This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json) Hash identifier: t1e1488ZmDL18sLzXu0ks258MY+hSPSbsCw3F3Q2ofo= Subject key identifier: EA:4F:E3:BB:3B:9E:46:66:79:10:79:D4:6A:DE:3A:26:AA:82:6B:26 Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Certificate serial: 019AF42E36358F3EB89EB81AD18FA21B1AD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft Manifest number: 0BE0 Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: JxjfqNSZX0DcB99hqVvHYaXLRlIp6lf3D5VgAO+RlOk=) 2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:36:35:8f:3e:b8:9e:b8:1a:d1:8f:a2:1b:1a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=ea4fe3bb3b9e4666791079d46ade3a26aa826b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:b9:9c:93:0f:28:ad:94:43:06:26:86:36: 85:07:35:58:4c:a4:79:5a:73:54:07:aa:25:b4:39: 91:6c:4b:3a:75:a9:ca:7e:63:31:6b:78:21:eb:8c: e7:a5:ce:69:24:f0:78:1d:88:64:e7:74:76:e9:8a: 4f:a2:38:bf:ef:1f:48:aa:31:dc:c7:f3:a9:c5:fc: 41:dd:0e:87:55:15:a2:29:5a:e4:4b:f0:09:00:f8: b3:4a:5a:ea:d9:7f:99:00:d4:bb:b1:55:31:e3:db: 2f:e1:f5:2f:f5:15:af:4a:2a:1b:e4:11:df:34:cc: cc:cb:ea:3e:c7:3e:c1:84:3b:5c:3e:a6:9f:e0:32: 6e:dd:ab:11:e7:43:b7:49:80:eb:70:12:0d:46:2d: 66:17:5c:24:0e:cd:a8:8e:4f:d4:1b:a1:8c:e3:56: 19:3f:86:df:45:1b:e0:d0:ae:14:00:8b:d0:04:cd: fd:d8:b0:9c:f6:d9:4b:cb:2d:26:e3:f8:72:5b:f0: eb:50:3b:a9:d7:e9:ef:46:ed:08:f7:ff:d0:b1:a2: 69:18:d6:01:7f:61:1f:a3:f2:d9:e3:d9:bc:ad:28: c2:0d:ac:c4:9a:91:4c:77:53:c3:f7:5a:7e:dc:e7: 9d:79:e6:cf:0d:43:79:a4:87:99:b0:ca:06:8d:c5: 72:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:E3:BB:3B:9E:46:66:79:10:79:D4:6A:DE:3A:26:AA:82:6B:26 X509v3 Authority Key Identifier: keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:e5:48:e1:37:fe:9d:6e:16:44:b3:43:fc:83:9a:a3:ad: f1:8a:b6:f9:a8:d8:5b:17:02:a0:11:e2:29:ee:39:9e:ca:5e: ed:71:89:1a:33:52:a4:ec:90:09:a6:49:72:fd:04:b7:b9:fe: b4:e2:72:63:02:b4:85:62:f7:17:33:83:b3:54:2d:9e:80:23: 90:fe:cf:a8:2d:3c:63:4d:f4:d2:b2:ae:82:b8:7b:fd:2e:28: 7c:4a:90:7e:9b:cb:5b:e2:4c:44:57:2a:c6:a4:20:4e:60:29: 17:7e:34:fd:9c:dc:e6:58:b4:17:37:b0:6c:93:59:fa:a0:d2: 12:81:09:fd:43:02:0e:10:02:55:21:38:c6:ab:ab:c1:34:04: 74:a9:22:2d:da:01:02:7b:be:d1:06:81:1b:f0:f8:fe:ca:f8: 47:8a:62:e8:60:d5:5f:be:21:9a:04:b3:08:3e:8b:77:f8:c5: d8:23:1c:c8:fa:55:b5:ed:30:fe:70:9d:ce:e3:2e:d4:e3:20: e7:74:af:99:18:d2:15:7a:a9:9b:a1:21:5f:83:c6:dd:37:59: 0a:68:bc:ad:ba:7b:8a:f8:ff:bc:bd:e9:89:98:0f:75:f5:02: 54:32:24:56:c3:12:6b:ed:f6:34:c1:e7:56:ba:a4:ce:0a:02: fd:b1:75:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjY1jz64nrga0Y+iGxrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4 MmE4NjYwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD EyhlYTRmZTNiYjNiOWU0NjY2NzkxMDc5ZDQ2YWRlM2EyNmFhODI2YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20C5nJMPKK2UQwYmhjaFBzVYTKR5 WnNUB6oltDmRbEs6danKfmMxa3gh64znpc5pJPB4HYhk53R26YpPoji/7x9IqjHc x/OpxfxB3Q6HVRWiKVrkS/AJAPizSlrq2X+ZANS7sVUx49sv4fUv9RWvSiob5BHf NMzMy+o+xz7BhDtcPqaf4DJu3asR50O3SYDrcBINRi1mF1wkDs2ojk/UG6GM41YZ P4bfRRvg0K4UAIvQBM392LCc9tlLyy0m4/hyW/DrUDup1+nvRu0I9//QsaJpGNYB f2Efo/LZ49m8rSjCDazEmpFMd1PD91p+3OedeebPDUN5pIeZsMoGjcVySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpP47s7nkZmeRB51GreOiaqgmsmMB8GA1UdIwQY MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuTlSOE3 /p1uFkSzQ/yDmqOt8Yq2+ajYWxcCoBHiKe45nspe7XGJGjNSpOyQCaZJcv0Et7n+ tOJyYwK0hWL3FzODs1QtnoAjkP7PqC08Y0300rKugrh7/S4ofEqQfpvLW+JMRFcq xqQgTmApF340/Zzc5li0FzewbJNZ+qDSEoEJ/UMCDhACVSE4xqurwTQEdKkiLdoB Anu+0QaBG/D4/sr4R4pi6GDVX74hmgSzCD6Ld/jF2CMcyPpVte0w/nCdzuMu1OMg 53SvmRjSFXqpm6EhX4PG3TdZCmi8rbp7ivj/vL3piZgPdfUCVDIkVsMSa+32NMHn VrqkzgoC/bF1Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:19 2025 by rpki-client