This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json) Hash identifier: U8zsSh1iIYEBso0kgyZNyh0He7+0ZzXyqFpGQA10ZoA= Subject key identifier: 26:D7:02:F0:A5:14:1A:81:13:AA:41:08:06:D1:C0:C7:B2:80:42:22 Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d Certificate serial: 019AF12EB0D32865A73AFA3D612B227AD708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=) 2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: p4hfwIzRqZKmNZOCm8NPX8i6BILovteXVpkuPJIxvQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b0:d3:28:65:a7:3a:fa:3d:61:2b:22:7a:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=26d702f0a5141a8113aa410806d1c0c7b2804222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:7e:c9:cf:50:1e:af:ee:af:71:3e:b9:4f: dd:f1:d1:99:b1:e0:55:1f:5f:82:a0:18:91:9b:0b: 5e:d5:dc:7c:bb:56:f3:20:26:9b:7a:7d:fc:10:72: 99:12:61:ff:70:d1:bc:9a:44:83:f9:75:f9:7e:ea: 95:68:9d:51:db:f9:dc:aa:e5:1c:34:24:fe:33:44: c2:53:1a:a3:09:c9:6d:bd:8b:56:bc:bc:74:36:91: 63:d9:7d:b3:c2:42:71:20:91:81:29:f5:2b:f9:cc: 3a:a4:05:38:a6:80:de:3e:a0:02:ea:43:11:2c:90: ba:c7:ae:54:30:19:66:a3:da:2d:b8:5a:aa:dd:9b: 3f:12:66:a3:1a:89:50:be:99:40:63:19:53:89:d2: 1c:9f:72:c2:d0:51:c8:10:f0:c7:c8:dd:4f:60:4f: cc:ad:29:59:26:2c:a2:02:21:e3:0b:77:0a:f9:47: 20:e2:b4:5e:45:49:0d:d1:ed:5d:f5:ac:aa:71:4a: 03:61:dc:b7:ca:9e:fe:6a:20:36:f3:1c:88:a7:23: bf:c3:7e:2b:df:68:a6:f6:84:6e:09:2d:cf:af:9e: b7:23:cf:5e:81:55:dd:3b:d0:b8:87:8c:8b:60:11: 73:d5:bd:48:4d:e7:66:08:03:40:62:80:c8:7c:dc: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:02:F0:A5:14:1A:81:13:AA:41:08:06:D1:C0:C7:B2:80:42:22 X509v3 Authority Key Identifier: keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:87:8a:57:f7:ec:b8:00:2e:a2:92:ea:04:2e:fd:28:2e:47: b1:3b:ff:f6:e1:50:27:81:47:cf:37:77:9b:cf:86:ac:15:e0: 7b:19:7f:bc:92:a1:e5:b5:44:c2:7c:7a:6d:53:b2:3a:6b:f7: 56:67:88:df:e5:1e:84:01:c2:17:9a:ee:33:ca:5c:39:fb:a0: 4c:cc:57:8d:fe:61:c4:4e:b2:9e:5f:78:8b:f8:59:a6:be:5a: c0:17:b5:5b:d5:f9:32:30:8e:13:54:80:d3:bc:e7:61:5d:2a: 18:89:18:6f:05:83:34:d8:da:6b:97:d4:91:30:c4:a5:93:72: 2c:1d:27:ef:5c:d1:ae:d1:a9:31:75:7a:ee:b8:ca:ea:01:90: f6:74:31:8b:54:4b:af:3d:ac:3d:8f:8f:2a:86:b8:59:67:f7: e0:9b:d1:b1:40:70:f9:38:75:ea:bb:24:fe:80:7d:d5:d2:59: ec:e4:99:7e:50:51:21:c8:35:53:60:c4:72:9b:8b:4a:dd:e5: 7d:01:3a:e6:ae:6e:86:19:45:57:77:5a:f1:10:3b:c6:69:cf: 6c:fd:b1:0e:78:82:7b:3d:5d:2a:48:66:a0:f6:ec:d4:d9:42: 6b:99:d5:5e:26:bd:a3:1f:51:d0:9b:71:4a:fc:80:83:18:e9: 2e:7e:bd:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrDTKGWnOvo9YSsietcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE3OTljNmE2NjM0MzlkNzQ0NTBkZmIzODk5MzU3MWY5 OGUxNWQwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EygyNmQ3MDJmMGE1MTQxYTgxMTNhYTQxMDgwNmQxYzBjN2IyODA0MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEZ+yc9QHq/ur3E+uU/d8dGZseBV H1+CoBiRmwte1dx8u1bzICaben38EHKZEmH/cNG8mkSD+XX5fuqVaJ1R2/ncquUc NCT+M0TCUxqjCcltvYtWvLx0NpFj2X2zwkJxIJGBKfUr+cw6pAU4poDePqAC6kMR LJC6x65UMBlmo9otuFqq3Zs/EmajGolQvplAYxlTidIcn3LC0FHIEPDHyN1PYE/M rSlZJiyiAiHjC3cK+Ucg4rReRUkN0e1d9ayqcUoDYdy3yp7+aiA28xyIpyO/w34r 32im9oRuCS3Pr563I89egVXdO9C4h4yLYBFz1b1ITedmCANAYoDIfNyVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbXAvClFBqBE6pBCAbRwMeygEIiMB8GA1UdIwQY MBaAFJcaeZxqZjQ510RQ37OJk1cfmOFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMt YTJlZmFlM2Y5Y2FiLzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMtYTJlZmFlM2Y5Y2Fi LzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoeKV/fs uAAuopLqBC79KC5HsTv/9uFQJ4FHzzd3m8+GrBXgexl/vJKh5bVEwnx6bVOyOmv3 VmeI3+UehAHCF5ruM8pcOfugTMxXjf5hxE6ynl94i/hZpr5awBe1W9X5MjCOE1SA 07znYV0qGIkYbwWDNNjaa5fUkTDEpZNyLB0n71zRrtGpMXV67rjK6gGQ9nQxi1RL rz2sPY+PKoa4WWf34JvRsUBw+Th16rsk/oB91dJZ7OSZflBRIcg1U2DEcpuLSt3l fQE65q5uhhlFV3da8RA7xmnPbP2xDniCez1dKkhmoPbs1NlCa5nVXia9ox9R0Jtx SvyAgxjpLn697Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:18 2025 by rpki-client