This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft File: LTX2XfLLPqFuURUvrHWUf6nDC_c.mft (raw, json) Hash identifier: ex3IB/cDn/V0ykkarRwR4uWbE8nhe0j+FPbnsg8t1Wc= Subject key identifier: 77:63:64:A0:E8:FF:48:7F:E3:38:04:3E:EC:0B:CD:EB:39:BA:88:C6 Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7 Certificate issuer: /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7 Certificate serial: 019AF19B230F1BF36842B01E14F2392FEE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft Manifest number: 0AF7 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: LTX2XfLLPqFuURUvrHWUf6nDC_c.crl (hash: 9hrHxNlP3rE793UNixqAG/1MH0rbcTDqnZrR4ez4GA4=) 2: Ocmt4jUZ7mV3GEDP4V_J5USsmhQ.roa (hash: FYS5oyulHe5jFBDp8cQAU5FujX28XBCqFxC7ytK6HbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:23:0f:1b:f3:68:42:b0:1e:14:f2:39:2f:ee:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=776364a0e8ff487fe338043eec0bcdeb39ba88c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:31:64:69:f3:41:f0:e7:85:ab:ef:b8:c9: a6:77:a9:18:1a:a4:95:a5:65:f0:ca:ae:5a:4c:a3: 33:d9:04:f2:d3:f2:11:61:15:0d:11:ba:f7:20:d7: e7:7e:13:05:7c:37:4c:df:af:11:5b:b2:7e:2b:ff: a1:b7:8b:14:23:fd:73:15:e9:ce:2d:f9:da:f3:22: 75:24:29:0b:73:a8:fe:82:a8:62:6e:69:bc:5f:f9: 65:ba:58:ba:98:90:e7:5d:6a:5a:5d:cd:e9:0b:4d: 29:d1:71:ef:60:d8:4a:f7:92:6a:9e:7c:89:f1:f9: 91:01:cb:cd:e0:ee:0b:b8:c2:9c:a2:f6:20:81:e1: 36:0a:20:35:85:d4:2d:b5:c7:a7:78:ed:69:44:aa: db:e2:89:1d:97:24:58:ee:d2:6c:0c:bc:22:4d:6c: a3:fe:95:f7:06:2a:13:d5:2d:24:55:f0:32:0d:e0: 32:35:86:07:e9:92:1b:99:c7:31:c5:82:48:30:72: 6c:28:c1:b0:c2:03:90:b8:c2:0e:a6:cc:b4:8e:44: 83:83:d6:bc:e7:f9:74:7f:3a:cc:a8:b8:69:fd:df: 21:e2:eb:cc:1d:18:de:f2:4e:a8:4a:43:c7:30:bf: 41:ac:fd:d5:ff:4b:ae:47:36:94:d3:88:ab:d4:07: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:64:A0:E8:FF:48:7F:E3:38:04:3E:EC:0B:CD:EB:39:BA:88:C6 X509v3 Authority Key Identifier: keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:db:6b:6a:fc:7a:f6:ea:2d:44:4c:5b:a8:4e:5a:e5:88:df: f3:d5:5b:1d:01:9f:06:a3:13:ca:f0:30:60:55:bc:ec:9f:53: 39:e2:77:3a:f6:fa:37:68:d6:38:d2:50:56:82:9b:d5:cd:82: d8:9a:38:22:56:7b:e4:0b:2e:8d:a0:83:eb:73:eb:a7:d7:81: fb:45:67:2f:a1:b3:ec:91:4e:05:a6:99:d3:b9:aa:48:65:3f: 05:63:a2:93:e8:39:86:e9:99:78:6a:0b:c3:dc:73:e9:dc:8c: 8b:09:b3:03:7c:7e:58:29:dd:61:05:7b:6d:9e:ca:83:9d:50: 4c:b0:81:54:14:96:9a:6a:2e:e7:40:50:f9:9c:cb:67:16:27: ac:4e:ac:07:d9:e1:8a:1e:7f:4f:0d:77:46:ce:97:39:8b:11: f6:b1:8b:0d:f0:cf:26:69:18:7c:4f:a5:33:63:72:59:07:79: e7:db:30:52:6f:c1:3a:3c:07:53:ee:75:e2:0e:a1:85:46:23: 1f:43:ee:ce:45:82:79:d1:09:8d:44:06:8b:77:3a:2d:b8:01: f0:3f:fc:4f:4e:ee:c7:4a:12:a4:03:24:6d:f3:b5:30:ee:3c: 47:49:b6:05:2b:e7:65:fd:12:1a:40:f1:7d:70:e0:a4:0d:0b: ec:f9:70:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyMPG/NoQrAeFPI5L+6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMzVmNjVkZjJjYjNlYTE2ZTUxMTUyZmFjNzU5NDdmYTlj MzBiZjcwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg3NzYzNjRhMGU4ZmY0ODdmZTMzODA0M2VlYzBiY2RlYjM5YmE4OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YUxZGnzQfDnhavvuMmmd6kYGqSV pWXwyq5aTKMz2QTy0/IRYRUNEbr3INfnfhMFfDdM368RW7J+K/+ht4sUI/1zFenO Lfna8yJ1JCkLc6j+gqhibmm8X/lluli6mJDnXWpaXc3pC00p0XHvYNhK95JqnnyJ 8fmRAcvN4O4LuMKcovYggeE2CiA1hdQttceneO1pRKrb4okdlyRY7tJsDLwiTWyj /pX3BioT1S0kVfAyDeAyNYYH6ZIbmccxxYJIMHJsKMGwwgOQuMIOpsy0jkSDg9a8 5/l0fzrMqLhp/d8h4uvMHRje8k6oSkPHML9BrP3V/0uuRzaU04ir1AectwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdjZKDo/0h/4zgEPuwLzes5uojGMB8GA1UdIwQY MBaAFC019l3yyz6hblEVL6x1lH+pwwv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mY2M4YjMtZmRkMS00YWJkLWFjYTYt ZTdlMjVjYjk4ZTYzLzEvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mY2M4YjMtZmRkMS00YWJkLWFjYTYtZTdlMjVjYjk4ZTYz LzEvTFRYMlhmTExQcUZ1VVJVdnJIV1VmNm5EQ19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdtravx6 9uotRExbqE5a5Yjf89VbHQGfBqMTyvAwYFW87J9TOeJ3Ovb6N2jWONJQVoKb1c2C 2Jo4IlZ75AsujaCD63Prp9eB+0VnL6Gz7JFOBaaZ07mqSGU/BWOik+g5humZeGoL w9xz6dyMiwmzA3x+WCndYQV7bZ7Kg51QTLCBVBSWmmou50BQ+ZzLZxYnrE6sB9nh ih5/Tw13Rs6XOYsR9rGLDfDPJmkYfE+lM2NyWQd559swUm/BOjwHU+514g6hhUYj H0PuzkWCedEJjUQGi3c6LbgB8D/8T07ux0oSpAMkbfO1MO48R0m2BSvnZf0SGkDx fXDgpA0L7Plw+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:12 2025 by rpki-client