This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json) Hash identifier: O5H15U5rLH95Kp64o5YURS7LyTsvu8ZwzsLdSr67cjA= Subject key identifier: 9B:5D:EC:F3:91:09:C2:BD:77:DD:F6:10:0D:D1:76:2A:65:C3:1B:4F Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Certificate serial: 019AF163F65DC71DBE7C080282757FE38E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa (hash: 0SPwTYDJNOUbIi7e9SuGgIE4NWQBIuLTmCxHMDmcXBc=) 2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: WHi0FjKsVZ/uZ8EMxug3varddII026mvfR+TIlna6I4=) 3: Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa (hash: FQCHFVQrQ1NEC98r6LFXm4gOoSIAgwMQTWazYGx2XGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f6:5d:c7:1d:be:7c:08:02:82:75:7f:e3:8e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=9b5decf39109c2bd77ddf6100dd1762a65c31b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:c0:9f:f3:a5:bc:20:e6:5c:69:74:92:4c: 81:4d:df:05:8c:66:ae:92:27:b1:ed:2a:86:ec:a3: 8a:4f:ea:1a:07:78:65:ad:e2:9f:f6:55:b8:35:4b: b6:ab:a5:7a:ba:d0:11:92:9a:98:a0:dc:6e:09:95: 3b:46:4a:ec:3f:3a:2f:dd:ba:30:06:aa:18:6d:62: 59:88:07:df:63:57:f2:0c:7d:ce:8e:0f:41:b5:d7: 83:64:42:41:ff:e2:21:e8:a8:31:f9:f3:24:42:78: 12:ae:89:72:7e:d8:ed:5d:36:14:d3:f3:2e:2b:2c: be:0f:86:28:64:b0:80:8d:9d:5e:1c:5e:c0:f9:e6: 40:ba:7d:2d:71:75:17:7a:6c:cc:1c:be:ce:63:00: 53:f8:dd:76:42:49:f0:79:fd:66:45:69:16:4a:ec: 21:63:9f:68:50:92:67:f4:f1:f0:2f:ad:65:fd:89: 1c:7d:06:2d:70:c3:c6:2d:c7:df:b5:7e:26:64:55: d0:8f:c0:2c:2c:66:66:5f:5c:f9:f9:fd:61:05:9d: 0b:69:5f:f8:ba:ec:bf:de:3e:8a:83:ff:70:53:73: c4:f9:e9:36:40:e3:b4:79:32:c4:44:fa:6c:62:44: 7c:5d:51:1d:81:b0:61:1e:8c:f6:ac:e1:86:c5:f4: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:EC:F3:91:09:C2:BD:77:DD:F6:10:0D:D1:76:2A:65:C3:1B:4F X509v3 Authority Key Identifier: keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4d:a0:8f:fd:ca:57:8c:4f:82:a0:4d:9f:92:0e:c0:ff:5a: 33:07:af:df:d4:79:54:fc:e2:2e:62:d8:f0:d4:01:e1:69:71: 89:a1:44:a6:50:b0:37:41:ad:b9:c6:a1:7a:53:64:c9:63:2a: b8:ac:d4:ef:fe:5e:5a:7f:ef:0b:c0:4d:2f:d2:3c:23:7f:7a: 96:05:6f:17:a8:d4:0a:6d:43:46:9b:31:4f:2b:56:45:d1:e6: 6f:5f:b6:96:53:6c:9e:1a:ff:f4:db:56:d1:15:5b:26:ff:71: a3:0a:63:3c:5f:b5:8f:82:39:00:1b:90:8e:86:44:8b:1a:c4: 21:a0:5c:c4:3c:e1:23:45:cb:31:48:4e:92:e8:79:31:2e:63: 8e:87:e6:23:48:67:56:83:e1:7c:bd:82:a5:c9:71:fb:77:e3: 22:ef:1f:34:ff:8e:aa:00:e3:a4:b7:a5:2c:d6:86:9f:69:df: b1:11:49:ec:cb:e3:dc:8e:50:24:88:fb:cb:58:ff:ee:69:e2: 49:30:e8:86:bd:f2:73:4d:e5:fb:c6:0f:f2:18:db:c2:94:ad: dc:6b:e8:81:16:82:55:ae:d6:fe:38:b7:e6:b4:ad:64:77:2b: a0:0a:b9:ad:68:bf:eb:0f:4e:6d:55:1d:89:59:0d:7d:18:3f: 5a:d0:23:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Zdxx2+fAgCgnV/4459MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4 MDc1ZDcwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg5YjVkZWNmMzkxMDljMmJkNzdkZGY2MTAwZGQxNzYyYTY1YzMxYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjAn/OlvCDmXGl0kkyBTd8FjGau kiex7SqG7KOKT+oaB3hlreKf9lW4NUu2q6V6utARkpqYoNxuCZU7RkrsPzov3bow BqoYbWJZiAffY1fyDH3Ojg9BtdeDZEJB/+Ih6Kgx+fMkQngSrolyftjtXTYU0/Mu Kyy+D4YoZLCAjZ1eHF7A+eZAun0tcXUXemzMHL7OYwBT+N12Qknwef1mRWkWSuwh Y59oUJJn9PHwL61l/YkcfQYtcMPGLcfftX4mZFXQj8AsLGZmX1z5+f1hBZ0LaV/4 uuy/3j6Kg/9wU3PE+ek2QOO0eTLERPpsYkR8XVEdgbBhHoz2rOGGxfTyzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtd7PORCcK9d932EA3RdiplwxtPMB8GA1UdIwQY MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt ZjY1Njc1NTI2MDVlLzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE2gj/3K V4xPgqBNn5IOwP9aMwev39R5VPziLmLY8NQB4WlxiaFEplCwN0GtucahelNkyWMq uKzU7/5eWn/vC8BNL9I8I396lgVvF6jUCm1DRpsxTytWRdHmb1+2llNsnhr/9NtW 0RVbJv9xowpjPF+1j4I5ABuQjoZEixrEIaBcxDzhI0XLMUhOkuh5MS5jjofmI0hn VoPhfL2Cpclx+3fjIu8fNP+OqgDjpLelLNaGn2nfsRFJ7Mvj3I5QJIj7y1j/7mni STDohr3yc03l+8YP8hjbwpSt3GvogRaCVa7W/ji35rStZHcroAq5rWi/6w9ObVUd iVkNfRg/WtAjsw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:04 2025 by rpki-client