This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json) Hash identifier: iYBTP+jVxqsHj3uF+Q75nbvFrKPWA/HD0iT2hkbRhJg= Subject key identifier: BE:48:B9:5F:E1:C5:5D:8E:14:4D:F4:7C:6F:39:C7:D0:82:DB:DE:47 Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c Certificate serial: 019B4B157E02428EACC6CC418462D8921BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft Manifest number: 1359 Signing time: Tue 23 Dec 2025 12:00:58 +0000 Manifest this update: Tue 23 Dec 2025 12:00:58 +0000 Manifest next update: Wed 24 Dec 2025 12:00:58 +0000 Files and hashes: 1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: eVgYxSeiLdAzvEVPH1CbNEUDUbTgwqyTuM1UmlWZ/OM=) 2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:7e:02:42:8e:ac:c6:cc:41:84:62:d8:92:1b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c Validity Not Before: Dec 23 12:00:58 2025 GMT Not After : Dec 24 12:00:58 2025 GMT Subject: CN=be48b95fe1c55d8e144df47c6f39c7d082dbde47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:97:21:2d:fd:ac:dc:d3:86:62:05:e9:11: da:84:95:bf:81:c1:9d:f1:45:9a:0f:28:dc:40:73: 0b:21:3b:4e:ae:92:79:07:95:ba:c3:0f:7b:e2:05: 1f:2a:a1:63:3b:19:f9:c8:16:dd:5d:b8:e5:99:91: 86:a3:8e:cd:38:70:d4:81:db:db:7c:14:b4:5e:4d: c9:17:48:bb:46:4e:03:94:07:83:e5:ff:57:70:34: eb:7e:87:f5:8d:4b:5f:b1:56:86:ef:2b:39:d4:b6: 37:06:ed:ff:07:81:e5:c0:05:76:4c:59:6b:a1:41: 9b:4e:32:95:d5:bf:62:90:93:87:55:4c:de:28:53: a3:69:0f:07:57:4d:a0:62:17:06:c9:e0:37:a2:10: 06:b5:f1:34:90:eb:ac:31:c8:1f:c6:87:16:46:b6: fd:7a:0e:26:bb:c8:31:5b:84:0f:8c:10:ad:b6:11: bb:70:05:f8:29:60:b4:74:63:87:fa:45:a7:8a:63: 5a:0a:e7:50:35:86:ec:36:47:74:85:60:7e:af:4a: 5e:b5:a7:df:cb:cb:4a:b7:3f:81:bd:44:ac:3a:83: 6f:e4:5c:32:51:8e:a6:18:0a:8b:ee:3f:43:35:34: 4c:23:25:f7:70:d0:ea:71:53:82:14:ba:52:05:cb: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:B9:5F:E1:C5:5D:8E:14:4D:F4:7C:6F:39:C7:D0:82:DB:DE:47 X509v3 Authority Key Identifier: keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:29:e4:3d:6e:d8:58:13:02:31:e9:48:22:52:a6:7b:20: 28:eb:1b:53:4d:d2:0a:96:fe:80:4d:b2:b8:d2:a5:e0:4a:7b: 31:3a:1b:8d:d3:64:0a:17:56:a5:5d:c8:46:ad:92:17:42:7f: ae:e0:18:aa:38:8c:20:8c:81:92:99:ad:65:e5:bc:b0:ee:3c: 5c:55:d8:07:97:85:c8:b5:5b:0b:6a:0a:85:2e:c1:e6:9b:9b: 1c:3c:6e:90:f1:5a:c2:ae:40:d7:c3:a4:09:ac:e4:7c:ac:29: ef:90:a8:68:bd:69:d9:0d:84:16:e4:7a:df:c5:0f:ab:88:8b: ec:10:50:67:e5:2a:2c:03:0c:c3:89:18:ff:40:87:73:28:82: cc:42:ce:cf:a2:f6:f9:8c:5f:1e:a7:d1:71:8a:fd:55:55:96: 07:62:16:a1:65:05:56:df:e5:c6:df:05:40:a7:06:4b:3a:e9: 15:e3:e6:2c:d8:0e:e9:56:cd:d3:71:f0:e3:e5:47:cc:fc:ac: cf:76:67:af:2c:ce:af:68:a0:eb:0a:6e:6e:5c:7b:8a:be:7d: e9:79:35:f2:df:f5:de:48:49:a0:e7:ee:8c:76:0b:dd:12:66: 92:9b:b7:5f:b7:1a:af:98:c3:21:8a:b5:3e:4b:e3:0f:45:86: c5:14:bb:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFX4CQo6sxsxBhGLYkhu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTdiYWZiNzAxOGRjNDNiZGFlNTNiMjNhMjNlMTY1Njdl MWYyMWMwHhcNMjUxMjIzMTIwMDU4WhcNMjUxMjI0MTIwMDU4WjAzMTEwLwYDVQQD EyhiZTQ4Yjk1ZmUxYzU1ZDhlMTQ0ZGY0N2M2ZjM5YzdkMDgyZGJkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlASXIS39rNzThmIF6RHahJW/gcGd 8UWaDyjcQHMLITtOrpJ5B5W6ww974gUfKqFjOxn5yBbdXbjlmZGGo47NOHDUgdvb fBS0Xk3JF0i7Rk4DlAeD5f9XcDTrfof1jUtfsVaG7ys51LY3Bu3/B4HlwAV2TFlr oUGbTjKV1b9ikJOHVUzeKFOjaQ8HV02gYhcGyeA3ohAGtfE0kOusMcgfxocWRrb9 eg4mu8gxW4QPjBCtthG7cAX4KWC0dGOH+kWnimNaCudQNYbsNkd0hWB+r0petaff y8tKtz+BvUSsOoNv5FwyUY6mGAqL7j9DNTRMIyX3cNDqcVOCFLpSBctW8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5IuV/hxV2OFE30fG85x9CC295HMB8GA1UdIwQY MBaAFJcXuvtwGNxDva5Tsjoj4WVn4fIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMt N2M5M2NhZTIyN2JkLzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMtN2M5M2NhZTIyN2Jk LzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6op5D1u 2FgTAjHpSCJSpnsgKOsbU03SCpb+gE2yuNKl4Ep7MTobjdNkChdWpV3IRq2SF0J/ ruAYqjiMIIyBkpmtZeW8sO48XFXYB5eFyLVbC2oKhS7B5pubHDxukPFawq5A18Ok CazkfKwp75CoaL1p2Q2EFuR638UPq4iL7BBQZ+UqLAMMw4kY/0CHcyiCzELOz6L2 +YxfHqfRcYr9VVWWB2IWoWUFVt/lxt8FQKcGSzrpFePmLNgO6VbN03Hw4+VHzPys z3ZnryzOr2ig6wpublx7ir596Xk18t/13khJoOfujHYL3RJmkpu3X7car5jDIYq1 PkvjD0WGxRS7Hw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:10 2025 by rpki-client