This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json) Hash identifier: 6D7O3bzxotNDbzd6yvbgwAVRjWmfJx7VE14TIIeNiMo= Subject key identifier: 3F:E2:98:EA:3C:80:78:06:E9:21:FA:7D:5F:D1:71:C3:1E:B2:8F:12 Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908 Certificate serial: 019B5A1B1C5567BBD3829B7F13DE8B804D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft Manifest number: 02AF Signing time: Fri 26 Dec 2025 10:01:24 +0000 Manifest this update: Fri 26 Dec 2025 10:01:24 +0000 Manifest next update: Sat 27 Dec 2025 10:01:24 +0000 Files and hashes: 1: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: 5h/RmpjNaJg2AGWHh5Tmuuf9RTcimgl5whja9YIt5KI=) 2: s1zL6gzO0M3JzPyTKX8t1xaOUrA.roa (hash: gZ7moKCsBrn+radMswHUegubuhNeWvXGn2oIRaI3hDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1c:55:67:bb:d3:82:9b:7f:13:de:8b:80:4d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908 Validity Not Before: Dec 26 10:01:24 2025 GMT Not After : Dec 27 10:01:24 2025 GMT Subject: CN=3fe298ea3c807806e921fa7d5fd171c31eb28f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:72:48:76:98:50:6f:89:9e:7d:dd:43:00: 5f:45:b8:7b:1a:c8:c8:e3:6d:f2:fd:79:23:ec:fd: 03:65:ef:25:fa:ec:e4:2c:c4:93:a7:2f:4e:5a:15: 8c:01:c4:cf:d8:60:65:ce:19:6b:fa:af:05:be:fc: de:72:57:37:d3:8c:f7:aa:04:57:5e:26:61:85:33: dd:ae:6d:cb:a4:99:35:4f:43:6f:bd:c2:61:b9:7e: 9f:b6:c5:d4:75:01:42:03:b3:63:2f:7b:94:d8:d2: d4:ab:b7:62:92:9a:f5:06:de:da:4a:13:6c:e7:1e: 33:e3:df:9c:d3:25:d9:f4:d7:72:52:03:63:c1:58: fe:09:4a:2b:2d:89:21:70:ab:9d:81:ac:99:1c:33: d4:70:8b:7a:ea:15:c0:3d:c5:97:03:c5:cd:af:6d: 7d:59:f7:bf:a1:a0:49:60:b3:99:8c:0a:c3:99:7c: ad:87:d7:e6:a3:6d:24:95:46:7b:84:b8:0f:86:e7: d6:f0:75:e5:65:fc:7b:74:67:71:47:93:e7:4f:8a: 53:52:b4:e6:97:a7:07:c3:97:5f:08:4e:48:5e:05: 5a:8c:be:4b:0b:77:9b:92:5a:e3:06:9e:31:23:2e: 88:8a:94:07:7a:a9:5e:20:23:9d:0c:65:f5:67:a6: aa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:98:EA:3C:80:78:06:E9:21:FA:7D:5F:D1:71:C3:1E:B2:8F:12 X509v3 Authority Key Identifier: keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:41:c2:57:55:d1:06:c5:36:51:76:25:dc:b3:3c:5c:6a: 31:4a:da:9a:47:0f:47:60:1b:04:d9:38:ac:2d:4e:44:53:9e: dc:30:cb:dc:b4:88:b4:ca:6a:9d:24:3a:b0:c3:85:3e:6a:0c: e7:c0:07:cb:28:e3:11:79:ab:a7:f4:94:8a:c1:60:bc:e8:7d: 7d:f9:fc:af:a9:c0:1c:f3:49:fb:9c:d0:6f:a1:f1:de:cc:32: c4:9c:44:ea:87:10:e9:f0:35:67:6c:b0:8e:c1:43:b4:f8:56: 02:18:23:9f:26:1f:5c:00:9c:b6:12:51:e3:52:61:7c:0c:82: 89:e7:6f:e6:58:bd:56:de:7b:0e:af:e6:80:0f:c3:74:e7:36: 7e:a1:7d:91:ab:0b:2d:5f:4f:8b:6b:71:5d:de:0f:37:49:c4: f2:b3:e2:08:3b:bc:3a:19:cd:3f:f3:4c:ca:cf:07:0b:68:96: 23:61:2f:76:db:47:c4:4a:d6:e0:85:bc:dd:19:2a:58:79:9c: 62:12:08:d0:dd:25:09:ae:b1:12:37:0d:32:9d:11:49:1a:31: 06:be:52:e6:14:a5:22:02:f6:8d:8b:29:55:ce:83:92:0d:d6: eb:ed:f3:51:0d:56:4b:b9:f3:2d:57:5c:c2:0a:0f:49:d3:aa: 58:19:c5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxxVZ7vTgpt/E96LgE2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4 M2Y5MDgwHhcNMjUxMjI2MTAwMTI0WhcNMjUxMjI3MTAwMTI0WjAzMTEwLwYDVQQD EygzZmUyOThlYTNjODA3ODA2ZTkyMWZhN2Q1ZmQxNzFjMzFlYjI4ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVpySHaYUG+Jnn3dQwBfRbh7GsjI 423y/Xkj7P0DZe8l+uzkLMSTpy9OWhWMAcTP2GBlzhlr+q8Fvvzeclc304z3qgRX XiZhhTPdrm3LpJk1T0NvvcJhuX6ftsXUdQFCA7NjL3uU2NLUq7dikpr1Bt7aShNs 5x4z49+c0yXZ9NdyUgNjwVj+CUorLYkhcKudgayZHDPUcIt66hXAPcWXA8XNr219 Wfe/oaBJYLOZjArDmXyth9fmo20klUZ7hLgPhufW8HXlZfx7dGdxR5PnT4pTUrTm l6cHw5dfCE5IXgVajL5LC3ebklrjBp4xIy6IipQHeqleICOdDGX1Z6aq+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/imOo8gHgG6SH6fV/RccMeso8SMB8GA1UdIwQY MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUlBwldV 0QbFNlF2JdyzPFxqMUramkcPR2AbBNk4rC1ORFOe3DDL3LSItMpqnSQ6sMOFPmoM 58AHyyjjEXmrp/SUisFgvOh9ffn8r6nAHPNJ+5zQb6Hx3swyxJxE6ocQ6fA1Z2yw jsFDtPhWAhgjnyYfXACcthJR41JhfAyCiedv5li9Vt57Dq/mgA/DdOc2fqF9kasL LV9Pi2txXd4PN0nE8rPiCDu8OhnNP/NMys8HC2iWI2EvdttHxErW4IW83RkqWHmc YhII0N0lCa6xEjcNMp0RSRoxBr5S5hSlIgL2jYspVc6Dkg3W6+3zUQ1WS7nzLVdc wgoPSdOqWBnF2A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:16 2025 by rpki-client