This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json) Hash identifier: u566PegctQHnKMpkR+xMI9OlJw1e5T3P/PuIw0Q6Yr0= Subject key identifier: 1A:3F:55:60:F2:8E:DE:1D:8D:09:89:51:C4:3B:5B:5F:8D:3C:3C:D5 Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Certificate serial: 019B2407AC8BFEF4ECC2A83CC4520BCC215C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 22:00:41 +0000 Manifest this update: Mon 15 Dec 2025 22:00:41 +0000 Manifest next update: Tue 16 Dec 2025 22:00:41 +0000 Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=) 2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=) 3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=) 4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: oESi1vm78IM8HjLTVhR/msAN5hvPyfw8t/AVnfBF5jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:ac:8b:fe:f4:ec:c2:a8:3c:c4:52:0b:cc:21:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2 Validity Not Before: Dec 15 22:00:41 2025 GMT Not After : Dec 16 22:00:41 2025 GMT Subject: CN=1a3f5560f28ede1d8d098951c43b5b5f8d3c3cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:a4:d8:4c:64:eb:ef:6e:4e:63:57:ea:b8: 6d:61:68:30:16:a1:ef:ec:3f:32:c8:fa:59:39:60: 65:a7:46:3f:b8:47:bb:5e:07:8c:04:85:24:7a:82: 92:a2:a2:7d:2c:4d:65:c9:fb:b9:bf:bd:8e:a0:84: d3:fb:b1:1f:ac:37:86:59:25:93:31:c9:f5:fb:20: 79:c1:45:2a:b1:35:3e:2e:b7:9b:01:f8:5e:f8:b0: 58:a2:5b:21:f6:ab:57:5c:7d:79:7b:3d:9a:a8:79: 4f:87:f2:45:2c:f5:e9:e9:6d:cd:bb:94:6a:d0:31: ce:41:11:97:cc:3d:b7:37:97:8b:34:71:ff:72:e3: 29:63:a8:15:3f:aa:5a:d1:f0:31:fd:56:25:f2:00: d2:c8:33:45:3f:4f:e0:7a:30:5d:88:75:c1:2b:9b: 5d:a5:c9:91:e1:32:7a:f5:d8:6d:bb:f8:43:43:d4: 15:c8:a1:ba:f0:09:3d:b1:46:af:68:b8:a2:9a:fa: 49:c9:46:59:2e:95:e2:9a:32:fb:82:ee:a1:05:1d: 40:43:d4:77:f4:09:5c:8a:03:ee:a9:97:6a:c9:57: 4c:6c:36:ae:c3:24:9f:79:4b:c1:e7:41:15:af:99: 99:55:19:89:e1:f2:d6:16:bc:af:e8:39:48:ef:d2: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:55:60:F2:8E:DE:1D:8D:09:89:51:C4:3B:5B:5F:8D:3C:3C:D5 X509v3 Authority Key Identifier: keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e3:82:b0:6e:33:0b:1c:ac:c7:f7:32:e9:fa:8c:55:fe:83: 73:c0:59:1a:92:5a:7e:e5:ee:76:07:58:df:a4:f3:2a:04:59: 46:6c:a3:4b:f6:75:bf:6f:89:89:41:b2:c7:f0:fe:05:73:b0: 51:da:39:73:e0:bf:9c:03:5f:da:d1:98:53:cf:e8:d5:74:ab: 7a:83:22:fd:52:0d:df:fa:4d:c8:97:0b:20:47:a2:8d:a1:c1: 7d:66:e3:24:3d:4d:2f:03:46:d0:c2:63:7e:2a:38:3a:6e:42: 4e:b0:4a:84:e4:e6:22:1b:ce:cd:47:46:46:bf:60:a5:6e:0e: b8:d5:35:05:e7:46:60:06:bb:93:27:6b:ee:f4:0c:49:96:f1: ee:84:f4:ff:c3:dd:14:5e:f5:8d:b3:90:1c:a4:69:cc:bf:a2: c9:d6:73:12:51:fa:59:45:ab:37:28:fa:23:1e:ba:76:0e:7c: d3:48:36:4b:dd:0a:a4:58:93:b8:92:ac:82:f7:cf:28:be:12: 91:0f:aa:83:df:7a:03:4e:69:fa:5e:48:dd:e9:9d:fd:bb:c1: 12:68:13:9c:de:a3:30:3f:68:5a:25:a8:57:cd:99:00:7f:85: 2a:eb:40:62:42:73:f3:fe:d1:f5:8a:a5:00:fc:3b:a0:09:bf: 39:e9:23:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB6yL/vTswqg8xFILzCFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw OTJlYzIwHhcNMjUxMjE1MjIwMDQxWhcNMjUxMjE2MjIwMDQxWjAzMTEwLwYDVQQD EygxYTNmNTU2MGYyOGVkZTFkOGQwOTg5NTFjNDNiNWI1ZjhkM2MzY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ik2Exk6+9uTmNX6rhtYWgwFqHv 7D8yyPpZOWBlp0Y/uEe7XgeMBIUkeoKSoqJ9LE1lyfu5v72OoITT+7EfrDeGWSWT Mcn1+yB5wUUqsTU+LrebAfhe+LBYolsh9qtXXH15ez2aqHlPh/JFLPXp6W3Nu5Rq 0DHOQRGXzD23N5eLNHH/cuMpY6gVP6pa0fAx/VYl8gDSyDNFP0/gejBdiHXBK5td pcmR4TJ69dhtu/hDQ9QVyKG68Ak9sUavaLiimvpJyUZZLpXimjL7gu6hBR1AQ9R3 9AlcigPuqZdqyVdMbDauwySfeUvB50EVr5mZVRmJ4fLWFryv6DlI79JLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo/VWDyjt4djQmJUcQ7W1+NPDzVMB8GA1UdIwQY MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeOCsG4z Cxysx/cy6fqMVf6Dc8BZGpJafuXudgdY36TzKgRZRmyjS/Z1v2+JiUGyx/D+BXOw Udo5c+C/nANf2tGYU8/o1XSreoMi/VIN3/pNyJcLIEeijaHBfWbjJD1NLwNG0MJj fio4Om5CTrBKhOTmIhvOzUdGRr9gpW4OuNU1BedGYAa7kydr7vQMSZbx7oT0/8Pd FF71jbOQHKRpzL+iydZzElH6WUWrNyj6Ix66dg5800g2S90KpFiTuJKsgvfPKL4S kQ+qg996A05p+l5I3emd/bvBEmgTnN6jMD9oWiWoV82ZAH+FKutAYkJz8/7R9Yql APw7oAm/OekjHw== -----END CERTIFICATE-----Generated at Tue Dec 16 03:36:27 2025 by rpki-client