0c:79:58: 3d:df:27:0d:d8:74:f2:d3:66:13:00:5e:5e:e5:73:46:f5:29: ca:36:53:81:54:a6:68:4d:9d:fd:14:4e:88:b4:46:9d:ac:c6: bd:a1:af:4e:9a:d8:b6:d1:af:97:ac:8b:48:77:ef:79:c2:4a: 0a:32:af:94:21:d8:4a:9d:8f:b3:60:6b:05:19:ae:59:9f:34: 56:ed:76:89:ba:31:0c:46:68:39:cb:c2:b1:70:7c:0c:40:e7: 2f:d9:1b:26:6e:06:65:70:8f:09:23:48:e2:1b:f2:02:96:ee: 17:c9:88:14:93:62:bb:e5:ce:ce:ea:ef:d7:e5:b1:ef:96:a9: ac:6d:fa:6e:ff:d9:51:57:0d:57:c4:44:fc:79:36:25:63:ff: af:41:40:fc:94:3f:be:12:56:95:79:34:8f:5b:1c:ca:3f:0d: e5:4c:cc:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv3xA94B1E90jDOrGC46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNWM1NzFiZjliZmE3ZTIxYmM3ZTMzOWY5YjhlZWJlMDYx MzM3MTEwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EygwNGQ0M2Y3MDFkZjdkYzkzNzc3ZWI2MjUwYmU3MzQ1NzJlZWQ4NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O/0Nrq8wUoeTc/04+nAXu4esvXf AyeCrSx2GhvaXDf9xRUpVOZdeeU6uw66rqzGpglDMp5myo6wj3QlwqS/9CxkwxS1 AwdUNLk9zY2J2F0qm5NwbdE544As1Xggyqd4iQz5aYIVTWQ4mWQDKEVPx2XfLlpE 9iUq7x4FHTbucG8YAa8f4lOBMg1Kwxrc2rutTSkG4OXmssZLKCSu9Mv3slKXgV0M jKTpuwApdJOsXK+Haunakup5tRVZxFWGseuhbRWF2RyDMciCoG8KUoQP5o4JPq23 ioXO1HxtU19wUbfAlY0fqlZizpRXTgB/yXd346k/4bgpsdCYr2ycQ5v/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATUP3Ad99yTd362JQvnNFcu7YQvMB8GA1UdIwQY MBaAFC5cVxv5v6fiG8fjOfm47r4GEzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjct ZDYwOTJhOWZiZTZjLzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjctZDYwOTJhOWZiZTZj LzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsdGPPHC SwxrOzsayCkW6bpkR00b3NJo3khLiro/cVijQ0vAJEcqDwa34RhP0tcmxzPgvMlU DDF9C2gvq0b9liKAz99b/CtQAQYNGOssqLNIhdLR+2gPDHlYPd8nDdh08tNmEwBe XuVzRvUpyjZTgVSmaE2d/RROiLRGnazGvaGvTprYttGvl6yLSHfvecJKCjKvlCHY Sp2Ps2BrBRmuWZ80Vu12iboxDEZoOcvCsXB8DEDnL9kbJm4GZXCPCSNI4hvyApbu F8mIFJNiu+XOzurv1+Wx75aprG36bv/ZUVcNV8RE/Hk2JWP/r0FA/JQ/vhJWlXk0 j1scyj8N5UzMkw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:46 2025 by rpki-client