This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json) Hash identifier: nPGjOaR+HjusVg/6AaXPwW3Xh3FofRijQo/MVcVS8EE= Subject key identifier: 4B:34:BF:D9:12:57:85:F6:DF:DB:CE:7C:67:F7:7D:A5:CA:62:02:C8 Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f Certificate serial: 019B4249C71D7E269D1B4F5C2801F2AB3F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft Manifest number: 07B0 Signing time: Sun 21 Dec 2025 19:01:29 +0000 Manifest this update: Sun 21 Dec 2025 19:01:29 +0000 Manifest next update: Mon 22 Dec 2025 19:01:29 +0000 Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=) 2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: 2xKL5BRuicXDgxtOHNO/AZtMW4jFofYkWDTmB9KbpsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c7:1d:7e:26:9d:1b:4f:5c:28:01:f2:ab:3f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f Validity Not Before: Dec 21 19:01:29 2025 GMT Not After : Dec 22 19:01:29 2025 GMT Subject: CN=4b34bfd9125785f6dfdbce7c67f77da5ca6202c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:4a:85:0c:4c:b5:99:e7:7d:2e:da:35:bd: d6:ef:00:53:8f:30:f9:7a:d2:f8:84:cd:d5:a8:46: c2:c0:4a:b7:ee:4b:ac:9e:65:ac:14:88:92:bf:7b: eb:ce:b9:ba:ba:6c:35:8d:47:d9:55:a4:50:91:c3: e0:26:60:6a:60:d2:f0:48:53:46:ce:f9:8c:2b:15: f4:fc:68:8b:c7:5f:c6:f4:72:f8:e5:85:3c:0e:7b: e2:0b:02:0f:a2:85:5b:40:0c:7b:6b:f5:39:f0:9e: 24:8f:9f:c7:07:16:6b:10:78:49:83:e1:07:96:88: 59:55:ca:11:30:2f:51:08:37:54:02:26:07:8a:9b: 1e:28:bd:6f:56:b7:c2:9e:62:e7:fc:a3:7e:03:15: 66:86:70:05:f8:5c:9a:9f:1d:00:cc:66:ac:95:9b: 21:fa:f3:9f:ea:6e:5f:e5:b1:4d:8e:bd:e7:55:53: 97:61:f2:7f:e0:2e:64:93:81:1f:14:a9:91:90:b5: 1e:3e:c3:5e:bd:81:08:49:3b:ab:59:68:e3:50:27: 2d:ab:5d:b0:a3:c2:13:88:06:b1:de:4d:5b:ca:c3: 7e:a0:2b:13:54:e4:ec:b6:f3:e0:57:37:73:1d:96: a4:76:1f:dd:57:5c:8d:5f:f5:d6:23:00:31:af:03: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:BF:D9:12:57:85:F6:DF:DB:CE:7C:67:F7:7D:A5:CA:62:02:C8 X509v3 Authority Key Identifier: keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:27:eb:c7:98:e6:ab:d2:7a:d8:04:d7:8c:4b:fb:2f:97:92: cf:28:c0:3c:e2:f0:dc:8e:9b:aa:8d:f8:18:59:40:ff:d6:b9: ac:9b:23:19:38:1e:71:41:0f:4f:ce:99:8a:51:2b:39:91:ac: 39:40:e5:61:0d:d4:d0:cc:e7:f4:3f:66:6a:00:cd:15:32:eb: c0:43:53:1a:b4:53:5b:0e:87:a7:65:6e:8f:0a:15:9e:cb:cd: 0e:0a:e9:2b:e2:9b:1d:55:34:65:cd:51:dc:fe:96:d5:0f:78: b7:65:b2:32:2c:b2:35:3e:99:f8:93:e7:18:73:4b:97:a6:28: d3:0e:2b:dc:4a:8f:aa:5f:df:f4:d5:8a:90:89:d0:34:e1:6a: fd:da:00:a9:a3:8f:e3:e6:a9:5c:c0:45:b5:60:a8:59:5a:70: 09:e6:58:35:5a:a4:12:e0:83:7e:be:85:d3:4e:6b:d2:c0:1b: 24:d6:94:11:79:3a:88:df:cb:0d:ad:c1:c6:9e:43:ef:f3:bf: d0:38:f9:4a:f3:36:cd:55:e1:21:63:49:62:8e:17:6b:31:45: 5a:91:18:5f:d9:e6:9b:1f:90:78:93:50:eb:41:6b:c9:2c:e9: 2a:14:c6:1b:7a:a8:eb:fa:dd:96:87:68:93:b1:53:74:92:6d: e9:9a:1e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSccdfiadG09cKAHyqz+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm ZjE3M2YwHhcNMjUxMjIxMTkwMTI5WhcNMjUxMjIyMTkwMTI5WjAzMTEwLwYDVQQD Eyg0YjM0YmZkOTEyNTc4NWY2ZGZkYmNlN2M2N2Y3N2RhNWNhNjIwMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmNKhQxMtZnnfS7aNb3W7wBTjzD5 etL4hM3VqEbCwEq37kusnmWsFIiSv3vrzrm6umw1jUfZVaRQkcPgJmBqYNLwSFNG zvmMKxX0/GiLx1/G9HL45YU8DnviCwIPooVbQAx7a/U58J4kj5/HBxZrEHhJg+EH lohZVcoRMC9RCDdUAiYHipseKL1vVrfCnmLn/KN+AxVmhnAF+Fyanx0AzGaslZsh +vOf6m5f5bFNjr3nVVOXYfJ/4C5kk4EfFKmRkLUePsNevYEISTurWWjjUCctq12w o8ITiAax3k1bysN+oCsTVOTstvPgVzdzHZakdh/dV1yNX/XWIwAxrwO86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs0v9kSV4X239vOfGf3faXKYgLIMB8GA1UdIwQY MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADifrx5jm q9J62ATXjEv7L5eSzyjAPOLw3I6bqo34GFlA/9a5rJsjGTgecUEPT86ZilErOZGs OUDlYQ3U0Mzn9D9magDNFTLrwENTGrRTWw6Hp2VujwoVnsvNDgrpK+KbHVU0Zc1R 3P6W1Q94t2WyMiyyNT6Z+JPnGHNLl6Yo0w4r3EqPql/f9NWKkInQNOFq/doAqaOP 4+apXMBFtWCoWVpwCeZYNVqkEuCDfr6F005r0sAbJNaUEXk6iN/LDa3Bxp5D7/O/ 0Dj5SvM2zVXhIWNJYo4XazFFWpEYX9nmmx+QeJNQ60FrySzpKhTGG3qo6/rdlodo k7FTdJJt6ZoePw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:33:12 2025 by rpki-client