This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json) Hash identifier: FhyvyIfe6Qo/b1d9hgWMwSIXAXFeIfRFTwJp8ryn5I4= Subject key identifier: 28:D6:F7:A6:0A:E6:50:F7:80:6D:D8:89:0A:78:36:DE:7A:B1:B4:76 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019AF57794A396F735E07526BBE3A5163B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 21:00:45 +0000 Manifest this update: Sat 06 Dec 2025 21:00:45 +0000 Manifest next update: Sun 07 Dec 2025 21:00:45 +0000 Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: 3CnZiikv/vU7lXbUJKgiRiQsZXppJ3rmeVka8NA+hwk=) 2: Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa (hash: 1KviszHGUWXOr/tWRch996CmVk/jhxQWF3ZbHboz1x0=) 3: TVdMvWqw1htszUYNzjNbJCLoB5E.roa (hash: foQV6nzx0p2Jf/6zVQhbgSh2HWXGgIdVnlGoTKdrM+4=) 4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:94:a3:96:f7:35:e0:75:26:bb:e3:a5:16:3b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Dec 6 21:00:45 2025 GMT Not After : Dec 7 21:00:45 2025 GMT Subject: CN=28d6f7a60ae650f7806dd8890a7836de7ab1b476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:43:a8:e7:c2:99:81:5d:87:7e:64:4e:f1:26: aa:18:98:dc:ac:55:17:02:14:07:5d:7a:c3:6f:eb: 57:8f:bb:ea:00:08:32:f6:21:1a:45:dd:66:2e:36: 41:3f:1e:81:19:ea:16:7c:1a:62:7a:1f:3b:9f:a9: 12:ae:6b:1c:c2:d9:ff:b7:fb:90:ee:85:03:15:62: 9a:2b:06:fe:31:75:1e:9f:82:0a:c6:a8:0b:8b:75: 17:d5:e6:15:06:37:91:8f:e5:e6:6b:91:a2:79:45: c8:05:42:13:d4:19:eb:e3:1a:c1:aa:d8:55:2e:67: bc:a3:02:16:f1:8e:f0:41:13:9d:77:a5:5a:3a:3c: a4:7e:c5:96:ec:b6:17:e8:8d:a9:c5:d8:ce:71:63: a2:91:0a:cc:57:70:4b:20:c2:23:e9:8b:50:31:6e: c5:79:a8:b6:99:d9:da:85:28:26:dd:1e:d7:96:e5: fe:94:65:57:4e:cf:94:db:ad:83:85:e1:88:98:41: 36:c0:30:8b:47:90:9e:c1:10:87:74:46:0e:8c:61: 57:c7:38:53:58:0b:46:c7:ff:18:e2:65:93:ec:37: 34:3e:69:6b:6d:49:f2:83:61:1e:0c:05:74:6e:f6: 36:eb:bc:ee:eb:44:de:29:cd:c3:9a:30:0d:e7:79: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:F7:A6:0A:E6:50:F7:80:6D:D8:89:0A:78:36:DE:7A:B1:B4:76 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:5c:a4:96:1e:f6:6a:a2:cb:dc:23:19:20:98:08:24:70:50: 10:fb:b3:ed:a5:15:8e:09:b8:9b:7d:5f:df:b6:b0:45:d0:1e: 04:e6:01:e0:f7:4b:48:29:38:f8:98:9c:ac:99:eb:09:d1:b5: 24:b3:20:e6:3c:b2:f6:3e:e6:1e:1e:18:99:d0:ca:f8:1d:82: 13:38:c8:d3:f5:34:67:b4:86:6f:db:40:9c:73:28:98:c4:7f: 70:89:64:a5:37:88:1b:0f:89:79:fa:f3:eb:08:b8:a4:ae:1f: 18:05:87:cb:4a:94:46:ac:c2:18:82:f5:5b:94:29:94:52:32: 3e:96:bf:b9:9d:28:7e:7e:86:ce:cb:c7:2e:48:fc:cf:78:72: ef:22:d1:f9:0c:bf:85:63:9f:8f:b4:03:2e:f4:f3:a1:6d:b7: c2:e3:bc:98:6f:96:c5:4a:00:bd:c9:07:d3:10:23:32:71:d8: eb:1b:f0:23:3d:37:ee:b0:d1:0a:0f:07:5a:55:3d:29:1c:d7: a1:ec:7d:92:7a:48:69:53:2e:79:38:44:9d:26:d3:56:64:9f: b7:37:73:7c:9c:17:f3:96:d6:27:61:12:8e:03:1e:59:2e:e1: 38:e7:f3:33:19:d1:bf:3b:c6:51:6b:61:73:c7:9f:5d:26:5b: f4:d9:ce:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5Sjlvc14HUmu+OlFjsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjUxMjA2MjEwMDQ1WhcNMjUxMjA3MjEwMDQ1WjAzMTEwLwYDVQQD EygyOGQ2ZjdhNjBhZTY1MGY3ODA2ZGQ4ODkwYTc4MzZkZTdhYjFiNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EOo58KZgV2HfmRO8SaqGJjcrFUX AhQHXXrDb+tXj7vqAAgy9iEaRd1mLjZBPx6BGeoWfBpieh87n6kSrmscwtn/t/uQ 7oUDFWKaKwb+MXUen4IKxqgLi3UX1eYVBjeRj+Xma5GieUXIBUIT1Bnr4xrBqthV Lme8owIW8Y7wQROdd6VaOjykfsWW7LYX6I2pxdjOcWOikQrMV3BLIMIj6YtQMW7F eai2mdnahSgm3R7XluX+lGVXTs+U262DheGImEE2wDCLR5CewRCHdEYOjGFXxzhT WAtGx/8Y4mWT7Dc0PmlrbUnyg2EeDAV0bvY267zu60TeKc3DmjAN53korQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjW96YK5lD3gG3YiQp4Nt56sbR2MB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1yklh72 aqLL3CMZIJgIJHBQEPuz7aUVjgm4m31f37awRdAeBOYB4PdLSCk4+JicrJnrCdG1 JLMg5jyy9j7mHh4YmdDK+B2CEzjI0/U0Z7SGb9tAnHMomMR/cIlkpTeIGw+Jefrz 6wi4pK4fGAWHy0qURqzCGIL1W5QplFIyPpa/uZ0ofn6GzsvHLkj8z3hy7yLR+Qy/ hWOfj7QDLvTzoW23wuO8mG+WxUoAvckH0xAjMnHY6xvwIz037rDRCg8HWlU9KRzX oex9knpIaVMueThEnSbTVmSftzdzfJwX85bWJ2ESjgMeWS7hOOfzMxnRvzvGUWth c8efXSZb9NnONA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:26 2025 by rpki-client