This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json) Hash identifier: A+iXtSl5kGbtkZ5hI8EEfhr6qGqRRYkVlluU2IMesKc= Subject key identifier: CE:83:A5:22:CD:2E:52:9A:AE:6C:DF:3D:24:C3:62:7C:D3:58:07:0E Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Certificate serial: 019B21ABAEFEC1B672F9AB0B8DA973020285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 11:00:58 +0000 Manifest this update: Mon 15 Dec 2025 11:00:58 +0000 Manifest next update: Tue 16 Dec 2025 11:00:58 +0000 Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=) 2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: dmn8Y/Fe122tOoVRMwVCgimpG+MbsViUynEcY8EDkn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:ae:fe:c1:b6:72:f9:ab:0b:8d:a9:73:02:02:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Validity Not Before: Dec 15 11:00:58 2025 GMT Not After : Dec 16 11:00:58 2025 GMT Subject: CN=ce83a522cd2e529aae6cdf3d24c3627cd358070e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:ad:a7:ed:15:ff:a1:c7:c6:5a:65:ce:f8: 09:7a:22:77:6b:72:62:2b:f0:ba:b8:3d:b4:70:03: 69:5b:29:6b:9a:a0:2e:39:29:7d:ad:87:8d:25:e0: 13:30:53:33:d6:e6:5d:2b:15:d5:5d:7c:da:e6:8e: 26:02:04:b8:15:e2:58:e1:c7:60:a0:65:71:bb:90: 12:3e:20:35:89:3e:d4:94:5a:bb:41:1e:dc:d8:c4: ab:bf:12:da:ea:8f:52:b1:39:d9:f2:bc:34:3d:de: c8:f0:33:67:a4:8a:8c:ee:e7:07:e4:e2:f2:ab:d1: 04:06:00:bf:75:21:bb:25:2a:86:4a:53:94:31:ac: 78:1f:a1:29:ab:58:d8:c4:60:15:ba:cf:08:08:23: 5c:77:6a:25:c3:b8:fb:64:c5:98:23:28:12:1f:18: 10:09:22:1f:48:c9:4b:11:67:58:46:b2:af:6c:d6: 70:89:a0:90:b5:50:f1:4a:3b:0a:c2:62:1a:94:7e: b7:a9:8d:48:ad:8c:cb:84:ae:44:7c:fc:75:8b:4a: bf:cd:2f:58:0e:17:25:d9:9c:cc:92:52:9e:a2:9b: 29:63:17:90:77:08:04:67:7d:f4:7d:34:79:66:e0: 40:f6:3b:a9:5c:0e:21:6f:a1:6a:35:c6:ba:56:cf: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:A5:22:CD:2E:52:9A:AE:6C:DF:3D:24:C3:62:7C:D3:58:07:0E X509v3 Authority Key Identifier: keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bd:cd:c7:1e:79:7b:bf:81:af:92:8d:07:6b:d1:70:a6:2e: d6:b4:4f:4b:4f:fc:87:69:96:91:a1:31:8a:f7:38:a5:4d:91: 02:df:b8:a8:99:cd:47:e6:2f:f7:d0:cd:05:e3:b8:28:da:bf: 09:66:7f:56:31:71:52:e1:16:05:a7:21:a3:0a:f0:8c:26:23: 36:2a:a0:c6:58:3f:d1:c1:50:fc:08:ac:8a:2d:c6:bd:5e:36: 84:77:19:ac:48:aa:67:44:be:8a:b2:bb:83:32:17:82:41:0f: c7:c6:8f:8d:54:ae:2f:23:a4:14:42:61:fe:79:72:6b:81:b5: 5f:24:c2:62:59:c7:88:18:de:1d:e6:1f:3a:ae:9a:c1:b7:dd: 16:c6:aa:be:ed:1e:96:44:61:6b:c6:84:1b:f8:c1:d9:e6:0a: b5:96:77:31:a7:5c:ee:01:ee:a1:22:31:ac:4f:6d:f9:ec:1e: b0:f9:97:7f:a3:06:20:c5:fa:62:0c:48:31:01:d3:69:ad:0e: 09:a3:bb:41:bd:97:3d:43:cd:ca:dd:e5:1d:23:02:b2:9c:ad: 5a:ed:8f:59:91:ef:db:7c:03:8c:5e:5b:72:c2:eb:68:c6:31: b2:53:15:eb:2e:cf:87:f5:46:a3:f7:5d:52:09:5c:81:ab:d2: 33:ea:48:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq67+wbZy+asLjalzAgKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0 ZWFmMTIwHhcNMjUxMjE1MTEwMDU4WhcNMjUxMjE2MTEwMDU4WjAzMTEwLwYDVQQD EyhjZTgzYTUyMmNkMmU1MjlhYWU2Y2RmM2QyNGMzNjI3Y2QzNTgwNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yKtp+0V/6HHxlplzvgJeiJ3a3Ji K/C6uD20cANpWylrmqAuOSl9rYeNJeATMFMz1uZdKxXVXXza5o4mAgS4FeJY4cdg oGVxu5ASPiA1iT7UlFq7QR7c2MSrvxLa6o9SsTnZ8rw0Pd7I8DNnpIqM7ucH5OLy q9EEBgC/dSG7JSqGSlOUMax4H6Epq1jYxGAVus8ICCNcd2olw7j7ZMWYIygSHxgQ CSIfSMlLEWdYRrKvbNZwiaCQtVDxSjsKwmIalH63qY1IrYzLhK5EfPx1i0q/zS9Y Dhcl2ZzMklKeopspYxeQdwgEZ330fTR5ZuBA9jupXA4hb6FqNca6Vs81jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6DpSLNLlKarmzfPSTDYnzTWAcOMB8GA1UdIwQY MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl73Nxx55 e7+Br5KNB2vRcKYu1rRPS0/8h2mWkaExivc4pU2RAt+4qJnNR+Yv99DNBeO4KNq/ CWZ/VjFxUuEWBachowrwjCYjNiqgxlg/0cFQ/Aisii3GvV42hHcZrEiqZ0S+irK7 gzIXgkEPx8aPjVSuLyOkFEJh/nlya4G1XyTCYlnHiBjeHeYfOq6awbfdFsaqvu0e lkRha8aEG/jB2eYKtZZ3Madc7gHuoSIxrE9t+ewesPmXf6MGIMX6YgxIMQHTaa0O CaO7Qb2XPUPNyt3lHSMCspytWu2PWZHv23wDjF5bcsLraMYxslMV6y7Ph/VGo/dd UglcgavSM+pIDg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:00:19 2025 by rpki-client