This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json) Hash identifier: CT31S59nTZNWDQZpmNjVkjHkowtFbMqjHqnKMjJpP/Y= Subject key identifier: F5:B4:C5:4C:D4:8D:D7:28:AF:1D:DE:FF:0B:1E:FE:89:7B:54:11:D1 Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Certificate serial: 019AF2401029670E15408CFC4009104093A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft Manifest number: 15AA Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=) 2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: G2A9B35IB7yNzgeeQ5NBFEfPFzU2RljWbRWGe1M1KZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:10:29:67:0e:15:40:8c:fc:40:09:10:40:93:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=f5b4c54cd48dd728af1ddeff0b1efe897b5411d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:4e:34:c0:52:a9:59:ee:29:b2:07:ad:4c: af:08:88:b6:d7:82:23:7f:b7:d8:bf:b9:3a:34:1c: 30:53:de:22:73:4e:c5:29:1d:1e:a7:aa:ed:4d:41: f3:a2:c4:c8:87:d2:59:8e:8a:c3:0f:fd:36:8b:85: 14:41:4d:2e:ba:13:b6:56:17:1a:a0:a4:89:a4:1e: f0:4d:a0:e8:fe:b5:20:45:d8:ad:7a:d8:95:47:51: 33:f9:cb:33:cb:38:83:bf:3f:d5:3c:4e:03:6f:85: 54:ac:93:df:1c:aa:2f:e9:d4:0c:5c:87:ba:39:a6: d7:34:1d:06:91:29:c8:3c:d1:33:d0:31:e1:93:7f: ba:68:d7:41:61:35:12:4e:10:74:f1:11:dc:e0:f1: d0:9d:6d:c1:a2:04:75:18:a1:ff:db:3e:e4:8b:b0: 19:21:b5:1d:a7:01:09:1e:49:ab:6c:17:ba:52:b3: 7f:13:eb:74:20:58:35:d6:e9:f9:9b:03:17:0b:83: 44:f7:70:69:8f:63:49:e3:e3:1d:ce:eb:aa:a8:c1: 34:35:07:24:0e:e4:b0:3c:91:cd:74:c7:23:df:b1: 04:4f:65:f9:ac:c9:33:fc:98:fc:0c:52:0e:23:73: a0:80:c6:09:6b:b2:8d:51:18:ea:44:88:0a:fd:fd: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:C5:4C:D4:8D:D7:28:AF:1D:DE:FF:0B:1E:FE:89:7B:54:11:D1 X509v3 Authority Key Identifier: keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4f:45:b9:42:aa:4f:6a:36:00:ca:b3:23:15:73:6f:fd:c1: 64:a1:dd:b6:16:3c:e9:1f:f2:81:8b:7f:13:da:83:8a:6c:eb: d0:9a:fd:41:c0:59:65:a5:a2:46:63:3c:1d:03:c6:b1:b8:85: fc:50:1b:92:5b:88:5e:90:ae:36:48:b2:3b:3b:18:4b:d7:a1: 54:9d:84:fe:98:bb:d2:21:c5:5f:ba:0d:b5:94:97:e3:48:c5: a3:11:df:da:c5:2b:d2:da:ff:45:c0:06:81:7e:7e:e7:51:71: 24:15:f2:9e:46:81:ee:a7:e0:d1:7d:b4:39:e6:e1:1e:d4:f0: 1d:8e:c6:69:14:9f:89:c7:30:96:76:94:57:8c:9f:61:f0:bf: 78:ef:4d:78:85:05:7d:ec:90:bb:ee:fb:43:bc:7b:46:c2:61: 48:58:30:a4:99:66:85:13:f8:63:a4:31:03:56:c7:5d:31:ca: cf:ef:ed:c3:ab:20:c1:50:13:6c:7f:83:2f:57:e1:ed:44:c3: 55:72:d1:27:ad:ba:3e:2d:51:3c:5f:11:4a:42:d5:b2:94:39: 79:ab:ba:20:1c:2e:fe:c1:29:53:dc:48:23:19:a2:7d:2e:2b: 4f:7b:9e:cf:ac:06:c9:d1:dc:94:b9:82:14:96:62:28:6a:21: ee:a3:36:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBApZw4VQIz8QAkQQJOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk OWQyY2IwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EyhmNWI0YzU0Y2Q0OGRkNzI4YWYxZGRlZmYwYjFlZmU4OTdiNTQxMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFpONMBSqVnuKbIHrUyvCIi214Ij f7fYv7k6NBwwU94ic07FKR0ep6rtTUHzosTIh9JZjorDD/02i4UUQU0uuhO2Vhca oKSJpB7wTaDo/rUgRditetiVR1Ez+cszyziDvz/VPE4Db4VUrJPfHKov6dQMXIe6 OabXNB0GkSnIPNEz0DHhk3+6aNdBYTUSThB08RHc4PHQnW3BogR1GKH/2z7ki7AZ IbUdpwEJHkmrbBe6UrN/E+t0IFg11un5mwMXC4NE93Bpj2NJ4+MdzuuqqME0NQck DuSwPJHNdMcj37EET2X5rMkz/Jj8DFIOI3OggMYJa7KNURjqRIgK/f2ZiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW0xUzUjdcorx3e/wse/ol7VBHRMB8GA1UdIwQY MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1 LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU9FuUKq T2o2AMqzIxVzb/3BZKHdthY86R/ygYt/E9qDimzr0Jr9QcBZZaWiRmM8HQPGsbiF /FAbkluIXpCuNkiyOzsYS9ehVJ2E/pi70iHFX7oNtZSX40jFoxHf2sUr0tr/RcAG gX5+51FxJBXynkaB7qfg0X20OebhHtTwHY7GaRSficcwlnaUV4yfYfC/eO9NeIUF feyQu+77Q7x7RsJhSFgwpJlmhRP4Y6QxA1bHXTHKz+/tw6sgwVATbH+DL1fh7UTD VXLRJ626Pi1RPF8RSkLVspQ5eau6IBwu/sEpU9xIIxmifS4rT3uez6wGydHclLmC FJZiKGoh7qM24Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:52 2025 by rpki-client