This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json) Hash identifier: E+MWubBX8fTEz/u3T+oHm4TPasqPunwLoJZ6un8ciTw= Subject key identifier: 07:83:13:AA:4B:A5:04:BD:42:92:90:B0:F0:6C:3F:4A:CC:25:04:6E Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019B514E227C6E9A2F62F1B9E4944170E2F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft Manifest number: 115A Signing time: Wed 24 Dec 2025 17:00:33 +0000 Manifest this update: Wed 24 Dec 2025 17:00:33 +0000 Manifest next update: Thu 25 Dec 2025 17:00:33 +0000 Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=) 2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: BBkIamUOcsX0mKqgp0I1V4DTsm5eLsYoRzKZVgY9BSI=) 3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=) 4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:22:7c:6e:9a:2f:62:f1:b9:e4:94:41:70:e2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Dec 24 17:00:33 2025 GMT Not After : Dec 25 17:00:33 2025 GMT Subject: CN=078313aa4ba504bd429290b0f06c3f4acc25046e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:ea:6c:12:c0:ca:92:e9:14:6c:d4:64:c8: 08:9b:b4:91:89:28:4a:48:bd:68:36:6f:5f:50:41: cd:44:f2:d0:37:ad:96:a8:0d:ee:4e:52:4c:7f:c8: 26:e3:97:25:87:d2:47:37:d0:f7:0d:47:04:26:39: 51:2b:de:4b:4d:f4:07:03:96:8a:ad:d0:4e:84:e5: ca:3e:6b:ae:47:43:24:97:65:7f:c5:a3:d3:2f:6f: 89:81:da:28:80:fd:fe:94:5f:c7:fe:24:76:3f:9a: 75:31:43:d7:73:58:8b:b9:15:5d:45:fa:68:75:ca: 89:4b:50:82:fb:1f:47:33:ee:eb:3d:c2:5c:d4:2e: 20:bb:83:38:75:d2:b0:cf:ed:69:e4:42:1e:76:14: 70:28:a4:07:de:68:95:bd:26:8d:6e:98:8d:74:93: 12:4e:db:8c:72:f3:31:dc:9f:09:10:ce:3e:c4:d2: 74:27:72:8b:84:e4:cb:fd:3e:8e:28:31:ca:7f:f7: b3:31:3e:94:1b:52:b8:4e:fe:45:0e:2a:34:37:8a: d6:9b:c4:a4:60:55:4b:2a:6b:75:e1:58:13:03:f9: ca:67:f2:67:70:e4:59:aa:ac:9e:62:db:9e:2e:1f: 09:90:1a:bc:12:65:57:8a:17:2f:25:dc:93:23:cc: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:13:AA:4B:A5:04:BD:42:92:90:B0:F0:6C:3F:4A:CC:25:04:6E X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:42:2a:f8:14:c9:82:ef:2d:44:f7:d8:1b:5f:ba:6e:3d:ef: 18:86:d9:db:e7:3c:e2:08:b6:b2:1c:d2:df:a7:b3:37:9a:2f: 39:a9:5f:10:78:9e:29:32:4d:a6:5a:02:e0:3e:d8:ed:78:e3: e8:5d:7d:98:a0:d5:34:7e:f7:95:f9:cc:24:61:5d:84:77:90: 24:a6:eb:69:84:a9:c2:4e:a2:0a:61:b3:c7:b9:35:3f:ac:69: bb:29:2a:b8:14:cd:61:fe:9b:89:11:33:9a:cb:54:89:39:13: 53:45:0a:bb:19:38:b5:88:1e:30:ae:de:48:6e:3c:66:86:6c: a2:63:2b:4f:f1:5c:9d:77:ae:03:e4:ea:ba:26:fd:49:f2:fa: ac:03:26:05:26:47:c0:da:34:4e:59:43:d4:61:b1:13:1c:e1: 13:9c:17:27:3c:1a:33:7b:b9:9b:bf:18:9c:76:28:d1:76:47: ae:df:7d:a8:3e:4c:fa:c3:0c:94:f1:38:13:bd:c6:dc:a5:40: ac:f1:f6:4f:d8:8b:3d:69:f4:d0:c2:08:e8:88:06:a3:d1:cf: ca:eb:fd:6f:63:fe:eb:45:0d:fe:03:bd:18:aa:66:3c:d9:c1: ff:5d:c6:f7:a0:e6:36:ab:82:33:9e:98:e2:1c:1c:ba:58:86: 08:51:22:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTiJ8bpovYvG55JRBcOL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjUxMjI0MTcwMDMzWhcNMjUxMjI1MTcwMDMzWjAzMTEwLwYDVQQD EygwNzgzMTNhYTRiYTUwNGJkNDI5MjkwYjBmMDZjM2Y0YWNjMjUwNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXfqbBLAypLpFGzUZMgIm7SRiShK SL1oNm9fUEHNRPLQN62WqA3uTlJMf8gm45clh9JHN9D3DUcEJjlRK95LTfQHA5aK rdBOhOXKPmuuR0Mkl2V/xaPTL2+JgdoogP3+lF/H/iR2P5p1MUPXc1iLuRVdRfpo dcqJS1CC+x9HM+7rPcJc1C4gu4M4ddKwz+1p5EIedhRwKKQH3miVvSaNbpiNdJMS TtuMcvMx3J8JEM4+xNJ0J3KLhOTL/T6OKDHKf/ezMT6UG1K4Tv5FDio0N4rWm8Sk YFVLKmt14VgTA/nKZ/JncORZqqyeYtueLh8JkBq8EmVXihcvJdyTI8y0qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeDE6pLpQS9QpKQsPBsP0rMJQRuMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkIq+BTJ gu8tRPfYG1+6bj3vGIbZ2+c84gi2shzS36ezN5ovOalfEHieKTJNploC4D7Y7Xjj 6F19mKDVNH73lfnMJGFdhHeQJKbraYSpwk6iCmGzx7k1P6xpuykquBTNYf6biREz mstUiTkTU0UKuxk4tYgeMK7eSG48ZoZsomMrT/FcnXeuA+Tquib9SfL6rAMmBSZH wNo0TllD1GGxExzhE5wXJzwaM3u5m78YnHYo0XZHrt99qD5M+sMMlPE4E73G3KVA rPH2T9iLPWn00MII6IgGo9HPyuv9b2P+60UN/gO9GKpmPNnB/13G96DmNquCM56Y 4hwculiGCFEi3A== -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:09 2025 by rpki-client