This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft File: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft (raw, json) Hash identifier: oyla2OFqTw4Gysovlfp8SqqdzoQUl5fsm+pJUVchjus= Subject key identifier: 42:6F:E8:BF:35:E3:A1:AF:AC:8E:11:6E:13:5E:4D:87:80:18:55:BA Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Certificate serial: 019B0F6E9CB8E2AF9F95BF02E7AF777DC5C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft Manifest number: 0E57 Signing time: Thu 11 Dec 2025 22:01:05 +0000 Manifest this update: Thu 11 Dec 2025 22:01:05 +0000 Manifest next update: Fri 12 Dec 2025 22:01:05 +0000 Files and hashes: 1: LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl (hash: 1ILgkor0XL6dabeGRyWFhnCQAJiCtVDlPaG2L1yKLas=) 2: RfAA1xaR3Se-RvvvQKJJ2gMoa-w.roa (hash: ZjUwK6nsqDf3RG0U3GrfbUxp0iL0zaNbRBEGccx3Ch0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:9c:b8:e2:af:9f:95:bf:02:e7:af:77:7d:c5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711 Validity Not Before: Dec 11 22:01:05 2025 GMT Not After : Dec 12 22:01:05 2025 GMT Subject: CN=426fe8bf35e3a1afac8e116e135e4d87801855ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:39:92:99:1b:b9:2b:c2:ac:23:ee:75:63: cf:77:c5:1b:90:f6:a2:25:d7:31:7b:6c:fb:2f:2a: ee:57:f4:b0:72:7a:48:cd:af:92:94:7a:60:65:e0: 08:b5:b2:ce:f0:71:c9:61:78:5d:22:c7:7a:f5:08: 9b:1d:53:3f:f8:80:d5:7d:be:c2:1f:67:5e:0e:5e: 28:b6:f6:a9:4e:15:6b:9b:05:ba:bc:49:62:b1:37: 6f:88:b0:7e:2f:17:2a:d7:1f:64:cf:ac:49:98:36: 63:9a:0b:97:69:a8:65:43:b8:38:a8:35:05:07:72: 5f:ca:9d:8c:9f:be:1a:6f:2d:cb:bf:cb:4f:65:51: 31:8b:45:69:49:77:4d:68:84:72:5d:0d:f3:fe:c7: 8e:b5:38:4e:56:dd:9b:d4:32:e3:24:f4:04:95:29: 3c:8a:a9:37:a8:e2:d7:78:f5:db:0a:80:7f:c8:be: 32:04:b3:11:f7:5f:46:ce:e1:ea:27:4f:8f:45:da: e3:3d:50:7e:87:f5:0f:9d:16:ad:e5:e1:a8:d2:a5: 11:35:3a:05:3f:2e:9a:80:c3:32:a1:65:1d:25:aa: b4:94:05:4d:da:4d:74:13:26:83:7e:3e:9a:93:16: 97:fb:22:55:a5:26:f1:d9:30:b2:64:63:d8:3d:ea: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:E8:BF:35:E3:A1:AF:AC:8E:11:6E:13:5E:4D:87:80:18:55:BA X509v3 Authority Key Identifier: keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:3a:3e:6b:d1:7e:01:e6:2a:3b:6b:12:7d:3e:9f:e3:6a: 16:26:34:5d:83:95:0c:48:55:8d:e1:06:1c:9f:70:50:89:1c: 1d:9f:86:32:fb:08:28:88:85:02:14:9a:48:25:14:07:43:38: c1:5d:29:e7:96:6c:80:da:d1:0b:47:b1:15:62:90:96:f5:ef: 7e:40:b4:c9:43:30:89:96:fc:2d:46:de:fb:f5:8d:2d:66:92: f5:ec:d7:18:64:a9:58:bd:fd:51:33:cf:b6:12:49:b8:16:07: 38:f2:b6:ea:85:32:a8:59:b2:2f:a6:5e:10:b1:1c:26:76:39: 97:96:fd:08:a7:95:70:3a:f5:8c:b6:1f:0d:01:59:66:7c:4c: 61:de:7f:56:d8:c7:f3:f8:c5:6f:ce:46:54:95:65:95:20:7b: ff:77:0e:93:ac:22:9e:73:a6:d1:51:f1:e8:82:59:b2:a3:db: 98:c1:36:f6:76:15:63:dd:40:e2:ae:a1:cc:2f:b5:5d:a9:91: 4a:8a:cf:de:2d:65:37:11:49:d1:0a:69:1b:25:e8:b6:e4:fb: dc:08:fe:e7:1c:25:66:cf:d0:52:58:84:07:33:85:b4:ec:5e: 22:c6:6c:65:33:0e:ae:09:24:ec:e0:79:b8:b8:8c:d9:99:e4: f3:ed:f7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbpy44q+flb8C5693fcXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNWM1NzFiZjliZmE3ZTIxYmM3ZTMzOWY5YjhlZWJlMDYx MzM3MTEwHhcNMjUxMjExMjIwMTA1WhcNMjUxMjEyMjIwMTA1WjAzMTEwLwYDVQQD Eyg0MjZmZThiZjM1ZTNhMWFmYWM4ZTExNmUxMzVlNGQ4NzgwMTg1NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ts5kpkbuSvCrCPudWPPd8UbkPai Jdcxe2z7LyruV/SwcnpIza+SlHpgZeAItbLO8HHJYXhdIsd69QibHVM/+IDVfb7C H2deDl4otvapThVrmwW6vElisTdviLB+Lxcq1x9kz6xJmDZjmguXaahlQ7g4qDUF B3Jfyp2Mn74aby3Lv8tPZVExi0VpSXdNaIRyXQ3z/seOtThOVt2b1DLjJPQElSk8 iqk3qOLXePXbCoB/yL4yBLMR919GzuHqJ0+PRdrjPVB+h/UPnRat5eGo0qURNToF Py6agMMyoWUdJaq0lAVN2k10EyaDfj6akxaX+yJVpSbx2TCyZGPYPepd6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJv6L8146GvrI4RbhNeTYeAGFW6MB8GA1UdIwQY MBaAFC5cVxv5v6fiG8fjOfm47r4GEzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjct ZDYwOTJhOWZiZTZjLzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85NzlkMjAtMmZmMi00ZjkyLTljMjctZDYwOTJhOWZiZTZj LzEvTGx4WEdfbV9wLUlieC1NNS1ianV2Z1lUTnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm46PmvR fgHmKjtrEn0+n+NqFiY0XYOVDEhVjeEGHJ9wUIkcHZ+GMvsIKIiFAhSaSCUUB0M4 wV0p55ZsgNrRC0exFWKQlvXvfkC0yUMwiZb8LUbe+/WNLWaS9ezXGGSpWL39UTPP thJJuBYHOPK26oUyqFmyL6ZeELEcJnY5l5b9CKeVcDr1jLYfDQFZZnxMYd5/VtjH 8/jFb85GVJVllSB7/3cOk6winnOm0VHx6IJZsqPbmME29nYVY91A4q6hzC+1XamR SorP3i1lNxFJ0QppGyXotuT73Aj+5xwlZs/QUliEBzOFtOxeIsZsZTMOrgkk7OB5 uLiM2Znk8+33NA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:42 2025 by rpki-client