This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json) Hash identifier: EhxyB6NvJrylR87Nnh4kWdn6C1VzcCZgSZf+SuU31FY= Subject key identifier: 9F:56:1C:63:EA:9F:F2:C1:0F:CC:83:16:0A:0B:6B:09:60:CB:73:3B Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c Certificate serial: 019AF1642CC23C6C505AF4A51B16518220A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft Manifest number: 04D8 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: yi5ppR81PBRKGf5Et/TbxMBoyPK05Dh1kNsNogHSCus=) 2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2c:c2:3c:6c:50:5a:f4:a5:1b:16:51:82:20:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=9f561c63ea9ff2c10fcc83160a0b6b0960cb733b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:cb:bf:e6:44:ae:3e:45:ce:fa:38:1d:7c: c6:58:0e:37:11:78:49:75:e9:54:8e:96:0f:6e:b0: 8f:85:24:7d:2e:6b:50:6b:6f:b0:81:a5:5a:eb:34: 86:11:89:47:61:95:e1:93:b5:ba:b1:82:47:9a:e8: 9f:02:df:37:5f:f3:f6:6f:17:c4:73:1c:cd:fd:16: c6:0e:a8:74:38:cf:3f:3d:49:2c:7e:47:8a:89:71: 73:3a:2d:34:40:b4:28:35:b8:44:86:be:c9:2a:2d: 4d:f1:fe:58:7e:03:b7:28:f5:f8:bd:ff:4d:e9:4c: 44:e6:2a:14:a0:e6:bc:02:5f:af:a8:75:b1:3f:2f: 6d:db:36:16:58:39:1a:ad:21:d4:f5:68:99:e8:36: e6:e2:f9:93:07:39:4c:cd:c5:e4:d5:f2:73:25:17: 7a:32:ea:c3:fe:e9:8e:e4:19:fd:be:b4:a8:a3:b9: 11:8b:cb:f8:f0:5c:b1:41:e5:9b:85:24:94:c3:0a: 05:d8:67:ae:a0:1d:13:c9:64:5c:03:4e:26:4e:ce: d8:55:06:36:15:6f:b6:9c:f3:c9:5e:e1:5b:8c:e0: 9d:b2:8f:b6:cd:85:45:32:4a:b9:45:18:6b:4e:fe: 0f:7e:66:cf:65:8e:8f:14:bf:e3:dc:17:61:89:78: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:56:1C:63:EA:9F:F2:C1:0F:CC:83:16:0A:0B:6B:09:60:CB:73:3B X509v3 Authority Key Identifier: keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f6:3e:52:70:ad:63:10:52:3c:78:1d:e9:5f:46:c6:05:03: db:cb:7a:ea:8e:e7:9a:5a:c9:42:f9:6a:89:25:4d:3a:25:a5: 7b:d6:ae:b6:77:76:93:b8:0f:9b:e7:6e:0e:3f:7e:78:bb:8e: f5:23:9a:16:84:2a:57:3c:57:f1:6f:75:1d:30:86:0f:3d:50: f2:10:12:e5:ad:66:e9:52:15:df:72:95:e1:ae:2f:26:db:78: ce:04:d1:56:6b:38:40:e6:ee:f5:ad:4a:68:87:5c:b5:cc:6e: b6:d3:7f:17:11:8b:8f:fe:a6:c1:6b:99:c1:8f:e9:1f:97:b1: 3c:74:2d:51:df:50:68:3e:93:5d:78:eb:4e:a7:99:14:63:73: 60:a6:f7:d0:69:22:5b:2a:34:f8:55:4a:16:55:3e:0e:94:cc: ca:ea:be:41:97:84:d5:6f:ed:dd:61:7e:4e:68:b5:c4:5e:dc: cf:a6:a2:90:4b:49:30:30:84:13:4b:44:95:2a:31:01:c4:d1: e8:26:a5:39:2b:61:fb:ef:7e:8a:29:4a:21:1b:d4:e9:3f:d7: 42:06:c6:b1:69:77:bd:6c:db:e3:0d:a1:65:c9:84:eb:5d:98: bb:57:f7:cd:5b:4c:43:07:b4:c4:e7:03:48:52:ba:58:75:69: 3c:49:e8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCzCPGxQWvSlGxZRgiCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmM1NGQ1NTQzZTEyNDg0YjZiYWIyZmRjMzk5YThmNTI5 NTc4N2MwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg5ZjU2MWM2M2VhOWZmMmMxMGZjYzgzMTYwYTBiNmIwOTYwY2I3MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntPLv+ZErj5Fzvo4HXzGWA43EXhJ delUjpYPbrCPhSR9LmtQa2+wgaVa6zSGEYlHYZXhk7W6sYJHmuifAt83X/P2bxfE cxzN/RbGDqh0OM8/PUksfkeKiXFzOi00QLQoNbhEhr7JKi1N8f5YfgO3KPX4vf9N 6UxE5ioUoOa8Al+vqHWxPy9t2zYWWDkarSHU9WiZ6Dbm4vmTBzlMzcXk1fJzJRd6 MurD/umO5Bn9vrSoo7kRi8v48FyxQeWbhSSUwwoF2GeuoB0TyWRcA04mTs7YVQY2 FW+2nPPJXuFbjOCdso+2zYVFMkq5RRhrTv4PfmbPZY6PFL/j3BdhiXikVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9WHGPqn/LBD8yDFgoLawlgy3M7MB8GA1UdIwQY MBaAFC38VNVUPhJIS2urL9w5mo9SlXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMt NzA2NDRlOGYzNjQxLzEvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMtNzA2NDRlOGYzNjQx LzEvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfY+UnCt YxBSPHgd6V9GxgUD28t66o7nmlrJQvlqiSVNOiWle9autnd2k7gPm+duDj9+eLuO 9SOaFoQqVzxX8W91HTCGDz1Q8hAS5a1m6VIV33KV4a4vJtt4zgTRVms4QObu9a1K aIdctcxuttN/FxGLj/6mwWuZwY/pH5exPHQtUd9QaD6TXXjrTqeZFGNzYKb30Gki Wyo0+FVKFlU+DpTMyuq+QZeE1W/t3WF+Tmi1xF7cz6aikEtJMDCEE0tElSoxAcTR 6CalOSth++9+iilKIRvU6T/XQgbGsWl3vWzb4w2hZcmE612Yu1f3zVtMQwe0xOcD SFK6WHVpPEnoWA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:26 2025 by rpki-client