This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json) Hash identifier: KkZ108rno/4rFckV4SUa9oKakEfOyGowYN+RritFP6Q= Subject key identifier: E6:EB:61:EA:4F:34:39:49:C2:9F:7E:99:4F:B9:0F:1B:05:BB:AA:33 Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f Certificate serial: 019B4626F1C1C9D27A1F09FF5BBEC3809C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft Manifest number: 07B2 Signing time: Mon 22 Dec 2025 13:01:55 +0000 Manifest this update: Mon 22 Dec 2025 13:01:55 +0000 Manifest next update: Tue 23 Dec 2025 13:01:55 +0000 Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=) 2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: keTQULIZH2Hxg5Eh/yZXl757sIVzs77KPpeSOjf4nUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:f1:c1:c9:d2:7a:1f:09:ff:5b:be:c3:80:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f Validity Not Before: Dec 22 13:01:55 2025 GMT Not After : Dec 23 13:01:55 2025 GMT Subject: CN=e6eb61ea4f343949c29f7e994fb90f1b05bbaa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:6e:fd:91:7e:8e:25:64:c9:db:b7:34:5f: 31:da:e0:d2:e4:96:26:6d:c5:2e:7d:d5:7f:52:69: e3:71:c1:e0:00:e0:63:c8:06:07:ef:03:84:ef:da: 97:f1:3f:7c:a0:60:71:43:ba:4d:5a:6a:d8:e6:f5: 9c:a5:e4:e1:c9:c5:00:2a:da:2d:9e:b8:9f:18:e5: 58:02:b1:48:66:88:f6:71:b8:cd:de:64:da:59:07: 80:17:02:05:46:08:0b:d5:ae:4e:b7:28:e9:71:ec: 78:d0:98:99:cd:94:9e:59:d5:27:48:52:03:f5:d1: 59:b4:df:53:17:bd:67:5f:33:84:ba:88:d2:b0:58: 98:e0:ff:5f:42:62:b8:87:51:40:55:9c:27:09:dd: 04:0c:f8:e4:8f:2f:73:22:9d:80:e8:03:23:e6:cc: d3:b5:77:83:9d:f0:43:4b:15:59:54:a5:40:14:1d: 07:91:84:10:46:9f:95:58:43:8a:d8:d0:c7:f1:8c: e3:bf:42:3e:18:e1:12:9c:34:bc:29:ae:b6:dd:d7: 7e:42:e9:b3:42:d9:7e:db:4d:2c:75:f0:c5:71:4d: d7:65:1f:b6:78:91:2b:80:3e:7f:a8:17:2b:6c:ee: 0e:d1:4b:dc:71:e0:ab:99:72:55:e6:bb:5c:9d:a8: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EB:61:EA:4F:34:39:49:C2:9F:7E:99:4F:B9:0F:1B:05:BB:AA:33 X509v3 Authority Key Identifier: keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7d:c6:eb:10:46:2c:69:cf:0d:04:5a:10:0a:7b:11:22:44: 86:de:16:9f:88:93:75:90:3a:5e:88:df:f3:d6:2a:be:ad:3e: 6a:8e:b4:c5:77:40:0a:01:70:a0:27:e9:45:bc:75:dc:07:e7: 37:56:b8:62:98:6f:d6:bc:56:9b:c7:e0:42:5a:e5:77:76:bf: d3:84:69:08:a0:ec:59:a8:0b:71:6f:64:fc:49:95:de:cb:33: 00:fc:81:9d:14:ab:7e:37:a4:b3:40:11:b7:d9:ce:54:16:c3: ae:a1:9c:0a:13:f4:24:10:8a:f5:1f:f1:5e:0e:09:c3:6c:8b: 84:cc:1e:7a:33:1e:92:44:c5:fa:0c:ec:6b:27:7a:ca:f3:81: 43:e5:f9:75:3a:49:04:e6:df:fe:2c:3e:ed:f7:6f:04:1c:da: 19:55:7a:48:f5:5a:d6:cc:9d:5e:69:36:07:0a:09:21:13:69: 2a:8f:b1:54:45:eb:3c:df:38:4a:bf:54:dc:5f:96:4e:7b:e0: 85:ad:a2:2b:66:1d:9d:a7:62:bc:7d:db:52:35:7a:20:bb:2a: 83:36:10:b3:fe:bf:bf:b1:96:1b:cc:bd:0b:f5:0d:38:a4:82: ef:43:d8:95:5a:58:76:60:a4:40:b8:b2:bf:d7:f3:1c:a5:6b: 7b:53:a7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJvHBydJ6Hwn/W77DgJxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm ZjE3M2YwHhcNMjUxMjIyMTMwMTU1WhcNMjUxMjIzMTMwMTU1WjAzMTEwLwYDVQQD EyhlNmViNjFlYTRmMzQzOTQ5YzI5ZjdlOTk0ZmI5MGYxYjA1YmJhYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZJu/ZF+jiVkydu3NF8x2uDS5JYm bcUufdV/UmnjccHgAOBjyAYH7wOE79qX8T98oGBxQ7pNWmrY5vWcpeThycUAKtot nrifGOVYArFIZoj2cbjN3mTaWQeAFwIFRggL1a5Otyjpcex40JiZzZSeWdUnSFID 9dFZtN9TF71nXzOEuojSsFiY4P9fQmK4h1FAVZwnCd0EDPjkjy9zIp2A6AMj5szT tXeDnfBDSxVZVKVAFB0HkYQQRp+VWEOK2NDH8Yzjv0I+GOESnDS8Ka623dd+Qumz Qtl+200sdfDFcU3XZR+2eJErgD5/qBcrbO4O0UvcceCrmXJV5rtcnahz8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObrYepPNDlJwp9+mU+5DxsFu6ozMB8GA1UdIwQY MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn3G6xBG LGnPDQRaEAp7ESJEht4Wn4iTdZA6Xojf89Yqvq0+ao60xXdACgFwoCfpRbx13Afn N1a4Yphv1rxWm8fgQlrld3a/04RpCKDsWagLcW9k/EmV3sszAPyBnRSrfjeks0AR t9nOVBbDrqGcChP0JBCK9R/xXg4Jw2yLhMweejMekkTF+gzsayd6yvOBQ+X5dTpJ BObf/iw+7fdvBBzaGVV6SPVa1sydXmk2BwoJIRNpKo+xVEXrPN84Sr9U3F+WTnvg ha2iK2YdnadivH3bUjV6ILsqgzYQs/6/v7GWG8y9C/UNOKSC70PYlVpYdmCkQLiy v9fzHKVre1On2A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:47 2025 by rpki-client