This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json) Hash identifier: ndPVcuBN2tZmu5Mp9HIn0kiZ3qwTdg7m+262aHzCzL0= Subject key identifier: 3D:11:56:29:E0:D8:EC:82:C9:EE:26:73:A7:4F:90:BD:01:80:8B:10 Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019AF0BF5EAE9B909E609C37347F4EEC8212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft Manifest number: 1128 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=) 2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: Mf6hOMT3wXGs1VuP3MQhyl0+61TO2XrpklItAee62FU=) 3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=) 4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5e:ae:9b:90:9e:60:9c:37:34:7f:4e:ec:82:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=3d115629e0d8ec82c9ee2673a74f90bd01808b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:34:bf:df:d9:db:aa:01:e1:f1:4b:b6:7e: f4:3f:06:b9:74:14:fb:73:2b:3a:2c:00:5a:4b:19: 07:94:4e:be:ae:4a:af:76:92:07:25:68:9c:9e:7f: da:1d:2a:5e:7c:48:2a:61:a8:3c:9d:f6:c5:91:75: fc:78:a2:4b:24:a9:7e:2e:43:7e:d1:27:84:bd:06: 4c:b5:aa:d4:b6:80:89:2d:96:7b:d2:46:6f:f5:5f: 04:93:f2:e0:80:0c:57:f3:7b:47:3f:ec:88:4b:ac: 2c:4a:15:24:39:93:bb:ad:b4:96:4e:62:c1:8f:ae: 3f:ee:78:e9:ca:18:71:be:65:ee:95:e1:bc:12:69: 70:a7:78:d8:1a:e2:a8:46:cf:b9:af:9e:a3:96:3a: 36:1d:93:57:e4:3b:83:ef:81:1d:11:3d:5e:12:09: ba:e3:fc:ec:2c:d4:69:f4:a3:81:5b:e2:3d:c6:22: ff:28:56:b6:b0:da:59:39:20:79:3d:f0:a2:f9:f9: 4b:3b:12:df:9c:4f:bb:b4:12:cc:20:9a:3e:c1:38: 0d:51:b0:5b:36:b6:17:ee:4c:5b:95:44:67:76:ad: 00:87:6c:de:ef:78:03:a1:f5:07:b6:95:1a:a3:fe: 1b:32:aa:db:25:ed:4b:96:5a:31:22:5b:2f:8b:54: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:11:56:29:E0:D8:EC:82:C9:EE:26:73:A7:4F:90:BD:01:80:8B:10 X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bc:69:78:ad:28:d0:c0:6f:3d:42:4a:c6:f5:8f:66:f1:db: 4b:42:4b:af:69:f7:11:0f:a7:fd:51:bb:b5:61:b2:cb:79:9e: 6b:07:a6:1f:56:7b:ef:98:eb:da:bc:30:7c:44:b5:df:89:f3: 0d:9f:ad:23:ea:9f:4c:28:bb:cf:4f:8b:ce:f1:f1:5b:3d:9f: 92:e6:0b:19:b3:47:2c:34:d3:9b:89:3c:e5:0d:c0:06:ad:2b: 21:5b:e9:f0:1f:85:32:ec:98:4f:ae:78:63:f6:48:cd:eb:0b: bf:b5:d7:ce:cd:c3:d3:98:23:38:6b:5f:1e:8e:b6:21:db:38: ad:dc:bb:99:c0:65:1b:7c:16:f1:34:8a:f2:7e:89:59:5c:67: 24:fe:6b:37:37:a9:b8:af:8a:63:c3:e2:bc:fb:c8:c2:1a:56: 10:77:62:95:14:2c:39:64:45:84:1d:d8:d6:c2:f7:27:91:54: 70:bd:9b:7a:60:b2:2d:f1:c5:cd:5b:c4:45:9b:b6:a0:ee:8a: 9c:2e:e6:96:15:2e:55:c0:8b:53:ba:c4:bd:a0:4a:a9:46:6b: b1:28:d2:93:86:32:a0:f1:2e:10:a6:af:59:28:29:43:cd:fd: d5:1f:b3:64:71:04:84:13:af:1d:b2:1a:5b:d4:60:b8:bb:af: 8d:da:2c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv16um5CeYJw3NH9O7IISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygzZDExNTYyOWUwZDhlYzgyYzllZTI2NzNhNzRmOTBiZDAxODA4YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquA0v9/Z26oB4fFLtn70Pwa5dBT7 cys6LABaSxkHlE6+rkqvdpIHJWicnn/aHSpefEgqYag8nfbFkXX8eKJLJKl+LkN+ 0SeEvQZMtarUtoCJLZZ70kZv9V8Ek/LggAxX83tHP+yIS6wsShUkOZO7rbSWTmLB j64/7njpyhhxvmXuleG8Emlwp3jYGuKoRs+5r56jljo2HZNX5DuD74EdET1eEgm6 4/zsLNRp9KOBW+I9xiL/KFa2sNpZOSB5PfCi+flLOxLfnE+7tBLMIJo+wTgNUbBb NrYX7kxblURndq0Ah2ze73gDofUHtpUao/4bMqrbJe1LlloxIlsvi1Tr3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0RVing2OyCye4mc6dPkL0BgIsQMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbxpeK0o 0MBvPUJKxvWPZvHbS0JLr2n3EQ+n/VG7tWGyy3meawemH1Z775jr2rwwfES134nz DZ+tI+qfTCi7z0+LzvHxWz2fkuYLGbNHLDTTm4k85Q3ABq0rIVvp8B+FMuyYT654 Y/ZIzesLv7XXzs3D05gjOGtfHo62Ids4rdy7mcBlG3wW8TSK8n6JWVxnJP5rNzep uK+KY8PivPvIwhpWEHdilRQsOWRFhB3Y1sL3J5FUcL2bemCyLfHFzVvERZu2oO6K nC7mlhUuVcCLU7rEvaBKqUZrsSjSk4YyoPEuEKavWSgpQ8391R+zZHEEhBOvHbIa W9RguLuvjdos+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:32 2025 by rpki-client