This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json) Hash identifier: cUA/B+4yn3bxqNZorhfSIhxiuDjnlCk+KdEKEJWvmp4= Subject key identifier: 7B:BB:C3:DE:DA:72:38:CF:75:B6:65:EE:7C:8F:34:9B:0B:F8:03:6D Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f Certificate serial: 019B0E2685F00B54866A08ED4CFDC66386D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft Manifest number: 0795 Signing time: Thu 11 Dec 2025 16:02:44 +0000 Manifest this update: Thu 11 Dec 2025 16:02:44 +0000 Manifest next update: Fri 12 Dec 2025 16:02:44 +0000 Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=) 2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: 8XTnf7KQZcvphieN7xUKfWESBD9ZowfvCWQmP6fdArU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:85:f0:0b:54:86:6a:08:ed:4c:fd:c6:63:86:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f Validity Not Before: Dec 11 16:02:44 2025 GMT Not After : Dec 12 16:02:44 2025 GMT Subject: CN=7bbbc3deda7238cf75b665ee7c8f349b0bf8036d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:90:7a:49:5d:d7:bb:07:8b:f7:74:c0:f7: b0:40:00:69:64:55:17:3a:95:e8:35:43:5e:14:32: 8f:9a:94:41:57:87:69:fe:4b:2c:f6:f4:12:34:27: d5:3b:07:00:31:d7:28:49:d7:2e:85:b2:81:9c:97: 21:47:45:b2:cf:e1:b7:7e:39:2e:ca:ac:8a:f1:63: 3a:6c:cf:e3:5d:af:b1:6d:05:73:e0:18:5a:d1:9f: 22:d3:c2:cc:81:f8:e0:62:15:0c:b2:07:83:99:ce: cf:1b:4a:79:65:a1:b8:89:fe:bf:cd:2b:3b:c2:5f: 72:8e:48:7f:e6:a6:5b:33:13:56:dd:e6:bf:e5:46: 40:9e:ae:43:a5:4e:53:93:5c:d9:49:10:de:82:cd: e6:d3:4c:fa:d5:ac:c7:79:7d:92:f2:ee:42:8f:da: c4:23:81:c3:ce:d5:0c:62:bb:04:ad:e1:03:4c:97: c0:16:5b:5a:c0:0a:c3:b0:f1:45:59:92:8e:43:22: ad:dd:e0:90:da:17:a1:ba:e6:eb:e1:30:93:d9:e7: f8:5e:bf:dd:b9:c1:79:a2:92:d5:3d:6f:92:34:65: 13:8f:80:68:fe:94:05:51:5c:fa:1f:ab:76:43:d6: e8:18:be:7e:90:4c:bf:62:33:d8:70:41:91:2d:1d: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BB:C3:DE:DA:72:38:CF:75:B6:65:EE:7C:8F:34:9B:0B:F8:03:6D X509v3 Authority Key Identifier: keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:0c:33:60:0a:20:65:60:6a:80:bd:9b:d4:3e:d1:76:f4: bf:89:8d:cf:3f:63:47:eb:98:1d:13:f9:0c:84:ce:c1:7b:84: 1b:3d:fe:b3:26:d7:36:9d:0c:43:35:d6:c9:f2:ad:70:1e:79: 65:53:83:0d:86:bf:55:90:53:c4:25:ae:90:08:09:8f:92:a1: f4:a8:ea:8e:fc:a2:24:d1:35:f7:c9:81:4b:5c:48:2d:e9:a1: 4d:74:5e:d7:f7:17:5f:09:99:d9:ac:16:ed:8d:8d:a1:aa:db: ed:fe:e2:5b:ec:87:4c:73:fd:c6:d5:2d:38:b1:c9:01:78:a4: 7a:46:9f:20:44:b0:d2:ba:12:2b:1b:a4:0b:ad:36:21:7a:1d: aa:d6:de:e5:9f:76:15:0f:df:8f:f9:9b:87:4f:46:12:e9:c0: bc:f9:82:21:ec:86:99:06:0f:68:80:4f:4a:11:0d:86:62:9e: d7:fe:94:e6:80:d5:87:e0:39:e2:77:46:86:0e:18:80:7b:a8: c5:8c:fd:49:97:73:99:1c:a8:4a:ac:07:14:03:ce:4a:10:9b: c2:1c:bd:6c:91:b8:16:95:01:61:92:7f:90:94:c4:3d:a8:35: cc:2f:79:c3:ea:c3:e0:b2:55:05:4b:2e:5c:a1:28:2b:60:bd: 12:2d:fc:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJoXwC1SGagjtTP3GY4bRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm ZjE3M2YwHhcNMjUxMjExMTYwMjQ0WhcNMjUxMjEyMTYwMjQ0WjAzMTEwLwYDVQQD Eyg3YmJiYzNkZWRhNzIzOGNmNzViNjY1ZWU3YzhmMzQ5YjBiZjgwMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxayQekld17sHi/d0wPewQABpZFUX OpXoNUNeFDKPmpRBV4dp/kss9vQSNCfVOwcAMdcoSdcuhbKBnJchR0Wyz+G3fjku yqyK8WM6bM/jXa+xbQVz4Bha0Z8i08LMgfjgYhUMsgeDmc7PG0p5ZaG4if6/zSs7 wl9yjkh/5qZbMxNW3ea/5UZAnq5DpU5Tk1zZSRDegs3m00z61azHeX2S8u5Cj9rE I4HDztUMYrsEreEDTJfAFltawArDsPFFWZKOQyKt3eCQ2hehuubr4TCT2ef4Xr/d ucF5opLVPW+SNGUTj4Bo/pQFUVz6H6t2Q9boGL5+kEy/YjPYcEGRLR2bQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu7w97acjjPdbZl7nyPNJsL+ANtMB8GA1UdIwQY MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcucMM2AK IGVgaoC9m9Q+0Xb0v4mNzz9jR+uYHRP5DITOwXuEGz3+sybXNp0MQzXWyfKtcB55 ZVODDYa/VZBTxCWukAgJj5Kh9KjqjvyiJNE198mBS1xILemhTXRe1/cXXwmZ2awW 7Y2Noarb7f7iW+yHTHP9xtUtOLHJAXikekafIESw0roSKxukC602IXodqtbe5Z92 FQ/fj/mbh09GEunAvPmCIeyGmQYPaIBPShENhmKe1/6U5oDVh+A54ndGhg4YgHuo xYz9SZdzmRyoSqwHFAPOShCbwhy9bJG4FpUBYZJ/kJTEPag1zC95w+rD4LJVBUsu XKEoK2C9Ei38RQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:54:31 2025 by rpki-client