This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json) Hash identifier: 2XKXjrPFrHEY9YAduPJkwfS4cHnDutRpYZ7GKPcDo3w= Subject key identifier: 54:16:83:D1:DC:72:E0:7D:EA:43:26:97:79:4D:E5:14:52:EB:A3:88 Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019B507361A1D00AF633F37771FB46078AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft Manifest number: 02AA Signing time: Wed 24 Dec 2025 13:01:37 +0000 Manifest this update: Wed 24 Dec 2025 13:01:37 +0000 Manifest next update: Thu 25 Dec 2025 13:01:37 +0000 Files and hashes: 1: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: s35ssVogEVnWZe9cvyuAZNUkMUolNij2vxOpS04CVxc=) 2: s1zL6gzO0M3JzPyTKX8t1xaOUrA.roa (hash: gZ7moKCsBrn+radMswHUegubuhNeWvXGn2oIRaI3hDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:61:a1:d0:0a:f6:33:f3:77:71:fb:46:07:8a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Dec 24 13:01:37 2025 GMT Not After : Dec 25 13:01:37 2025 GMT Subject: CN=541683d1dc72e07dea432697794de51452eba388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:eb:34:d0:7e:3c:2d:29:94:6f:6d:55:d0: fd:82:4c:d2:04:df:7c:e9:29:c6:14:34:f1:99:54: ae:6d:22:2a:f8:f2:d4:c7:c7:39:90:04:a4:bb:db: 31:4d:4d:22:36:04:2a:65:83:a9:36:21:3c:69:f8: 07:89:b1:ef:9e:5b:6d:25:a0:5d:cf:51:52:fd:fd: 63:1d:d8:cf:61:0a:0d:cc:f4:55:32:7f:69:78:27: 99:63:0f:4f:d2:be:ff:04:06:97:11:19:d2:14:18: bb:2a:cb:54:fb:6a:df:8b:ac:f9:a7:47:81:72:d0: 75:7e:20:14:91:db:27:32:c0:bc:4b:78:8a:fa:e4: d4:ac:e0:48:b2:cf:02:4a:ce:b8:f0:fa:88:ef:e9: b8:69:a5:72:61:93:89:9b:c0:0c:3f:3b:62:51:e7: 4a:98:ad:c7:a9:64:3f:7e:d1:4e:b3:65:4f:6f:66: f9:41:e5:db:79:c1:f8:d2:36:ff:c1:a2:b5:9a:83: 87:89:97:0d:2a:81:87:cc:8a:46:0d:47:e8:02:ac: 67:2c:39:c6:61:7c:29:24:87:56:71:6a:06:c2:34: d8:20:c5:67:c3:1a:87:ee:93:ee:16:e0:01:86:f7: 5b:51:07:d7:ef:f1:e9:14:ba:d8:75:0b:fa:21:1d: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:83:D1:DC:72:E0:7D:EA:43:26:97:79:4D:E5:14:52:EB:A3:88 X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4f:d6:a6:d2:25:f7:e9:9a:11:a4:9b:80:b4:6c:9a:fd:11: 61:74:29:f7:2a:7b:66:07:3d:99:57:22:73:8d:27:30:21:30: c8:cd:5b:03:90:ef:8a:b5:1e:c6:da:33:d9:e4:64:aa:25:ed: 40:d7:78:d3:e2:ed:6e:47:6f:f4:69:7c:c1:7e:87:53:9a:3b: 39:77:a8:4c:7d:83:dc:5b:d3:95:f9:40:6b:41:6a:0c:c7:ac: df:45:c8:17:4a:40:c7:57:ec:19:3d:8e:ad:7a:66:a1:be:3b: 3e:a9:4c:08:a7:20:d3:3a:84:a6:2b:35:2a:83:91:50:d8:60: 63:92:75:13:3e:0a:a9:79:3a:83:d5:b9:5b:87:6a:cf:20:b5: 40:b1:45:d8:f2:82:f7:dc:d6:2d:21:2f:da:1f:6e:82:0d:ad: 12:1a:13:4b:78:97:cf:1b:81:42:87:2a:6e:b5:d6:20:d1:13: ae:65:b4:3a:b8:7a:95:2a:8b:99:97:9a:f0:15:ef:ce:2c:f1: 1f:4c:d1:71:ed:40:7e:10:4b:5f:be:ec:5b:fe:73:e8:2c:9d: 06:b3:a1:8a:3c:40:64:7e:3e:fc:da:05:74:e6:9e:c9:12:17: 09:f8:45:cd:d8:e6:b5:79:27:bf:22:dc:50:fd:ce:b3:92:32: 6b:cb:71:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQc2Gh0Ar2M/N3cftGB4rSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjUxMjI0MTMwMTM3WhcNMjUxMjI1MTMwMTM3WjAzMTEwLwYDVQQD Eyg1NDE2ODNkMWRjNzJlMDdkZWE0MzI2OTc3OTRkZTUxNDUyZWJhMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm3rNNB+PC0plG9tVdD9gkzSBN98 6SnGFDTxmVSubSIq+PLUx8c5kASku9sxTU0iNgQqZYOpNiE8afgHibHvnlttJaBd z1FS/f1jHdjPYQoNzPRVMn9peCeZYw9P0r7/BAaXERnSFBi7KstU+2rfi6z5p0eB ctB1fiAUkdsnMsC8S3iK+uTUrOBIss8CSs648PqI7+m4aaVyYZOJm8AMPztiUedK mK3HqWQ/ftFOs2VPb2b5QeXbecH40jb/waK1moOHiZcNKoGHzIpGDUfoAqxnLDnG YXwpJIdWcWoGwjTYIMVnwxqH7pPuFuABhvdbUQfX7/HpFLrYdQv6IR1jawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQWg9HccuB96kMml3lN5RRS66OIMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE/WptIl 9+maEaSbgLRsmv0RYXQp9yp7Zgc9mVcic40nMCEwyM1bA5DvirUextoz2eRkqiXt QNd40+Ltbkdv9Gl8wX6HU5o7OXeoTH2D3FvTlflAa0FqDMes30XIF0pAx1fsGT2O rXpmob47PqlMCKcg0zqEpis1KoORUNhgY5J1Ez4KqXk6g9W5W4dqzyC1QLFF2PKC 99zWLSEv2h9ugg2tEhoTS3iXzxuBQocqbrXWINETrmW0Orh6lSqLmZea8BXvzizx H0zRce1AfhBLX77sW/5z6CydBrOhijxAZH4+/NoFdOaeyRIXCfhFzdjmtXknvyLc UP3Os5Iya8tx6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:57 2025 by rpki-client