This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft File: LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json) Hash identifier: gupKhVW+bcd/M8gmcVQT2mJWPTiRhaR+Ef4XE2zuil0= Subject key identifier: DE:42:2E:D0:CE:06:58:07:85:7B:85:42:3D:8E:A1:A1:F7:39:8A:FB Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Certificate serial: 019B1F87A8E4398D090C955E3EF7BDCE8E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft Manifest number: 1781 Signing time: Mon 15 Dec 2025 01:02:22 +0000 Manifest this update: Mon 15 Dec 2025 01:02:22 +0000 Manifest next update: Tue 16 Dec 2025 01:02:22 +0000 Files and hashes: 1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=) 2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: SrcPep3OjyT7Tqw4lSNucR4Q70amfnVPqT8JgnIFd44=) 3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=) 4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=) 5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=) 6: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (hash: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:a8:e4:39:8d:09:0c:95:5e:3e:f7:bd:ce:8e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d Validity Not Before: Dec 15 01:02:22 2025 GMT Not After : Dec 16 01:02:22 2025 GMT Subject: CN=de422ed0ce065807857b85423d8ea1a1f7398afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:cf:60:8b:be:08:63:fe:29:4b:ef:86:09: d3:60:50:de:b4:a2:3c:0a:af:06:6f:1a:de:6a:60: 4c:c7:b9:1b:b1:bc:dd:b9:2e:74:36:64:47:8d:73: 7b:21:9b:b3:ce:e0:08:0e:54:0b:ab:55:44:9c:a3: f3:46:1c:11:8b:f5:97:46:c0:56:89:94:59:79:d1: a4:65:4f:3b:3e:20:46:fe:d0:30:b2:3d:f5:35:79: 88:4a:b6:9e:43:ba:f5:70:d3:70:12:7a:86:ab:8d: ef:61:a6:c6:1d:e2:f4:c3:be:2a:6d:bd:3e:32:6b: 4f:f2:2f:b9:53:bf:75:04:5e:4e:8a:e3:69:1d:e4: 0a:8f:7e:41:72:43:a7:3b:6e:5f:83:a0:79:4a:2a: a1:0c:3f:64:33:a6:b3:14:80:93:99:03:57:4c:aa: ba:22:64:8b:17:85:3c:6b:22:39:91:74:8e:04:98: 66:5f:e5:a7:25:67:a3:c5:c1:e0:3c:6c:26:2e:19: 5c:72:d1:36:ba:f4:a1:4d:14:7f:c9:8a:b2:26:a6: 4a:7f:20:d2:53:4b:54:77:cf:13:e3:e1:04:e5:e6: 38:cb:f0:18:4a:71:1d:6a:ab:c0:f3:53:34:4f:0a: dd:34:e1:82:3a:c8:9f:cf:c6:42:61:47:3d:99:3c: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:2E:D0:CE:06:58:07:85:7B:85:42:3D:8E:A1:A1:F7:39:8A:FB X509v3 Authority Key Identifier: keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:05:e9:19:ca:77:e5:6d:c4:a2:0a:f5:c2:59:8f:7f:37:e3: ba:d0:a5:5f:b0:e1:f6:ea:bb:9e:fc:8a:1c:9c:53:0b:10:8d: 97:d3:a7:f9:8d:f3:b3:8d:a2:74:b5:cd:4f:24:1c:ee:47:c9: 4d:12:dd:ad:91:3f:b8:ab:89:3b:0e:f7:68:eb:0a:5f:fa:b5: 51:86:fa:f6:c6:0f:76:9d:69:c5:6b:74:36:df:69:b1:c2:57: a0:4c:6f:b1:97:bc:c5:62:b9:b9:94:30:69:66:e1:89:50:1e: f7:1b:59:6c:d9:43:84:01:3d:82:5d:5f:27:25:06:85:73:09: c6:26:6c:0e:3b:a0:70:15:84:c8:41:86:7f:20:13:c3:15:41: 74:f5:6d:8a:3e:10:c4:79:92:1b:d1:40:09:08:f7:ec:74:03: 2a:58:fa:5a:0f:90:16:8c:a8:31:d1:78:51:36:91:fb:73:be: 60:eb:63:96:df:8a:d3:22:da:74:1e:9f:8b:6c:ce:0a:3a:e0: 83:db:b5:e3:08:04:a8:ff:a9:13:d4:5e:38:e3:3b:60:10:ee: 01:77:68:06:28:3e:1c:87:0a:68:73:47:41:97:c9:c3:d9:95: bd:e8:bf:ba:39:5b:58:a9:00:28:76:80:92:8e:2c:80:75:d9: 87:72:bb:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh6jkOY0JDJVePve9zo47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk OWJlMWQwHhcNMjUxMjE1MDEwMjIyWhcNMjUxMjE2MDEwMjIyWjAzMTEwLwYDVQQD EyhkZTQyMmVkMGNlMDY1ODA3ODU3Yjg1NDIzZDhlYTFhMWY3Mzk4YWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7zPYIu+CGP+KUvvhgnTYFDetKI8 Cq8GbxreamBMx7kbsbzduS50NmRHjXN7IZuzzuAIDlQLq1VEnKPzRhwRi/WXRsBW iZRZedGkZU87PiBG/tAwsj31NXmISraeQ7r1cNNwEnqGq43vYabGHeL0w74qbb0+ MmtP8i+5U791BF5OiuNpHeQKj35BckOnO25fg6B5SiqhDD9kM6azFICTmQNXTKq6 ImSLF4U8ayI5kXSOBJhmX+WnJWejxcHgPGwmLhlcctE2uvShTRR/yYqyJqZKfyDS U0tUd88T4+EE5eY4y/AYSnEdaqvA81M0TwrdNOGCOsifz8ZCYUc9mTwVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5CLtDOBlgHhXuFQj2OoaH3OYr7MB8GA1UdIwQY MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct N2EwMzRkMTcwYjg1LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1 LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAXpGcp3 5W3Eogr1wlmPfzfjutClX7Dh9uq7nvyKHJxTCxCNl9On+Y3zs42idLXNTyQc7kfJ TRLdrZE/uKuJOw73aOsKX/q1UYb69sYPdp1pxWt0Nt9pscJXoExvsZe8xWK5uZQw aWbhiVAe9xtZbNlDhAE9gl1fJyUGhXMJxiZsDjugcBWEyEGGfyATwxVBdPVtij4Q xHmSG9FACQj37HQDKlj6Wg+QFoyoMdF4UTaR+3O+YOtjlt+K0yLadB6fi2zOCjrg g9u14wgEqP+pE9ReOOM7YBDuAXdoBig+HIcKaHNHQZfJw9mVvei/ujlbWKkAKHaA ko4sgHXZh3K7qA== -----END CERTIFICATE-----Generated at Mon Dec 15 09:01:09 2025 by rpki-client