This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json) Hash identifier: 8ADDBn1a5dyqVfVJDauPMH9B8tjW5q55fIX9AzJ2PSo= Subject key identifier: AE:94:78:CF:28:BB:F2:B7:45:BC:8E:32:76:B3:16:B7:98:ED:86:A9 Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Certificate serial: 019B1ACE1E9EF32C1C25760A039B080EA225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft Manifest number: 15BF Signing time: Sun 14 Dec 2025 03:01:14 +0000 Manifest this update: Sun 14 Dec 2025 03:01:14 +0000 Manifest next update: Mon 15 Dec 2025 03:01:14 +0000 Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=) 2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: YdvWE3luACJ7WUimyMXiAx7C1LYd45HGxCNTIqP6WuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:1e:9e:f3:2c:1c:25:76:0a:03:9b:08:0e:a2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Validity Not Before: Dec 14 03:01:14 2025 GMT Not After : Dec 15 03:01:14 2025 GMT Subject: CN=ae9478cf28bbf2b745bc8e3276b316b798ed86a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:9a:63:e4:b4:77:61:9f:e9:eb:11:a8:90: e4:15:1b:d3:5f:49:4c:b0:f3:ac:07:d7:bd:35:6e: 13:7a:ff:ea:8c:90:c2:06:03:35:35:ec:26:9c:ab: 9c:cb:a2:b1:b1:51:b2:5d:47:f1:fa:f2:ac:c9:af: d4:e0:ba:e6:55:1d:b1:93:df:f7:7d:f4:f0:14:ee: 93:8d:3b:ed:10:d5:5d:af:5a:00:4b:e7:41:8e:94: da:69:9e:47:1e:4e:8e:69:de:9e:bd:d4:7d:d0:86: 43:d9:51:c9:97:e2:22:93:c6:bd:69:f4:af:38:6a: 2f:03:3c:64:65:0e:41:49:14:68:69:e9:c5:e5:96: 0c:02:ec:8d:af:b6:6d:82:4b:15:10:13:6f:fc:89: c8:b4:21:f7:d8:88:dd:58:61:b3:d6:6c:74:d3:30: 7c:fd:42:53:d1:88:f6:9a:a6:7a:fd:58:70:7d:30: 35:ec:53:5a:81:5f:ee:bc:28:fb:de:5c:f0:8d:4e: 49:28:d0:74:64:8c:04:05:de:ff:09:5c:07:e5:c0: f2:ed:ce:59:ef:c8:00:45:c7:9f:b1:b5:da:de:54: 43:38:db:dd:46:28:aa:49:2c:6d:57:98:86:6a:9c: e7:17:59:61:22:e1:4a:94:be:24:2e:c4:15:68:24: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:78:CF:28:BB:F2:B7:45:BC:8E:32:76:B3:16:B7:98:ED:86:A9 X509v3 Authority Key Identifier: keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:42:dd:ec:e7:d2:05:e6:8e:ff:68:71:69:91:a1:9c:29: 04:47:0f:68:3d:f6:6e:51:3f:16:d2:50:ed:55:df:f4:c3:d2: bb:02:78:b9:1b:64:b5:ba:2b:d3:e3:f2:f5:7d:33:4d:10:a4: 85:f2:8d:d2:76:eb:ad:50:90:79:4b:03:ae:a2:2c:87:2c:c3: 81:22:c0:0f:0c:a6:e0:11:7a:2b:79:38:fd:4b:bf:59:54:7d: 89:95:ad:8f:e8:b4:bb:a5:d4:69:b3:4e:b7:b8:3f:ee:a3:e5: 8a:6a:11:c3:89:28:77:8b:9e:80:29:be:34:56:44:c6:18:dc: 61:60:ab:7d:51:96:9b:13:eb:64:dd:dd:d3:1b:a5:81:f3:7a: a5:e9:a8:6d:42:81:69:69:9f:7e:e9:24:1f:ae:ce:70:d5:2d: 46:7a:d2:f4:86:5c:f7:55:6a:49:f8:d0:b3:f6:c9:b5:b9:72: 34:6f:56:9a:eb:85:4e:4b:36:ac:bf:4e:1c:99:cb:c9:f2:f0: c0:a6:d6:96:12:63:be:b3:e5:b2:be:1a:2e:c9:03:fb:da:d0: 0d:ae:ff:6a:5d:f2:88:42:a2:84:c2:60:08:b8:50:64:fe:7d: 84:ec:72:c5:89:fd:3a:bf:8f:c6:2f:8d:3b:9a:81:b3:9f:11: 02:97:22:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazh6e8ywcJXYKA5sIDqIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk OWQyY2IwHhcNMjUxMjE0MDMwMTE0WhcNMjUxMjE1MDMwMTE0WjAzMTEwLwYDVQQD EyhhZTk0NzhjZjI4YmJmMmI3NDViYzhlMzI3NmIzMTZiNzk4ZWQ4NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0CaY+S0d2Gf6esRqJDkFRvTX0lM sPOsB9e9NW4Tev/qjJDCBgM1NewmnKucy6KxsVGyXUfx+vKsya/U4LrmVR2xk9/3 ffTwFO6TjTvtENVdr1oAS+dBjpTaaZ5HHk6Oad6evdR90IZD2VHJl+Iik8a9afSv OGovAzxkZQ5BSRRoaenF5ZYMAuyNr7ZtgksVEBNv/InItCH32IjdWGGz1mx00zB8 /UJT0Yj2mqZ6/VhwfTA17FNagV/uvCj73lzwjU5JKNB0ZIwEBd7/CVwH5cDy7c5Z 78gARcefsbXa3lRDONvdRiiqSSxtV5iGapznF1lhIuFKlL4kLsQVaCQIlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6UeM8ou/K3RbyOMnazFreY7YapMB8GA1UdIwQY MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1 LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuJC3ezn 0gXmjv9ocWmRoZwpBEcPaD32blE/FtJQ7VXf9MPSuwJ4uRtktbor0+Py9X0zTRCk hfKN0nbrrVCQeUsDrqIshyzDgSLADwym4BF6K3k4/Uu/WVR9iZWtj+i0u6XUabNO t7g/7qPlimoRw4kod4uegCm+NFZExhjcYWCrfVGWmxPrZN3d0xulgfN6pemobUKB aWmffukkH67OcNUtRnrS9IZc91VqSfjQs/bJtblyNG9WmuuFTks2rL9OHJnLyfLw wKbWlhJjvrPlsr4aLskD+9rQDa7/al3yiEKihMJgCLhQZP59hOxyxYn9Or+Pxi+N O5qBs58RApciJg== -----END CERTIFICATE-----Generated at Sun Dec 14 09:36:06 2025 by rpki-client