This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json) Hash identifier: TRRqekXa172Gzep497O9GERl2Qqdi/VaES6mNOmsLI8= Subject key identifier: 10:C9:EF:49:85:9C:9B:4B:94:30:C7:C2:C3:9D:89:A3:FB:E3:28:F3 Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Certificate serial: 019AF1D1C4E3E37131EE510EDB58A31D2ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft Manifest number: 080D Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: w47C0ue+NyNsGtA4MVR4cLmq3BnLOksalrNJu/rabVs=) 2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:e3:e3:71:31:ee:51:0e:db:58:a3:1d:2a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=10c9ef49859c9b4b9430c7c2c39d89a3fbe328f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:6d:47:1c:83:df:ce:39:82:ec:28:d0:eb: 79:e5:fd:7a:ad:67:db:e5:fc:aa:c5:c1:04:f8:36: 2b:b6:92:a0:fa:53:3c:7f:22:c2:4f:ce:a7:47:37: 56:34:14:7d:f1:fa:25:16:21:67:4f:5d:b8:6b:4f: 9f:9e:36:8b:b4:ca:7b:c6:3e:61:83:5a:3e:d1:cf: d0:cd:ba:96:17:cc:73:e5:34:c0:28:90:81:dd:e8: a7:36:fe:d5:bd:07:db:0b:d7:e2:65:37:1c:b1:25: 01:c6:aa:92:81:1b:87:e6:99:d9:07:4a:03:26:c2: ca:c2:8d:4c:6f:3e:e8:92:6e:6d:e3:41:76:82:f0: da:18:a3:14:4f:94:73:eb:80:6e:d3:3c:48:bf:36: 96:9e:52:40:62:ff:b2:5e:64:18:46:13:2c:8f:27: 2a:cf:26:09:13:49:11:6e:6f:6a:ff:b3:9e:04:dd: 24:ab:23:09:a5:0d:1b:61:54:a7:b5:d3:5a:78:58: b8:0e:ca:76:1c:29:86:60:88:bc:6e:da:5b:42:80: f3:8d:79:c6:02:9f:e7:d0:41:d2:5f:b1:39:fb:62: 4c:54:8c:f7:7e:2d:34:22:bf:00:b5:0c:7a:32:10: 8c:eb:29:c3:a3:eb:03:67:40:1a:f3:2d:d8:57:33: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:EF:49:85:9C:9B:4B:94:30:C7:C2:C3:9D:89:A3:FB:E3:28:F3 X509v3 Authority Key Identifier: keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:11:89:29:1b:c6:0b:d7:cc:22:d8:7f:b2:ff:b1:7a:e5:a4: 85:63:21:fc:9a:5c:c9:90:7f:17:20:3c:0f:b4:a3:56:1d:6f: 05:bd:81:8b:43:b1:45:9e:5a:9c:a3:24:5c:ac:a7:79:df:14: 00:03:62:82:46:0a:63:57:9d:7a:bb:40:1f:bd:f1:da:3d:3b: f0:50:31:ea:ae:a0:b6:b5:f6:aa:23:42:9f:d4:de:90:a5:37: 93:ba:bb:27:8d:cf:87:44:b0:39:69:89:bc:b6:db:e1:12:f6: 17:23:b3:a8:3e:9d:67:8e:51:7e:3a:4f:19:2a:73:72:10:0d: 7a:95:7e:ed:25:a3:41:23:2a:69:8a:5c:31:b1:5f:dd:08:11: 64:c1:01:67:94:b4:8a:0a:4c:60:8c:47:ad:16:f7:c4:56:e3: 8a:ae:51:7d:ae:c3:5c:32:dd:c6:74:1d:b2:2c:40:eb:cc:36: db:19:7a:ac:27:2b:59:d6:49:9d:b1:88:9b:46:f1:b8:20:32: 53:87:01:d9:48:8d:6b:6d:34:25:ad:ba:43:72:8a:3d:ed:2f: d2:47:b2:22:d0:e6:df:43:f6:bd:7d:80:4f:82:71:68:d9:06: bf:6b:b8:e0:bc:ba:fd:c3:75:bb:79:ef:69:53:d3:9b:36:bc: 46:42:3f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cTj43Ex7lEO21ijHSrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2 OTMxZjQwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EygxMGM5ZWY0OTg1OWM5YjRiOTQzMGM3YzJjMzlkODlhM2ZiZTMyOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYJtRxyD3845guwo0Ot55f16rWfb 5fyqxcEE+DYrtpKg+lM8fyLCT86nRzdWNBR98folFiFnT124a0+fnjaLtMp7xj5h g1o+0c/QzbqWF8xz5TTAKJCB3einNv7VvQfbC9fiZTccsSUBxqqSgRuH5pnZB0oD JsLKwo1Mbz7okm5t40F2gvDaGKMUT5Rz64Bu0zxIvzaWnlJAYv+yXmQYRhMsjycq zyYJE0kRbm9q/7OeBN0kqyMJpQ0bYVSntdNaeFi4Dsp2HCmGYIi8btpbQoDzjXnG Ap/n0EHSX7E5+2JMVIz3fi00Ir8AtQx6MhCM6ynDo+sDZ0Aa8y3YVzNOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDJ70mFnJtLlDDHwsOdiaP74yjzMB8GA1UdIwQY MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt MzllY2E0NzI2NjhiLzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRGJKRvG C9fMIth/sv+xeuWkhWMh/JpcyZB/FyA8D7SjVh1vBb2Bi0OxRZ5anKMkXKyned8U AANigkYKY1edertAH73x2j078FAx6q6gtrX2qiNCn9TekKU3k7q7J43Ph0SwOWmJ vLbb4RL2FyOzqD6dZ45RfjpPGSpzchANepV+7SWjQSMqaYpcMbFf3QgRZMEBZ5S0 igpMYIxHrRb3xFbjiq5Rfa7DXDLdxnQdsixA68w22xl6rCcrWdZJnbGIm0bxuCAy U4cB2UiNa200Ja26Q3KKPe0v0keyItDm30P2vX2AT4JxaNkGv2u44Ly6/cN1u3nv aVPTmza8RkI/FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:04 2025 by rpki-client