This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json) Hash identifier: YCiVfV4Kqs7cLv7coM2Rm09BtdCTOZXZyOOtMzE6W2c= Subject key identifier: 9F:92:E4:8E:A0:C4:31:05:C6:A7:5E:27:6B:78:AF:C5:37:9B:1A:27 Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Certificate serial: 019AF5785AB70C9795A71DA5A6C2E384259F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:36 +0000 Manifest this update: Sat 06 Dec 2025 21:01:36 +0000 Manifest next update: Sun 07 Dec 2025 21:01:36 +0000 Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=) 2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=) 3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: z58lYP9uId1Y6UlTWpXSbBKxX4TKnrEYHlogQ9HF3C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5a:b7:0c:97:95:a7:1d:a5:a6:c2:e3:84:25:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Validity Not Before: Dec 6 21:01:36 2025 GMT Not After : Dec 7 21:01:36 2025 GMT Subject: CN=9f92e48ea0c43105c6a75e276b78afc5379b1a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:a3:22:5d:3d:0b:ac:e7:22:da:19:0f:07: 72:e6:14:0e:15:a7:b8:32:71:bc:83:3e:e3:ba:70: c6:7a:e6:e9:b0:de:ed:c8:b9:bf:ac:6e:50:f6:7c: 72:11:86:e7:b6:be:ae:70:e0:92:9f:31:b5:77:cf: aa:cf:e1:58:c1:7e:54:c5:01:bc:74:61:3d:f0:86: c7:53:0e:40:f1:4f:82:1f:9c:b3:93:4b:82:76:cf: ca:e4:a2:bb:87:fe:4a:3c:e2:4a:3c:bf:42:f3:91: 47:7d:b7:a8:6c:14:cc:7d:07:3a:7c:db:35:f2:51: 06:63:57:cb:18:77:42:23:8b:cd:1e:3e:54:c8:3b: b7:ce:51:0b:5b:d8:de:30:8c:6f:aa:c6:fb:a8:b4: 3f:59:03:10:df:71:f6:13:6f:93:db:03:94:85:6d: 04:cf:0b:9a:67:5c:97:a9:7e:87:71:48:6b:d9:f7: ee:e3:5b:20:bb:ed:62:a5:76:08:23:7a:85:2e:d6: 59:52:8f:0d:e0:62:52:c8:48:b4:bd:4f:1a:16:7e: 88:df:b0:f5:9f:a3:f2:fd:f5:4b:fd:aa:a4:92:fb: a0:bc:e0:f0:03:ee:50:c9:90:3d:02:14:63:60:2f: 8b:69:86:6e:35:e7:04:8a:82:c9:60:ba:2c:dc:de: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:92:E4:8E:A0:C4:31:05:C6:A7:5E:27:6B:78:AF:C5:37:9B:1A:27 X509v3 Authority Key Identifier: keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b7:7a:38:f7:98:28:db:4b:40:26:4a:18:cf:0d:69:16:b6: 72:5a:7d:b9:66:20:be:b4:ec:38:2f:1c:02:26:bd:dd:90:f6: 5b:6f:80:4a:a3:af:fe:75:9e:72:9d:0f:10:8b:d0:cc:60:21: 85:e1:ed:07:e4:29:ea:d5:41:cd:af:b6:b9:0e:be:86:48:93: a4:87:24:31:ed:6d:fa:76:f9:16:39:2e:dd:56:c0:8d:f4:c3: 5a:7c:05:71:a0:ab:b2:ee:9d:00:26:cd:77:00:f9:80:81:ce: 72:f3:12:d9:96:75:6f:7c:02:ce:88:9d:08:27:b7:00:9a:6b: af:72:ca:c0:b3:8b:bc:66:de:5e:79:5b:a3:d1:a6:0c:2a:a1: c3:be:a5:02:c6:87:53:2c:c7:f5:d4:f0:8c:64:93:bf:21:44: eb:14:4f:00:98:c0:69:3a:d7:7a:5d:96:73:07:4d:62:56:a7: 9a:5c:a1:05:3b:2c:a2:b8:2f:cb:a8:24:0f:00:37:d7:f5:13: 4a:33:41:69:08:50:4f:66:3f:fc:ca:af:3d:72:24:96:33:41: 08:d2:90:ac:dc:70:cb:38:96:c2:e9:0b:7e:e1:ad:e0:1e:cf: 1c:1a:61:c5:eb:80:56:06:81:9c:73:01:56:15:63:95:51:64: 49:ba:6f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFq3DJeVpx2lpsLjhCWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw ZWFiMTYwHhcNMjUxMjA2MjEwMTM2WhcNMjUxMjA3MjEwMTM2WjAzMTEwLwYDVQQD Eyg5ZjkyZTQ4ZWEwYzQzMTA1YzZhNzVlMjc2Yjc4YWZjNTM3OWIxYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqCjIl09C6znItoZDwdy5hQOFae4 MnG8gz7junDGeubpsN7tyLm/rG5Q9nxyEYbntr6ucOCSnzG1d8+qz+FYwX5UxQG8 dGE98IbHUw5A8U+CH5yzk0uCds/K5KK7h/5KPOJKPL9C85FHfbeobBTMfQc6fNs1 8lEGY1fLGHdCI4vNHj5UyDu3zlELW9jeMIxvqsb7qLQ/WQMQ33H2E2+T2wOUhW0E zwuaZ1yXqX6HcUhr2ffu41sgu+1ipXYII3qFLtZZUo8N4GJSyEi0vU8aFn6I37D1 n6Py/fVL/aqkkvugvODwA+5QyZA9AhRjYC+LaYZuNecEioLJYLos3N64iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+S5I6gxDEFxqdeJ2t4r8U3mxonMB8GA1UdIwQY MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrd6OPeY KNtLQCZKGM8NaRa2clp9uWYgvrTsOC8cAia93ZD2W2+ASqOv/nWecp0PEIvQzGAh heHtB+Qp6tVBza+2uQ6+hkiTpIckMe1t+nb5Fjku3VbAjfTDWnwFcaCrsu6dACbN dwD5gIHOcvMS2ZZ1b3wCzoidCCe3AJprr3LKwLOLvGbeXnlbo9GmDCqhw76lAsaH UyzH9dTwjGSTvyFE6xRPAJjAaTrXel2WcwdNYlanmlyhBTssorgvy6gkDwA31/UT SjNBaQhQT2Y//MqvPXIkljNBCNKQrNxwyziWwukLfuGt4B7PHBphxeuAVgaBnHMB VhVjlVFkSbpvEA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:10 2025 by rpki-client