This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json) Hash identifier: KqRrcmM1KtZtrDk4l8qT+TEGyZkMV/i/WNaNjv88tOk= Subject key identifier: 8D:54:BB:64:76:5F:8B:CA:DD:77:1C:1A:64:2A:1C:21:7C:F2:64:85 Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Certificate serial: 019AF19B2AAE6C80F9AC5F14885B5DB17E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: 7RflTfwVMGgu40zgcR2OqtsWlh/JRp9iDy6q8zB784U=) 2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2a:ae:6c:80:f9:ac:5f:14:88:5b:5d:b1:7e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=8d54bb64765f8bcadd771c1a642a1c217cf26485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:9c:b3:77:2b:01:7c:63:62:dc:3c:cd:bf: 30:48:40:29:da:ae:38:ef:5b:e1:74:3e:9d:95:b5: cb:ca:cb:6a:e7:d5:f0:87:e8:bb:3f:62:cf:4b:92: 3b:cc:a7:a9:ea:d7:ae:41:c3:b2:51:f8:a9:cd:66: 05:eb:1e:d7:df:3e:5e:99:df:ec:04:ee:39:84:b5: 06:ae:7f:b5:d2:42:ec:fa:8a:a0:dc:2a:7a:4a:8a: fe:2d:6f:9c:0e:79:34:71:64:c0:0c:19:ad:bd:52: 46:c9:c6:d6:cc:69:b1:d9:87:9c:70:22:9c:98:09: 79:a1:ef:46:07:8a:64:83:55:a1:61:8b:8c:57:0a: 2c:cf:58:cd:51:e6:1a:38:ce:17:14:fd:43:24:3c: d6:c7:d7:29:48:12:58:d8:6b:b4:0c:cc:c8:6b:2f: 10:ec:b6:f0:0c:ee:e6:8d:3e:06:d1:20:5c:50:b1: e3:d5:b0:2c:0d:5b:e6:95:c4:d6:2d:75:09:02:fe: 62:5f:58:54:fe:fd:3d:13:9a:21:9d:eb:4a:c5:44: 64:ad:2d:65:67:cd:68:6a:d7:49:38:f3:ee:c1:bc: ed:b1:1a:74:e5:68:c2:59:59:d8:65:67:db:d6:b1: a3:50:29:07:6c:4d:4f:ae:3c:53:76:d5:d7:87:61: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:BB:64:76:5F:8B:CA:DD:77:1C:1A:64:2A:1C:21:7C:F2:64:85 X509v3 Authority Key Identifier: keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0a:22:96:b5:88:9e:a2:b5:64:6e:8f:01:9d:c3:f8:5c:c7: 34:2e:ea:07:52:99:9b:e5:aa:d7:1e:23:20:f8:77:61:0a:d4: 23:68:9b:b7:1c:72:7a:d0:70:b4:92:b4:a5:00:73:8d:20:8f: 1c:02:5a:4e:17:2a:7c:d0:d5:f2:23:8c:8f:c8:57:7c:8b:52: 42:f9:f2:2f:fc:95:d8:d5:00:d1:a1:3f:c6:d6:80:1f:9b:3d: 49:30:24:89:21:32:ad:6d:1e:00:12:76:5a:85:b4:60:54:68: c7:af:b6:f4:2f:39:e0:88:be:b2:ef:b8:8b:dd:46:b0:a7:5e: 36:3c:71:ff:85:20:8f:5f:b2:58:9b:b3:18:e6:7f:13:86:93: 36:a7:23:16:03:8a:ab:21:8b:c7:ef:34:15:a6:3d:df:c5:01: ea:2f:79:af:fe:1c:65:b8:11:a4:a3:aa:98:d9:e6:fb:15:eb: 86:15:ed:55:6c:a8:9d:f5:e4:14:a2:1b:22:5b:80:77:e5:f9: cc:fa:d2:b0:59:5a:86:ca:ad:5d:a3:74:83:3d:4a:87:1b:b9: 39:14:3e:c3:97:0e:00:a7:0c:2e:2f:d0:5c:b1:63:1c:28:f3: 10:17:92:51:b0:bb:d0:96:df:84:62:63:a8:c9:d9:1f:61:ff: e9:ce:81:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyqubID5rF8UiFtdsX4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzQ3OWY0NTY0M2EyYjgyZTEwZGFiZjczZWZlZjc3MDNi MWUyZDIwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg4ZDU0YmI2NDc2NWY4YmNhZGQ3NzFjMWE2NDJhMWMyMTdjZjI2NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmGcs3crAXxjYtw8zb8wSEAp2q44 71vhdD6dlbXLystq59Xwh+i7P2LPS5I7zKep6teuQcOyUfipzWYF6x7X3z5emd/s BO45hLUGrn+10kLs+oqg3Cp6Sor+LW+cDnk0cWTADBmtvVJGycbWzGmx2YeccCKc mAl5oe9GB4pkg1WhYYuMVwosz1jNUeYaOM4XFP1DJDzWx9cpSBJY2Gu0DMzIay8Q 7LbwDO7mjT4G0SBcULHj1bAsDVvmlcTWLXUJAv5iX1hU/v09E5ohnetKxURkrS1l Z81oatdJOPPuwbztsRp05WjCWVnYZWfb1rGjUCkHbE1PrjxTdtXXh2G9NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Uu2R2X4vK3XccGmQqHCF88mSFMB8GA1UdIwQY MBaAFC10efRWQ6K4LhDav3Pv73cDseLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYt MGZjM2ZkY2Y1OWFlLzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYtMGZjM2ZkY2Y1OWFl LzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQoilrWI nqK1ZG6PAZ3D+FzHNC7qB1KZm+Wq1x4jIPh3YQrUI2ibtxxyetBwtJK0pQBzjSCP HAJaThcqfNDV8iOMj8hXfItSQvnyL/yV2NUA0aE/xtaAH5s9STAkiSEyrW0eABJ2 WoW0YFRox6+29C854Ii+su+4i91GsKdeNjxx/4Ugj1+yWJuzGOZ/E4aTNqcjFgOK qyGLx+80FaY938UB6i95r/4cZbgRpKOqmNnm+xXrhhXtVWyonfXkFKIbIluAd+X5 zPrSsFlahsqtXaN0gz1Khxu5ORQ+w5cOAKcMLi/QXLFjHCjzEBeSUbC70JbfhGJj qMnZH2H/6c6BVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:51 2025 by rpki-client