This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json) Hash identifier: 4SDnLryQ9eYGYfjU6eniq8tU24W8K+LghpUBt0b5HxM= Subject key identifier: 5A:CE:71:95:D6:D9:DD:D5:D8:40:02:39:FE:C3:F9:51:DF:C7:1B:62 Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d Certificate serial: 019AF20929F8C23652FAEC3FC1050DE379E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: f3eMndQALgPDIyemDz3/4WmW5Tv2oK1d658m7ts3e2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:f8:c2:36:52:fa:ec:3f:c1:05:0d:e3:79:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=5ace7195d6d9ddd5d8400239fec3f951dfc71b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:b9:99:b3:41:ba:fd:21:48:30:01:21:4b: c1:e1:25:fa:85:07:9c:e7:e7:eb:da:95:5a:84:37: 35:29:2b:f6:e5:73:e3:0c:af:04:6b:4a:8b:85:d6: e9:10:ac:0d:3a:d8:bb:0d:bc:1d:9c:e3:bf:03:cc: 6d:7d:7a:1e:a0:e6:30:5f:de:15:1b:b6:2a:8c:a6: 5b:d1:14:3c:6c:eb:46:2c:cc:a7:e3:8d:98:3f:d7: 6e:39:3f:de:71:1a:c6:86:68:0d:60:00:b0:33:1f: cb:d9:14:ae:d4:46:dc:a8:7a:34:3a:ae:7b:64:cb: 64:62:21:f8:a7:58:ce:7d:9d:e5:e7:7f:cb:c2:cf: 8b:85:d9:36:69:0c:7f:40:72:aa:c5:96:de:81:5c: 9b:fd:bb:7a:e6:f3:d1:25:fc:97:46:0c:72:ce:db: 3a:3b:ea:1c:1d:f0:2b:5f:1f:4d:9b:b9:c5:09:1c: 68:32:6f:f7:4c:c1:77:b3:b5:53:2e:6b:6d:74:a3: d6:ba:a0:43:25:1c:0f:c4:f6:0c:36:77:ef:db:6a: 41:e5:ae:81:c2:94:78:7c:63:d6:bd:d5:5c:4f:cd: cb:8c:8a:ed:16:c6:f5:46:81:43:df:7e:dc:4b:59: b3:90:4b:2d:b6:db:34:c9:d5:b1:ee:6c:b0:11:56: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:71:95:D6:D9:DD:D5:D8:40:02:39:FE:C3:F9:51:DF:C7:1B:62 X509v3 Authority Key Identifier: keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a8:10:fb:92:a5:8d:f5:16:b9:b1:5c:be:a1:71:dd:85:05: f3:42:9f:0c:b8:91:eb:cc:d3:ab:d1:91:d9:48:f4:7b:e4:d2: 38:04:fe:85:1e:71:96:b2:b1:11:06:5e:0a:61:30:98:ea:f0: 67:0a:26:7d:5e:0c:20:27:4d:4d:f0:47:b0:9e:42:16:14:35: 37:d5:13:67:31:f7:8e:ed:5c:60:76:c5:39:60:57:00:49:85: 91:19:c9:55:12:b5:0e:c1:e3:fd:f6:95:0e:11:0d:98:51:f1: ce:5f:f0:59:e1:d8:b8:41:d3:c7:1f:97:dc:b9:05:9e:bd:47: 0c:40:9c:43:64:d5:eb:bf:5d:51:4f:10:d3:3d:ae:d3:6e:cb: 6b:28:6e:a0:62:85:17:bd:8c:2b:dc:6b:a7:3f:d9:17:8f:5d: 27:89:fb:b2:df:76:ba:4a:4e:5d:50:60:b2:02:97:1f:76:9c: ac:8a:bb:4e:b0:c1:0e:41:d5:3b:76:b8:3c:71:bd:d8:d7:c2: 0e:92:af:65:57:ea:ba:50:d4:3d:c6:76:b9:b6:03:73:29:29: cf:13:f4:30:f5:87:1b:69:d0:af:16:75:20:a0:fa:dd:66:5e: 03:64:41:44:7e:23:fc:85:68:ed:30:53:f9:d9:25:35:02:a7: 63:80:29:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSn4wjZS+uw/wQUN43npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2M2NzZkYjI0YzIwNWQ3MjU2ZmM1NDlhZGM3YzNlNjBh YzdlOWQwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg1YWNlNzE5NWQ2ZDlkZGQ1ZDg0MDAyMzlmZWMzZjk1MWRmYzcxYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2O5mbNBuv0hSDABIUvB4SX6hQec 5+fr2pVahDc1KSv25XPjDK8Ea0qLhdbpEKwNOti7DbwdnOO/A8xtfXoeoOYwX94V G7YqjKZb0RQ8bOtGLMyn442YP9duOT/ecRrGhmgNYACwMx/L2RSu1EbcqHo0Oq57 ZMtkYiH4p1jOfZ3l53/Lws+Lhdk2aQx/QHKqxZbegVyb/bt65vPRJfyXRgxyzts6 O+ocHfArXx9Nm7nFCRxoMm/3TMF3s7VTLmttdKPWuqBDJRwPxPYMNnfv22pB5a6B wpR4fGPWvdVcT83LjIrtFsb1RoFD337cS1mzkEsttts0ydWx7mywEVYBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrOcZXW2d3V2EACOf7D+VHfxxtiMB8GA1UdIwQY MBaAFC48Z22yTCBdclb8VJrcfD5grH6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2Yt MzQ4OTI1NzhmZjE5LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2YtMzQ4OTI1NzhmZjE5 LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6gQ+5Kl jfUWubFcvqFx3YUF80KfDLiR68zTq9GR2Uj0e+TSOAT+hR5xlrKxEQZeCmEwmOrw ZwomfV4MICdNTfBHsJ5CFhQ1N9UTZzH3ju1cYHbFOWBXAEmFkRnJVRK1DsHj/faV DhENmFHxzl/wWeHYuEHTxx+X3LkFnr1HDECcQ2TV679dUU8Q0z2u027LayhuoGKF F72MK9xrpz/ZF49dJ4n7st92ukpOXVBgsgKXH3acrIq7TrDBDkHVO3a4PHG92NfC DpKvZVfqulDUPcZ2ubYDcykpzxP0MPWHG2nQrxZ1IKD63WZeA2RBRH4j/IVo7TBT +dklNQKnY4ApKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client