This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json) Hash identifier: +PxVqY2TsLr8Gj5b/+seZc5zayKMIb17E3LSGy5ikxY= Subject key identifier: E4:60:78:2F:23:FC:3A:A6:31:B7:E1:5D:54:3C:4F:EE:24:AF:67:C0 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019B6768E0959EFAB39EDD5229D1BFD3ADB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft Manifest number: 17B0 Signing time: Mon 29 Dec 2025 00:01:25 +0000 Manifest this update: Mon 29 Dec 2025 00:01:25 +0000 Manifest next update: Tue 30 Dec 2025 00:01:25 +0000 Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: H3cXYm9RAgKIbj22ns1WsnqxmaJi2IFmec9TzhKdTjE=) 2: Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa (hash: 1KviszHGUWXOr/tWRch996CmVk/jhxQWF3ZbHboz1x0=) 3: TVdMvWqw1htszUYNzjNbJCLoB5E.roa (hash: foQV6nzx0p2Jf/6zVQhbgSh2HWXGgIdVnlGoTKdrM+4=) 4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:e0:95:9e:fa:b3:9e:dd:52:29:d1:bf:d3:ad:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Dec 29 00:01:25 2025 GMT Not After : Dec 30 00:01:25 2025 GMT Subject: CN=e460782f23fc3aa631b7e15d543c4fee24af67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:a3:a0:a3:48:8c:b8:09:85:68:6f:41:ed: 96:ba:b5:62:c6:7d:7f:07:8f:d7:5e:44:1f:3d:a4: 1d:13:b0:e2:f3:03:d0:bf:d7:ec:25:cd:4e:88:13: 57:67:ef:12:33:f9:d4:bc:b2:0c:3f:a4:5c:ee:b7: 64:fb:0f:30:a8:1a:c4:45:52:bd:0a:61:07:fa:55: ea:6c:d1:ba:0f:90:e4:5c:32:8f:a1:21:fd:99:bb: 5c:1c:df:ee:a7:04:14:35:49:b8:0f:d2:60:25:ce: d0:b8:0b:84:d7:77:ca:07:a0:69:db:9c:9e:18:bc: be:e0:cf:4e:7c:c2:85:8b:f2:f2:15:65:15:dd:18: e2:54:0d:41:88:48:47:a5:3e:1f:55:05:63:7a:9b: e5:cf:f2:ea:55:ee:d2:89:4d:84:2b:97:9e:ac:13: c7:39:fa:5e:24:90:d1:dc:e8:f8:62:94:1b:25:91: 8c:b5:8d:12:8a:db:c7:83:18:e7:f6:99:dc:c4:60: d2:83:c2:31:f5:dd:f0:3d:09:ed:7a:b5:1e:94:2a: f1:47:b0:d9:ab:47:6a:b9:98:38:a6:94:b0:be:43: 8e:30:0e:27:9d:38:02:40:39:fc:e4:33:24:53:ac: 54:37:59:7c:78:55:8d:d4:98:86:dc:d8:2b:82:3b: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:78:2F:23:FC:3A:A6:31:B7:E1:5D:54:3C:4F:EE:24:AF:67:C0 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:67:84:0e:4d:01:8b:3a:5c:fb:4d:16:bd:c8:70:b0:b1:8b: 1f:81:6d:43:53:4f:2a:31:16:3c:c1:82:35:73:7a:db:56:73: 2e:a6:9e:2e:6f:59:58:82:57:b7:af:a6:9b:2b:fa:1a:cc:29: 8d:a1:0c:70:08:e7:66:05:6e:ca:96:a7:23:30:9e:d4:53:bf: ec:fc:99:9e:54:f6:65:a2:d0:a4:5e:36:e2:f6:be:e5:d8:49: e5:b4:53:06:48:99:5a:d7:b8:34:ff:f3:23:a1:49:bf:59:92: d7:75:bb:35:d8:6f:c2:d4:08:6e:ec:d3:76:34:d1:ae:6c:0b: bb:eb:99:24:92:69:e1:2b:c6:c8:fe:6f:62:00:66:b7:d9:3e: 25:b9:3c:c2:97:dd:6a:87:09:ec:8e:a7:88:38:57:10:98:a0: bf:80:07:29:a4:bc:33:2d:c6:c1:40:a5:8a:76:61:cf:72:95: 47:e5:5a:c1:b1:c4:a7:e8:3b:13:02:10:b6:a4:9e:3d:ee:fd: 95:fd:53:54:86:ef:91:4b:f9:42:ab:32:8e:39:a0:6a:3c:b8: ed:5e:ec:70:7b:f0:0d:f7:31:7c:21:be:fa:6d:81:ba:c5:3d: 0c:c4:fb:27:76:80:19:f8:ec:b6:ed:29:cc:a3:72:8e:9f:17: b2:ce:34:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaOCVnvqznt1SKdG/0620MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjUxMjI5MDAwMTI1WhcNMjUxMjMwMDAwMTI1WjAzMTEwLwYDVQQD EyhlNDYwNzgyZjIzZmMzYWE2MzFiN2UxNWQ1NDNjNGZlZTI0YWY2N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyKjoKNIjLgJhWhvQe2WurVixn1/ B4/XXkQfPaQdE7Di8wPQv9fsJc1OiBNXZ+8SM/nUvLIMP6Rc7rdk+w8wqBrERVK9 CmEH+lXqbNG6D5DkXDKPoSH9mbtcHN/upwQUNUm4D9JgJc7QuAuE13fKB6Bp25ye GLy+4M9OfMKFi/LyFWUV3RjiVA1BiEhHpT4fVQVjepvlz/LqVe7SiU2EK5eerBPH OfpeJJDR3Oj4YpQbJZGMtY0SitvHgxjn9pncxGDSg8Ix9d3wPQnterUelCrxR7DZ q0dquZg4ppSwvkOOMA4nnTgCQDn85DMkU6xUN1l8eFWN1JiG3NgrgjuusQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORgeC8j/DqmMbfhXVQ8T+4kr2fAMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGeEDk0B izpc+00WvchwsLGLH4FtQ1NPKjEWPMGCNXN621ZzLqaeLm9ZWIJXt6+mmyv6Gswp jaEMcAjnZgVuypanIzCe1FO/7PyZnlT2ZaLQpF424va+5dhJ5bRTBkiZWte4NP/z I6FJv1mS13W7NdhvwtQIbuzTdjTRrmwLu+uZJJJp4SvGyP5vYgBmt9k+Jbk8wpfd aocJ7I6niDhXEJigv4AHKaS8My3GwUClinZhz3KVR+VawbHEp+g7EwIQtqSePe79 lf1TVIbvkUv5Qqsyjjmgajy47V7scHvwDfcxfCG++m2BusU9DMT7J3aAGfjstu0p zKNyjp8Xss40xg== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:34 2025 by rpki-client