This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json) Hash identifier: spVGZ61PNwpYW83UPqLgtxQX3bfDPGPDoHn1nw0EenY= Subject key identifier: A3:E0:29:FC:F7:AD:C6:38:0F:9E:C2:28:BE:44:99:D0:69:50:FD:49 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019AF38935F58F67F8391E1C89D89FD57E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft Manifest number: 1774 Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: L0lMoIlvCcZJjIgb6VAxRQHHAOMIMinhVMPNggJxtC0=) 2: Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa (hash: 1KviszHGUWXOr/tWRch996CmVk/jhxQWF3ZbHboz1x0=) 3: TVdMvWqw1htszUYNzjNbJCLoB5E.roa (hash: foQV6nzx0p2Jf/6zVQhbgSh2HWXGgIdVnlGoTKdrM+4=) 4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:35:f5:8f:67:f8:39:1e:1c:89:d8:9f:d5:7e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=a3e029fcf7adc6380f9ec228be4499d06950fd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:22:85:0b:4f:8c:97:db:de:d9:fd:0a:91: fe:b5:18:40:0a:4f:c5:c7:0d:c8:8c:d2:e1:d4:a6: 51:8d:ec:f3:ef:22:53:2a:f0:a5:f2:a3:00:04:2a: 08:ed:b9:3d:d0:de:3a:47:54:4f:e9:a1:ce:12:bb: 0c:e3:35:d0:6b:73:ca:ea:44:82:e9:05:1b:9f:fd: 1d:bf:c9:79:b6:4e:a5:d2:29:cf:c5:35:d5:bd:08: d5:10:a6:84:27:4b:1e:a4:e2:9a:d3:58:5e:02:ad: 52:46:40:2a:ae:1e:b9:54:03:bb:72:06:f9:0a:a6: b8:67:2f:ae:5d:69:f7:b7:56:87:a6:60:de:76:35: f7:0f:b8:11:82:ea:48:fc:b6:61:37:c9:99:1c:fa: a7:96:56:c8:03:6b:57:79:ec:aa:2e:99:99:0e:0b: 1f:d2:bc:8f:1b:31:6d:82:65:97:c7:c2:d7:f0:80: 33:ce:c4:44:9f:ba:29:e1:40:bb:c0:be:4f:ee:42: 1e:3e:68:0e:34:41:55:a7:f2:b7:55:0a:00:3a:43: 82:41:09:07:94:eb:ce:e6:eb:8b:d2:36:b9:e3:84: 16:ee:95:25:9f:7b:c4:18:52:cd:02:18:20:6f:c8: f7:1b:96:7d:32:44:26:18:35:91:93:56:78:6b:44: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:29:FC:F7:AD:C6:38:0F:9E:C2:28:BE:44:99:D0:69:50:FD:49 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ae:83:98:6f:f5:38:ea:5e:f6:35:68:e7:32:a8:29:ad:b9: d0:e9:77:4d:c8:09:72:7f:fb:3f:b1:ca:5f:ac:57:36:eb:0d: 9c:8f:c1:ae:a4:fd:90:1c:7e:0d:db:55:36:ad:40:8c:44:bf: c1:ef:c4:fb:65:b5:7d:47:e8:f9:2d:87:8a:bb:65:60:74:4e: b0:45:e7:9d:19:01:20:ad:ff:80:56:5c:f0:10:ce:03:74:02: ae:97:a7:97:37:50:e5:e1:14:ca:56:1c:d6:f2:e4:9c:3b:9a: 12:5a:7b:25:e3:6c:14:62:c9:ab:ad:24:53:b8:73:c5:44:c3: 76:91:ed:91:a8:53:eb:c4:21:81:1c:ea:ed:e1:0f:d4:8c:8d: 5e:2b:d3:97:55:02:ca:50:a7:15:08:49:82:28:91:f5:91:67: 7a:32:a4:a2:b9:72:22:84:64:8c:f7:73:b2:27:3b:90:1c:7e: 82:96:7c:f0:59:25:9a:ff:d1:5a:19:26:4b:9b:49:11:ce:c7: be:98:7a:9f:4b:44:3a:2e:f2:be:63:94:9e:0d:1c:55:d3:7a: df:5f:8f:23:c5:f2:45:42:13:f3:2b:96:e8:da:ae:6c:7f:73: 74:58:dd:fa:9a:30:90:d7:fe:e5:76:f6:e1:d6:69:15:95:ce: 2b:bc:31:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTX1j2f4OR4cidif1X5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD EyhhM2UwMjlmY2Y3YWRjNjM4MGY5ZWMyMjhiZTQ0OTlkMDY5NTBmZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZkihQtPjJfb3tn9CpH+tRhACk/F xw3IjNLh1KZRjezz7yJTKvCl8qMABCoI7bk90N46R1RP6aHOErsM4zXQa3PK6kSC 6QUbn/0dv8l5tk6l0inPxTXVvQjVEKaEJ0sepOKa01heAq1SRkAqrh65VAO7cgb5 Cqa4Zy+uXWn3t1aHpmDedjX3D7gRgupI/LZhN8mZHPqnllbIA2tXeeyqLpmZDgsf 0ryPGzFtgmWXx8LX8IAzzsREn7op4UC7wL5P7kIePmgONEFVp/K3VQoAOkOCQQkH lOvO5uuL0ja544QW7pUln3vEGFLNAhggb8j3G5Z9MkQmGDWRk1Z4a0QQdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPgKfz3rcY4D57CKL5EmdBpUP1JMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC66DmG/1 OOpe9jVo5zKoKa250Ol3TcgJcn/7P7HKX6xXNusNnI/BrqT9kBx+DdtVNq1AjES/ we/E+2W1fUfo+S2HirtlYHROsEXnnRkBIK3/gFZc8BDOA3QCrpenlzdQ5eEUylYc 1vLknDuaElp7JeNsFGLJq60kU7hzxUTDdpHtkahT68QhgRzq7eEP1IyNXivTl1UC ylCnFQhJgiiR9ZFnejKkorlyIoRkjPdzsic7kBx+gpZ88Fklmv/RWhkmS5tJEc7H vph6n0tEOi7yvmOUng0cVdN631+PI8XyRUIT8yuW6NqubH9zdFjd+powkNf+5Xb2 4dZpFZXOK7wxBw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:13 2025 by rpki-client