This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft File: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json) Hash identifier: rM4hnCDosMdi/w0s9X7VNPJE2+ZZY+vEMT86PXBLnVk= Subject key identifier: 4F:BB:83:2B:05:45:B1:68:99:07:C1:F3:F1:5B:7C:26:60:A3:3A:BD Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35 Certificate issuer: /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435 Certificate serial: 019AF31B8DDCDF41CCCA35CCAC549E030F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft Manifest number: 0BC1 Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: xx8gUSDoxu/QQL8vWB5Fpf8XF9bsw+1isoTXRvFEV5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8d:dc:df:41:cc:ca:35:cc:ac:54:9e:03:0f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=4fbb832b0545b1689907c1f3f15b7c2660a33abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:2c:13:e7:e0:f3:0f:c5:08:0a:3e:d9:14: 52:4c:1e:00:39:25:33:8f:87:c7:f8:c0:a9:01:ff: 79:7f:75:3e:d0:b4:5c:2d:d8:32:16:fa:63:24:8c: e5:78:3c:08:6f:71:1f:0b:5f:64:86:09:92:33:95: f4:1b:2f:5e:b7:c0:10:16:fa:e0:9f:58:8f:fd:db: 28:93:d8:50:65:c4:18:5c:3b:8b:a0:21:3d:ec:5d: 36:39:60:40:02:3a:bd:13:e6:62:33:22:0b:cf:13: 2c:0a:79:0d:20:c4:80:0b:b8:0a:28:82:7f:04:ff: 18:41:6e:53:7f:59:1d:9f:6e:39:7a:39:9e:94:85: 23:b9:af:5c:45:fd:1f:20:ab:3f:47:4f:49:85:45: 56:73:ba:a9:74:93:e3:c5:03:24:e7:6c:30:ba:10: 86:20:0d:b4:4e:8e:e0:80:de:0f:a2:11:9c:49:89: 8a:30:3f:3d:6a:ee:8b:18:04:ad:a2:d4:73:13:b4: 21:2f:be:18:73:ae:a4:6b:15:71:e4:d5:f0:4a:e1: e7:ec:4e:74:e5:2d:f9:84:35:fe:2f:80:ce:17:24: 62:bf:f0:21:5a:cf:6d:d2:c5:10:d0:be:c3:ec:79: 65:f6:52:59:39:b2:58:01:03:d9:4e:5e:11:ae:c4: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BB:83:2B:05:45:B1:68:99:07:C1:F3:F1:5B:7C:26:60:A3:3A:BD X509v3 Authority Key Identifier: keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d0:e8:cd:62:d8:e5:f1:84:25:c1:29:5f:a7:6a:52:53:85: 3e:7d:97:56:94:5b:4b:b7:1a:f4:96:cf:fa:9a:37:6f:86:35: d7:68:1d:e2:1f:ad:54:ee:e1:ff:61:fb:5c:30:78:db:7e:a2: 8f:9f:c8:f2:9b:5c:7d:0c:45:62:03:a2:10:d9:4c:5b:78:7c: 07:6c:2a:85:3c:33:8e:aa:b8:22:f2:41:bb:e0:b4:52:c8:c6: 75:88:b7:0a:22:f6:28:a7:aa:c1:6a:e8:dc:85:cb:50:40:11: 9a:51:7d:cd:de:06:43:71:e0:e9:7f:24:bd:bb:5a:ca:93:d0: 3a:f9:67:28:3d:93:d9:00:7c:72:ed:98:19:14:2d:fb:cd:21: 67:7f:53:88:87:c2:8c:ed:10:0f:de:e6:08:ab:87:2b:ea:7b: 5b:9e:5a:51:19:51:f8:8a:7a:c1:a2:67:40:b6:16:ae:6d:43: e8:0f:c3:f7:5f:94:c3:b4:61:dd:34:de:5a:e9:41:f9:c9:c1: ce:7f:00:1f:fb:02:51:5e:64:04:98:70:dc:9f:8d:87:f2:18: b9:ee:fb:c7:a1:89:ff:78:2d:45:c0:4f:20:34:a0:d3:f2:83: 66:ef:5a:80:58:ab:56:ba:af:ac:b4:5b:4a:eb:5e:7f:68:47: f9:70:4f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG43c30HMyjXMrFSeAw+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy ZDA0MzUwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD Eyg0ZmJiODMyYjA1NDViMTY4OTkwN2MxZjNmMTViN2MyNjYwYTMzYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9EsE+fg8w/FCAo+2RRSTB4AOSUz j4fH+MCpAf95f3U+0LRcLdgyFvpjJIzleDwIb3EfC19khgmSM5X0Gy9et8AQFvrg n1iP/dsok9hQZcQYXDuLoCE97F02OWBAAjq9E+ZiMyILzxMsCnkNIMSAC7gKKIJ/ BP8YQW5Tf1kdn245ejmelIUjua9cRf0fIKs/R09JhUVWc7qpdJPjxQMk52wwuhCG IA20To7ggN4PohGcSYmKMD89au6LGAStotRzE7QhL74Yc66kaxVx5NXwSuHn7E50 5S35hDX+L4DOFyRiv/AhWs9t0sUQ0L7D7Hll9lJZObJYAQPZTl4RrsTsIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+7gysFRbFomQfB8/FbfCZgozq9MB8GA1UdIwQY MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdDozWLY 5fGEJcEpX6dqUlOFPn2XVpRbS7ca9JbP+po3b4Y112gd4h+tVO7h/2H7XDB4236i j5/I8ptcfQxFYgOiENlMW3h8B2wqhTwzjqq4IvJBu+C0UsjGdYi3CiL2KKeqwWro 3IXLUEARmlF9zd4GQ3Hg6X8kvbtaypPQOvlnKD2T2QB8cu2YGRQt+80hZ39TiIfC jO0QD97mCKuHK+p7W55aURlR+Ip6waJnQLYWrm1D6A/D91+Uw7Rh3TTeWulB+cnB zn8AH/sCUV5kBJhw3J+Nh/IYue77x6GJ/3gtRcBPIDSg0/KDZu9agFirVrqvrLRb Sutef2hH+XBPzA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:35 2025 by rpki-client