This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json) Hash identifier: QpnYrShXH0De09yiiBxktrZnZSk7wYxgX8yH4W15ff0= Subject key identifier: 2A:3E:1F:FF:2B:08:1A:7C:8C:D2:23:59:BD:EA:F6:5D:9D:DA:4D:08 Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Certificate serial: 019B59ACE0B023E9922768B521D844EF3838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 08:01:00 +0000 Manifest this update: Fri 26 Dec 2025 08:01:00 +0000 Manifest next update: Sat 27 Dec 2025 08:01:00 +0000 Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=) 2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: 4fO1wNZTNZrwWfg8g3F/k3LI3MagJzCerrMJ0ideyV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e0:b0:23:e9:92:27:68:b5:21:d8:44:ef:38:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12 Validity Not Before: Dec 26 08:01:00 2025 GMT Not After : Dec 27 08:01:00 2025 GMT Subject: CN=2a3e1fff2b081a7c8cd22359bdeaf65d9dda4d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:c5:a1:4d:10:bb:fd:b8:7b:17:72:cd:cc: d9:6d:d4:72:69:c8:1a:73:e9:f2:b6:a1:4e:60:54: 71:19:58:fb:24:88:91:e3:5e:65:6f:85:8e:b9:8d: 3f:73:f7:47:1f:cc:61:0a:70:72:01:5f:7e:8f:a0: 92:a2:dc:9f:24:9b:1f:98:ab:d3:25:c5:5e:85:af: 9b:90:34:99:11:0e:4a:55:bd:e4:26:fc:ca:ad:b8: 04:a5:e4:92:f7:33:eb:19:18:48:9a:43:c4:f7:30: 34:e7:d0:23:04:cf:61:d8:4d:f8:18:5b:f9:44:7c: f9:7f:f1:49:f9:73:d9:37:c1:c4:72:02:ad:c3:ab: 6c:02:ef:31:c4:cb:ba:bd:10:a8:54:19:68:94:ec: 3a:46:34:a2:f2:85:e3:76:e3:47:87:57:6d:2d:e6: 26:37:3b:e4:a1:d4:e2:a8:ea:0b:dd:dd:c0:5e:49: c8:54:8d:2a:f0:d9:99:57:94:04:54:8c:ad:ed:1a: 74:ee:2e:f4:62:69:92:67:f6:80:e7:fe:b4:74:a8: 3b:d7:72:1f:01:5d:99:76:b7:22:d1:a3:32:8b:8c: c5:08:3c:82:51:84:b8:e1:e7:86:3a:bf:b0:cc:cf: 19:98:0c:6c:a4:bd:19:ac:3f:c3:89:84:7f:71:a8: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:1F:FF:2B:08:1A:7C:8C:D2:23:59:BD:EA:F6:5D:9D:DA:4D:08 X509v3 Authority Key Identifier: keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5a:a0:59:49:4e:47:e4:be:f3:50:56:c9:d9:b9:f2:43:a6: e7:42:7f:b8:5e:1d:2b:35:93:7c:54:13:9f:13:08:bc:3d:b1: 78:bc:a7:e5:c0:54:80:f6:89:26:53:54:bd:d6:2e:4e:40:da: 7f:64:af:29:3e:a0:39:4a:ac:3c:7b:0c:3d:7f:57:2b:fa:8e: 91:94:38:fe:d6:1b:df:55:8c:ad:aa:ef:7e:a5:d9:66:15:9d: ae:3b:f6:38:a0:90:57:f5:cc:13:33:ed:0e:a2:4b:62:41:73: 33:0d:11:29:73:24:33:24:ed:9e:f3:a3:4c:87:8a:43:8f:ca: b6:de:75:88:d9:6a:f4:68:36:a5:37:47:50:31:40:11:4d:38: 1a:3e:9f:c7:2d:b9:1e:51:c1:d3:eb:2e:20:26:4e:07:0d:c9: 7b:be:00:b7:59:51:3b:b2:de:7f:bd:2a:6f:fc:02:eb:3d:67: 6a:42:f9:7a:4f:0e:81:36:05:ad:7a:54:22:2c:b3:96:e2:2c: 07:bd:14:7f:ab:9a:26:72:71:ad:10:b0:49:f1:d8:7c:6b:36: d7:6c:04:04:86:ca:88:22:89:54:56:1c:9a:73:be:b0:5f:8e: d6:fc:2b:fa:fd:9b:37:fe:ac:2e:5c:02:45:9b:4f:50:6c:81: 7c:d0:94:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOCwI+mSJ2i1IdhE7zg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0 ZWFmMTIwHhcNMjUxMjI2MDgwMTAwWhcNMjUxMjI3MDgwMTAwWjAzMTEwLwYDVQQD EygyYTNlMWZmZjJiMDgxYTdjOGNkMjIzNTliZGVhZjY1ZDlkZGE0ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6/FoU0Qu/24exdyzczZbdRyacga c+nytqFOYFRxGVj7JIiR415lb4WOuY0/c/dHH8xhCnByAV9+j6CSotyfJJsfmKvT JcVeha+bkDSZEQ5KVb3kJvzKrbgEpeSS9zPrGRhImkPE9zA059AjBM9h2E34GFv5 RHz5f/FJ+XPZN8HEcgKtw6tsAu8xxMu6vRCoVBlolOw6RjSi8oXjduNHh1dtLeYm NzvkodTiqOoL3d3AXknIVI0q8NmZV5QEVIyt7Rp07i70YmmSZ/aA5/60dKg713If AV2Zdrci0aMyi4zFCDyCUYS44eeGOr+wzM8ZmAxspL0ZrD/DiYR/cahh8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo+H/8rCBp8jNIjWb3q9l2d2k0IMB8GA1UdIwQY MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFqgWUlO R+S+81BWydm58kOm50J/uF4dKzWTfFQTnxMIvD2xeLyn5cBUgPaJJlNUvdYuTkDa f2SvKT6gOUqsPHsMPX9XK/qOkZQ4/tYb31WMrarvfqXZZhWdrjv2OKCQV/XMEzPt DqJLYkFzMw0RKXMkMyTtnvOjTIeKQ4/Ktt51iNlq9Gg2pTdHUDFAEU04Gj6fxy25 HlHB0+suICZOBw3Je74At1lRO7Lef70qb/wC6z1nakL5ek8OgTYFrXpUIiyzluIs B70Uf6uaJnJxrRCwSfHYfGs212wEBIbKiCKJVFYcmnO+sF+O1vwr+v2bN/6sLlwC RZtPUGyBfNCU5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:27 2025 by rpki-client