This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json) Hash identifier: 6/7K2XccU7EicJXzeZGNK9cBcp7KHFwZNiYgSNLjmgE= Subject key identifier: 09:35:0A:E2:CD:E4:53:77:F8:4A:33:AC:95:3E:B6:24:BF:E2:B5:CD Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019B3833240E8414460A35CA8F5D252A675A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft Manifest number: 114D Signing time: Fri 19 Dec 2025 20:00:34 +0000 Manifest this update: Fri 19 Dec 2025 20:00:34 +0000 Manifest next update: Sat 20 Dec 2025 20:00:34 +0000 Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=) 2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: RNLIqVGqzuHQjJ+RE7QwxU0S2lUYFty3mlS9fR/OhUQ=) 3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=) 4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:24:0e:84:14:46:0a:35:ca:8f:5d:25:2a:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Dec 19 20:00:34 2025 GMT Not After : Dec 20 20:00:34 2025 GMT Subject: CN=09350ae2cde45377f84a33ac953eb624bfe2b5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:c8:c0:4f:6d:c5:87:6f:89:ae:6d:1b:2e: ec:9d:f7:33:88:7e:94:ae:32:7b:c6:c7:8a:05:b8: e5:9b:82:61:66:9b:da:54:cf:1b:6a:ec:7f:02:c9: b6:3c:18:98:4b:e4:53:e3:3f:e4:ba:5e:a2:90:44: 8d:03:79:cd:6f:98:2c:0a:b2:46:59:f1:ae:4b:e2: f6:fe:ba:f1:6c:8f:5f:6e:fd:78:9a:04:f2:d3:7d: 0f:df:b0:ba:4f:20:1b:27:e9:a1:13:64:d5:29:2e: e2:16:1d:e6:d9:22:7c:8a:fa:c3:f7:4c:63:17:f1: 87:e6:7c:c6:08:7d:f0:d7:1f:0b:26:06:02:86:ca: b3:12:07:3a:5d:90:97:37:d5:5a:52:30:71:d5:3e: 21:8c:30:db:1b:1c:49:11:62:d8:a6:ad:d8:66:1e: 2a:51:ab:51:ad:a3:83:a3:9d:dd:f2:b8:29:62:c3: a2:5e:cf:35:4d:08:a9:fe:ac:c3:e8:b3:a7:89:77: 78:93:c6:1f:ff:e3:c9:2e:ab:b7:5d:70:78:be:07: 23:2f:0b:86:2f:40:4a:ec:4c:37:bc:7e:82:86:64: 39:60:24:1d:45:31:40:c4:b0:36:8c:5a:b1:5f:16: 52:bc:ac:cb:09:28:1b:70:73:bc:e4:07:11:98:91: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:35:0A:E2:CD:E4:53:77:F8:4A:33:AC:95:3E:B6:24:BF:E2:B5:CD X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ad:45:d9:b8:04:06:60:54:52:2f:7c:c7:ef:10:88:e7:ff: fd:02:f3:44:eb:d0:84:e9:1a:55:a8:7e:05:b5:f6:e6:ea:98: db:19:09:8c:fc:01:69:78:a9:92:bd:58:b8:a5:4d:40:85:64: 60:aa:f5:54:42:8e:14:08:d2:01:7e:93:e9:c5:41:55:ee:48: 86:94:86:00:71:a4:cb:ce:d6:84:22:ae:3b:0d:02:e7:f2:76: b9:0b:e3:b7:d9:20:fe:78:ee:58:2b:78:85:7d:07:98:c2:5f: 75:9b:82:83:bd:d5:21:c5:2c:9e:48:be:87:b1:3f:ad:e5:49: 61:e3:bf:93:00:a5:db:55:69:6f:96:a0:14:fe:50:ef:55:09: b5:50:e7:71:ff:c9:52:4f:ac:84:50:ec:f9:f2:ca:85:0e:67: 83:84:30:27:ba:3e:4f:2a:f4:8f:ad:42:8c:6e:d6:ab:3d:b3: 69:4a:dd:04:11:43:62:d5:2a:c9:a8:97:c1:bd:3c:4c:d6:5b: 6a:f9:4e:64:4a:57:be:61:84:f5:a4:f0:37:ba:65:26:59:4e: aa:0a:71:f4:ad:39:b6:f3:1f:b5:e9:15:db:83:3c:65:23:7d: 77:61:90:e8:21:8f:b4:16:a5:ae:f2:97:83:72:28:d9:f5:a9: 7e:7b:b7:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4MyQOhBRGCjXKj10lKmdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjUxMjE5MjAwMDM0WhcNMjUxMjIwMjAwMDM0WjAzMTEwLwYDVQQD EygwOTM1MGFlMmNkZTQ1Mzc3Zjg0YTMzYWM5NTNlYjYyNGJmZTJiNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15jIwE9txYdvia5tGy7snfcziH6U rjJ7xseKBbjlm4JhZpvaVM8baux/Asm2PBiYS+RT4z/kul6ikESNA3nNb5gsCrJG WfGuS+L2/rrxbI9fbv14mgTy030P37C6TyAbJ+mhE2TVKS7iFh3m2SJ8ivrD90xj F/GH5nzGCH3w1x8LJgYChsqzEgc6XZCXN9VaUjBx1T4hjDDbGxxJEWLYpq3YZh4q UatRraODo53d8rgpYsOiXs81TQip/qzD6LOniXd4k8Yf/+PJLqu3XXB4vgcjLwuG L0BK7Ew3vH6ChmQ5YCQdRTFAxLA2jFqxXxZSvKzLCSgbcHO85AcRmJHN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk1CuLN5FN3+EozrJU+tiS/4rXNMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc61F2bgE BmBUUi98x+8QiOf//QLzROvQhOkaVah+BbX25uqY2xkJjPwBaXipkr1YuKVNQIVk YKr1VEKOFAjSAX6T6cVBVe5IhpSGAHGky87WhCKuOw0C5/J2uQvjt9kg/njuWCt4 hX0HmMJfdZuCg73VIcUsnki+h7E/reVJYeO/kwCl21Vpb5agFP5Q71UJtVDncf/J Uk+shFDs+fLKhQ5ng4QwJ7o+Tyr0j61CjG7Wqz2zaUrdBBFDYtUqyaiXwb08TNZb avlOZEpXvmGE9aTwN7plJllOqgpx9K05tvMftekV24M8ZSN9d2GQ6CGPtBalrvKX g3Io2fWpfnu3mg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:17:01 2025 by rpki-client