This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json) Hash identifier: ZNMXSgIZsID5qVDVtGEmRnG1Rzw43y80mz1R49lNwWM= Subject key identifier: 82:72:55:51:52:61:F2:DF:4F:3F:B1:BF:9C:94:E4:DE:6D:E3:EE:F2 Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Certificate serial: 019AF276D13650659DE3CBDC0C34016D25DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=) 2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: 5Fq+98ipJpUUWdmzYkblhCG9UMV1X41I0ddZLpS7FLo=) 3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d1:36:50:65:9d:e3:cb:dc:0c:34:01:6d:25:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=827255515261f2df4f3fb1bf9c94e4de6de3eef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:f8:d8:59:bc:a2:0f:fb:b3:2c:c5:89:c1: 91:d1:05:95:a9:81:7c:79:25:af:fa:f7:19:1a:c8: da:66:85:20:65:5f:89:41:7d:23:fa:44:07:7d:84: c1:31:88:01:85:f4:79:d7:50:b5:63:fd:91:a2:f7: 97:94:f0:10:32:17:24:62:d4:0f:5e:ef:18:81:f7: f8:de:3f:c2:bc:57:40:34:05:be:13:3b:51:b7:dc: 3b:89:ab:2b:0c:36:4b:ab:60:43:75:f8:45:58:3e: 23:28:80:a1:d0:71:f2:92:47:2c:17:49:cb:34:0a: 46:4c:10:f3:83:90:40:16:d3:d0:13:a8:1a:90:f1: ee:cc:a9:4a:4b:37:ec:47:b3:4e:80:26:c1:c2:bc: 72:b2:a5:62:31:b7:54:48:9a:c4:65:5f:e1:7d:b3: ad:78:eb:52:88:55:14:ac:6f:54:77:ba:46:07:99: 65:52:60:81:a8:e8:5c:2d:14:de:72:3e:11:fc:12: 35:1f:57:78:3c:45:81:63:09:29:67:69:06:63:24: a5:67:60:8b:22:e4:f2:ce:41:38:5a:31:56:dd:c7: 62:6b:cd:39:52:2c:e4:1e:99:97:83:2d:8a:89:eb: 30:73:fd:ab:76:d7:8b:ee:9a:03:97:37:a8:0e:97: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:55:51:52:61:F2:DF:4F:3F:B1:BF:9C:94:E4:DE:6D:E3:EE:F2 X509v3 Authority Key Identifier: keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:67:a7:5a:26:36:11:39:70:bf:91:ae:72:54:72:ba:f6:1c: 05:71:6f:a9:4e:6e:2d:fe:cd:5f:88:aa:82:80:68:d9:1a:2f: 07:a4:bc:f1:cc:d4:10:57:60:cb:ef:03:ac:b2:44:8b:9d:eb: cf:d1:8f:46:ee:8d:92:cc:17:bb:ab:8f:6e:69:99:5e:2d:4b: 99:9c:1f:f2:fd:99:ff:66:a4:9c:2d:a7:a3:ce:eb:69:85:93: e5:b5:c7:fe:5c:98:9b:3e:2b:e7:22:c0:46:3b:7f:97:93:2b: a9:73:3b:af:e6:f4:53:45:c6:70:44:96:6d:f9:4d:1e:1a:cd: e9:59:37:4a:d3:c5:43:74:ef:58:b4:ae:69:1a:71:8b:3e:57: 20:e3:b6:05:bb:e6:d9:c2:fd:3d:dd:bf:ac:55:8b:ba:08:36: 8a:6b:f3:5e:28:94:99:14:10:1d:5a:f8:f0:06:77:4e:ee:19: b2:d3:62:04:69:10:c4:d7:0b:b5:c1:0a:ce:50:36:6a:be:8b: 27:7a:07:af:0d:ba:64:f1:68:c2:43:e3:5a:d2:10:dd:58:d9: b9:35:08:34:74:b5:3f:ba:4d:c1:06:ed:fb:8c:f3:04:7f:87: fb:ab:3a:04:92:d9:6e:a6:46:9d:2d:6e:8b:fc:66:97:d6:2d: 81:d2:d9:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtE2UGWd48vcDDQBbSXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0 NTVhNjgwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD Eyg4MjcyNTU1MTUyNjFmMmRmNGYzZmIxYmY5Yzk0ZTRkZTZkZTNlZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JD42Fm8og/7syzFicGR0QWVqYF8 eSWv+vcZGsjaZoUgZV+JQX0j+kQHfYTBMYgBhfR511C1Y/2RoveXlPAQMhckYtQP Xu8Ygff43j/CvFdANAW+EztRt9w7iasrDDZLq2BDdfhFWD4jKICh0HHykkcsF0nL NApGTBDzg5BAFtPQE6gakPHuzKlKSzfsR7NOgCbBwrxysqViMbdUSJrEZV/hfbOt eOtSiFUUrG9Ud7pGB5llUmCBqOhcLRTecj4R/BI1H1d4PEWBYwkpZ2kGYySlZ2CL IuTyzkE4WjFW3cdia805UizkHpmXgy2Kieswc/2rdteL7poDlzeoDpcnLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJyVVFSYfLfTz+xv5yU5N5t4+7yMB8GA1UdIwQY MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt MWMyNzU4NjUxZWZhLzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2enWiY2 ETlwv5GuclRyuvYcBXFvqU5uLf7NX4iqgoBo2RovB6S88czUEFdgy+8DrLJEi53r z9GPRu6NkswXu6uPbmmZXi1LmZwf8v2Z/2aknC2no87raYWT5bXH/lyYmz4r5yLA Rjt/l5MrqXM7r+b0U0XGcESWbflNHhrN6Vk3StPFQ3TvWLSuaRpxiz5XIOO2Bbvm 2cL9Pd2/rFWLugg2imvzXiiUmRQQHVr48AZ3Tu4ZstNiBGkQxNcLtcEKzlA2ar6L J3oHrw26ZPFowkPjWtIQ3VjZuTUINHS1P7pNwQbt+4zzBH+H+6s6BJLZbqZGnS1u i/xml9YtgdLZnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:15 2025 by rpki-client