This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft File: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json) Hash identifier: JLijJSPW6aAXXCQY+kruNZ1wZZKER0u5cmCXxIi/tiU= Subject key identifier: F8:82:1C:EF:1A:59:E6:5F:EA:CA:29:F0:C1:66:A3:E8:2C:8F:83:A1 Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Certificate serial: 019B3DC7755059E4CF8D625422C30D5F8D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft Manifest number: 0E6F Signing time: Sat 20 Dec 2025 22:00:40 +0000 Manifest this update: Sat 20 Dec 2025 22:00:40 +0000 Manifest next update: Sun 21 Dec 2025 22:00:40 +0000 Files and hashes: 1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: hnpt6Junda5QnGYQxseSAgXD2UX4AAeAM+6fNgHmnWw=) 2: RfAA1xaR3Se-RvvvQKJJ2gMoa-w.roa (hash: ZjUwK6nsqDf3RG0U3GrfbUxp0iL0zaNbRBEGccx3Ch0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:75:50:59:e4:cf:8d:62:54:22:c3:0d:5f:8d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Validity Not Before: Dec 20 22:00:40 2025 GMT Not After : Dec 21 22:00:40 2025 GMT Subject: CN=f8821cef1a59e65feaca29f0c166a3e82c8f83a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:de:09:ca:3b:b9:05:bd:5f:63:5e:b4:35: 9f:17:f0:37:ab:d1:03:ec:37:6c:37:9d:01:d4:78: fd:f8:5d:63:b3:fe:73:0f:e1:9a:9d:4a:08:3c:3f: e1:91:56:2c:0f:49:92:f0:58:78:7d:47:ae:b8:36: 5e:6d:c9:d2:b9:52:f1:2f:66:f1:9b:8e:22:d5:bc: 82:fe:64:1a:67:f2:a4:45:19:fd:48:74:fd:24:12: 61:0e:db:fa:95:1c:0b:62:a0:29:ea:ef:30:aa:3e: ef:70:92:cc:0e:a8:7e:4f:d0:60:f8:d8:c9:cd:d0: 3a:ec:55:e5:6a:6c:df:59:89:dc:4c:ae:ad:17:21: d4:c2:1e:b6:e7:5d:a2:1a:cf:2c:43:47:e8:26:7c: ea:8e:e5:07:06:cd:dd:86:c2:6d:a0:5a:31:63:16: 02:b8:2a:f6:c6:46:ed:cd:45:46:d2:96:56:56:12: 76:71:7c:ec:a7:e5:fa:f4:6b:f8:e6:4c:33:d3:a3: 31:c8:1f:a8:8a:ad:bb:8f:ab:1d:f3:b7:d5:57:9c: 85:04:ec:35:ef:bf:95:85:9a:28:ce:84:b5:60:97: 2a:7e:59:cc:17:8b:d0:1c:6c:1d:a8:be:60:b4:57: 5f:a8:e0:58:06:1f:20:65:fa:42:17:69:ea:28:5b: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:82:1C:EF:1A:59:E6:5F:EA:CA:29:F0:C1:66:A3:E8:2C:8F:83:A1 X509v3 Authority Key Identifier: keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:75:6c:93:2f:24:e3:2a:c7:f9:6f:29:59:89:29:7f:47: c1:85:cd:3a:98:4d:b8:08:65:e5:5b:10:c3:f0:3e:9c:41:22: 77:02:28:f4:91:78:8d:13:b3:87:22:83:fd:d9:cb:ac:f5:07: 74:92:95:80:46:93:e8:5f:71:1f:4f:cf:7f:ca:44:8e:8e:2e: 60:c2:4f:04:eb:13:47:07:53:bf:b1:ad:71:03:d7:54:55:d5: 3d:1c:45:2c:96:3f:9c:88:9d:8d:09:a1:07:7a:37:bf:4f:ec: 0f:d0:a0:34:af:75:9d:f9:6d:ea:c6:b2:d5:ca:1b:b7:d0:41: 69:f0:ce:c5:b4:f1:b3:9b:58:cc:ba:c5:7d:62:33:d7:49:85: 89:99:24:ae:97:de:c1:ce:3d:01:e4:00:ab:24:a2:ab:8c:f5: 64:ca:c2:56:90:c7:44:bb:8b:80:c1:f8:66:61:34:66:78:7f: 16:40:5b:28:6a:73:7f:64:64:f3:68:d8:c2:6e:64:0a:d9:31: cd:24:11:d2:9e:c3:75:64:ad:4b:75:47:47:33:91:3f:21:26: b0:34:44:ef:8f:c2:30:d1:ec:fa:50:40:9d:ed:0f:51:98:a1: 78:c2:66:ac:f4:d1:f9:6c:90:54:cc:10:58:58:ba:2f:bd:30: a3:fb:11:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3VQWeTPjWJUIsMNX42XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNWM1NzFiZjliZmE3ZTIxYmM3ZTMzOWY5YjhlZWJlMDYx MzM3MTEwHhcNMjUxMjIwMjIwMDQwWhcNMjUxMjIxMjIwMDQwWjAzMTEwLwYDVQQD EyhmODgyMWNlZjFhNTllNjVmZWFjYTI5ZjBjMTY2YTNlODJjOGY4M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjeCco7uQW9X2NetDWfF/A3q9ED 7DdsN50B1Hj9+F1js/5zD+GanUoIPD/hkVYsD0mS8Fh4fUeuuDZebcnSuVLxL2bx m44i1byC/mQaZ/KkRRn9SHT9JBJhDtv6lRwLYqAp6u8wqj7vcJLMDqh+T9Bg+NjJ zdA67FXlamzfWYncTK6tFyHUwh62512iGs8sQ0foJnzqjuUHBs3dhsJtoFoxYxYC uCr2xkbtzUVG0pZWVhJ2cXzsp+X69Gv45kwz06MxyB+oiq27j6sd87fVV5yFBOw1 77+VhZoozoS1YJcqflnMF4vQHGwdqL5gtFdfqOBYBh8gZfpCF2nqKFvIPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiCHO8aWeZf6sop8MFmo+gsj4OhMB8GA1UdIwQY MBaAFC5cVxv5v6fiG8fjOfm47r4GEzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjct ZDYwOTJhOWZiZTZjLzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjctZDYwOTJhOWZiZTZj LzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNF1bJMv JOMqx/lvKVmJKX9HwYXNOphNuAhl5VsQw/A+nEEidwIo9JF4jROzhyKD/dnLrPUH dJKVgEaT6F9xH0/Pf8pEjo4uYMJPBOsTRwdTv7GtcQPXVFXVPRxFLJY/nIidjQmh B3o3v0/sD9CgNK91nflt6say1cobt9BBafDOxbTxs5tYzLrFfWIz10mFiZkkrpfe wc49AeQAqySiq4z1ZMrCVpDHRLuLgMH4ZmE0Znh/FkBbKGpzf2Rk82jYwm5kCtkx zSQR0p7DdWStS3VHRzORPyEmsDRE74/CMNHs+lBAne0PUZiheMJmrPTR+WyQVMwQ WFi6L70wo/sRJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:09:02 2025 by rpki-client