This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json) Hash identifier: H6zLNkqD/u5SU3xVmJNGGPcCJW7yw7nDUYjGUffde74= Subject key identifier: 6D:62:83:BE:07:20:10:13:13:C8:36:79:79:FA:1E:82:2F:79:E4:A1 Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Certificate serial: 019B4392D3EEF47A93D0109524B4C9D927EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 01:00:54 +0000 Manifest this update: Mon 22 Dec 2025 01:00:54 +0000 Manifest next update: Tue 23 Dec 2025 01:00:54 +0000 Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=) 2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: pvyNKJH3Xe00zfpMJJyL2a8o8k6SCxZA47zoeiyyvbQ=) 3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:d3:ee:f4:7a:93:d0:10:95:24:b4:c9:d9:27:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Validity Not Before: Dec 22 01:00:54 2025 GMT Not After : Dec 23 01:00:54 2025 GMT Subject: CN=6d6283be0720101313c8367979fa1e822f79e4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:fa:c2:ec:8b:03:44:45:44:07:6c:52:49: bf:7b:b0:2a:ff:32:85:a1:88:ad:b2:10:98:2c:2b: b1:15:5f:37:7d:a9:e3:a6:d1:e5:a3:4a:01:d1:f7: 25:fa:06:01:02:3c:a6:47:20:1b:0b:78:e3:cb:ef: 8a:c1:40:43:09:a8:1a:1a:7d:4e:f9:13:68:f1:e3: 8d:ea:c9:cf:93:5d:0f:bc:3c:bb:65:e5:a2:80:34: d6:24:27:0c:e2:02:e5:cc:20:c8:e8:33:59:da:20: de:d3:fb:62:24:1c:8a:58:59:fb:dc:d9:d3:55:18: be:7e:8f:f4:a5:0a:36:85:21:06:c6:74:46:85:0a: 60:8b:da:8c:39:0c:54:0b:86:9e:c4:62:6d:7a:7b: 5b:36:d6:95:3c:50:05:48:5e:75:22:ec:87:dc:5f: c6:14:f9:38:b0:a0:e2:50:70:cd:67:fe:9b:ef:8f: 93:4c:58:7b:b5:52:eb:cf:c5:14:89:44:ee:4a:f4: 65:85:d5:e5:7a:15:58:be:ea:67:56:78:44:50:27: 02:5e:23:e4:ba:23:5c:48:31:d6:70:63:b2:cd:7d: 15:bc:7a:ef:05:29:3d:85:a2:a9:bf:6c:43:79:88: ca:9d:89:c1:65:9c:24:e3:31:a1:05:0d:1c:74:ae: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:83:BE:07:20:10:13:13:C8:36:79:79:FA:1E:82:2F:79:E4:A1 X509v3 Authority Key Identifier: keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:b2:04:a7:ae:38:08:97:d6:d7:25:c3:7e:58:ff:f4:50: 7d:eb:b0:e9:57:79:30:d6:7a:c9:56:a4:e7:0d:49:0b:2c:55: 00:c2:32:30:50:be:f8:df:fb:db:25:56:98:d6:6c:63:95:65: 0b:d5:a7:52:1c:e1:8c:96:b7:03:d1:99:4a:80:ff:2e:6a:8b: 7d:f3:f9:ce:01:d1:f2:44:f6:ea:30:ce:c8:30:03:51:1a:d1: c8:4c:54:97:3f:96:86:e3:37:bd:40:fb:8f:b3:92:ff:de:94: 1e:73:6d:37:8f:51:41:dd:1d:ec:d7:01:f3:51:e2:71:1f:5e: e2:e5:05:0f:84:70:44:35:b3:22:b6:ff:32:4e:89:ad:6f:81: bf:cb:00:f0:81:0b:c1:fd:ff:fe:4c:cd:1d:e1:b9:c5:57:88: 1d:79:bf:e9:ef:3a:7e:19:2e:f3:1e:f5:4c:f9:ff:29:9c:55: 05:ea:8b:21:ce:87:ce:74:9c:f1:02:92:ec:1e:58:c8:b6:b2: d1:8d:da:95:57:cb:47:e6:94:4b:56:ae:22:1a:98:37:c5:19: de:73:7d:11:09:e8:3c:d0:ed:d0:9a:0d:0d:d6:e8:f4:86:6a: b7:ab:bf:6a:e3:e4:c1:2b:7d:0d:0c:58:8a:4a:6b:ec:ed:aa: 0a:de:9e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDktPu9HqT0BCVJLTJ2SfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0 NTVhNjgwHhcNMjUxMjIyMDEwMDU0WhcNMjUxMjIzMDEwMDU0WjAzMTEwLwYDVQQD Eyg2ZDYyODNiZTA3MjAxMDEzMTNjODM2Nzk3OWZhMWU4MjJmNzllNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FP6wuyLA0RFRAdsUkm/e7Aq/zKF oYitshCYLCuxFV83fanjptHlo0oB0fcl+gYBAjymRyAbC3jjy++KwUBDCagaGn1O +RNo8eON6snPk10PvDy7ZeWigDTWJCcM4gLlzCDI6DNZ2iDe0/tiJByKWFn73NnT VRi+fo/0pQo2hSEGxnRGhQpgi9qMOQxUC4aexGJtentbNtaVPFAFSF51IuyH3F/G FPk4sKDiUHDNZ/6b74+TTFh7tVLrz8UUiUTuSvRlhdXlehVYvupnVnhEUCcCXiPk uiNcSDHWcGOyzX0VvHrvBSk9haKpv2xDeYjKnYnBZZwk4zGhBQ0cdK7J8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1ig74HIBATE8g2eXn6HoIveeShMB8GA1UdIwQY MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt MWMyNzU4NjUxZWZhLzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvSyBKeu OAiX1tclw35Y//RQfeuw6Vd5MNZ6yVak5w1JCyxVAMIyMFC++N/72yVWmNZsY5Vl C9WnUhzhjJa3A9GZSoD/LmqLffP5zgHR8kT26jDOyDADURrRyExUlz+WhuM3vUD7 j7OS/96UHnNtN49RQd0d7NcB81HicR9e4uUFD4RwRDWzIrb/Mk6JrW+Bv8sA8IEL wf3//kzNHeG5xVeIHXm/6e86fhku8x71TPn/KZxVBeqLIc6HznSc8QKS7B5YyLay 0Y3alVfLR+aUS1auIhqYN8UZ3nN9EQnoPNDt0JoNDdbo9IZqt6u/auPkwSt9DQxY ikpr7O2qCt6enw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:32 2025 by rpki-client