This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json) Hash identifier: ptHWgdtzJT2LAqrfCzNcNBwaw/qH/ZvtzrTc5mR4hds= Subject key identifier: 9E:D6:D9:E1:EF:6B:84:BC:FC:6A:A2:03:C9:92:4D:05:56:70:C6:72 Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Certificate serial: 019AF164747D1DD390A2960540427527783F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=) 2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: HEiYe2de2KwZZhv8iMsVh/0OFaaPEcHprK3Ujy3tHsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:74:7d:1d:d3:90:a2:96:05:40:42:75:27:78:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=9ed6d9e1ef6b84bcfc6aa203c9924d055670c672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:e1:c6:0d:9b:7e:49:f6:25:4a:82:5c:19: 35:40:cc:b9:3c:c0:3d:c9:e8:a7:a2:ec:ee:c7:61: e4:04:ec:5a:06:62:cf:72:28:b9:f5:ad:f8:de:35: e7:d0:b9:f2:60:66:36:19:c9:37:39:60:52:79:25: cf:1b:3e:18:cc:cc:f8:91:09:83:d1:57:b3:90:2c: eb:31:5d:f5:bc:02:39:fe:23:84:7b:87:8a:92:00: 70:42:ab:39:40:41:33:3d:20:51:41:a5:a0:b0:5a: 9d:cd:6e:03:c6:36:66:4e:66:e0:63:5b:74:b4:f1: b9:50:4f:4c:31:77:1e:df:25:17:3e:ee:85:39:6c: bd:2c:c6:4e:a7:e2:68:4c:2b:a3:62:31:b1:df:fe: 84:26:f0:f3:98:53:44:2d:e3:11:fa:af:b1:61:20: b5:1b:9b:c6:07:fe:41:74:51:f7:43:8d:07:90:f7: 40:72:d0:76:8a:fd:c7:8c:f7:5e:52:c7:bd:8c:d8: 35:59:65:7a:f5:38:13:14:7b:09:8f:6b:2d:1f:be: 26:a0:a1:9e:89:a6:a6:6e:6c:12:09:e7:3b:96:1a: 1c:a3:be:85:6d:ff:88:55:60:9d:79:f6:9e:2b:65: 80:ec:ba:85:dd:24:f0:94:da:0d:32:8f:9a:87:e0: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D6:D9:E1:EF:6B:84:BC:FC:6A:A2:03:C9:92:4D:05:56:70:C6:72 X509v3 Authority Key Identifier: keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ee:03:58:9d:50:ca:0e:c5:4f:d5:92:9c:e7:e7:26:cd:10: 67:fd:fa:17:68:fd:8e:d5:34:c5:f2:66:7c:38:64:51:c4:cb: 4e:b9:26:6d:1e:ef:f9:13:c7:00:fe:e1:81:8b:0b:6d:6f:ba: ad:51:15:d3:b1:5c:fa:13:06:2f:c6:4a:ce:66:b4:34:b5:b8: 4e:67:30:7b:57:6a:f8:15:af:e8:54:69:5b:85:ca:7c:2a:03: 09:7b:f9:1f:42:01:8f:11:7b:b3:30:80:c0:32:ab:86:4c:fa: 9b:af:f2:0d:0c:95:db:0d:69:35:84:a8:3f:ad:41:a5:6f:81: 84:ac:72:3f:a8:ff:19:91:b7:06:1a:45:50:f8:50:77:6a:9a: 4d:d5:fd:8e:f6:d9:a7:9a:0e:b5:38:35:45:3a:17:77:ee:07: b1:1d:dd:4e:46:9d:ed:f2:7c:0d:51:ab:fa:ca:33:01:ed:12: fd:58:b8:49:f8:15:6a:f3:40:2c:8f:68:7b:63:8d:c5:a1:3d: ee:2c:8e:30:b7:a3:79:ea:11:d2:51:e5:16:11:1f:0f:be:6c: ca:73:14:09:1b:38:07:7c:7d:50:16:4e:67:5d:5e:0b:5f:f2: 16:e5:0a:e5:db:29:00:5b:b1:e8:7d:60:3d:a9:cf:f7:c2:25: 81:16:8a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHR9HdOQopYFQEJ1J3g/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0 ZWFmMTIwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg5ZWQ2ZDllMWVmNmI4NGJjZmM2YWEyMDNjOTkyNGQwNTU2NzBjNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixfhxg2bfkn2JUqCXBk1QMy5PMA9 yeinouzux2HkBOxaBmLPcii59a343jXn0LnyYGY2Gck3OWBSeSXPGz4YzMz4kQmD 0VezkCzrMV31vAI5/iOEe4eKkgBwQqs5QEEzPSBRQaWgsFqdzW4DxjZmTmbgY1t0 tPG5UE9MMXce3yUXPu6FOWy9LMZOp+JoTCujYjGx3/6EJvDzmFNELeMR+q+xYSC1 G5vGB/5BdFH3Q40HkPdActB2iv3HjPdeUse9jNg1WWV69TgTFHsJj2stH74moKGe iaambmwSCec7lhoco76Fbf+IVWCdefaeK2WA7LqF3STwlNoNMo+ah+B3zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7W2eHva4S8/GqiA8mSTQVWcMZyMB8GA1UdIwQY MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+4DWJ1Q yg7FT9WSnOfnJs0QZ/36F2j9jtU0xfJmfDhkUcTLTrkmbR7v+RPHAP7hgYsLbW+6 rVEV07Fc+hMGL8ZKzma0NLW4Tmcwe1dq+BWv6FRpW4XKfCoDCXv5H0IBjxF7szCA wDKrhkz6m6/yDQyV2w1pNYSoP61BpW+BhKxyP6j/GZG3BhpFUPhQd2qaTdX9jvbZ p5oOtTg1RToXd+4HsR3dTkad7fJ8DVGr+sozAe0S/Vi4SfgVavNALI9oe2ONxaE9 7iyOMLejeeoR0lHlFhEfD75synMUCRs4B3x9UBZOZ11eC1/yFuUK5dspAFux6H1g PanP98IlgRaKCw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:55 2025 by rpki-client