This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json) Hash identifier: wzAdnlLbcJGqpeP7cvMHNks6xfrq2kZqmUlu1vQpQRI= Subject key identifier: A7:62:FA:E6:2F:5E:41:D0:5E:BD:FB:16:26:8B:2A:24:AC:8C:C0:84 Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17 Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17 Certificate serial: 019AF27703194E6264B8554CC998CFE86C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: d7X0Hwrlqun+Y72ScH7Ema8fgJIZF8HHv5+8gggFfgU=) 2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:03:19:4e:62:64:b8:55:4c:c9:98:cf:e8:6c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=a762fae62f5e41d05ebdfb16268b2a24ac8cc084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:c8:fe:80:39:ce:65:34:9a:84:a2:58:d5: 4e:5b:70:c4:21:ad:08:88:bf:fe:cd:36:69:20:20: 26:5a:73:fd:7c:cd:6a:64:e2:9e:2d:3c:75:ed:d3: 03:ff:42:fb:99:35:61:5e:b7:69:8e:3d:06:b2:1f: 81:78:68:6d:68:df:fa:2a:0a:09:1f:51:73:6e:8f: 1d:01:41:ca:6e:60:1b:3a:4d:32:7d:ae:67:ac:95: 3f:4a:15:e4:aa:f8:1e:ba:bd:97:7c:d9:66:a7:6a: eb:ca:a3:60:0c:9b:eb:78:82:37:9f:3c:11:e0:b6: 17:e3:45:dd:a1:6e:38:e9:2d:81:a9:78:6d:85:94: be:cb:a9:49:6c:00:cc:12:7d:58:a7:a8:7f:a9:5b: 5f:83:ea:11:65:1e:7d:02:5c:ff:6e:c0:69:b8:65: 1a:72:88:77:96:2b:8a:1f:07:bb:79:ee:bc:19:ca: 35:d8:c9:d5:7f:d4:24:7a:83:5b:c3:9b:b7:ed:f4: 90:64:11:6c:05:6c:28:f8:9a:39:91:d5:6e:c8:cf: c0:71:38:11:63:9c:bf:b6:a5:31:77:99:91:d6:95: 7c:0a:fd:bb:a7:65:ee:b8:8f:8b:15:36:06:1a:d8: 5c:c6:0e:1c:87:f1:c1:cb:f7:72:b1:e8:d5:21:70: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:62:FA:E6:2F:5E:41:D0:5E:BD:FB:16:26:8B:2A:24:AC:8C:C0:84 X509v3 Authority Key Identifier: keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:d2:53:6b:9d:aa:8a:5f:31:76:4e:07:64:02:ba:0e:59: c9:77:7c:a4:65:9d:0a:a4:30:b7:23:fb:74:db:6d:7f:bb:4c: d7:6e:0a:f3:fc:10:68:94:40:b3:9f:65:78:a3:5b:34:9b:c1: 32:8f:b1:25:4b:e3:dd:67:ed:0c:e5:4a:e8:f4:92:45:32:01: 4c:18:9a:b3:97:46:5e:2c:d3:6c:c9:37:38:f8:d9:a2:93:ba: a3:05:dd:ea:3c:e0:7b:0f:94:c1:57:d2:48:d5:4b:91:cf:40: 93:d4:c5:cb:fe:27:4c:1f:5c:c8:ff:09:96:0e:1c:ae:9c:ea: 25:0e:6d:61:d0:45:7a:bb:02:3e:a9:86:f5:a3:08:c3:a0:62: 2a:b1:f3:ce:34:8b:ad:e5:13:dd:07:91:21:6e:76:01:24:fc: 8d:af:7b:58:a1:88:97:78:3d:32:6f:86:be:9f:00:62:9c:3f: d7:2d:3f:df:79:32:03:20:87:ea:a7:75:d1:9e:66:c9:35:c7: 42:a2:65:33:fe:1c:6b:1a:60:ad:2e:50:34:26:7f:b7:03:a8: 1f:04:86:bd:b9:c1:a6:32:26:a5:84:4a:4d:04:fb:9d:62:a8: b0:7f:87:42:51:6f:55:5c:26:c9:95:48:a8:e2:e4:e2:7a:33: cd:b1:9a:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwMZTmJkuFVMyZjP6GyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkN2YzZGRjYTBjYjM4ZWM3YjA4YzY5MDI5ZTIwZjUyZGM0 MDhmMTcwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EyhhNzYyZmFlNjJmNWU0MWQwNWViZGZiMTYyNjhiMmEyNGFjOGNjMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ7I/oA5zmU0moSiWNVOW3DEIa0I iL/+zTZpICAmWnP9fM1qZOKeLTx17dMD/0L7mTVhXrdpjj0Gsh+BeGhtaN/6KgoJ H1Fzbo8dAUHKbmAbOk0yfa5nrJU/ShXkqvgeur2XfNlmp2rryqNgDJvreII3nzwR 4LYX40XdoW446S2BqXhthZS+y6lJbADMEn1Yp6h/qVtfg+oRZR59Alz/bsBpuGUa coh3liuKHwe7ee68Gco12MnVf9QkeoNbw5u37fSQZBFsBWwo+Jo5kdVuyM/AcTgR Y5y/tqUxd5mR1pV8Cv27p2XuuI+LFTYGGthcxg4ch/HBy/dysejVIXBE+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdi+uYvXkHQXr37FiaLKiSsjMCEMB8GA1UdIwQY MBaAFC1/PdygyzjsewjGkCniD1LcQI8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNzVhZjQtOWQyNi00MjkwLWIwMjct YTU2YzUyYmUxOThjLzEvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNzVhZjQtOWQyNi00MjkwLWIwMjctYTU2YzUyYmUxOThj LzEvTFg4OTNLRExPT3g3Q01hUUtlSVBVdHhBanhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeurSU2ud qopfMXZOB2QCug5ZyXd8pGWdCqQwtyP7dNttf7tM124K8/wQaJRAs59leKNbNJvB Mo+xJUvj3WftDOVK6PSSRTIBTBias5dGXizTbMk3OPjZopO6owXd6jzgew+UwVfS SNVLkc9Ak9TFy/4nTB9cyP8Jlg4crpzqJQ5tYdBFersCPqmG9aMIw6BiKrHzzjSL reUT3QeRIW52AST8ja97WKGIl3g9Mm+Gvp8AYpw/1y0/33kyAyCH6qd10Z5myTXH QqJlM/4caxpgrS5QNCZ/twOoHwSGvbnBpjImpYRKTQT7nWKosH+HQlFvVVwmyZVI qOLk4nozzbGaGA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:10 2025 by rpki-client