This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json) Hash identifier: gutC9upk8vlSoLKx6RpRn1D0RVvTyIX3W6Jwy7msNwg= Subject key identifier: A0:8D:8C:BE:9A:15:E3:27:96:98:D0:0F:5D:1F:F5:2B:04:9F:B1:D0 Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Certificate serial: 019B3D90CF9571C58CEF56AAF53374790FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft Manifest number: 0C06 Signing time: Sat 20 Dec 2025 21:00:59 +0000 Manifest this update: Sat 20 Dec 2025 21:00:59 +0000 Manifest next update: Sun 21 Dec 2025 21:00:59 +0000 Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: OdWiqM8IBXlfV5/SrELMkLXr3W6OIesTGuMAZbi42eE=) 2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:cf:95:71:c5:8c:ef:56:aa:f5:33:74:79:0f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866 Validity Not Before: Dec 20 21:00:59 2025 GMT Not After : Dec 21 21:00:59 2025 GMT Subject: CN=a08d8cbe9a15e3279698d00f5d1ff52b049fb1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:4b:49:9d:de:8f:72:b0:97:b0:ea:94:fc: 93:d9:a3:f7:62:d2:bd:5f:57:5f:bd:64:6a:52:b5: c8:48:94:b2:31:9f:95:9c:9c:36:27:9e:48:de:4c: 80:15:09:2d:97:e7:cd:d2:14:98:af:92:d0:56:35: 08:67:bf:99:00:43:c1:7c:2b:f7:44:20:a5:1c:29: 28:3f:62:14:2b:56:ad:05:f3:d1:5c:ab:18:a4:9e: da:cc:63:05:22:4d:7d:1d:f6:54:cd:e8:f2:97:ba: f6:3f:a1:51:4b:92:9b:08:d6:08:3f:8f:87:80:44: 0a:65:f4:8b:8e:49:94:64:5d:eb:81:48:69:0c:b2: 95:fa:87:12:f3:ec:77:f5:4a:3c:4d:8d:36:11:09: 79:08:95:7a:4e:dc:3e:fa:cc:04:7a:57:7a:ac:e6: 2c:04:30:84:e4:7d:31:d9:e6:61:79:be:e8:28:3f: dc:16:d8:89:94:17:29:47:06:b5:98:12:21:18:ef: 85:39:05:55:ac:a7:c6:1d:0c:04:c0:15:29:12:be: de:0a:00:9a:d9:76:0a:f5:08:0a:f7:6d:d3:7c:07: 58:99:ff:40:69:8f:c5:86:03:42:d0:4e:b7:4e:9e: 69:f8:2c:f5:fc:05:ed:d5:1b:bb:c1:86:f7:05:1f: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8D:8C:BE:9A:15:E3:27:96:98:D0:0F:5D:1F:F5:2B:04:9F:B1:D0 X509v3 Authority Key Identifier: keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:80:cf:3a:ab:30:ea:63:8b:55:c3:e8:04:d9:44:d4:61:ee: 04:cf:34:c7:56:7a:e9:84:3b:91:4e:84:f0:47:3e:8d:43:2a: b6:09:3c:81:9b:a7:4a:1c:f6:7e:e9:2d:cc:69:7b:4a:70:b1: b9:52:92:a3:c1:40:95:1d:2b:08:7e:cc:60:79:d9:76:07:a3: 8d:3c:58:05:0a:aa:c9:b8:22:5e:c5:20:6a:95:e8:87:c8:ca: af:99:4f:fc:76:e1:00:67:fe:7e:88:7b:2f:75:ae:18:ad:af: 73:1b:37:9a:5d:81:99:e8:e3:5b:85:78:36:2e:f4:a5:42:c5: a5:94:83:03:14:d0:82:88:43:db:c1:1b:fc:85:d3:63:b0:41: 86:60:54:e7:2f:ee:26:88:d4:f6:dd:fd:54:a6:79:e6:6a:fa: 32:1a:cc:c0:7c:0f:8b:23:61:d5:8e:ea:5c:eb:1d:4d:2f:8a: 3e:91:94:07:f2:dd:d5:19:e8:8b:9b:98:25:46:70:d0:7d:e4: 3d:b4:ba:a7:0e:13:dc:fa:35:ae:0a:60:8e:33:6e:57:bb:18: 83:45:50:7b:a9:a9:c1:5b:fe:01:ff:7d:af:fe:80:6f:53:88: fb:ad:c6:b4:c1:80:74:d4:5c:ff:3f:7e:6b:73:db:5c:f3:fe: b0:57:1c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kM+VccWM71aq9TN0eQ/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4 MmE4NjYwHhcNMjUxMjIwMjEwMDU5WhcNMjUxMjIxMjEwMDU5WjAzMTEwLwYDVQQD EyhhMDhkOGNiZTlhMTVlMzI3OTY5OGQwMGY1ZDFmZjUyYjA0OWZiMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlJLSZ3ej3Kwl7DqlPyT2aP3YtK9 X1dfvWRqUrXISJSyMZ+VnJw2J55I3kyAFQktl+fN0hSYr5LQVjUIZ7+ZAEPBfCv3 RCClHCkoP2IUK1atBfPRXKsYpJ7azGMFIk19HfZUzejyl7r2P6FRS5KbCNYIP4+H gEQKZfSLjkmUZF3rgUhpDLKV+ocS8+x39Uo8TY02EQl5CJV6Ttw++swEeld6rOYs BDCE5H0x2eZheb7oKD/cFtiJlBcpRwa1mBIhGO+FOQVVrKfGHQwEwBUpEr7eCgCa 2XYK9QgK923TfAdYmf9AaY/FhgNC0E63Tp5p+Cz1/AXt1Ru7wYb3BR/JEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCNjL6aFeMnlpjQD10f9SsEn7HQMB8GA1UdIwQY MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIDPOqsw 6mOLVcPoBNlE1GHuBM80x1Z66YQ7kU6E8Ec+jUMqtgk8gZunShz2fuktzGl7SnCx uVKSo8FAlR0rCH7MYHnZdgejjTxYBQqqybgiXsUgapXoh8jKr5lP/HbhAGf+foh7 L3WuGK2vcxs3ml2BmejjW4V4Ni70pULFpZSDAxTQgohD28Eb/IXTY7BBhmBU5y/u JojU9t39VKZ55mr6MhrMwHwPiyNh1Y7qXOsdTS+KPpGUB/Ld1Rnoi5uYJUZw0H3k PbS6pw4T3Po1rgpgjjNuV7sYg0VQe6mpwVv+Af99r/6Ab1OI+63GtMGAdNRc/z9+ a3PbXPP+sFccJA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:31 2025 by rpki-client