This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json) Hash identifier: kmVy9QUcg4PgckE+T5ZPa3uHp4g760iyOkDzzqzXs84= Subject key identifier: F7:11:1B:75:53:3A:88:0E:D1:D4:2A:25:DF:E7:71:7D:F5:B9:93:95 Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Certificate serial: 019B2DB046DDFD898A3962B670CD6167F581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft Manifest number: 082C Signing time: Wed 17 Dec 2025 19:01:25 +0000 Manifest this update: Wed 17 Dec 2025 19:01:25 +0000 Manifest next update: Thu 18 Dec 2025 19:01:25 +0000 Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: vEDiB93aoNbhPgJn2c9EaByjz6hRJtTnRxZAnyEj4nQ=) 2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:46:dd:fd:89:8a:39:62:b6:70:cd:61:67:f5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4 Validity Not Before: Dec 17 19:01:25 2025 GMT Not After : Dec 18 19:01:25 2025 GMT Subject: CN=f7111b75533a880ed1d42a25dfe7717df5b99395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:3f:63:da:95:f2:22:52:36:35:ec:28:31: 6d:ed:5a:25:fd:4e:d0:ec:67:1b:b6:7c:34:de:5e: 8a:78:3e:a2:f3:88:fe:e6:5f:25:82:52:ca:9f:40: c5:26:e9:87:9e:b2:9c:90:2b:fe:06:54:43:4e:e6: db:88:da:d8:39:32:9a:b9:8f:7e:7f:ce:69:a5:40: 94:75:98:c4:f6:4a:3f:7d:5e:b8:99:68:b3:e6:71: 1c:0e:77:19:eb:66:40:db:b4:2f:5b:de:ae:67:08: f9:1f:ad:47:0b:fa:ff:96:f1:11:33:6d:af:40:41: 7d:73:ec:03:3c:65:99:4d:2c:a8:27:87:f1:d3:2d: 7e:c9:19:82:bd:df:22:e6:39:46:cf:7a:56:59:3a: c2:16:c8:bc:35:99:c9:09:9c:3d:df:cb:55:0e:07: 8c:65:56:57:38:ef:f6:b7:dc:aa:c7:ef:d9:80:13: 71:a4:42:73:51:6e:b2:7b:6e:74:a9:f7:6e:5c:54: 1f:6f:e9:1d:05:ba:7b:fb:42:90:98:c0:3b:f4:b1: 63:d0:d4:4b:af:81:c0:8e:9a:23:e8:0a:bb:41:e6: 48:48:6c:db:7b:18:58:f4:cd:b0:5c:85:73:b9:a1: da:6f:97:9b:32:ce:ca:b1:f7:a3:ec:02:70:cd:18: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:1B:75:53:3A:88:0E:D1:D4:2A:25:DF:E7:71:7D:F5:B9:93:95 X509v3 Authority Key Identifier: keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:13:bf:2a:60:40:40:0b:a4:e1:18:6f:07:d3:f5:dd:84: 8b:fe:fe:c2:64:90:37:cd:5e:16:e6:2c:4b:29:d9:f3:66:25: fb:19:24:e4:9e:70:08:5c:fc:8f:b6:ad:d1:82:05:7f:9f:2e: a7:76:6c:4b:b2:72:6f:87:01:3f:bb:5b:f3:4d:f2:71:fa:13: f3:97:a4:78:60:3c:84:f7:55:50:51:e1:d0:64:ba:52:35:b0: da:2c:af:c1:5c:9c:38:54:56:ce:11:af:62:5a:93:75:80:dd: 64:1c:10:33:17:9e:87:ce:bd:e3:ae:f0:dc:9e:fb:82:62:1a: cb:5d:81:49:5a:e8:f1:7b:58:ee:35:85:41:18:f7:b2:c3:83: f6:db:9e:2e:ad:d5:d6:c1:4d:14:fa:61:3f:f2:e0:bf:77:6a: 92:cf:30:08:eb:4d:b0:2b:c8:2d:7b:52:bc:d1:88:b2:00:ba: 58:6f:8d:9d:a9:02:f7:58:55:cc:9c:53:00:74:14:1b:7a:47: 58:07:6d:92:43:15:35:18:b2:ec:eb:68:63:2a:58:2d:09:d2: 3b:f0:7a:c8:34:c2:09:df:3c:77:58:24:19:af:7f:ee:5a:1a: 72:17:19:b4:a0:5f:f4:14:d3:dc:fa:b9:c7:a3:95:37:b6:52: e4:bc:5b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsEbd/YmKOWK2cM1hZ/WBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2 OTMxZjQwHhcNMjUxMjE3MTkwMTI1WhcNMjUxMjE4MTkwMTI1WjAzMTEwLwYDVQQD EyhmNzExMWI3NTUzM2E4ODBlZDFkNDJhMjVkZmU3NzE3ZGY1Yjk5Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWM/Y9qV8iJSNjXsKDFt7Vol/U7Q 7Gcbtnw03l6KeD6i84j+5l8lglLKn0DFJumHnrKckCv+BlRDTubbiNrYOTKauY9+ f85ppUCUdZjE9ko/fV64mWiz5nEcDncZ62ZA27QvW96uZwj5H61HC/r/lvERM22v QEF9c+wDPGWZTSyoJ4fx0y1+yRmCvd8i5jlGz3pWWTrCFsi8NZnJCZw938tVDgeM ZVZXOO/2t9yqx+/ZgBNxpEJzUW6ye250qfduXFQfb+kdBbp7+0KQmMA79LFj0NRL r4HAjpoj6Aq7QeZISGzbexhY9M2wXIVzuaHab5ebMs7Ksfej7AJwzRiSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcRG3VTOogO0dQqJd/ncX31uZOVMB8GA1UdIwQY MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt MzllY2E0NzI2NjhiLzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7gTvypg QEALpOEYbwfT9d2Ei/7+wmSQN81eFuYsSynZ82Yl+xkk5J5wCFz8j7at0YIFf58u p3ZsS7Jyb4cBP7tb803ycfoT85ekeGA8hPdVUFHh0GS6UjWw2iyvwVycOFRWzhGv YlqTdYDdZBwQMxeeh869467w3J77gmIay12BSVro8XtY7jWFQRj3ssOD9tueLq3V 1sFNFPphP/Lgv3dqks8wCOtNsCvILXtSvNGIsgC6WG+NnakC91hVzJxTAHQUG3pH WAdtkkMVNRiy7OtoYypYLQnSO/B6yDTCCd88d1gkGa9/7loachcZtKBf9BTT3Pq5 x6OVN7ZS5Lxblg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:31 2025 by rpki-client