This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft File: _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json) Hash identifier: 8AHn5gRq28dL3gbQYVYL53xnCIZ7vNbuTicYiuEe5O8= Subject key identifier: FC:46:DA:EF:9A:97:9E:9D:D5:D6:03:11:E9:9D:7F:B3:43:80:0E:FB Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019B0FDBF3583E696352CC9615EA6E8ED440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 00:00:31 +0000 Manifest this update: Fri 12 Dec 2025 00:00:31 +0000 Manifest next update: Sat 13 Dec 2025 00:00:31 +0000 Files and hashes: 1: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=) 2: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=) 3: ZehywsFIw6zmSabJPOURntRxi2o.roa (hash: Z54sJab0NzRMzbhXOSvnBEqROWZ+D/M0wqcoEfAbg04=) 4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: Inlotuc12BQoWQa4pGy0h7QcFPyHqUx57TSkMHje1Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:db:f3:58:3e:69:63:52:cc:96:15:ea:6e:8e:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Dec 12 00:00:31 2025 GMT Not After : Dec 13 00:00:31 2025 GMT Subject: CN=fc46daef9a979e9dd5d60311e99d7fb343800efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:58:4d:11:de:ab:be:a4:52:d3:4d:41:ec: 69:f3:de:3b:c4:bd:57:5d:c8:de:a7:a9:6a:7f:96: 69:bd:09:9b:e6:c1:f4:7e:97:e3:52:b1:97:d9:6a: ca:95:ce:d0:98:8e:8d:c7:9e:a2:b2:07:76:8d:0a: f3:f6:1e:c3:5f:e5:d7:3c:bd:13:8e:1d:e1:73:66: 1b:61:ac:b6:97:e1:06:32:f4:f4:bf:53:90:cf:ce: b0:5e:94:27:f4:c6:93:7f:45:25:68:84:b9:6b:8d: 9e:d3:59:0e:61:d8:bd:ae:fe:bd:c6:b6:cb:97:f8: c6:96:e4:3b:bd:7d:47:3e:bf:c2:ec:7a:ac:01:55: 78:0d:c9:70:a5:ba:54:6c:46:f1:b1:6a:8e:fa:70: 7c:fc:ba:82:e7:81:0e:8f:0b:a9:82:eb:08:81:33: 70:fb:72:ac:1e:89:83:fe:01:07:59:39:3b:1d:c7: a1:97:7c:2f:33:fe:17:2e:41:74:1c:7f:e5:d9:c8: e8:69:ad:6c:27:8b:b5:32:f3:62:b8:8c:35:03:86: f0:b2:97:16:ec:64:c1:f4:15:bc:98:ce:93:7c:1b: 6d:99:62:2a:68:42:e5:bf:f2:b1:fb:81:92:bf:ab: 86:c3:63:73:b3:45:18:61:c7:b2:96:e7:8e:f1:a9: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:DA:EF:9A:97:9E:9D:D5:D6:03:11:E9:9D:7F:B3:43:80:0E:FB X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f7:72:3d:df:87:cb:d1:4e:28:56:93:41:d6:a3:81:c1:d6: a6:94:26:95:e5:2e:3b:45:19:2c:37:a0:21:53:e9:6a:a1:50: ee:16:54:f9:6f:9e:e5:4a:d2:43:07:54:43:9e:d6:fe:92:a1: 3b:cc:d5:1b:9c:cd:a9:75:44:3d:33:09:32:31:55:b8:67:e5: fd:ff:9e:a5:af:83:a7:e8:e2:2a:c9:1a:96:24:2b:ea:73:cf: 51:57:f9:cb:08:38:4d:6f:18:d4:db:1c:23:90:c7:43:2e:83: a6:0d:c4:24:87:32:df:4a:be:c8:c1:78:1b:71:ad:de:c0:0e: b9:2d:d3:1d:e1:50:73:58:4f:cb:d8:5f:76:ae:fc:99:e2:d6: fd:2b:14:90:84:ac:93:1a:17:9c:a8:16:9c:b2:12:c6:d5:93: 1a:f7:aa:2d:20:ee:13:1b:7f:f2:62:f0:44:5b:f4:66:9e:94: fb:4d:fe:62:c0:fb:77:50:89:19:d6:f4:eb:dc:67:a1:ae:a1: c7:4c:d0:39:0c:b1:ad:b2:50:47:a6:c3:95:97:4c:7a:89:53: 92:1c:42:c4:c1:95:1f:5b:9f:ef:e9:38:73:b9:34:e4:15:f6: 4c:b8:96:0d:f9:56:61:e1:0f:d6:65:7e:bd:80:17:bb:c7:f1: f3:de:05:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP2/NYPmljUsyWFepujtRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjUxMjEyMDAwMDMxWhcNMjUxMjEzMDAwMDMxWjAzMTEwLwYDVQQD EyhmYzQ2ZGFlZjlhOTc5ZTlkZDVkNjAzMTFlOTlkN2ZiMzQzODAwZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKVYTRHeq76kUtNNQexp8947xL1X Xcjep6lqf5ZpvQmb5sH0fpfjUrGX2WrKlc7QmI6Nx56isgd2jQrz9h7DX+XXPL0T jh3hc2YbYay2l+EGMvT0v1OQz86wXpQn9MaTf0UlaIS5a42e01kOYdi9rv69xrbL l/jGluQ7vX1HPr/C7HqsAVV4DclwpbpUbEbxsWqO+nB8/LqC54EOjwupgusIgTNw +3KsHomD/gEHWTk7Hcehl3wvM/4XLkF0HH/l2cjoaa1sJ4u1MvNiuIw1A4bwspcW 7GTB9BW8mM6TfBttmWIqaELlv/Kx+4GSv6uGw2Nzs0UYYceylueO8akNDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxG2u+al56d1dYDEemdf7NDgA77MB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPdyPd+H y9FOKFaTQdajgcHWppQmleUuO0UZLDegIVPpaqFQ7hZU+W+e5UrSQwdUQ57W/pKh O8zVG5zNqXVEPTMJMjFVuGfl/f+epa+Dp+jiKskaliQr6nPPUVf5ywg4TW8Y1Nsc I5DHQy6Dpg3EJIcy30q+yMF4G3Gt3sAOuS3THeFQc1hPy9hfdq78meLW/SsUkISs kxoXnKgWnLISxtWTGveqLSDuExt/8mLwRFv0Zp6U+03+YsD7d1CJGdb069xnoa6h x0zQOQyxrbJQR6bDlZdMeolTkhxCxMGVH1uf7+k4c7k05BX2TLiWDflWYeEP1mV+ vYAXu8fx894FZQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:56:00 2025 by rpki-client