This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json) Hash identifier: cXp57X24LRGDHqU2nKqy5Y3gKIOEDnOpyJ3dTZiKd8s= Subject key identifier: 66:A3:63:CA:E7:69:90:B4:82:8D:3B:B9:0E:0C:31:3C:79:F3:A7:66 Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6 Certificate serial: 019B5A1ADF034B8226CD1DB19C9E5A9337A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft Manifest number: 04D7 Signing time: Fri 26 Dec 2025 10:01:09 +0000 Manifest this update: Fri 26 Dec 2025 10:01:09 +0000 Manifest next update: Sat 27 Dec 2025 10:01:09 +0000 Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: LUoxAKlDK/M6jCH15lJ1fid0epz03SusKa6rX31M/lA=) 2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:df:03:4b:82:26:cd:1d:b1:9c:9e:5a:93:37:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6 Validity Not Before: Dec 26 10:01:09 2025 GMT Not After : Dec 27 10:01:09 2025 GMT Subject: CN=66a363cae76990b4828d3bb90e0c313c79f3a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:85:4b:02:ee:99:c4:92:8a:c4:10:c1:2b: ad:da:ee:a2:86:ce:90:88:42:16:13:d9:40:5f:62: b6:b3:32:db:d4:05:89:6f:cf:ac:4e:d3:89:f6:d6: a2:5c:30:a7:cd:46:51:48:38:61:dd:c8:bf:03:10: 83:44:72:0a:2b:ee:61:c4:c2:79:dd:b0:4a:1c:8c: b3:51:d5:6d:2e:de:49:60:0e:03:27:be:8e:33:b2: 8e:95:9c:07:b1:e7:92:bd:f8:d5:41:a0:d4:92:36: e9:51:57:e2:3d:b6:70:9c:42:26:05:df:fa:47:f5: 65:fb:f8:ce:f7:26:63:e2:a0:1b:e0:78:d0:dc:33: b6:02:48:46:94:23:b7:c6:b6:6f:ae:9a:62:3c:b8: 04:da:42:81:85:cd:78:f3:90:dd:1a:48:26:7b:7d: cf:4c:31:5b:8b:8c:ba:95:e2:11:19:17:c0:70:19: cf:47:4e:37:82:bc:7f:5a:6d:5f:19:45:31:62:13: 1d:74:67:78:a6:53:c1:a7:f6:e5:9b:8d:8b:a4:a0: 46:54:d4:c1:bd:e3:41:28:43:a2:30:3f:fd:b0:14: 82:ee:57:44:f8:00:03:41:5d:9a:b5:db:15:14:7d: 28:0f:25:41:e5:38:e5:dd:74:6f:0e:52:90:ff:15: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A3:63:CA:E7:69:90:B4:82:8D:3B:B9:0E:0C:31:3C:79:F3:A7:66 X509v3 Authority Key Identifier: keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:06:f3:cc:3f:94:ff:eb:eb:42:1f:47:5b:79:d3:40:e0: 90:8e:cc:71:bc:bd:68:18:ac:dd:c4:10:4f:19:e9:b4:8f:1a: af:a2:0f:86:24:3a:1e:3d:18:98:ba:4b:03:bb:d3:f9:98:23: 10:f2:18:c0:a8:65:12:d6:53:15:ef:61:a0:75:1f:1a:94:8a: 1a:2b:7c:02:7b:fd:3d:89:2d:d1:96:61:3e:d3:39:33:a3:0a: 01:75:d1:69:da:9e:77:11:89:20:7e:04:25:3e:62:d6:24:38: 36:9e:bb:7f:ef:1f:5d:bd:37:33:c2:c2:51:52:6a:02:65:62: 8e:a8:a2:f8:ef:28:32:12:89:2d:96:7d:ed:5d:87:49:aa:3f: e8:bf:21:a5:23:28:66:65:d7:68:94:e5:0a:32:dc:a4:3d:b5: a1:a0:85:72:97:76:13:a3:c4:e0:26:7d:59:2d:bd:53:a6:83: d7:9e:79:55:18:81:45:0d:ab:8e:d5:9b:a1:4f:9e:0f:e0:75: 26:2f:e0:1d:21:bd:ea:e1:c1:a4:be:8f:e3:68:d4:45:cb:c9: ac:7d:4a:67:7e:be:b7:95:68:f6:4d:0c:92:e9:1a:60:0d:01: ca:76:34:cd:9e:11:21:81:1d:39:ca:a2:2e:cd:45:83:f4:c5: 82:81:c2:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGt8DS4ImzR2xnJ5akzelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzZkYmI3Njk5NWI0OTUwYTg2YzVmMDdjYThkYjNlYjQ5 Njc4ZjYwHhcNMjUxMjI2MTAwMTA5WhcNMjUxMjI3MTAwMTA5WjAzMTEwLwYDVQQD Eyg2NmEzNjNjYWU3Njk5MGI0ODI4ZDNiYjkwZTBjMzEzYzc5ZjNhNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oiFSwLumcSSisQQwSut2u6ihs6Q iEIWE9lAX2K2szLb1AWJb8+sTtOJ9taiXDCnzUZRSDhh3ci/AxCDRHIKK+5hxMJ5 3bBKHIyzUdVtLt5JYA4DJ76OM7KOlZwHseeSvfjVQaDUkjbpUVfiPbZwnEImBd/6 R/Vl+/jO9yZj4qAb4HjQ3DO2AkhGlCO3xrZvrppiPLgE2kKBhc1485DdGkgme33P TDFbi4y6leIRGRfAcBnPR043grx/Wm1fGUUxYhMddGd4plPBp/blm42LpKBGVNTB veNBKEOiMD/9sBSC7ldE+AADQV2atdsVFH0oDyVB5Tjl3XRvDlKQ/xWf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGajY8rnaZC0go07uQ4MMTx586dmMB8GA1UdIwQY MBaAFJV227dplbSVCobF8Hyo2z60lnj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQt NjE4MDJkOWM5MzQ0LzEvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wOTI2M2MtYTVjYy00NGQ2LTkxYzQtNjE4MDJkOWM5MzQ0 LzEvbFhiYnQybVZ0SlVLaHNYd2ZLamJQclNXZVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpQG88w/ lP/r60IfR1t500DgkI7Mcby9aBis3cQQTxnptI8ar6IPhiQ6Hj0YmLpLA7vT+Zgj EPIYwKhlEtZTFe9hoHUfGpSKGit8Anv9PYkt0ZZhPtM5M6MKAXXRadqedxGJIH4E JT5i1iQ4Np67f+8fXb03M8LCUVJqAmVijqii+O8oMhKJLZZ97V2HSao/6L8hpSMo ZmXXaJTlCjLcpD21oaCFcpd2E6PE4CZ9WS29U6aD1555VRiBRQ2rjtWboU+eD+B1 Ji/gHSG96uHBpL6P42jURcvJrH1KZ36+t5Vo9k0MkukaYA0BynY0zZ4RIYEdOcqi Ls1Fg/TFgoHCmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:05 2025 by rpki-client