This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json) Hash identifier: igTjeA/9ZxyyB7xPVrh+UgiqYITxRNB1iE/5crsgIjE= Subject key identifier: 2B:69:C9:8E:E5:ED:2B:8E:BE:C1:78:1B:88:30:C8:E3:2C:57:5E:64 Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019AF2ADE7815442806417B630CA87C165BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft Manifest number: 0275 Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: 6Y0BMysGtqFOncNKoV1mFL8gtK8.roa (hash: bzW1jVkDO7MNGbEtIfzohL9NB4x4x/NSC3JqJKWeLDg=) 2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: YDPflfaYfYkvvYfNuNhvmqzJukRPhRzGZhKPH4XfYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e7:81:54:42:80:64:17:b6:30:ca:87:c1:65:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=2b69c98ee5ed2b8ebec1781b8830c8e32c575e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:61:77:dd:bb:50:17:6e:f3:55:99:fc:e3: 39:0d:28:cb:67:ae:4b:d4:c6:17:88:4f:0a:2f:42: 63:65:92:3b:7f:3e:ce:fe:e1:39:cb:60:5b:56:9f: e2:99:ae:38:a2:49:d5:97:9f:c4:98:a8:13:f1:64: 64:4c:56:b7:16:41:a8:51:bd:88:db:37:eb:f2:a6: ad:18:f4:bb:1c:26:a2:59:a5:68:a9:7b:45:b6:66: 70:89:26:03:39:4a:7e:dc:88:7c:d6:e6:4d:0b:2f: 9e:41:59:67:68:8b:a4:20:6a:75:78:73:a0:ba:2e: 8c:06:a1:86:98:be:1f:22:ce:70:f2:40:d3:3c:d7: 10:36:44:60:b2:e5:87:68:4b:46:b2:a6:3b:96:94: ad:93:35:5d:27:ec:3c:25:06:7c:d6:1b:fd:83:68: ee:49:ce:ff:fa:18:ee:40:a0:08:82:c1:fd:a6:33: 82:53:3a:7e:8a:c4:e8:11:bf:9f:48:35:e6:3a:91: 85:dd:1c:5b:3e:fd:20:dc:6d:89:f6:19:73:63:e9: 4c:5e:20:d3:12:7c:5b:05:6c:81:00:2e:e8:50:e8: 27:3f:40:a2:12:e9:ab:4d:21:20:29:47:ad:24:42: 93:34:9a:a7:5f:1e:b6:64:24:1f:51:9b:80:ae:79: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:69:C9:8E:E5:ED:2B:8E:BE:C1:78:1B:88:30:C8:E3:2C:57:5E:64 X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:99:91:24:83:28:c6:0d:67:23:61:a3:55:f2:4e:45:f6:cf: 4f:1e:80:b4:f5:cb:46:40:93:3a:e4:f9:98:f0:f2:05:9a:59: f5:46:ad:29:76:96:26:b1:8c:11:71:51:99:f4:86:bc:3e:06: 83:72:1c:a7:4e:cb:78:80:2f:d5:1d:5d:db:f7:85:91:86:77: af:32:b9:f3:8f:da:7f:f2:df:87:82:73:0e:d0:89:55:55:db: a3:11:68:e7:5d:1d:ba:0b:21:09:9a:92:03:d3:fd:cf:a1:f3: 62:71:e7:56:e0:94:8d:20:63:f3:09:88:7b:32:a9:9d:b5:fe: b0:a4:a2:30:a0:fe:3a:d1:6e:08:97:76:ef:3e:76:ba:13:67: 13:a9:b3:78:21:b4:bf:83:c0:2a:54:8d:8a:c1:3f:99:ec:60: aa:11:46:54:e7:19:85:4b:70:17:a8:ba:71:23:71:e9:f5:d3: 85:a0:dc:79:92:24:c2:58:62:b6:70:30:27:b9:30:c5:37:d0: 1f:46:48:39:62:27:71:18:82:8f:9e:c1:8a:83:f9:0b:6a:0a: 9c:1b:e8:13:11:7c:99:37:8b:00:f7:5d:aa:23:af:46:bb:0c: c5:c0:cc:80:6d:93:f7:98:c4:19:4c:d3:0a:39:43:fe:53:ec: 3e:91:0a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreeBVEKAZBe2MMqHwWW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD EygyYjY5Yzk4ZWU1ZWQyYjhlYmVjMTc4MWI4ODMwYzhlMzJjNTc1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy59hd927UBdu81WZ/OM5DSjLZ65L 1MYXiE8KL0JjZZI7fz7O/uE5y2BbVp/ima44oknVl5/EmKgT8WRkTFa3FkGoUb2I 2zfr8qatGPS7HCaiWaVoqXtFtmZwiSYDOUp+3Ih81uZNCy+eQVlnaIukIGp1eHOg ui6MBqGGmL4fIs5w8kDTPNcQNkRgsuWHaEtGsqY7lpStkzVdJ+w8JQZ81hv9g2ju Sc7/+hjuQKAIgsH9pjOCUzp+isToEb+fSDXmOpGF3RxbPv0g3G2J9hlzY+lMXiDT EnxbBWyBAC7oUOgnP0CiEumrTSEgKUetJEKTNJqnXx62ZCQfUZuArnluYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtpyY7l7SuOvsF4G4gwyOMsV15kMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZmRJIMo xg1nI2GjVfJORfbPTx6AtPXLRkCTOuT5mPDyBZpZ9UatKXaWJrGMEXFRmfSGvD4G g3Icp07LeIAv1R1d2/eFkYZ3rzK584/af/Lfh4JzDtCJVVXboxFo510dugshCZqS A9P9z6HzYnHnVuCUjSBj8wmIezKpnbX+sKSiMKD+OtFuCJd27z52uhNnE6mzeCG0 v4PAKlSNisE/mexgqhFGVOcZhUtwF6i6cSNx6fXThaDceZIkwlhitnAwJ7kwxTfQ H0ZIOWIncRiCj57BioP5C2oKnBvoExF8mTeLAPddqiOvRrsMxcDMgG2T95jEGUzT CjlD/lPsPpEKng== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:28 2025 by rpki-client