This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json) Hash identifier: NEH6It0NUCmzeHsoYvq5p2O2ZYISD6K5awQlSdbnvBA= Subject key identifier: 72:C3:76:46:D5:60:18:AE:5D:73:78:2C:2F:CE:9D:2C:13:ED:10:9A Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78 Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78 Certificate serial: 019AF50A54AF1E45532844C895CAB28B979C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft Manifest number: 16C8 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: 5zaWMJ+K4NVONK5h+sZK14/J2lO2s4UD6pI92mX74Kw=) 2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:54:af:1e:45:53:28:44:c8:95:ca:b2:8b:97:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78 Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=72c37646d56018ae5d73782c2fce9d2c13ed109a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:12:e8:13:61:23:0a:f7:65:8a:28:ba:52: 48:c3:21:ce:f8:15:b0:1c:d3:b1:85:55:7b:1b:be: 23:be:c3:d3:94:39:73:a0:10:9b:bd:71:ea:21:cb: c1:7b:97:cb:12:44:6b:ee:1f:81:d5:eb:30:87:d5: 12:5a:ee:a4:c8:35:74:f3:6a:70:1f:06:96:2a:77: 7a:7a:ed:bb:1a:e5:ff:ca:a1:3b:64:58:5e:36:54: d7:7f:10:16:75:62:bd:49:d4:18:a6:87:82:11:db: a8:ac:1a:49:0c:d7:c8:44:8f:e1:46:1d:74:8f:84: 8d:f1:b9:fb:94:9c:59:a0:f9:36:b0:15:7d:11:dd: 71:b7:24:0d:0d:99:cc:c3:4a:86:45:65:26:95:00: 97:34:7f:20:6a:e8:75:d1:59:57:19:eb:61:d0:ff: cb:7d:cc:b0:b6:8a:d3:5c:ba:41:03:1a:08:5c:1f: 29:78:1a:97:39:18:11:6e:46:98:5a:13:e2:bb:95: c3:09:97:2e:8c:bb:d5:8a:1f:3f:48:12:17:9b:dc: 12:ea:d0:db:cd:f5:be:78:c4:25:4e:10:3b:1b:d6: 0e:b7:ae:58:b9:6f:d9:59:01:97:53:9a:97:d4:dc: f8:b9:fe:7e:1f:a8:15:0c:d4:50:37:42:97:83:8e: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:76:46:D5:60:18:AE:5D:73:78:2C:2F:CE:9D:2C:13:ED:10:9A X509v3 Authority Key Identifier: keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:66:00:f5:16:e3:db:2f:5f:79:5c:e6:7a:25:a6:3a:8d:c9: e5:0c:fe:38:79:98:32:3c:68:46:b0:55:28:07:4f:eb:26:b5: ff:c1:a5:d1:e1:de:51:2e:b4:9c:02:01:ef:b0:17:58:b0:e4: 4b:36:60:7c:fd:c8:cf:ad:96:72:3c:72:1e:f5:e5:9b:df:bb: d5:69:e3:1e:8e:bd:98:2f:44:71:57:ab:63:d8:8d:26:46:a8: f9:35:50:5b:bc:bf:9b:88:93:06:96:31:3a:a7:65:fd:54:e3: 97:cc:38:42:e6:4c:12:0c:04:34:d5:f5:f7:80:d3:39:0e:1b: a3:41:c7:0b:bd:8f:df:c3:b2:f6:c6:f1:7c:15:d1:eb:a5:c5: 4e:be:7d:68:4c:8f:d2:58:fe:43:2d:05:b2:bb:18:b1:a9:a0: 56:95:ed:f4:d1:ed:b7:cf:8d:6e:d1:b9:63:75:cd:3f:11:e9: 50:10:53:a4:f3:43:d0:2d:f8:d8:bc:b9:3a:74:2f:36:c6:b8: 9d:ad:61:00:96:5d:fd:65:29:00:9f:e4:98:fb:80:f4:84:5a: 09:a4:50:83:f8:90:f7:9e:69:7a:f5:63:b5:6a:27:d3:a0:62: 14:53:b9:39:f1:31:03:b6:23:c0:0d:43:d1:9b:70:3c:b3:d8: 0a:8d:2f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClSvHkVTKETIlcqyi5ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NWM1YWI5YzA5MWFiM2M0NTA1MDY4YTkyZmZjYjAxOTg0 OWFhNzgwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD Eyg3MmMzNzY0NmQ1NjAxOGFlNWQ3Mzc4MmMyZmNlOWQyYzEzZWQxMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PYS6BNhIwr3ZYooulJIwyHO+BWw HNOxhVV7G74jvsPTlDlzoBCbvXHqIcvBe5fLEkRr7h+B1eswh9USWu6kyDV082pw HwaWKnd6eu27GuX/yqE7ZFheNlTXfxAWdWK9SdQYpoeCEduorBpJDNfIRI/hRh10 j4SN8bn7lJxZoPk2sBV9Ed1xtyQNDZnMw0qGRWUmlQCXNH8gauh10VlXGeth0P/L fcywtorTXLpBAxoIXB8peBqXORgRbkaYWhPiu5XDCZcujLvVih8/SBIXm9wS6tDb zfW+eMQlThA7G9YOt65YuW/ZWQGXU5qX1Nz4uf5+H6gVDNRQN0KXg44VDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLDdkbVYBiuXXN4LC/OnSwT7RCaMB8GA1UdIwQY MBaAFJZcWrnAkas8RQUGipL/ywGYSap4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjIt MGFiNDc1ZjlhOWEzLzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjItMGFiNDc1ZjlhOWEz LzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2YA9Rbj 2y9feVzmeiWmOo3J5Qz+OHmYMjxoRrBVKAdP6ya1/8Gl0eHeUS60nAIB77AXWLDk SzZgfP3Iz62WcjxyHvXlm9+71WnjHo69mC9EcVerY9iNJkao+TVQW7y/m4iTBpYx Oqdl/VTjl8w4QuZMEgwENNX194DTOQ4bo0HHC72P38Oy9sbxfBXR66XFTr59aEyP 0lj+Qy0FsrsYsamgVpXt9NHtt8+NbtG5Y3XNPxHpUBBTpPND0C342Ly5OnQvNsa4 na1hAJZd/WUpAJ/kmPuA9IRaCaRQg/iQ955pevVjtWon06BiFFO5OfExA7YjwA1D 0ZtwPLPYCo0vaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:36 2025 by rpki-client