This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json) Hash identifier: sVY5tr5Y6/QMeifj9CbqC6wVw0So1V7KRP1ax6pAiUg= Subject key identifier: 2D:BA:A5:69:99:D9:85:21:D1:F9:46:42:F9:E5:E9:7F:01:99:D5:F6 Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Certificate serial: 019B32686940EB2ACEAC0E3CE1AAC5FD30E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 17:01:01 +0000 Manifest this update: Thu 18 Dec 2025 17:01:01 +0000 Manifest next update: Fri 19 Dec 2025 17:01:01 +0000 Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=) 2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: BI7knuLbiFi+BfikBJ0gU3aaVw8RKqXbwCsf7n2tPQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:69:40:eb:2a:ce:ac:0e:3c:e1:aa:c5:fd:30:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c Validity Not Before: Dec 18 17:01:01 2025 GMT Not After : Dec 19 17:01:01 2025 GMT Subject: CN=2dbaa56999d98521d1f94642f9e5e97f0199d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:ea:7b:71:db:c3:e4:df:77:bf:75:60:9a: 08:45:2c:5d:3f:74:66:83:8a:99:49:e5:9e:a8:80: 70:c3:07:45:4d:3b:56:de:91:49:1c:96:81:15:33: 18:b5:27:21:51:1d:de:a5:06:41:b5:dd:22:58:04: 97:30:a7:55:87:a3:e6:a1:6b:0c:e9:3d:a4:20:88: 31:0f:82:89:bd:b8:81:19:f8:c6:5a:7f:7e:46:e1: c6:5d:eb:3a:f4:b3:b5:15:68:ed:b5:a1:27:ed:a4: 26:13:c7:13:33:39:c7:6f:fd:79:5b:a1:b5:64:9c: f2:00:7b:41:6a:1f:8e:ed:e0:60:e0:cb:41:6e:79: e0:bc:ed:d2:18:21:51:a3:54:e3:63:54:6f:89:05: 5a:2b:d4:4c:46:34:54:4e:35:1b:01:45:54:68:3f: be:06:05:2a:f1:71:d3:ab:6a:80:63:56:53:2c:3f: 27:0b:1f:7a:fb:9b:72:95:fe:ae:71:8f:ad:3b:7b: 13:bb:92:86:48:05:5a:c2:e9:f9:72:05:e1:7a:ec: 85:4c:3a:09:52:7a:39:f2:73:4b:58:17:f6:f2:ef: 95:3c:50:ad:80:14:f1:5e:74:52:93:8f:51:c9:e3: 08:16:c4:c2:5d:0e:55:77:ea:57:98:a3:26:6f:f0: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:A5:69:99:D9:85:21:D1:F9:46:42:F9:E5:E9:7F:01:99:D5:F6 X509v3 Authority Key Identifier: keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:c5:f1:d8:0d:af:11:f5:fc:56:c5:30:53:f1:1e:36:ee: df:ec:ed:24:98:2d:17:58:66:04:50:80:66:ca:f1:7b:61:35: 07:fd:16:81:f7:ce:ed:4e:cc:bc:a7:fb:a7:3d:cd:cc:b5:bf: 36:1f:92:07:bf:a1:5c:37:0b:89:b1:16:15:3e:57:56:bb:ce: 29:46:3d:20:c1:81:fa:e8:77:0f:54:56:15:a6:5a:bc:31:96: 5f:a4:0d:43:2e:ae:69:b7:17:f9:55:28:b1:aa:84:5e:6b:4c: 60:40:de:02:c2:64:51:65:0f:76:5f:6e:2a:55:64:3e:85:0b: 87:c5:d6:3f:90:73:de:00:2c:db:65:4d:e1:e0:4c:6e:23:82: 6b:48:1e:7c:2b:84:0a:16:8f:e0:5d:be:35:62:44:42:f2:55: a1:75:6b:68:d1:9b:b0:c8:31:77:64:17:73:19:2a:58:f1:e8: 8e:b8:6c:d3:9a:a7:31:68:7f:d4:9f:2e:b5:a8:eb:18:d3:d2: 2b:a6:07:41:6f:9c:00:26:a6:be:0e:d9:d8:f5:ad:93:2c:15: 21:19:51:2f:27:6c:35:92:48:bc:5d:36:a8:0b:76:1f:9a:9b: 2d:08:89:10:2c:62:92:89:9d:38:10:77:fd:ea:c6:95:ce:b4: c7:16:6c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaGlA6yrOrA484arF/TDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj MTUxMmMwHhcNMjUxMjE4MTcwMTAxWhcNMjUxMjE5MTcwMTAxWjAzMTEwLwYDVQQD EygyZGJhYTU2OTk5ZDk4NTIxZDFmOTQ2NDJmOWU1ZTk3ZjAxOTlkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPzqe3Hbw+Tfd791YJoIRSxdP3Rm g4qZSeWeqIBwwwdFTTtW3pFJHJaBFTMYtSchUR3epQZBtd0iWASXMKdVh6PmoWsM 6T2kIIgxD4KJvbiBGfjGWn9+RuHGXes69LO1FWjttaEn7aQmE8cTMznHb/15W6G1 ZJzyAHtBah+O7eBg4MtBbnngvO3SGCFRo1TjY1RviQVaK9RMRjRUTjUbAUVUaD++ BgUq8XHTq2qAY1ZTLD8nCx96+5tylf6ucY+tO3sTu5KGSAVawun5cgXheuyFTDoJ Uno58nNLWBf28u+VPFCtgBTxXnRSk49RyeMIFsTCXQ5Vd+pXmKMmb/DDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC26pWmZ2YUh0flGQvnl6X8BmdX2MB8GA1UdIwQY MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1 LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccDF8dgN rxH1/FbFMFPxHjbu3+ztJJgtF1hmBFCAZsrxe2E1B/0WgffO7U7MvKf7pz3NzLW/ Nh+SB7+hXDcLibEWFT5XVrvOKUY9IMGB+uh3D1RWFaZavDGWX6QNQy6uabcX+VUo saqEXmtMYEDeAsJkUWUPdl9uKlVkPoULh8XWP5Bz3gAs22VN4eBMbiOCa0gefCuE ChaP4F2+NWJEQvJVoXVraNGbsMgxd2QXcxkqWPHojrhs05qnMWh/1J8utajrGNPS K6YHQW+cACamvg7Z2PWtkywVIRlRLydsNZJIvF02qAt2H5qbLQiJECxikomdOBB3 /erGlc60xxZsaA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:43 2025 by rpki-client