This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json) Hash identifier: Rno8i65FqeMNOvgs+ijRXpeGp16Uf5Nn/9rwvqhY7ng= Subject key identifier: 0C:6C:F5:8C:BC:10:50:17:E0:44:81:A6:E7:F4:B4:8A:02:12:E9:A6 Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd Certificate serial: 019B5229F4BD22B7A1FC49BCEDC1DAD742F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:39 +0000 Manifest this update: Wed 24 Dec 2025 21:00:39 +0000 Manifest next update: Thu 25 Dec 2025 21:00:39 +0000 Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=) 2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: HrjD4jY0X/SQdCPat/mw1e87PZ3XEdahgI2fwFYepDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:f4:bd:22:b7:a1:fc:49:bc:ed:c1:da:d7:42:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd Validity Not Before: Dec 24 21:00:39 2025 GMT Not After : Dec 25 21:00:39 2025 GMT Subject: CN=0c6cf58cbc105017e04481a6e7f4b48a0212e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:47:1f:c5:88:7b:4f:dd:c3:ee:9f:2e:97: 2a:4f:11:96:94:1a:a3:1a:85:13:db:84:04:14:6b: fc:20:2c:2a:39:73:75:5e:cc:24:08:92:aa:5d:5d: d0:8a:eb:db:bf:9d:02:a4:30:06:5e:4f:01:f7:c5: a0:4e:84:33:28:bc:19:59:c2:60:16:15:fe:e9:20: bd:93:bc:9b:1d:7e:70:b2:54:52:4e:7a:73:db:5f: 22:1e:1c:dd:8b:ee:c6:57:30:10:e6:9e:51:e4:d2: 46:e2:be:a6:86:7b:e2:59:f8:e6:00:d1:d7:e6:c8: 2e:b7:b5:59:32:de:06:a4:55:86:15:3d:ef:1f:1e: c4:02:9e:dd:ea:33:83:ca:e2:a4:87:37:aa:ea:2a: b6:1e:60:36:8e:fb:81:13:0e:84:49:a7:5f:e3:a3: 31:5d:95:92:e7:f5:f1:e9:7d:f5:8a:e1:80:84:f0: d9:7c:6a:90:f4:de:f7:85:10:84:de:68:bb:7e:f3: 93:68:b4:37:26:a4:91:d6:04:d5:6d:b3:39:2d:36: 43:6e:b3:19:11:60:7a:3b:80:b2:4e:35:e8:22:2b: 08:66:93:89:c8:cf:a8:c0:ea:a6:2d:86:8c:0e:22: ac:81:f9:e5:8f:0d:ca:8c:bf:16:15:02:6d:da:ca: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6C:F5:8C:BC:10:50:17:E0:44:81:A6:E7:F4:B4:8A:02:12:E9:A6 X509v3 Authority Key Identifier: keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:23:97:dd:da:13:ec:27:0b:b2:5e:da:df:4e:ee:75:4a:9d: c7:ca:38:0f:81:67:8f:ed:70:f1:5f:64:6a:48:fa:d7:da:5f: 03:dd:6d:a9:57:80:a8:a3:97:db:06:96:fb:b0:7e:09:0a:fd: 9b:61:98:7d:dd:48:25:c0:21:ee:1d:68:fc:75:4c:50:75:fa: 7b:da:47:af:2e:99:9f:0f:cc:04:04:77:f9:a8:c5:d9:be:1e: 10:0d:c7:07:c4:7e:25:02:9c:01:0d:9c:3e:af:90:e2:48:7d: dc:e6:5e:14:e6:7e:68:47:4f:bd:84:08:68:fd:b0:be:27:d2: 19:a7:e8:b5:bc:fc:a2:2d:70:da:52:97:99:49:e9:a0:24:ef: 98:2a:5b:1c:19:64:ba:35:da:f8:b2:22:da:c8:5f:98:7d:c5: 83:35:3a:1a:f2:b3:b9:13:97:65:ea:5e:b8:80:b6:4e:7b:7c: 09:46:97:e4:27:01:91:98:0c:28:40:bd:da:63:ce:f4:15:c6: d9:53:f0:85:66:83:cd:21:80:c3:6c:62:1b:82:96:c6:07:d3: db:d7:12:5d:1a:ea:29:c3:f9:ba:5d:41:71:c1:17:e3:47:47: 1f:e3:37:b0:e4:c3:21:c9:f6:f9:2a:b1:ec:46:31:9a:1e:63: 2e:83:1a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKfS9Ireh/Em87cHa10L2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWJkNzQ5MDc0ZjZmOTc3MjY1YTFkMDZjM2IxZDkzYjFk MzU4Y2QwHhcNMjUxMjI0MjEwMDM5WhcNMjUxMjI1MjEwMDM5WjAzMTEwLwYDVQQD EygwYzZjZjU4Y2JjMTA1MDE3ZTA0NDgxYTZlN2Y0YjQ4YTAyMTJlOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdpHH8WIe0/dw+6fLpcqTxGWlBqj GoUT24QEFGv8ICwqOXN1XswkCJKqXV3Qiuvbv50CpDAGXk8B98WgToQzKLwZWcJg FhX+6SC9k7ybHX5wslRSTnpz218iHhzdi+7GVzAQ5p5R5NJG4r6mhnviWfjmANHX 5sgut7VZMt4GpFWGFT3vHx7EAp7d6jODyuKkhzeq6iq2HmA2jvuBEw6ESadf46Mx XZWS5/Xx6X31iuGAhPDZfGqQ9N73hRCE3mi7fvOTaLQ3JqSR1gTVbbM5LTZDbrMZ EWB6O4CyTjXoIisIZpOJyM+owOqmLYaMDiKsgfnljw3KjL8WFQJt2sp0rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxs9Yy8EFAX4ESBpuf0tIoCEummMB8GA1UdIwQY MBaAFC8b10kHT2+XcmWh0Gw7HZOx01jNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEt NWZhMjg3ZDU0NWU4LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEtNWZhMjg3ZDU0NWU4 LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSOX3doT 7CcLsl7a307udUqdx8o4D4Fnj+1w8V9kakj619pfA91tqVeAqKOX2waW+7B+CQr9 m2GYfd1IJcAh7h1o/HVMUHX6e9pHry6Znw/MBAR3+ajF2b4eEA3HB8R+JQKcAQ2c Pq+Q4kh93OZeFOZ+aEdPvYQIaP2wvifSGafotbz8oi1w2lKXmUnpoCTvmCpbHBlk ujXa+LIi2shfmH3FgzU6GvKzuROXZepeuIC2Tnt8CUaX5CcBkZgMKEC92mPO9BXG 2VPwhWaDzSGAw2xiG4KWxgfT29cSXRrqKcP5ul1BccEX40dHH+M3sOTDIcn2+Sqx 7EYxmh5jLoMauA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:11:50 2025 by rpki-client