This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft File: LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json) Hash identifier: I8yH233em4HmQe/UiSNEAg0FV3EqFn612mbvsmIOISU= Subject key identifier: EA:40:5A:1B:E7:99:11:6E:44:C7:42:22:DC:E4:4A:34:57:AB:23:6C Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019AF50A0A9DC882BB029178E65386B1DE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 19:01:07 +0000 Manifest this update: Sat 06 Dec 2025 19:01:07 +0000 Manifest next update: Sun 07 Dec 2025 19:01:07 +0000 Files and hashes: 1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=) 2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: mwNzytQFpYtyTgZ8mxlJbDdJVoKSL+MR5s+KHQxGvnI=) 3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=) 4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=) 5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=) 6: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (hash: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:0a:9d:c8:82:bb:02:91:78:e6:53:86:b1:de:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Dec 6 19:01:07 2025 GMT Not After : Dec 7 19:01:07 2025 GMT Subject: CN=ea405a1be799116e44c74222dce44a3457ab236c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:a0:7c:1c:49:15:55:75:aa:ad:fa:d9:84: e1:6a:ac:2d:86:5e:2d:83:55:d2:17:96:54:a0:09: 32:b0:4b:39:0c:58:1a:b9:d5:50:ff:cd:47:9c:98: e7:8a:11:89:e9:e4:f9:9b:4a:35:2e:26:68:59:b2: b5:44:e2:da:98:02:44:73:86:0f:a6:2f:57:64:82: 22:64:d2:22:51:62:70:9c:7f:56:33:44:dc:cf:42: 2a:6d:93:87:97:de:06:a9:dc:3a:ba:63:6c:41:c4: a2:71:5b:44:2d:5c:67:c7:b1:80:ea:a9:d7:73:cf: 41:2c:ee:fc:e6:08:16:06:7c:3e:f1:35:e4:e3:00: 72:d4:62:33:28:c5:0c:d1:ee:bd:af:8f:6b:8c:52: ba:81:14:25:b7:6e:09:a4:b4:52:da:49:61:68:57: 5a:16:7a:e7:0d:11:e8:e7:02:c2:d5:a9:50:f6:94: 98:6d:e3:4e:ba:48:a5:5c:53:7b:93:c3:b7:18:0b: 7b:f0:45:3c:05:07:9d:e6:7e:04:a4:6b:b0:68:9b: b8:37:50:48:a2:81:6e:b1:a8:b1:d9:a4:15:c1:4f: 18:46:1d:79:a8:ec:a4:a3:00:ec:3e:f9:db:a7:56: ff:bc:02:56:1a:e2:b8:41:21:cb:3d:4c:70:25:e8: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:40:5A:1B:E7:99:11:6E:44:C7:42:22:DC:E4:4A:34:57:AB:23:6C X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5c:a1:e4:06:c6:e5:e0:4f:3a:11:26:84:c9:8e:8c:a7:47: d9:39:59:e2:c1:0d:c5:2f:d1:97:33:04:97:64:53:45:be:be: d6:2a:b0:27:b2:77:8f:f1:d2:81:54:b8:55:2b:01:62:68:92: 10:3a:c0:fd:aa:20:dd:79:1b:91:42:8c:6e:6c:96:d4:5d:e7: 2d:94:d2:e3:81:cc:7b:c1:e5:65:97:59:58:70:f8:d9:f1:2b: 33:96:2d:f0:91:f2:12:d6:5f:4d:5d:71:5f:1b:b2:dd:99:78: a4:28:00:bc:5a:9c:84:f7:27:da:af:66:d8:49:26:bb:8a:3d: 55:aa:2a:be:5b:00:3b:69:ea:f7:24:f9:1e:28:cd:3c:ff:58: 77:c8:ee:d2:8a:f6:b1:ed:f0:01:69:9c:84:9b:b8:91:df:f9: 9d:2b:57:ae:1e:bb:ef:d9:2f:4f:c0:51:50:09:77:2e:d6:d6: e2:dd:e7:dc:c9:5b:1b:b8:e6:4e:3e:cc:df:6e:c3:e0:39:2b: ce:3b:28:9c:7b:1c:45:b4:fc:34:2a:29:5b:d0:2d:96:65:b2: 5a:e9:0b:35:b7:9b:41:25:8e:81:6f:73:6d:96:62:eb:87:8c: 50:a2:ea:c6:31:45:d8:4c:30:08:d7:f3:fa:ec:87:5c:d4:61: f4:fd:88:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgqdyIK7ApF45lOGsd48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjUxMjA2MTkwMTA3WhcNMjUxMjA3MTkwMTA3WjAzMTEwLwYDVQQD EyhlYTQwNWExYmU3OTkxMTZlNDRjNzQyMjJkY2U0NGEzNDU3YWIyMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGigfBxJFVV1qq362YThaqwthl4t g1XSF5ZUoAkysEs5DFgaudVQ/81HnJjnihGJ6eT5m0o1LiZoWbK1ROLamAJEc4YP pi9XZIIiZNIiUWJwnH9WM0Tcz0IqbZOHl94Gqdw6umNsQcSicVtELVxnx7GA6qnX c89BLO785ggWBnw+8TXk4wBy1GIzKMUM0e69r49rjFK6gRQlt24JpLRS2klhaFda FnrnDRHo5wLC1alQ9pSYbeNOukilXFN7k8O3GAt78EU8BQed5n4EpGuwaJu4N1BI ooFusaix2aQVwU8YRh15qOykowDsPvnbp1b/vAJWGuK4QSHLPUxwJeg4lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpAWhvnmRFuRMdCItzkSjRXqyNsMB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFyh5AbG 5eBPOhEmhMmOjKdH2TlZ4sENxS/RlzMEl2RTRb6+1iqwJ7J3j/HSgVS4VSsBYmiS EDrA/aog3XkbkUKMbmyW1F3nLZTS44HMe8HlZZdZWHD42fErM5Yt8JHyEtZfTV1x Xxuy3Zl4pCgAvFqchPcn2q9m2Ekmu4o9VaoqvlsAO2nq9yT5HijNPP9Yd8ju0or2 se3wAWmchJu4kd/5nStXrh6779kvT8BRUAl3LtbW4t3n3MlbG7jmTj7M327D4Dkr zjsonHscRbT8NCopW9AtlmWyWukLNbebQSWOgW9zbZZi64eMUKLqxjFF2EwwCNfz +uyHXNRh9P2IGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:08 2025 by rpki-client