This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json) Hash identifier: hPNZjfQ+SX/npdsOsinEZs0+O6SQfUOMkVBZ0DyK4e8= Subject key identifier: 77:85:C0:C2:C7:8A:A5:F1:33:1D:53:D1:FF:02:3C:EC:EC:38:EB:B7 Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019AF0BF14099D70816D50719B3E10E6AA63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=) 2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: NTshnqh+tQYhJatcl9XsXtuBjZzUtmNoeXF1cy6Wao4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:14:09:9d:70:81:6d:50:71:9b:3e:10:e6:aa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=7785c0c2c78aa5f1331d53d1ff023cecec38ebb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:23:f9:b1:00:69:9a:55:ec:5f:8d:3b:30: 87:33:2d:e7:43:46:4f:1f:3c:2e:c7:1e:32:bf:08: cb:57:62:6b:45:51:92:26:01:9f:86:1d:d2:25:c2: 2b:4d:06:6f:d5:77:59:49:6f:a5:5e:b9:55:2f:cd: 22:40:3a:ea:73:d7:a1:6a:00:65:f1:09:03:77:46: e5:a9:1c:51:7f:78:56:c5:9a:cc:6e:7e:b9:82:4d: 04:8c:3e:02:1f:cd:8f:87:26:b8:f3:07:28:73:b6: 0d:67:e4:dd:04:0b:e4:90:59:8a:c8:97:54:35:6b: 19:21:96:e5:cf:dc:d3:98:b3:bb:ba:28:aa:14:d8: 4d:77:b5:03:bf:29:72:07:3e:7c:11:aa:a7:da:79: 17:c2:22:cf:bc:23:79:0f:64:4d:19:e5:78:be:7f: 8f:b6:64:51:1c:a5:c6:21:65:48:3f:94:12:2d:d4: a5:bc:ce:f3:5e:db:5f:e1:91:91:80:02:e4:3e:23: 15:b5:b7:fa:4a:11:fc:24:f3:5f:ba:99:d7:80:f9: ba:5e:3b:de:c6:ad:9b:53:47:65:87:54:2d:a9:95: a3:18:8b:ec:e8:a1:be:75:9a:9e:3b:5d:19:24:cb: 68:74:31:3e:4d:ce:2e:63:36:85:f1:03:6f:6d:f9: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:85:C0:C2:C7:8A:A5:F1:33:1D:53:D1:FF:02:3C:EC:EC:38:EB:B7 X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:f1:db:90:b1:b6:e8:e3:10:ca:0a:f5:64:36:11:11:0d: db:76:98:1b:10:c5:4a:df:cf:c0:8a:29:5f:2c:29:fb:06:ef: ea:13:f3:d2:32:34:3f:32:a0:f8:26:18:04:a3:cb:ba:3d:e3: db:0a:ad:a5:14:32:03:52:74:46:2e:2e:bc:6b:1c:de:65:ef: cc:f3:59:93:02:e9:56:7c:bc:16:51:ea:98:4e:e0:c3:24:0d: ce:ca:35:63:68:2b:ad:6c:e8:6d:fb:0e:99:fb:53:56:69:28: 1e:ab:c6:f4:15:5f:dc:ee:a7:1c:70:dc:16:db:5f:f8:16:e6: f9:36:98:4e:4f:74:18:cb:0e:42:75:05:3a:78:0f:e0:05:55: a5:5f:4b:a3:0f:b6:e0:3e:e3:0d:bd:a2:1a:3b:d3:28:69:f8: 64:bf:2a:aa:ad:90:80:aa:69:50:70:c1:7f:af:f2:eb:b8:01: 52:df:30:6d:10:82:65:b0:60:28:71:24:ef:33:e0:33:56:dc: ac:d3:bc:c2:64:23:0f:86:40:14:64:8d:6b:83:7d:a7:1e:82: cb:50:e9:d2:69:6e:1a:dd:3a:bf:05:fe:02:65:29:79:8c:81: c2:62:6c:bb:8b:5a:8f:01:45:11:a1:e8:f5:a8:46:99:df:b7: c5:47:42:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxQJnXCBbVBxmz4Q5qpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg3Nzg1YzBjMmM3OGFhNWYxMzMxZDUzZDFmZjAyM2NlY2VjMzhlYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw8j+bEAaZpV7F+NOzCHMy3nQ0ZP Hzwuxx4yvwjLV2JrRVGSJgGfhh3SJcIrTQZv1XdZSW+lXrlVL80iQDrqc9ehagBl 8QkDd0blqRxRf3hWxZrMbn65gk0EjD4CH82Phya48wcoc7YNZ+TdBAvkkFmKyJdU NWsZIZblz9zTmLO7uiiqFNhNd7UDvylyBz58Eaqn2nkXwiLPvCN5D2RNGeV4vn+P tmRRHKXGIWVIP5QSLdSlvM7zXttf4ZGRgALkPiMVtbf6ShH8JPNfupnXgPm6Xjve xq2bU0dlh1QtqZWjGIvs6KG+dZqeO10ZJMtodDE+Tc4uYzaF8QNvbfldoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeFwMLHiqXxMx1T0f8CPOzsOOu3MB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYTx25Cx tujjEMoK9WQ2EREN23aYGxDFSt/PwIopXywp+wbv6hPz0jI0PzKg+CYYBKPLuj3j 2wqtpRQyA1J0Ri4uvGsc3mXvzPNZkwLpVny8FlHqmE7gwyQNzso1Y2grrWzobfsO mftTVmkoHqvG9BVf3O6nHHDcFttf+Bbm+TaYTk90GMsOQnUFOngP4AVVpV9Low+2 4D7jDb2iGjvTKGn4ZL8qqq2QgKppUHDBf6/y67gBUt8wbRCCZbBgKHEk7zPgM1bc rNO8wmQjD4ZAFGSNa4N9px6Cy1Dp0mluGt06vwX+AmUpeYyBwmJsu4tajwFFEaHo 9ahGmd+3xUdCag== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:37 2025 by rpki-client