This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json) Hash identifier: GdoyTzKeT6RnH/E58/0FJmbasPRlOQ8+l/8Ao/cl9ZM= Subject key identifier: 40:EF:C6:CD:52:01:57:23:28:7B:FD:E0:BE:A6:ED:20:0F:D4:7B:80 Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019AFC55652A2CD0B4EEEFFDD10CDC3DAF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft Manifest number: 1768 Signing time: Mon 08 Dec 2025 05:00:46 +0000 Manifest this update: Mon 08 Dec 2025 05:00:46 +0000 Manifest next update: Tue 09 Dec 2025 05:00:46 +0000 Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=) 2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: oYNTr+kj6Ju4BWPUSBbunL34s+51VcGDeHpqJQDlyoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:65:2a:2c:d0:b4:ee:ef:fd:d1:0c:dc:3d:af:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Dec 8 05:00:46 2025 GMT Not After : Dec 9 05:00:46 2025 GMT Subject: CN=40efc6cd52015723287bfde0bea6ed200fd47b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:22:4b:c9:2d:0f:7e:8c:da:7e:4e:3a:4d: b0:35:23:21:a2:ff:a0:35:cc:70:ed:f7:16:e4:e6: 66:bd:83:3a:50:f0:05:64:e5:92:c5:ad:b2:e3:d7: c3:00:2a:c1:a2:87:a9:e8:08:a8:b7:29:13:9e:dc: 93:0a:74:ef:9e:36:97:8f:10:1a:6d:d5:26:32:0f: 6a:44:d9:c4:86:75:76:e5:e9:6e:bb:f3:ea:9f:e2: 52:54:cc:92:2c:18:63:16:42:9a:d6:c4:46:99:38: ae:9d:db:32:c5:16:03:c9:9e:0c:6b:eb:38:93:37: e0:cb:0f:32:94:82:8d:c7:0c:6a:e2:9d:d4:cd:9e: e5:a8:5c:41:95:c1:26:6d:49:98:20:a8:6c:2f:77: db:5d:cb:ae:69:62:a1:41:62:e1:88:77:57:d8:b7: e0:65:33:8b:44:a1:88:0e:e6:14:cb:6c:d6:f4:0b: d7:5c:2e:8f:9f:00:1b:3b:ac:b1:08:c3:3d:fc:0f: d9:5a:28:fd:3f:29:2e:b0:8f:a5:b0:2d:3c:1d:82: 9a:e0:f3:16:46:71:2a:42:ff:ff:80:08:68:29:c6: 93:f1:cb:25:e6:81:b3:0b:c0:46:7c:be:76:16:f7: 2a:2b:d5:8d:6e:d1:8c:af:b7:55:6a:a2:fa:59:11: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:C6:CD:52:01:57:23:28:7B:FD:E0:BE:A6:ED:20:0F:D4:7B:80 X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7d:f6:c2:0d:4e:56:e5:f5:a1:71:44:4c:1b:89:23:45:bb: 51:92:94:cb:bb:51:eb:bf:53:ac:d7:3a:d7:07:b3:1f:34:9d: a8:83:b1:b5:58:2b:9a:0b:e4:97:cb:ab:91:81:fd:02:e8:a0: 38:16:b1:dc:56:12:a3:e4:5c:57:ae:05:ec:e2:eb:29:27:ce: a9:c6:2a:d1:a3:40:ee:88:78:27:d8:22:2f:4b:f1:fa:ea:3a: 86:e3:e0:e3:e6:ad:60:8d:6b:84:2c:79:eb:a6:a2:ee:0b:a7: 09:27:8f:b8:d3:8a:49:3e:2f:cd:51:de:ef:17:3c:b6:bd:e0: 8e:bf:42:bd:02:89:16:94:b2:ce:da:8a:35:e2:06:12:a2:a5: a7:58:86:63:93:2d:41:db:27:f2:80:8f:27:96:08:c7:59:d9: d6:40:60:68:94:11:f7:a3:d2:bd:8c:81:b8:e9:f8:e2:eb:e5: da:47:fb:81:8a:1d:15:03:30:4c:75:0f:50:78:b9:71:18:6a: 29:80:05:22:cd:13:56:7f:6b:36:bb:6f:24:1b:ad:01:d9:91: f1:48:b8:35:4e:f6:2c:85:45:49:f7:d9:1b:e0:d9:c5:94:3a: 25:a0:dc:66:81:09:d2:d0:49:f8:29:a3:28:fd:d8:34:3c:13: 91:2f:62:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VWUqLNC07u/90QzcPa8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjUxMjA4MDUwMDQ2WhcNMjUxMjA5MDUwMDQ2WjAzMTEwLwYDVQQD Eyg0MGVmYzZjZDUyMDE1NzIzMjg3YmZkZTBiZWE2ZWQyMDBmZDQ3YjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE4iS8ktD36M2n5OOk2wNSMhov+g Ncxw7fcW5OZmvYM6UPAFZOWSxa2y49fDACrBooep6AiotykTntyTCnTvnjaXjxAa bdUmMg9qRNnEhnV25eluu/Pqn+JSVMySLBhjFkKa1sRGmTiundsyxRYDyZ4Ma+s4 kzfgyw8ylIKNxwxq4p3UzZ7lqFxBlcEmbUmYIKhsL3fbXcuuaWKhQWLhiHdX2Lfg ZTOLRKGIDuYUy2zW9AvXXC6PnwAbO6yxCMM9/A/ZWij9PykusI+lsC08HYKa4PMW RnEqQv//gAhoKcaT8csl5oGzC8BGfL52FvcqK9WNbtGMr7dVaqL6WREPfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDvxs1SAVcjKHv94L6m7SAP1HuAMB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ332wg1O VuX1oXFETBuJI0W7UZKUy7tR679TrNc61wezHzSdqIOxtVgrmgvkl8urkYH9Auig OBax3FYSo+RcV64F7OLrKSfOqcYq0aNA7oh4J9giL0vx+uo6huPg4+atYI1rhCx5 66ai7gunCSePuNOKST4vzVHe7xc8tr3gjr9CvQKJFpSyztqKNeIGEqKlp1iGY5Mt Qdsn8oCPJ5YIx1nZ1kBgaJQR96PSvYyBuOn44uvl2kf7gYodFQMwTHUPUHi5cRhq KYAFIs0TVn9rNrtvJButAdmR8Ui4NU72LIVFSffZG+DZxZQ6JaDcZoEJ0tBJ+Cmj KP3YNDwTkS9i+Q== -----END CERTIFICATE-----Generated at Mon Dec 8 07:41:01 2025 by rpki-client