This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json) Hash identifier: KrF+gEYNtS6Zz2J5ec9YhvIp7F1H2kVIOXkIJ2lEApw= Subject key identifier: 91:B8:5C:E3:B9:D4:63:14:0B:57:73:88:98:E7:AC:F1:95:1F:C8:16 Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019B668C89D8F7A114091308687AC262A5DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 20:00:44 +0000 Manifest this update: Sun 28 Dec 2025 20:00:44 +0000 Manifest next update: Mon 29 Dec 2025 20:00:44 +0000 Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=) 2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: zpytxktA1ihYCKL/RGzcAzWE59BXOc6Sh5yVCfoaukk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:89:d8:f7:a1:14:09:13:08:68:7a:c2:62:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Dec 28 20:00:44 2025 GMT Not After : Dec 29 20:00:44 2025 GMT Subject: CN=91b85ce3b9d463140b57738898e7acf1951fc816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:37:79:4e:5c:8a:26:e4:02:d5:24:1d:46:48: c6:c3:00:08:28:bd:ae:64:33:ec:b2:0d:05:14:8b: 01:96:e2:c8:a5:ae:e2:7f:f4:53:6e:6a:27:6d:52: 8c:42:dc:12:24:f9:6e:e9:06:ae:98:7e:2b:dd:a9: 50:ea:c3:a6:08:11:d8:e6:e0:5b:ff:86:8a:80:d2: b9:7d:1d:c3:7c:a5:5d:a2:be:8b:b7:a4:53:ca:47: b0:f2:90:3e:dc:73:a2:e0:4f:88:bc:1a:c0:fb:22: bb:34:ed:b0:75:4a:2d:65:57:3d:e7:b6:c9:d5:82: 94:e1:fb:9e:66:ce:10:fb:be:6a:c2:a4:3b:34:ae: 22:05:83:b2:9f:75:de:0c:3f:1f:91:dc:e4:7a:ed: fc:d2:e3:8b:62:53:49:f9:5c:1f:71:6a:92:62:fc: 55:9c:14:5b:fb:8a:f6:22:fa:de:ef:56:a7:21:8a: ef:b7:52:82:d9:23:cd:07:b4:f1:e5:a1:31:1f:22: a5:ca:a0:14:12:8e:ae:2e:a6:13:6f:ef:a8:97:ac: 74:da:f5:30:5f:cc:a0:90:ca:8b:d9:9a:2c:2d:4f: 88:60:ce:31:60:c9:c1:81:8b:e7:ea:ce:67:a5:f5: a6:da:50:7f:a8:68:7c:13:b3:52:0b:b5:05:76:59: 24:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:5C:E3:B9:D4:63:14:0B:57:73:88:98:E7:AC:F1:95:1F:C8:16 X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0b:ad:c5:c8:b5:e0:5d:3b:63:2c:09:f2:95:80:e6:a7:0c: e2:1a:84:a3:0d:3e:24:15:34:ab:b7:34:87:69:fd:7e:71:e3: 01:f4:79:a0:38:cb:9a:94:a0:96:d6:c2:62:b1:74:c9:8d:95: 48:f4:3e:1a:30:e3:f4:56:4a:ba:2e:73:d2:5c:98:50:e0:d9: c9:66:30:7f:8c:04:b3:8b:1f:ed:46:68:27:88:64:07:e7:ed: f7:ff:46:70:6f:04:aa:83:46:f1:6c:74:4f:74:1e:3a:c4:b6: 42:5d:94:43:13:dd:af:97:ee:78:97:a7:19:51:47:0e:60:28: b3:89:e6:9a:1b:47:f0:1a:31:50:89:6d:46:21:dd:60:bb:43: 0d:a1:dc:37:f9:a9:b6:3c:e7:7c:4c:70:8b:c2:fd:0d:8b:f9: 27:ce:4b:6c:85:02:42:2b:3a:a4:6c:ab:5a:b4:aa:98:47:19: ee:94:d7:7b:75:09:fd:5a:0d:bd:d6:67:3f:46:66:0a:14:58: bb:81:9b:a9:cc:be:cb:a6:de:dd:c6:28:52:85:60:25:17:c9: 63:b6:5a:b4:91:bf:4a:43:18:4a:72:5c:19:93:23:ba:35:2d: 48:00:da:3d:f4:57:d1:14:7b:93:e2:d0:0d:0e:81:65:30:5f: d4:f2:2a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjInY96EUCRMIaHrCYqXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjUxMjI4MjAwMDQ0WhcNMjUxMjI5MjAwMDQ0WjAzMTEwLwYDVQQD Eyg5MWI4NWNlM2I5ZDQ2MzE0MGI1NzczODg5OGU3YWNmMTk1MWZjODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Dd5TlyKJuQC1SQdRkjGwwAIKL2u ZDPssg0FFIsBluLIpa7if/RTbmonbVKMQtwSJPlu6QaumH4r3alQ6sOmCBHY5uBb /4aKgNK5fR3DfKVdor6Lt6RTykew8pA+3HOi4E+IvBrA+yK7NO2wdUotZVc957bJ 1YKU4fueZs4Q+75qwqQ7NK4iBYOyn3XeDD8fkdzkeu380uOLYlNJ+VwfcWqSYvxV nBRb+4r2Ivre71anIYrvt1KC2SPNB7Tx5aExHyKlyqAUEo6uLqYTb++ol6x02vUw X8ygkMqL2ZosLU+IYM4xYMnBgYvn6s5npfWm2lB/qGh8E7NSC7UFdlkkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG4XOO51GMUC1dziJjnrPGVH8gWMB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwutxci1 4F07YywJ8pWA5qcM4hqEow0+JBU0q7c0h2n9fnHjAfR5oDjLmpSgltbCYrF0yY2V SPQ+GjDj9FZKui5z0lyYUODZyWYwf4wEs4sf7UZoJ4hkB+ft9/9GcG8EqoNG8Wx0 T3QeOsS2Ql2UQxPdr5fueJenGVFHDmAos4nmmhtH8BoxUIltRiHdYLtDDaHcN/mp tjznfExwi8L9DYv5J85LbIUCQis6pGyrWrSqmEcZ7pTXe3UJ/VoNvdZnP0ZmChRY u4Gbqcy+y6be3cYoUoVgJRfJY7ZatJG/SkMYSnJcGZMjujUtSADaPfRX0RR7k+LQ DQ6BZTBf1PIqKw== -----END CERTIFICATE-----Generated at Mon Dec 29 02:23:47 2025 by rpki-client