This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json) Hash identifier: R/Sxr+wlqwGEjqvAmBNF38PVE3lCOsctnmukiExedrM= Subject key identifier: 55:F9:62:7D:A5:9B:E0:77:B1:6A:DD:CE:F3:E9:AC:60:0E:D4:A1:6F Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019B1193ABB3F7F760FA364271F2D9470833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft Manifest number: 1139 Signing time: Fri 12 Dec 2025 08:00:48 +0000 Manifest this update: Fri 12 Dec 2025 08:00:48 +0000 Manifest next update: Sat 13 Dec 2025 08:00:48 +0000 Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=) 2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: jPycmma7Eqs5qYjnKHD3At9uDAbDaXeHSlczGFpsGq8=) 3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=) 4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:ab:b3:f7:f7:60:fa:36:42:71:f2:d9:47:08:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Dec 12 08:00:48 2025 GMT Not After : Dec 13 08:00:48 2025 GMT Subject: CN=55f9627da59be077b16addcef3e9ac600ed4a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:93:91:92:4a:c3:35:24:ed:22:9e:1d:91: 76:38:af:5f:f4:d6:c0:7d:09:93:ec:06:81:ef:36: ab:57:34:0e:ae:8e:c3:3a:7f:80:f6:b9:eb:71:fa: dd:24:3c:b2:fd:11:71:71:62:53:a9:d0:53:54:7f: ae:92:69:fa:c9:dc:d2:11:63:d9:bc:1d:84:52:ad: d2:4b:71:1f:94:86:09:bb:26:eb:c9:c3:f9:cc:99: e7:bc:ec:6e:b8:5c:ea:a2:e3:54:f2:97:ab:b5:80: df:ae:60:86:09:20:26:35:9e:e2:f5:2c:f0:fe:b2: 59:5f:5e:98:5b:6f:2f:e4:f5:ca:8f:e6:42:fa:fd: 46:6a:e7:59:40:24:6a:e8:33:4b:45:30:c8:a1:17: b8:a7:85:07:99:91:db:dc:d0:21:c4:99:0a:a1:08: 30:43:14:29:1b:02:67:1d:d7:42:74:e0:ca:f0:f3: ff:5e:fb:e1:18:d8:c6:a1:e4:49:a5:2b:76:fc:cc: ce:4a:df:4c:40:12:65:3d:0f:15:ff:a7:8e:b1:4d: a9:dd:05:16:32:ec:ca:9b:32:60:36:e4:65:c9:02: fe:0c:78:bf:23:b0:09:19:42:56:71:b2:95:33:29: 29:76:38:21:2b:75:88:e5:33:71:f0:4e:76:83:62: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:62:7D:A5:9B:E0:77:B1:6A:DD:CE:F3:E9:AC:60:0E:D4:A1:6F X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:25:be:e8:aa:9c:78:6c:fd:13:c3:6c:5a:30:38:a3:95:2f: 40:6e:e7:f7:ea:9c:a0:51:85:5e:5e:6b:f6:be:ac:cf:9f:f9: 8f:8a:b6:92:7d:85:7e:64:d3:7e:93:b8:57:34:f8:b6:24:87: 4d:aa:e6:68:e1:be:c7:9f:86:47:8c:87:a3:a7:91:aa:d7:12: eb:04:4d:09:7d:72:dd:69:01:ef:23:bf:61:66:5d:74:04:b2: 0e:eb:17:34:f7:55:b3:2e:66:53:b8:df:ef:f4:ec:6c:cc:ac: b5:4e:05:9d:69:44:3c:8c:48:74:60:49:81:84:ca:28:6c:96: 4d:3f:9c:d8:88:c3:e8:30:b7:3f:f5:cb:55:f2:92:2c:fc:d4: 28:79:95:cf:ad:6d:23:b2:e1:5f:a6:5c:83:f5:48:e0:12:6a: dc:2e:a9:e5:0a:35:da:43:5c:46:b2:1b:29:a4:58:94:71:32: ff:af:76:c8:19:11:6b:f3:35:0e:a7:64:ba:68:78:2a:cd:dc: 73:ec:65:bd:8c:a3:da:4d:bc:ee:93:f1:57:d6:a1:c0:42:7a: 4b:f4:a4:52:b4:82:fc:e0:4f:dd:ac:0d:c6:51:34:5e:91:88: 07:ef:38:9d:52:75:86:5a:15:e4:69:67:4f:29:c6:ce:6f:62: 29:16:ea:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk6uz9/dg+jZCcfLZRwgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjUxMjEyMDgwMDQ4WhcNMjUxMjEzMDgwMDQ4WjAzMTEwLwYDVQQD Eyg1NWY5NjI3ZGE1OWJlMDc3YjE2YWRkY2VmM2U5YWM2MDBlZDRhMTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRGTkZJKwzUk7SKeHZF2OK9f9NbA fQmT7AaB7zarVzQOro7DOn+A9rnrcfrdJDyy/RFxcWJTqdBTVH+ukmn6ydzSEWPZ vB2EUq3SS3EflIYJuybrycP5zJnnvOxuuFzqouNU8pertYDfrmCGCSAmNZ7i9Szw /rJZX16YW28v5PXKj+ZC+v1GaudZQCRq6DNLRTDIoRe4p4UHmZHb3NAhxJkKoQgw QxQpGwJnHddCdODK8PP/XvvhGNjGoeRJpSt2/MzOSt9MQBJlPQ8V/6eOsU2p3QUW MuzKmzJgNuRlyQL+DHi/I7AJGUJWcbKVMykpdjghK3WI5TNx8E52g2J7twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX5Yn2lm+B3sWrdzvPprGAO1KFvMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSW+6Kqc eGz9E8NsWjA4o5UvQG7n9+qcoFGFXl5r9r6sz5/5j4q2kn2FfmTTfpO4VzT4tiSH TarmaOG+x5+GR4yHo6eRqtcS6wRNCX1y3WkB7yO/YWZddASyDusXNPdVsy5mU7jf 7/TsbMystU4FnWlEPIxIdGBJgYTKKGyWTT+c2IjD6DC3P/XLVfKSLPzUKHmVz61t I7LhX6Zcg/VI4BJq3C6p5Qo12kNcRrIbKaRYlHEy/692yBkRa/M1Dqdkumh4Ks3c c+xlvYyj2k287pPxV9ahwEJ6S/SkUrSC/OBP3awNxlE0XpGIB+84nVJ1hloV5Gln TynGzm9iKRbqRw== -----END CERTIFICATE-----Generated at Fri Dec 12 16:51:55 2025 by rpki-client