This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json) Hash identifier: slzpRuNSAPL3ElRDgjZqbqBzSr9RanlRapHXtdaizOM= Subject key identifier: DF:EE:E6:DF:ED:78:F0:E0:EE:D6:D5:A8:5F:72:49:8A:A9:5C:EA:25 Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Certificate serial: 019B73DA4772649068BA0094E31DEE361501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 10:00:43 +0000 Manifest this update: Wed 31 Dec 2025 10:00:43 +0000 Manifest next update: Thu 01 Jan 2026 10:00:43 +0000 Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=) 2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: EzowlFAnPOHpu/RDwI6fM+gr+HuRxjTohgsOSTwBe5E=) 3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:da:47:72:64:90:68:ba:00:94:e3:1d:ee:36:15:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Validity Not Before: Dec 31 10:00:43 2025 GMT Not After : Jan 1 10:00:43 2026 GMT Subject: CN=dfeee6dfed78f0e0eed6d5a85f72498aa95cea25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:4a:cb:bc:5e:b2:1a:eb:cc:71:0e:55:19: 46:0b:47:65:ff:5c:21:52:11:16:d5:5d:ac:fa:8c: 33:94:29:66:35:05:bc:9f:12:c7:08:81:7c:e2:77: 03:a5:1b:a8:72:ae:f8:e6:95:42:36:82:b7:6a:d1: c5:d8:99:74:97:68:17:51:fe:cb:57:ff:53:33:52: bc:fc:a0:2f:c1:e4:92:59:cc:91:3f:d5:1e:b7:bc: 62:47:db:6b:e1:28:04:cb:73:53:a6:10:d6:50:02: 5b:db:7a:1e:ae:94:d9:3b:20:53:fa:be:9d:69:af: a5:07:ef:f8:b0:e2:7e:7d:18:94:36:3f:10:dc:ce: 30:1f:6d:05:49:e8:fe:d2:b9:cb:9b:03:42:e2:2b: 01:8e:a4:c1:03:47:1f:68:be:39:d7:10:cd:6f:8d: d0:ad:68:8c:90:16:d8:6a:51:6b:20:25:a1:56:e2: 08:50:36:3d:92:01:7d:0e:1b:6c:70:4c:8e:bf:18: 58:77:e1:00:00:b1:dd:e0:1a:31:99:69:c0:57:b4: 70:d0:77:77:6b:7c:c5:a1:83:8f:c2:16:94:bd:1f: 83:a9:0b:97:9a:fe:3e:0a:5b:13:86:3a:f1:74:fe: 71:0a:2e:d1:3a:09:73:54:6c:0b:cf:7c:2a:09:6e: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:E6:DF:ED:78:F0:E0:EE:D6:D5:A8:5F:72:49:8A:A9:5C:EA:25 X509v3 Authority Key Identifier: keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f3:1a:91:89:48:26:9b:d1:71:3a:d8:e4:61:29:ca:ca:af: ab:22:65:42:07:ad:82:9e:0c:bd:9a:2c:02:18:e2:46:92:16: 08:92:95:32:06:56:f2:51:0b:40:eb:b1:2c:ba:51:b0:25:a4: c3:45:06:9d:d1:99:ab:3d:de:b5:5b:79:60:8c:c4:9c:af:26: f1:91:8c:6a:75:5c:11:25:b4:7a:e2:15:e5:20:bd:86:d1:ff: 35:82:35:2f:2c:5c:43:81:e9:61:b6:9e:99:19:2c:4f:c9:1d: 4b:f3:ea:62:b7:d4:34:50:fa:60:3d:77:f4:40:b8:fe:99:01: 5e:3c:b8:ef:6a:c4:d9:fd:12:d3:79:a9:7b:30:d8:fc:9c:5b: 30:8d:a0:96:54:de:ba:bb:33:74:a8:78:52:e1:54:82:8c:45: 56:c2:70:e6:8d:83:e2:0b:10:c2:55:bb:94:39:a1:52:64:1d: aa:7f:ec:3e:f4:96:b1:4b:ce:38:36:58:07:66:23:f0:72:cc: df:b3:19:6d:37:95:73:f3:67:9e:1f:f8:20:2a:25:b9:92:73: b8:85:ea:9e:25:f0:29:06:73:b7:8b:dd:64:86:3d:e4:4a:26: f1:b3:7c:26:5d:fc:2f:0d:74:94:4b:91:7a:96:6b:3d:8b:23: 8d:a7:46:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtz2kdyZJBougCU4x3uNhUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0 NTVhNjgwHhcNMjUxMjMxMTAwMDQzWhcNMjYwMTAxMTAwMDQzWjAzMTEwLwYDVQQD EyhkZmVlZTZkZmVkNzhmMGUwZWVkNmQ1YTg1ZjcyNDk4YWE5NWNlYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu9Ky7xeshrrzHEOVRlGC0dl/1wh UhEW1V2s+owzlClmNQW8nxLHCIF84ncDpRuocq745pVCNoK3atHF2Jl0l2gXUf7L V/9TM1K8/KAvweSSWcyRP9Uet7xiR9tr4SgEy3NTphDWUAJb23oerpTZOyBT+r6d aa+lB+/4sOJ+fRiUNj8Q3M4wH20FSej+0rnLmwNC4isBjqTBA0cfaL451xDNb43Q rWiMkBbYalFrICWhVuIIUDY9kgF9DhtscEyOvxhYd+EAALHd4BoxmWnAV7Rw0Hd3 a3zFoYOPwhaUvR+DqQuXmv4+ClsThjrxdP5xCi7ROglzVGwLz3wqCW7xJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/u5t/tePDg7tbVqF9ySYqpXOolMB8GA1UdIwQY MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt MWMyNzU4NjUxZWZhLzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPMakYlI JpvRcTrY5GEpysqvqyJlQgetgp4MvZosAhjiRpIWCJKVMgZW8lELQOuxLLpRsCWk w0UGndGZqz3etVt5YIzEnK8m8ZGManVcESW0euIV5SC9htH/NYI1LyxcQ4HpYbae mRksT8kdS/PqYrfUNFD6YD139EC4/pkBXjy472rE2f0S03mpezDY/JxbMI2gllTe urszdKh4UuFUgoxFVsJw5o2D4gsQwlW7lDmhUmQdqn/sPvSWsUvOODZYB2Yj8HLM 37MZbTeVc/Nnnh/4IColuZJzuIXqniXwKQZzt4vdZIY95Eom8bN8Jl38Lw10lEuR epZrPYsjjadGGw== -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:01 2025 by rpki-client