This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json) Hash identifier: VElgSteNPQp4JCZY+KaLeSYx/64YpmvFQLo0KtOLOy8= Subject key identifier: 8A:49:E0:CC:3E:F6:3B:8C:5E:A5:40:EE:A7:CB:E1:EF:F8:F7:0C:33 Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Certificate serial: 019B1FF46E48FB01DD4DCF6492BA1A245172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 03:01:11 +0000 Manifest this update: Mon 15 Dec 2025 03:01:11 +0000 Manifest next update: Tue 16 Dec 2025 03:01:11 +0000 Files and hashes: 1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: XJqSS7y2AYbyuadOjLrwOwF3BLSg1znhFsib93cMwz8=) 2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:6e:48:fb:01:dd:4d:cf:64:92:ba:1a:24:51:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2 Validity Not Before: Dec 15 03:01:11 2025 GMT Not After : Dec 16 03:01:11 2025 GMT Subject: CN=8a49e0cc3ef63b8c5ea540eea7cbe1eff8f70c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:f7:01:e2:23:57:b3:03:1a:ab:f1:0f:b0: fc:33:cb:c5:9c:3c:ba:7d:f2:fa:d3:f0:97:d7:1e: 92:8c:58:b8:bc:c3:03:14:93:94:5e:50:b1:cf:d4: 75:3c:09:53:1c:7a:a7:09:d1:8e:75:f0:6c:90:43: b1:3a:31:d3:f1:1e:b8:ee:ee:6d:cb:b1:65:b9:c2: ec:18:9c:97:ed:1e:f3:7a:47:48:f5:65:16:c6:8a: 12:a7:60:c8:28:d7:13:6f:fd:1a:77:d5:84:d4:eb: 84:f9:aa:f9:22:aa:e5:11:75:ef:89:2e:20:83:4f: 3b:11:60:95:40:04:ae:6c:c5:31:08:fa:eb:93:8c: 12:25:67:d6:83:f8:8e:35:d1:8f:33:dd:c7:a0:51: 12:cc:c1:65:2b:2b:bb:87:a2:7c:e8:13:f5:c0:73: 26:37:75:ff:d0:d4:db:cc:82:5c:16:59:46:16:6b: 41:0c:18:07:62:7b:ac:ab:7d:46:70:28:f3:a9:b0: 93:9e:cb:12:32:60:9e:ee:25:2b:6b:05:69:30:11: 43:c1:42:ed:94:0d:d9:2b:71:36:dd:aa:b0:b9:6d: 03:7a:57:36:d6:9f:7c:bc:e9:b6:40:45:1e:5e:38: 60:4f:d9:d8:d4:ff:45:d3:a2:e6:3b:4f:20:2a:14: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:E0:CC:3E:F6:3B:8C:5E:A5:40:EE:A7:CB:E1:EF:F8:F7:0C:33 X509v3 Authority Key Identifier: keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fb:95:cc:b8:68:aa:37:df:32:e3:28:11:5a:84:86:ff:40: de:4b:2e:fa:0c:3d:f8:3b:88:ab:29:66:ad:a4:f7:52:d1:bc: 31:07:03:3d:03:6f:45:7a:35:04:7e:d6:c2:97:25:23:69:5a: c4:4a:94:42:92:f4:c9:91:fd:25:14:4b:25:0d:b3:56:6c:cf: 19:49:ac:d6:a0:b9:95:e9:c9:ce:92:dd:48:d9:9c:7d:4d:ec: 7f:bc:c7:f5:4d:d9:9c:8e:18:2a:b4:50:45:f2:20:f4:30:da: be:d4:0b:3a:ef:f2:26:c9:b8:41:c4:09:1c:0b:d6:f0:0c:be: 3f:bd:ab:dc:23:fb:8f:5d:06:e4:aa:ec:4a:39:5a:40:b2:f2: 23:41:6a:e0:d1:0e:9e:de:b6:54:20:56:67:e8:df:43:57:ea: 73:40:83:a2:fb:fe:51:cb:f1:78:e8:50:6f:5a:a7:b0:da:5e: 8e:93:5d:db:fb:f5:3a:90:b9:e8:eb:ec:ff:2a:0a:30:cb:43: ec:82:59:84:6c:69:ed:a4:5b:18:51:24:8b:38:f4:0a:05:c2: c9:ad:32:a2:ec:a8:0f:e7:21:b3:26:9a:0f:50:87:62:66:03: d8:9a:01:ec:b7:8f:c4:a0:eb:df:8a:5b:4d:02:75:4a:2c:c2: 61:45:38:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9G5I+wHdTc9kkroaJFFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzQ3OWY0NTY0M2EyYjgyZTEwZGFiZjczZWZlZjc3MDNi MWUyZDIwHhcNMjUxMjE1MDMwMTExWhcNMjUxMjE2MDMwMTExWjAzMTEwLwYDVQQD Eyg4YTQ5ZTBjYzNlZjYzYjhjNWVhNTQwZWVhN2NiZTFlZmY4ZjcwYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7r3AeIjV7MDGqvxD7D8M8vFnDy6 ffL60/CX1x6SjFi4vMMDFJOUXlCxz9R1PAlTHHqnCdGOdfBskEOxOjHT8R647u5t y7FlucLsGJyX7R7zekdI9WUWxooSp2DIKNcTb/0ad9WE1OuE+ar5IqrlEXXviS4g g087EWCVQASubMUxCPrrk4wSJWfWg/iONdGPM93HoFESzMFlKyu7h6J86BP1wHMm N3X/0NTbzIJcFllGFmtBDBgHYnusq31GcCjzqbCTnssSMmCe7iUrawVpMBFDwULt lA3ZK3E23aqwuW0Delc21p98vOm2QEUeXjhgT9nY1P9F06LmO08gKhSe0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpJ4Mw+9juMXqVA7qfL4e/49wwzMB8GA1UdIwQY MBaAFC10efRWQ6K4LhDav3Pv73cDseLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYt MGZjM2ZkY2Y1OWFlLzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85ZGZlMWUtY2Q3NC00NzFlLTkxYmYtMGZjM2ZkY2Y1OWFl LzEvTFhSNTlGWkRvcmd1RU5xX2MtX3Zkd094NHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/uVzLho qjffMuMoEVqEhv9A3ksu+gw9+DuIqylmraT3UtG8MQcDPQNvRXo1BH7WwpclI2la xEqUQpL0yZH9JRRLJQ2zVmzPGUms1qC5lenJzpLdSNmcfU3sf7zH9U3ZnI4YKrRQ RfIg9DDavtQLOu/yJsm4QcQJHAvW8Ay+P72r3CP7j10G5KrsSjlaQLLyI0Fq4NEO nt62VCBWZ+jfQ1fqc0CDovv+UcvxeOhQb1qnsNpejpNd2/v1OpC56Ovs/yoKMMtD 7IJZhGxp7aRbGFEkizj0CgXCya0youyoD+chsyaaD1CHYmYD2JoB7LePxKDr34pb TQJ1SizCYUU4VA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:26:20 2025 by rpki-client