This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json) Hash identifier: oXYqR4/ztsKPouzqbBJWd87yRKIdTOFAbhLjU4VzHOY= Subject key identifier: F7:D5:0C:CB:10:DF:56:D0:6B:AB:81:FF:EC:C7:77:39:8A:59:06:DB Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Certificate serial: 019B3AFDB11FFDFBED041AB054285692B70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 09:01:03 +0000 Manifest this update: Sat 20 Dec 2025 09:01:03 +0000 Manifest next update: Sun 21 Dec 2025 09:01:03 +0000 Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=) 2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=) 3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: VAcdoJ8D+gfymlwHJ3oYO3MBDSrGgdjJkkkI3lGCccg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b1:1f:fd:fb:ed:04:1a:b0:54:28:56:92:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16 Validity Not Before: Dec 20 09:01:03 2025 GMT Not After : Dec 21 09:01:03 2025 GMT Subject: CN=f7d50ccb10df56d06bab81ffecc777398a5906db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:30:22:cf:07:1e:ae:bf:db:a7:f7:5c:0b: d8:39:06:74:5c:7c:87:d0:43:40:fb:f5:dc:39:d4: 89:6f:d3:28:ee:5f:f1:5d:46:09:fd:cd:24:c7:38: 8f:cc:b3:6c:ef:9f:06:30:b6:f4:7a:70:bc:b2:25: 39:d7:48:26:3c:85:02:cd:3f:7d:3b:f1:09:33:76: 17:fc:e3:1c:86:33:ea:48:e8:60:3b:8d:1e:2e:8a: ce:be:14:84:c2:71:70:6c:71:f4:a6:f6:5e:2b:2a: bc:84:4f:a8:32:45:6f:14:7d:18:02:38:51:1d:09: 6b:02:48:33:af:31:35:22:95:48:5f:e3:46:0a:e5: 3e:3b:a8:73:ec:82:ca:e9:7f:be:8f:35:51:53:ed: b1:2f:d9:88:d1:f0:da:25:ed:49:14:7a:19:c8:f7: 6d:30:95:79:f7:3b:78:0c:e2:e5:c8:9a:be:f6:10: 07:a5:ca:a5:8e:32:e0:29:36:3f:05:2b:56:b9:54: 9f:7b:74:fd:c9:71:9a:2b:50:9f:13:2e:71:d4:e5: 0d:b8:34:d8:f0:26:89:be:33:43:ed:80:a2:63:b5: b6:91:2f:f9:cb:33:56:66:81:50:f1:61:08:ce:80: 1b:16:cd:7e:4e:d6:84:8f:5c:c2:20:39:94:51:df: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:0C:CB:10:DF:56:D0:6B:AB:81:FF:EC:C7:77:39:8A:59:06:DB X509v3 Authority Key Identifier: keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0c:25:67:a4:1a:97:a9:cd:b0:29:ae:02:0d:77:4b:f6:b2: 26:43:1c:05:71:f9:1c:80:19:93:48:d2:6a:c0:2e:72:73:af: 63:01:58:62:d2:3b:89:5e:70:53:86:83:83:f0:5d:5b:e5:c1: c5:59:e1:79:45:e7:75:dc:64:ff:38:5c:ba:88:0d:f8:c1:8f: 9a:dc:1d:64:99:f2:0a:24:57:99:34:88:93:50:d8:67:35:50: 30:7c:7e:4f:17:f9:e4:e9:db:00:d9:29:2d:8c:72:2e:b8:85: 70:14:c8:21:c0:84:76:de:8a:be:d8:bd:a5:7a:63:dd:fd:96: 2d:93:36:b4:7e:da:fb:be:34:7b:8c:ca:c4:1a:c1:b3:e9:bb: f5:ca:99:b2:71:55:c4:b9:1c:9a:d0:73:a1:e6:06:5b:0c:39: e0:79:11:b2:69:48:58:87:9d:c6:46:63:00:aa:7e:bc:af:12: f0:20:3d:e3:db:d6:b0:bf:ca:52:f0:20:70:e5:ad:ce:51:1e: 7a:fb:b7:fb:d7:80:11:23:1a:43:c5:b9:09:3f:45:42:e6:c8: fd:91:16:c7:e3:f2:27:88:d3:86:2f:c3:ac:ce:02:dc:44:41: a9:51:31:59:16:e9:91:1f:c0:c1:f7:44:80:2b:7a:8e:63:4e: 3a:fa:c0:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bEf/fvtBBqwVChWkrcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw ZWFiMTYwHhcNMjUxMjIwMDkwMTAzWhcNMjUxMjIxMDkwMTAzWjAzMTEwLwYDVQQD EyhmN2Q1MGNjYjEwZGY1NmQwNmJhYjgxZmZlY2M3NzczOThhNTkwNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HUwIs8HHq6/26f3XAvYOQZ0XHyH 0ENA+/XcOdSJb9Mo7l/xXUYJ/c0kxziPzLNs758GMLb0enC8siU510gmPIUCzT99 O/EJM3YX/OMchjPqSOhgO40eLorOvhSEwnFwbHH0pvZeKyq8hE+oMkVvFH0YAjhR HQlrAkgzrzE1IpVIX+NGCuU+O6hz7ILK6X++jzVRU+2xL9mI0fDaJe1JFHoZyPdt MJV59zt4DOLlyJq+9hAHpcqljjLgKTY/BStWuVSfe3T9yXGaK1CfEy5x1OUNuDTY 8CaJvjND7YCiY7W2kS/5yzNWZoFQ8WEIzoAbFs1+TtaEj1zCIDmUUd//uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfVDMsQ31bQa6uB/+zHdzmKWQbbMB8GA1UdIwQY MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAwlZ6Qa l6nNsCmuAg13S/ayJkMcBXH5HIAZk0jSasAucnOvYwFYYtI7iV5wU4aDg/BdW+XB xVnheUXnddxk/zhcuogN+MGPmtwdZJnyCiRXmTSIk1DYZzVQMHx+Txf55OnbANkp LYxyLriFcBTIIcCEdt6Kvti9pXpj3f2WLZM2tH7a+740e4zKxBrBs+m79cqZsnFV xLkcmtBzoeYGWww54HkRsmlIWIedxkZjAKp+vK8S8CA949vWsL/KUvAgcOWtzlEe evu3+9eAESMaQ8W5CT9FQubI/ZEWx+PyJ4jThi/DrM4C3ERBqVExWRbpkR/AwfdE gCt6jmNOOvrAYw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:50 2025 by rpki-client