This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json) Hash identifier: aHV2LAyb8DqGd2spw1oAjr6wbHJRa0SUMomJgOkJMOY= Subject key identifier: 50:77:E1:F3:86:CF:1D:10:72:11:A8:1F:BE:3A:9A:C6:3F:AA:BB:E3 Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Certificate serial: 019AACB9F4B4C8828DBF82B2433FDE74A900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft Manifest number: 1586 Signing time: Sat 22 Nov 2025 18:00:59 +0000 Manifest this update: Sat 22 Nov 2025 18:00:59 +0000 Manifest next update: Sun 23 Nov 2025 18:00:59 +0000 Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=) 2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: qA4MZ6Hj055U0AcITIxoIyvkZ+1d7VM5FHXtNLCI+Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:f4:b4:c8:82:8d:bf:82:b2:43:3f:de:74:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb Validity Not Before: Nov 22 18:00:59 2025 GMT Not After : Nov 23 18:00:59 2025 GMT Subject: CN=5077e1f386cf1d107211a81fbe3a9ac63faabbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:23:31:1d:5c:50:c4:62:cf:6b:9e:17:76: 76:cb:0d:a1:a1:81:4f:10:17:62:43:ab:fa:d6:ae: 3c:dd:ef:8c:5a:e4:59:34:85:2a:e3:c1:6c:c2:f3: 2a:df:f4:32:0a:ce:d1:f4:91:8e:ed:8f:32:9a:cc: a1:5b:8e:a6:8b:72:7c:b3:a7:fb:53:b2:40:d4:e8: 6c:3f:71:bb:8b:c8:fb:06:fe:2a:90:b7:a5:78:71: c1:a9:5e:14:48:08:2e:bd:92:27:b9:bb:16:b3:12: 5f:a4:49:3b:01:b6:4e:b7:94:24:ba:ca:41:64:38: 23:64:29:34:87:e7:80:4c:08:44:56:d3:4f:f5:9b: 93:13:88:72:ba:f8:08:76:10:76:cf:a9:e6:ed:bf: 6c:7f:a2:b0:34:af:b9:a5:52:1a:37:96:6f:d4:77: 8c:eb:5d:b9:51:b9:97:6e:bb:75:c8:2c:ba:e1:94: ba:f5:b2:08:91:53:68:ba:9f:b8:82:23:6f:6e:eb: 52:f2:f4:7c:22:2b:a1:d3:99:30:ff:5a:4c:55:89: 6d:d2:d1:d5:d1:e4:4a:93:be:86:f8:d9:66:43:57: 02:41:48:e2:7b:9c:a7:82:95:9b:8a:2c:bd:f3:8b: de:a6:4d:53:6b:8e:f6:15:8e:11:4a:87:9d:77:e0: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:77:E1:F3:86:CF:1D:10:72:11:A8:1F:BE:3A:9A:C6:3F:AA:BB:E3 X509v3 Authority Key Identifier: keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:91:88:3c:3d:21:77:af:91:85:69:81:73:b7:b5:c1:e1:ea: c9:e0:e8:5a:98:b1:55:e0:6d:7c:a2:65:67:e5:18:2e:55:59: 61:10:07:09:aa:6b:89:83:62:d1:ae:91:6a:12:a5:55:2b:45: 7e:39:0b:96:8e:78:ff:c6:d5:cb:3a:0d:96:77:f1:07:c0:be: 79:81:3a:46:02:02:25:f0:96:68:52:7b:6f:d2:d8:2b:b4:22: 1d:01:23:2f:c8:77:df:63:72:8e:9e:ad:f4:ca:3c:54:6f:7e: 71:50:57:4e:b9:49:9f:ca:c4:47:82:b1:c0:04:a7:f9:21:78: c9:e1:b8:0d:cb:e0:b1:ef:28:3a:75:a7:6c:3c:94:ae:fb:43: 66:a1:21:3b:bc:cc:b5:ba:c4:ea:f0:7d:64:76:b9:39:46:ca: b9:41:be:04:63:8a:b4:de:d2:26:a1:ba:f5:b7:1a:49:3a:d2: e6:51:95:35:a4:48:5d:14:79:0a:a8:a6:41:b9:51:dc:cf:6f: eb:e1:47:57:86:d1:e0:1f:b5:4a:3c:87:25:6f:51:3e:54:a8: ce:9b:8d:ec:6a:1a:5c:ed:f4:0b:9d:c9:e2:72:f6:75:71:9e: b5:7b:61:0f:a4:5d:00:d1:c5:ce:97:e2:41:b5:63:ac:36:32: 18:2b:ed:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsufS0yIKNv4KyQz/edKkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk OWQyY2IwHhcNMjUxMTIyMTgwMDU5WhcNMjUxMTIzMTgwMDU5WjAzMTEwLwYDVQQD Eyg1MDc3ZTFmMzg2Y2YxZDEwNzIxMWE4MWZiZTNhOWFjNjNmYWFiYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdkjMR1cUMRiz2ueF3Z2yw2hoYFP EBdiQ6v61q483e+MWuRZNIUq48FswvMq3/QyCs7R9JGO7Y8ymsyhW46mi3J8s6f7 U7JA1OhsP3G7i8j7Bv4qkLeleHHBqV4USAguvZInubsWsxJfpEk7AbZOt5QkuspB ZDgjZCk0h+eATAhEVtNP9ZuTE4hyuvgIdhB2z6nm7b9sf6KwNK+5pVIaN5Zv1HeM 6125UbmXbrt1yCy64ZS69bIIkVNoup+4giNvbutS8vR8Iiuh05kw/1pMVYlt0tHV 0eRKk76G+NlmQ1cCQUjie5yngpWbiiy984vepk1Ta472FY4RSoedd+A/dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB34fOGzx0QchGoH746msY/qrvjMB8GA1UdIwQY MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1 LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ZGIPD0h d6+RhWmBc7e1weHqyeDoWpixVeBtfKJlZ+UYLlVZYRAHCapriYNi0a6RahKlVStF fjkLlo54/8bVyzoNlnfxB8C+eYE6RgICJfCWaFJ7b9LYK7QiHQEjL8h332Nyjp6t 9Mo8VG9+cVBXTrlJn8rER4KxwASn+SF4yeG4Dcvgse8oOnWnbDyUrvtDZqEhO7zM tbrE6vB9ZHa5OUbKuUG+BGOKtN7SJqG69bcaSTrS5lGVNaRIXRR5CqimQblR3M9v 6+FHV4bR4B+1SjyHJW9RPlSozpuN7GoaXO30C53J4nL2dXGetXthD6RdANHFzpfi QbVjrDYyGCvtgQ== -----END CERTIFICATE-----Generated at Sat Nov 22 20:59:14 2025 by rpki-client