This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json) Hash identifier: 70Tl5J+H/fNCu/Al8VsT+BMiw7SwodYRzVHyzfQYtB4= Subject key identifier: F0:94:25:02:EA:4C:CC:D8:6A:16:6A:FC:C8:A5:9E:A9:DD:8A:05:45 Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92 Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692 Certificate serial: 019AF31BFCC9EC2040DE95B27EE67008ACE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft Manifest number: 0476 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: 0w8kghiwO/GYHqJsbKAmcD+m4omlV/l+K5eTMixaMe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fc:c9:ec:20:40:de:95:b2:7e:e6:70:08:ac:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=f0942502ea4cccd86a166afcc8a59ea9dd8a0545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:93:99:d6:aa:1d:fb:26:0e:86:59:ed:3d: e5:76:00:91:29:77:97:2e:df:14:d4:77:99:2c:c8: 00:91:a0:bc:61:df:8e:c6:7d:ec:52:e4:30:a8:36: d0:40:8d:d9:17:9b:c0:89:59:3e:7c:2a:57:9f:a4: 6f:ac:52:49:62:0c:5a:86:3e:22:89:b4:45:fd:59: b8:1d:f0:d0:e0:39:a8:a8:68:29:b5:a3:64:71:b5: 9c:c7:99:e0:32:11:a5:b8:a0:6e:6d:de:8b:51:1d: 81:6d:76:67:fb:21:ed:c9:97:67:ff:0f:1a:34:a4: 43:9c:01:5d:06:ba:b3:00:f8:98:3f:56:32:0c:48: 72:66:c1:aa:54:0e:39:36:40:2c:c8:71:e6:5a:1f: 1f:47:b3:ae:4f:ec:2b:41:f8:1f:c9:a5:06:ff:c2: 54:01:de:aa:05:4e:7d:f2:5f:14:e6:ee:8f:a4:7d: ed:0e:8f:af:b3:c6:35:bb:1e:d4:7b:44:f0:cc:b6: 10:63:46:b9:ed:44:76:fa:ea:48:ec:e6:9a:7a:d5: 0c:90:5b:38:b0:f7:d7:70:ce:a0:93:8d:59:0d:9c: d7:56:ce:63:97:15:92:91:fb:ca:85:fc:df:7f:16: 6c:1c:16:16:2b:6a:da:eb:91:77:ad:2c:01:d4:b2: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:94:25:02:EA:4C:CC:D8:6A:16:6A:FC:C8:A5:9E:A9:DD:8A:05:45 X509v3 Authority Key Identifier: keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d7:15:ee:79:30:b5:de:ba:c9:84:2c:97:35:be:4a:50:08: 22:a3:c4:06:b6:6e:15:bf:f8:6d:96:48:b5:89:40:5e:a7:1e: ba:8f:69:d4:68:87:0b:0c:66:02:ca:52:58:ed:b7:e8:16:c0: a3:11:7f:55:db:6b:16:e7:8e:fc:a3:75:e5:16:a3:3f:d2:64: 0b:3a:73:ec:a8:84:be:8c:bd:d0:53:5b:15:f8:3e:db:f0:c7: 8d:0e:35:31:04:3a:15:a2:c8:23:94:e3:0d:ba:8a:6c:71:78: bd:44:76:ba:15:2d:44:ec:ad:70:4b:6e:c1:0d:4d:33:a3:44: 80:32:58:9d:37:10:38:99:5f:72:86:e9:d4:aa:2e:91:9f:7e: 12:e9:46:ae:23:4a:7d:e0:20:9d:15:8a:bd:93:08:a0:e8:34: 02:19:36:4b:ad:0e:a8:e5:59:e8:f7:d7:67:aa:d4:e5:78:ae: 40:6f:29:4e:94:14:d5:ac:a3:20:2d:42:68:0e:a5:dc:c5:57: 72:69:b2:69:b9:41:88:6f:98:62:19:6a:71:ba:c3:28:10:e2: 74:c1:ed:e5:18:a1:55:dd:35:ce:1e:76:31:b4:e7:0f:b8:ba: f7:09:58:df:88:e9:8d:68:d7:3a:e0:96:82:ef:da:54:19:b3: 7b:3e:ba:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/zJ7CBA3pWyfuZwCKzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTViNzNhN2MyZDEzMWVjMTRlYmQ5MDcxNzE4YjU0YzNm YmE2OTIwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EyhmMDk0MjUwMmVhNGNjY2Q4NmExNjZhZmNjOGE1OWVhOWRkOGEwNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC6TmdaqHfsmDoZZ7T3ldgCRKXeX Lt8U1HeZLMgAkaC8Yd+Oxn3sUuQwqDbQQI3ZF5vAiVk+fCpXn6RvrFJJYgxahj4i ibRF/Vm4HfDQ4DmoqGgptaNkcbWcx5ngMhGluKBubd6LUR2BbXZn+yHtyZdn/w8a NKRDnAFdBrqzAPiYP1YyDEhyZsGqVA45NkAsyHHmWh8fR7OuT+wrQfgfyaUG/8JU Ad6qBU598l8U5u6PpH3tDo+vs8Y1ux7Ue0TwzLYQY0a57UR2+upI7OaaetUMkFs4 sPfXcM6gk41ZDZzXVs5jlxWSkfvKhfzffxZsHBYWK2ra65F3rSwB1LIzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCUJQLqTMzYahZq/MilnqndigVFMB8GA1UdIwQY MBaAFC8Vtzp8LRMewU69kHFxi1TD+6aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgt MGViNDVlZjYyZDhkLzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgtMGViNDVlZjYyZDhk LzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdcV7nkw td66yYQslzW+SlAIIqPEBrZuFb/4bZZItYlAXqceuo9p1GiHCwxmAspSWO236BbA oxF/VdtrFueO/KN15RajP9JkCzpz7KiEvoy90FNbFfg+2/DHjQ41MQQ6FaLII5Tj DbqKbHF4vUR2uhUtROytcEtuwQ1NM6NEgDJYnTcQOJlfcobp1KoukZ9+EulGriNK feAgnRWKvZMIoOg0Ahk2S60OqOVZ6PfXZ6rU5XiuQG8pTpQU1ayjIC1CaA6l3MVX cmmyablBiG+YYhlqcbrDKBDidMHt5RihVd01zh52MbTnD7i69wlY34jpjWjXOuCW gu/aVBmzez66dg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:38 2025 by rpki-client