This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json) Hash identifier: sz+ybxT9fS+5tnpI7yZsNDLRYUkLKVbgK/mWG+vdpmg= Subject key identifier: FE:E5:1D:28:F7:0E:0F:A0:5B:0F:7C:07:FD:7F:9F:7A:22:79:60:56 Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Certificate serial: 019B66564A34177462D479E5C47B6769F342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 19:01:29 +0000 Manifest this update: Sun 28 Dec 2025 19:01:29 +0000 Manifest next update: Mon 29 Dec 2025 19:01:29 +0000 Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=) 2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: jg1Wxi1JO7XvaNtoKYz5pH4+H5Bev3ucrIWAFVC9ZdI=) 3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:4a:34:17:74:62:d4:79:e5:c4:7b:67:69:f3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Validity Not Before: Dec 28 19:01:29 2025 GMT Not After : Dec 29 19:01:29 2025 GMT Subject: CN=fee51d28f70e0fa05b0f7c07fd7f9f7a22796056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:9a:20:14:45:56:54:be:1a:81:ad:3f:3e: b1:55:46:a9:84:e9:30:f3:16:86:1a:b9:51:73:41: 1e:6a:64:bd:d1:4d:f6:c3:7d:cb:74:2a:a0:99:b6: b3:cc:02:c4:6e:6e:bd:85:e4:ed:6b:01:28:cb:9f: 51:cd:c7:d7:97:b7:8b:f6:9d:3f:8f:ad:f1:b7:18: 44:a8:43:73:1a:e7:9c:81:a6:03:94:f8:78:67:d2: 49:fd:b3:bd:11:b2:21:35:ef:46:ad:6b:c9:61:35: ad:ea:b7:89:4b:41:70:00:a0:b6:a1:b5:20:c8:13: c8:1d:ab:d9:52:d0:fb:e3:0f:a2:f3:ec:00:c6:47: 36:85:bc:a5:42:55:3b:26:c9:20:2b:3e:07:3b:f1: 0f:ef:68:cf:23:5b:23:47:14:de:59:4c:df:94:78: 0c:73:30:b9:20:ff:c2:cc:b3:f6:47:4e:ce:46:5a: 38:e6:4c:09:a0:b3:f1:02:f0:28:54:79:6c:bc:07: f2:30:6b:4f:01:1a:c0:65:84:4d:fc:6e:0f:f0:80: 5a:0a:2b:95:2e:e1:82:0f:10:ee:0d:9e:89:33:46: 38:d7:44:70:10:17:e1:c0:51:ee:68:88:e4:18:71: a4:28:32:28:57:d7:ce:be:b3:a6:e9:16:28:12:07: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E5:1D:28:F7:0E:0F:A0:5B:0F:7C:07:FD:7F:9F:7A:22:79:60:56 X509v3 Authority Key Identifier: keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:e6:d2:bd:8c:c1:a0:43:11:b4:71:cd:81:86:6a:a1:01: 67:5c:b1:26:cb:f0:e7:b7:1c:45:b7:6a:6b:73:68:45:8b:38: 94:83:cd:ef:8d:70:db:36:6a:f0:99:77:ba:0e:1a:55:a0:1f: 2c:62:aa:9e:b3:c9:a4:67:ee:b2:48:03:81:71:9f:67:55:88: 05:dd:c3:3b:a5:d5:38:17:17:a5:a0:c0:2a:91:9c:8b:3a:12: b2:39:4d:53:16:9d:ef:81:e7:1c:d7:67:c1:ec:62:57:b1:97: c5:a0:99:fe:b5:da:fa:ea:a4:d6:c1:6c:a3:df:be:a4:da:c1: a5:19:d1:e1:58:fd:ad:98:3d:34:0a:0b:a4:ba:ad:f4:b2:fa: 32:ce:ac:a3:2b:0e:8b:9a:97:e3:ee:68:0a:05:c5:9b:e6:65: 4d:28:4f:7e:a3:49:60:59:3c:1f:43:e5:cf:84:97:d1:29:cd: 7e:68:00:3d:09:95:cf:ea:8d:b5:b6:e2:98:d6:db:10:16:71: c5:a4:f7:8d:31:12:fe:01:77:ee:d8:6a:04:3b:91:c9:3b:01: 89:92:c2:e2:04:7e:f3:1d:34:f3:a4:c5:81:c0:74:86:91:a1: 19:a5:6a:8c:94:c0:22:a7:48:d5:99:63:20:58:f5:24:53:c5: 52:03:e2:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVko0F3Ri1HnlxHtnafNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0 NTVhNjgwHhcNMjUxMjI4MTkwMTI5WhcNMjUxMjI5MTkwMTI5WjAzMTEwLwYDVQQD EyhmZWU1MWQyOGY3MGUwZmEwNWIwZjdjMDdmZDdmOWY3YTIyNzk2MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYOaIBRFVlS+GoGtPz6xVUaphOkw 8xaGGrlRc0EeamS90U32w33LdCqgmbazzALEbm69heTtawEoy59RzcfXl7eL9p0/ j63xtxhEqENzGuecgaYDlPh4Z9JJ/bO9EbIhNe9GrWvJYTWt6reJS0FwAKC2obUg yBPIHavZUtD74w+i8+wAxkc2hbylQlU7JskgKz4HO/EP72jPI1sjRxTeWUzflHgM czC5IP/CzLP2R07ORlo45kwJoLPxAvAoVHlsvAfyMGtPARrAZYRN/G4P8IBaCiuV LuGCDxDuDZ6JM0Y410RwEBfhwFHuaIjkGHGkKDIoV9fOvrOm6RYoEgf51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7lHSj3Dg+gWw98B/1/n3oieWBWMB8GA1UdIwQY MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt MWMyNzU4NjUxZWZhLzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlO/m0r2M waBDEbRxzYGGaqEBZ1yxJsvw57ccRbdqa3NoRYs4lIPN741w2zZq8Jl3ug4aVaAf LGKqnrPJpGfuskgDgXGfZ1WIBd3DO6XVOBcXpaDAKpGcizoSsjlNUxad74HnHNdn wexiV7GXxaCZ/rXa+uqk1sFso9++pNrBpRnR4Vj9rZg9NAoLpLqt9LL6Ms6soysO i5qX4+5oCgXFm+ZlTShPfqNJYFk8H0Plz4SX0SnNfmgAPQmVz+qNtbbimNbbEBZx xaT3jTES/gF37thqBDuRyTsBiZLC4gR+8x0086TFgcB0hpGhGaVqjJTAIqdI1Zlj IFj1JFPFUgPiZg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:13 2025 by rpki-client