This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json) Hash identifier: FbsrucrWSCUsFAaPkBmkylWjbQWHOaDVcuP7GRLHfPA= Subject key identifier: E6:5D:8A:A3:92:AA:13:0E:18:F3:CF:43:F2:55:04:C2:9D:93:85:F2 Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Certificate serial: 019B3757B6D343A44A06684EA259457980E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 16:00:53 +0000 Manifest this update: Fri 19 Dec 2025 16:00:53 +0000 Manifest next update: Sat 20 Dec 2025 16:00:53 +0000 Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=) 2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=) 3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=) 4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: djiOcxAgInAmPv8fSpSL2a6ON69MRApnXLdY1fxaVdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:b6:d3:43:a4:4a:06:68:4e:a2:59:45:79:80:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Validity Not Before: Dec 19 16:00:53 2025 GMT Not After : Dec 20 16:00:53 2025 GMT Subject: CN=e65d8aa392aa130e18f3cf43f25504c29d9385f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:b9:70:2b:2e:4c:c9:a2:73:e3:37:25:69: 81:fa:8a:83:a8:09:b3:b9:0c:b1:da:80:6d:31:38: 09:89:e2:40:03:aa:45:db:6a:c1:7e:84:ce:ce:55: 35:3d:41:25:f7:2b:d3:c7:84:9f:74:b3:7c:39:d3: 27:59:00:76:ab:57:5f:01:e3:cc:ec:a6:b7:e9:83: ff:b5:f3:11:42:1a:07:d0:b8:a6:ae:9b:9a:cf:1b: e1:c9:0a:f9:0c:00:ac:ff:49:c3:a9:77:22:25:17: dd:86:b4:0c:25:41:a9:71:7f:95:cb:4b:84:3a:0e: 28:5c:13:03:0f:7a:62:f0:cd:06:8d:97:cf:46:c9: 25:16:d9:a9:5d:89:72:80:fd:cb:81:69:34:0c:f3: de:97:e4:f5:06:9f:dd:b2:b8:db:25:14:6a:55:80: b8:b4:05:ef:ca:f4:94:fd:74:91:a3:85:11:0a:a2: 9d:12:db:c7:0e:31:25:98:57:56:77:7e:06:36:b1: 47:15:b6:56:29:ff:fa:d2:00:9c:d0:4d:6d:b7:32: c0:f6:c3:fd:33:13:b6:56:71:3e:3b:67:47:5b:b7: 02:fa:01:26:f5:c1:61:05:d3:de:66:d5:09:35:c1: c1:dc:2b:c9:fe:b9:d0:17:c3:10:50:67:71:4a:bc: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5D:8A:A3:92:AA:13:0E:18:F3:CF:43:F2:55:04:C2:9D:93:85:F2 X509v3 Authority Key Identifier: keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:94:b7:6c:e1:99:f5:9a:05:c3:14:9f:43:ad:6c:9e:e8:69: d7:c1:0f:a7:69:ec:10:1f:9a:2b:4b:65:fa:98:f6:a1:33:27: b3:a1:83:01:bc:38:e6:a9:e8:aa:85:fd:62:4b:18:bf:35:c9: 80:b4:36:53:4f:bd:d5:2b:53:03:44:6f:44:02:c2:99:e1:8c: 01:5d:69:b9:59:a3:74:f7:5c:b3:3e:b8:f8:09:ed:a7:57:d0: 3c:a1:32:5b:02:dc:0c:01:b1:f5:f3:ac:55:77:92:48:9a:15: 9d:e8:17:0e:3c:8b:fb:a4:24:6a:99:44:a6:30:65:15:4a:54: f1:e8:7c:13:47:90:3a:84:d8:83:48:bf:a3:8b:f7:a7:dc:67: a3:de:42:8b:bb:0c:c7:97:b8:0e:e8:9c:31:1c:9a:78:53:68: fb:65:d2:d4:f8:a8:f0:49:ad:da:4a:d6:8b:c8:f5:c3:9e:1c: 15:8c:58:44:82:ed:55:dc:78:cb:e9:c0:6f:a4:9a:bc:fa:0c: 3c:05:49:e0:75:a9:44:b1:07:f1:eb:04:3b:51:8d:e3:31:d0: de:84:74:3d:91:4a:ea:6f:ab:c2:12:0a:65:a3:86:98:01:73: 8a:61:98:a5:b6:a6:3b:64:cf:7d:3c:93:71:d0:3f:15:26:6b: 8e:e7:06:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V7bTQ6RKBmhOollFeYDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw OTJlYzIwHhcNMjUxMjE5MTYwMDUzWhcNMjUxMjIwMTYwMDUzWjAzMTEwLwYDVQQD EyhlNjVkOGFhMzkyYWExMzBlMThmM2NmNDNmMjU1MDRjMjlkOTM4NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTe5cCsuTMmic+M3JWmB+oqDqAmz uQyx2oBtMTgJieJAA6pF22rBfoTOzlU1PUEl9yvTx4SfdLN8OdMnWQB2q1dfAePM 7Ka36YP/tfMRQhoH0LimrpuazxvhyQr5DACs/0nDqXciJRfdhrQMJUGpcX+Vy0uE Og4oXBMDD3pi8M0GjZfPRsklFtmpXYlygP3LgWk0DPPel+T1Bp/dsrjbJRRqVYC4 tAXvyvSU/XSRo4URCqKdEtvHDjElmFdWd34GNrFHFbZWKf/60gCc0E1ttzLA9sP9 MxO2VnE+O2dHW7cC+gEm9cFhBdPeZtUJNcHB3CvJ/rnQF8MQUGdxSrxXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZdiqOSqhMOGPPPQ/JVBMKdk4XyMB8GA1UdIwQY MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJS3bOGZ 9ZoFwxSfQ61snuhp18EPp2nsEB+aK0tl+pj2oTMns6GDAbw45qnoqoX9YksYvzXJ gLQ2U0+91StTA0RvRALCmeGMAV1puVmjdPdcsz64+Antp1fQPKEyWwLcDAGx9fOs VXeSSJoVnegXDjyL+6QkaplEpjBlFUpU8eh8E0eQOoTYg0i/o4v3p9xno95Ci7sM x5e4DuicMRyaeFNo+2XS1Pio8Emt2krWi8j1w54cFYxYRILtVdx4y+nAb6SavPoM PAVJ4HWpRLEH8esEO1GN4zHQ3oR0PZFK6m+rwhIKZaOGmAFzimGYpbamO2TPfTyT cdA/FSZrjucG+w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:50:34 2025 by rpki-client