This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json) Hash identifier: E/iUbqThj8KkYlHrN6aZiMDt15F0i+Qk34o5asWUmLk= Subject key identifier: 04:9A:BA:EA:4A:1A:E6:5E:1C:40:A1:7F:CC:3E:8E:9A:2C:D0:72:D3 Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f Certificate serial: 019AF31CAA8FBB1C787789A7821E1AA1C7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft Manifest number: 0787 Signing time: Sat 06 Dec 2025 10:02:13 +0000 Manifest this update: Sat 06 Dec 2025 10:02:13 +0000 Manifest next update: Sun 07 Dec 2025 10:02:13 +0000 Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=) 2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: DRK+BPsLGIBYSjdX1Y8b8rOCR1zTuXSiBJ11ZAJbsAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:aa:8f:bb:1c:78:77:89:a7:82:1e:1a:a1:c7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f Validity Not Before: Dec 6 10:02:13 2025 GMT Not After : Dec 7 10:02:13 2025 GMT Subject: CN=049abaea4a1ae65e1c40a17fcc3e8e9a2cd072d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:fd:02:c2:bb:2a:15:c9:09:60:06:fb:d7: aa:70:d1:4f:a9:45:fe:9a:9f:cb:15:9c:62:55:f5: 57:e3:de:cb:86:f9:30:2c:d0:58:f4:f6:6b:5c:0e: 29:d2:27:f6:2f:e8:c7:37:8c:4f:b7:f5:e7:30:1a: a4:80:a9:c6:2a:70:e0:6c:a9:67:46:bf:55:e5:35: f3:c4:c3:87:a8:4e:57:05:c8:05:5f:cf:94:79:11: 1f:06:0b:da:a2:15:06:ff:16:a1:ba:e2:33:47:aa: da:85:3b:34:be:35:b9:27:76:a1:77:67:f8:f9:82: c3:ad:8d:38:51:22:5a:1c:a5:4d:2b:8a:58:6c:de: 58:d9:0f:0c:0a:7c:e9:3b:33:b0:52:18:29:98:3d: 87:e6:e9:f4:13:16:15:c4:8c:02:13:e8:90:37:81: 2d:f8:2c:18:b3:5c:be:b7:59:4d:ae:7c:9d:70:09: 0d:b3:1f:d5:a2:80:71:72:40:0e:58:be:6d:b9:73: 64:b8:e2:b0:2f:19:8f:61:05:f1:d0:26:9b:7b:4d: 5b:c2:65:02:46:ef:0d:8e:7f:19:46:82:ea:34:28: c2:11:ee:76:40:e1:f8:69:9d:cb:e5:46:f3:4b:50: 1f:bb:14:83:70:97:7e:22:cf:ed:a9:af:17:b7:f8: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:BA:EA:4A:1A:E6:5E:1C:40:A1:7F:CC:3E:8E:9A:2C:D0:72:D3 X509v3 Authority Key Identifier: keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:33:ed:e9:cd:73:48:ee:44:d7:09:4f:56:82:55:65:03:94: 08:3a:9c:83:bd:13:31:ff:14:dc:99:c2:99:68:8e:17:3b:6c: 2e:4a:00:3c:c8:e2:61:99:d5:79:60:10:ce:3e:14:0a:94:a9: 7e:88:a2:f3:27:31:d2:32:0c:92:0d:dc:91:a7:91:fe:da:47: 83:68:42:7a:c3:a6:74:72:07:3e:bf:16:b8:42:b1:a7:5e:ba: 07:df:3f:c9:8e:80:16:4a:f8:93:8b:b3:a4:73:42:c5:13:7a: 00:b5:28:38:c9:ff:6e:c8:45:0d:39:38:6c:ee:c8:00:a8:12: 6d:10:f6:2e:9d:98:92:98:e3:38:da:26:40:fd:b3:2f:75:e7: d0:f1:5b:86:3e:d9:43:9c:31:27:b8:7f:c4:42:db:26:3c:53: e8:41:8c:0b:9b:a7:08:0e:92:85:e4:41:0a:51:74:ae:a3:1f: 60:03:a9:15:a2:3a:b1:63:61:11:4e:72:06:56:bb:37:d4:89: 61:c5:c2:a1:09:dc:84:b4:f1:17:7f:21:47:53:35:c5:73:6d: 35:b0:76:5a:b1:68:18:b4:f9:1d:1e:f7:a5:31:c3:d1:fd:23: 2f:82:25:64:df:36:32:c5:bd:50:b4:81:b5:b4:7f:38:1e:2d: a7:4b:66:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKqPuxx4d4mngh4aocf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm ZjE3M2YwHhcNMjUxMjA2MTAwMjEzWhcNMjUxMjA3MTAwMjEzWjAzMTEwLwYDVQQD EygwNDlhYmFlYTRhMWFlNjVlMWM0MGExN2ZjYzNlOGU5YTJjZDA3MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJv9AsK7KhXJCWAG+9eqcNFPqUX+ mp/LFZxiVfVX497LhvkwLNBY9PZrXA4p0if2L+jHN4xPt/XnMBqkgKnGKnDgbKln Rr9V5TXzxMOHqE5XBcgFX8+UeREfBgvaohUG/xahuuIzR6rahTs0vjW5J3ahd2f4 +YLDrY04USJaHKVNK4pYbN5Y2Q8MCnzpOzOwUhgpmD2H5un0ExYVxIwCE+iQN4Et +CwYs1y+t1lNrnydcAkNsx/VooBxckAOWL5tuXNkuOKwLxmPYQXx0Cabe01bwmUC Ru8Njn8ZRoLqNCjCEe52QOH4aZ3L5UbzS1AfuxSDcJd+Is/tqa8Xt/h0YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASauupKGuZeHEChf8w+jpos0HLTMB8GA1UdIwQY MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDPt6c1z SO5E1wlPVoJVZQOUCDqcg70TMf8U3JnCmWiOFztsLkoAPMjiYZnVeWAQzj4UCpSp foii8ycx0jIMkg3ckaeR/tpHg2hCesOmdHIHPr8WuEKxp166B98/yY6AFkr4k4uz pHNCxRN6ALUoOMn/bshFDTk4bO7IAKgSbRD2Lp2YkpjjONomQP2zL3Xn0PFbhj7Z Q5wxJ7h/xELbJjxT6EGMC5unCA6SheRBClF0rqMfYAOpFaI6sWNhEU5yBla7N9SJ YcXCoQnchLTxF38hR1M1xXNtNbB2WrFoGLT5HR73pTHD0f0jL4IlZN82MsW9ULSB tbR/OB4tp0tmWg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:01 2025 by rpki-client