This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json) Hash identifier: 1q3ErKxcEYUiEP3+q1UJKYAG6Tzr5xQHUfE8Dl4MjFc= Subject key identifier: E9:3F:FF:8E:2A:99:60:84:49:BC:38:0C:E9:5F:72:AB:7F:61:4F:8D Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Certificate serial: 019B6EEA81FD23BE4AF39E938FAA0A5AF4A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft Manifest number: 0104 Signing time: Tue 30 Dec 2025 11:00:20 +0000 Manifest this update: Tue 30 Dec 2025 11:00:20 +0000 Manifest next update: Wed 31 Dec 2025 11:00:20 +0000 Files and hashes: 1: 0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa (hash: 0SPwTYDJNOUbIi7e9SuGgIE4NWQBIuLTmCxHMDmcXBc=) 2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: JlxYR6erXrOyieVh4+dlUfJphnCD7qTlEV8dAiSt0Ts=) 3: Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa (hash: FQCHFVQrQ1NEC98r6LFXm4gOoSIAgwMQTWazYGx2XGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:81:fd:23:be:4a:f3:9e:93:8f:aa:0a:5a:f4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Validity Not Before: Dec 30 11:00:20 2025 GMT Not After : Dec 31 11:00:20 2025 GMT Subject: CN=e93fff8e2a99608449bc380ce95f72ab7f614f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:ab:e9:73:ca:e9:28:d4:23:bd:0d:90:73: d6:06:c9:be:23:44:45:4f:58:d3:98:e9:09:58:f4: 53:97:32:2f:58:80:b8:9d:16:08:62:10:4f:c2:04: 10:eb:cd:50:ce:c3:76:e7:ab:d6:0e:19:97:57:1c: 25:53:fb:37:b0:46:6e:f1:c8:6e:f8:0a:39:66:80: c9:c2:f1:92:37:f8:c6:52:44:25:5d:6f:4b:c3:32: 61:34:fe:98:dd:d3:32:5e:ad:2d:a6:76:af:50:b4: ed:51:c4:c3:45:b9:1c:8f:13:5c:f8:c9:4c:c1:fb: 98:74:4d:fb:c2:76:22:da:a1:d0:58:64:9f:ac:e6: 96:c8:ca:f7:ea:3a:b1:6d:f7:2e:6d:cd:0d:ec:28: 13:b2:32:05:21:9f:e2:be:6e:0f:56:10:06:6a:ff: 4f:58:61:5c:69:6d:59:6a:e3:d6:5b:68:55:72:80: f1:54:42:26:93:fe:b5:31:d6:27:bb:b9:04:d1:3d: 23:09:49:ca:e2:aa:81:b3:ce:ac:b8:32:45:82:88: 45:f4:94:83:2f:7b:c5:29:af:ae:da:7c:f5:a4:7b: 13:9c:50:3e:96:ce:22:19:1b:78:a0:27:b7:a8:73: 84:d0:1b:4b:3c:7a:c7:c8:97:04:be:fb:b2:5d:62: 6a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3F:FF:8E:2A:99:60:84:49:BC:38:0C:E9:5F:72:AB:7F:61:4F:8D X509v3 Authority Key Identifier: keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c2:dc:18:8f:b7:fe:ee:86:e6:99:86:7f:93:27:de:5f:a2: 8c:97:7d:b8:d4:6c:88:63:ab:f4:bb:53:79:12:52:02:01:fd: fb:87:6a:77:de:6a:6d:6a:bc:38:57:ba:28:70:c0:b2:be:51: 95:d3:f0:74:c0:2e:d8:1f:ab:82:13:04:4b:54:e0:23:f1:91: b7:8a:d6:c7:be:8c:4d:19:03:3f:96:3e:47:22:f5:87:96:de: 89:fd:73:17:e6:b3:cd:d5:65:9c:3a:f8:e6:36:fd:37:1d:b4: 58:f2:8f:61:bb:61:d4:84:ca:ee:33:2d:08:ac:de:cd:ce:6a: bc:5b:b0:f6:47:14:3d:53:8d:cc:c2:ad:13:86:ac:e4:a5:ef: 6d:0c:fb:ba:6f:99:d2:fe:3e:31:57:0f:37:c4:c6:90:a9:74: 28:76:b8:e5:c1:40:43:11:67:61:5d:5a:ad:14:bc:a1:da:2b: 31:a1:06:7d:99:88:60:64:e3:90:73:29:66:db:57:20:c7:22: e9:d3:db:07:ad:97:5e:d1:2e:0a:8c:a9:45:c3:66:d2:31:5f: ab:4e:6e:39:47:ec:83:d4:c8:32:50:50:78:86:76:39:91:c6: f5:cf:ae:ad:bb:f9:d8:43:e4:b6:92:db:c7:0d:02:cd:40:33: bb:e9:3d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6oH9I75K856Tj6oKWvSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4 MDc1ZDcwHhcNMjUxMjMwMTEwMDIwWhcNMjUxMjMxMTEwMDIwWjAzMTEwLwYDVQQD EyhlOTNmZmY4ZTJhOTk2MDg0NDliYzM4MGNlOTVmNzJhYjdmNjE0ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9mr6XPK6SjUI70NkHPWBsm+I0RF T1jTmOkJWPRTlzIvWIC4nRYIYhBPwgQQ681QzsN256vWDhmXVxwlU/s3sEZu8chu +Ao5ZoDJwvGSN/jGUkQlXW9LwzJhNP6Y3dMyXq0tpnavULTtUcTDRbkcjxNc+MlM wfuYdE37wnYi2qHQWGSfrOaWyMr36jqxbfcubc0N7CgTsjIFIZ/ivm4PVhAGav9P WGFcaW1ZauPWW2hVcoDxVEImk/61MdYnu7kE0T0jCUnK4qqBs86suDJFgohF9JSD L3vFKa+u2nz1pHsTnFA+ls4iGRt4oCe3qHOE0BtLPHrHyJcEvvuyXWJq4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk//44qmWCESbw4DOlfcqt/YU+NMB8GA1UdIwQY MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt ZjY1Njc1NTI2MDVlLzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicLcGI+3 /u6G5pmGf5Mn3l+ijJd9uNRsiGOr9LtTeRJSAgH9+4dqd95qbWq8OFe6KHDAsr5R ldPwdMAu2B+rghMES1TgI/GRt4rWx76MTRkDP5Y+RyL1h5beif1zF+azzdVlnDr4 5jb9Nx20WPKPYbth1ITK7jMtCKzezc5qvFuw9kcUPVONzMKtE4as5KXvbQz7um+Z 0v4+MVcPN8TGkKl0KHa45cFAQxFnYV1arRS8odorMaEGfZmIYGTjkHMpZttXIMci 6dPbB62XXtEuCoypRcNm0jFfq05uOUfsg9TIMlBQeIZ2OZHG9c+urbv52EPktpLb xw0CzUAzu+k93A== -----END CERTIFICATE-----Generated at Tue Dec 30 16:09:16 2025 by rpki-client