This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json) Hash identifier: YhHyY31gqcWZDNjtp2Z+HtlBTUIwJu75hsaRDXoh/0s= Subject key identifier: 6A:F0:10:FF:84:C0:9E:3C:7B:AC:1B:2A:6C:E2:58:8C:BD:19:AE:F7 Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Certificate serial: 019B300C2527087D237C52945954427D44FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft Manifest number: 15CA Signing time: Thu 18 Dec 2025 06:01:00 +0000 Manifest this update: Thu 18 Dec 2025 06:01:00 +0000 Manifest next update: Fri 19 Dec 2025 06:01:00 +0000 Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=) 2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: tACltNBRoZpmvar5uQhzvHnWw3cOk+KHUicT7Prylrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:25:27:08:7d:23:7c:52:94:59:54:42:7d:44:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Validity Not Before: Dec 18 06:01:00 2025 GMT Not After : Dec 19 06:01:00 2025 GMT Subject: CN=6af010ff84c09e3c7bac1b2a6ce2588cbd19aef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:72:ac:3f:db:65:96:cb:b8:f2:d8:fb:16: 26:87:fa:45:48:dd:1d:b2:39:68:3d:93:ae:82:d3: e3:08:ec:63:58:44:37:5f:62:19:aa:d9:a4:b9:2d: a2:7f:73:42:d9:0d:23:00:41:1d:27:a2:51:a4:f6: 78:65:e8:8f:3b:37:2c:40:3f:fa:ca:4e:32:90:48: 77:71:25:9d:06:fc:4c:09:7e:73:fa:5b:74:ea:22: 5b:e4:74:c3:94:8c:b6:96:46:9d:72:1a:36:b0:8c: 5c:f6:68:30:38:9c:ab:ec:81:ad:56:48:3d:49:72: 1b:c2:c3:e2:a6:30:dd:2f:3f:37:bf:58:aa:36:cc: d1:3a:7e:ef:0c:57:2a:5e:08:e9:39:7f:4d:f2:9a: 33:19:0c:30:7d:e7:9c:bc:57:9b:d2:40:3d:49:08: 69:8a:a0:0e:26:4f:1a:c4:bd:2c:67:21:21:8c:13: a1:d4:bd:1b:3b:14:a1:37:16:16:f4:7b:2d:9d:8d: c6:d0:20:f3:f1:91:97:f7:bc:1b:b5:93:33:7c:83: 73:ef:59:f4:f0:f8:6a:2c:45:52:7a:e0:e1:19:24: 37:de:64:24:00:94:bb:fc:f3:1f:2c:9b:1a:ea:05: 23:5c:51:77:fb:00:d8:c4:aa:cf:2f:f7:65:6c:8e: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:10:FF:84:C0:9E:3C:7B:AC:1B:2A:6C:E2:58:8C:BD:19:AE:F7 X509v3 Authority Key Identifier: keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3d:6a:30:96:e0:ba:9c:3a:1e:51:bc:89:6f:5b:68:b1:a8: 8c:3e:2e:ae:a8:cb:6b:8c:ca:f0:81:43:9d:c9:bf:82:37:aa: 8c:58:e4:01:3e:bf:d6:f0:60:b5:2a:ee:37:80:37:a5:0b:81: a8:0f:b7:a3:bc:8f:0e:e4:32:12:3f:04:4b:a0:a4:39:f2:d8: b8:05:39:ba:e1:01:2e:76:47:16:86:d4:ca:9c:f6:c8:b8:51: 2f:c7:f1:2e:46:5d:5e:6a:9c:ca:cd:ba:0a:09:75:45:0f:03: f6:0c:57:fe:f2:92:b1:01:08:c5:29:72:f0:fd:76:4f:2c:38: 60:8c:30:c5:82:0e:84:21:01:3c:75:a3:49:4c:58:86:b5:67: 40:b9:79:91:99:5c:4c:62:fc:47:5a:1d:99:77:56:b3:5b:90: 61:96:a5:b1:3c:ab:8c:21:3c:87:52:c4:8a:42:84:79:47:55: d8:13:9f:4f:56:13:3a:dc:47:91:71:99:b5:31:a3:fd:46:30: 58:e9:25:09:79:f6:22:a7:e3:42:3b:ec:1a:b9:66:ea:5d:b9: 1d:17:1d:71:26:94:96:bc:f0:02:55:c5:28:d5:5f:87:ef:e9: 00:95:f9:26:d8:3b:72:8f:d6:ba:32:c0:7e:cd:fc:95:c0:d5: 5a:c8:78:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDCUnCH0jfFKUWVRCfUT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk OWQyY2IwHhcNMjUxMjE4MDYwMTAwWhcNMjUxMjE5MDYwMTAwWjAzMTEwLwYDVQQD Eyg2YWYwMTBmZjg0YzA5ZTNjN2JhYzFiMmE2Y2UyNTg4Y2JkMTlhZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PVyrD/bZZbLuPLY+xYmh/pFSN0d sjloPZOugtPjCOxjWEQ3X2IZqtmkuS2if3NC2Q0jAEEdJ6JRpPZ4ZeiPOzcsQD/6 yk4ykEh3cSWdBvxMCX5z+lt06iJb5HTDlIy2lkadcho2sIxc9mgwOJyr7IGtVkg9 SXIbwsPipjDdLz83v1iqNszROn7vDFcqXgjpOX9N8pozGQwwfeecvFeb0kA9SQhp iqAOJk8axL0sZyEhjBOh1L0bOxShNxYW9HstnY3G0CDz8ZGX97wbtZMzfINz71n0 8PhqLEVSeuDhGSQ33mQkAJS7/PMfLJsa6gUjXFF3+wDYxKrPL/dlbI6YewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrwEP+EwJ48e6wbKmziWIy9Ga73MB8GA1UdIwQY MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1 LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD1qMJbg upw6HlG8iW9baLGojD4urqjLa4zK8IFDncm/gjeqjFjkAT6/1vBgtSruN4A3pQuB qA+3o7yPDuQyEj8ES6CkOfLYuAU5uuEBLnZHFobUypz2yLhRL8fxLkZdXmqcys26 Cgl1RQ8D9gxX/vKSsQEIxSly8P12Tyw4YIwwxYIOhCEBPHWjSUxYhrVnQLl5kZlc TGL8R1odmXdWs1uQYZalsTyrjCE8h1LEikKEeUdV2BOfT1YTOtxHkXGZtTGj/UYw WOklCXn2IqfjQjvsGrlm6l25HRcdcSaUlrzwAlXFKNVfh+/pAJX5Jtg7co/WujLA fs38lcDVWsh4HQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:19 2025 by rpki-client