This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json) Hash identifier: KhHSP+NdCDoOLaIVd8SGuxweu5szvkJUcmqzVWahWcg= Subject key identifier: 81:16:99:8C:64:C0:18:FE:5F:4A:3E:AF:17:6D:ED:69:AF:75:BC:5F Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c Certificate serial: 019B0F376404CFC1A6ED228F932D8F6633D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft Manifest number: 133A Signing time: Thu 11 Dec 2025 21:00:46 +0000 Manifest this update: Thu 11 Dec 2025 21:00:46 +0000 Manifest next update: Fri 12 Dec 2025 21:00:46 +0000 Files and hashes: 1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: Z18hVldH2NgRq7zqkZl51zP8m9fs64fr34EFdomOvkg=) 2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:64:04:cf:c1:a6:ed:22:8f:93:2d:8f:66:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c Validity Not Before: Dec 11 21:00:46 2025 GMT Not After : Dec 12 21:00:46 2025 GMT Subject: CN=8116998c64c018fe5f4a3eaf176ded69af75bc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:10:4e:fb:74:97:02:42:f2:3c:f4:6c:0a: ce:25:ba:66:23:17:5b:51:e1:3f:d2:72:9c:81:eb: 96:68:a8:81:3e:6c:88:ae:ba:fc:3e:ce:ae:b3:78: 98:22:d0:f0:da:ef:ac:fa:93:db:5f:ca:4b:fd:87: fb:e2:35:5c:2c:25:72:f9:f3:04:60:20:43:95:a8: eb:82:36:c2:03:e7:38:8e:51:46:59:98:f4:7a:e6: 15:3d:0f:47:62:27:38:59:70:53:68:7b:3f:81:12: cb:3e:f9:03:8d:af:10:cc:77:6f:f8:0b:b5:c5:f6: 38:5c:4c:f1:28:ed:96:6d:d6:f6:e4:48:12:77:0b: d7:d7:84:f1:66:95:b4:e9:41:4c:9f:2f:ae:97:b0: 9f:98:ec:f0:84:75:4d:2d:d4:cc:54:18:d9:a4:2b: 03:1f:c2:9d:cb:1f:7a:8d:25:19:33:92:25:01:5a: b7:23:bd:26:75:c2:84:de:3d:af:c1:f2:62:3f:ea: c6:67:89:0b:d2:64:0c:ff:93:28:96:5b:a1:6c:e3: 8d:65:15:a3:2a:e7:3a:7b:e0:f9:67:07:26:a3:c8: 46:4c:3a:51:10:84:d7:ef:46:33:3e:41:d7:f6:4c: f7:25:41:52:37:35:c1:d7:c0:38:b3:3e:b3:c0:79: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:16:99:8C:64:C0:18:FE:5F:4A:3E:AF:17:6D:ED:69:AF:75:BC:5F X509v3 Authority Key Identifier: keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4e:84:d5:54:57:d3:a7:23:81:3b:7e:0e:78:18:4c:eb:b6: 2e:3b:fb:5f:23:96:83:1e:85:c9:cc:40:9f:f2:51:f3:c1:61: 07:6c:49:5a:75:73:e3:bc:42:9c:07:f2:ab:50:c4:1e:0b:fb: 3e:fb:3c:17:b0:f4:26:f3:fe:63:3e:68:90:fc:3a:5c:51:b6: 4e:5c:a8:05:7a:a1:d5:90:ed:eb:8a:07:a6:a7:8d:4a:6a:6c: a7:13:28:0e:39:d5:cd:1d:d0:b3:66:c0:f2:32:c1:8c:be:bb: aa:dd:61:3a:78:4e:99:ba:ad:83:ac:03:f4:91:9c:69:75:d0: 91:f4:2a:27:8d:af:89:0d:f5:c0:0e:26:c2:70:46:b0:00:87: 9b:ca:85:68:cf:e8:54:a0:3e:2b:1e:62:60:fc:03:f4:d8:0e: bb:80:04:02:1b:ab:ce:ca:ae:95:cc:7c:3a:8c:c5:49:4e:fc: 33:3f:3b:27:72:4e:7a:65:1c:aa:6e:e6:d7:4b:fa:7b:7b:4f: 2d:eb:1c:fa:1f:e6:ff:4d:d6:87:2f:46:8c:f3:15:2f:62:a9: 02:b2:8a:a1:fa:29:3a:f9:61:71:42:3a:4e:6c:18:c6:12:38: 3b:d6:ed:6f:44:4b:9d:f8:c5:67:0d:ed:a1:37:e1:91:7a:9b: 16:96:8b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2QEz8Gm7SKPky2PZjPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTdiYWZiNzAxOGRjNDNiZGFlNTNiMjNhMjNlMTY1Njdl MWYyMWMwHhcNMjUxMjExMjEwMDQ2WhcNMjUxMjEyMjEwMDQ2WjAzMTEwLwYDVQQD Eyg4MTE2OTk4YzY0YzAxOGZlNWY0YTNlYWYxNzZkZWQ2OWFmNzViYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eQQTvt0lwJC8jz0bArOJbpmIxdb UeE/0nKcgeuWaKiBPmyIrrr8Ps6us3iYItDw2u+s+pPbX8pL/Yf74jVcLCVy+fME YCBDlajrgjbCA+c4jlFGWZj0euYVPQ9HYic4WXBTaHs/gRLLPvkDja8QzHdv+Au1 xfY4XEzxKO2Wbdb25EgSdwvX14TxZpW06UFMny+ul7CfmOzwhHVNLdTMVBjZpCsD H8Kdyx96jSUZM5IlAVq3I70mdcKE3j2vwfJiP+rGZ4kL0mQM/5MolluhbOONZRWj Kuc6e+D5Zwcmo8hGTDpREITX70YzPkHX9kz3JUFSNzXB18A4sz6zwHnspwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEWmYxkwBj+X0o+rxdt7WmvdbxfMB8GA1UdIwQY MBaAFJcXuvtwGNxDva5Tsjoj4WVn4fIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMt N2M5M2NhZTIyN2JkLzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80Y2U5MzMtNDg4Zi00NmI5LWFjMmMtN2M5M2NhZTIyN2Jk LzEvbHhlNi0zQVkzRU85cmxPeU9pUGhaV2ZoOGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk6E1VRX 06cjgTt+DngYTOu2Ljv7XyOWgx6FycxAn/JR88FhB2xJWnVz47xCnAfyq1DEHgv7 Pvs8F7D0JvP+Yz5okPw6XFG2TlyoBXqh1ZDt64oHpqeNSmpspxMoDjnVzR3Qs2bA 8jLBjL67qt1hOnhOmbqtg6wD9JGcaXXQkfQqJ42viQ31wA4mwnBGsACHm8qFaM/o VKA+Kx5iYPwD9NgOu4AEAhurzsqulcx8OozFSU78Mz87J3JOemUcqm7m10v6e3tP Lesc+h/m/03Why9GjPMVL2KpArKKofopOvlhcUI6TmwYxhI4O9btb0RLnfjFZw3t oTfhkXqbFpaLqw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:43 2025 by rpki-client