This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json) Hash identifier: mw+VjTlyJ0RdSKNyCLUGqM8ruFbchyCGRUu+1Eityq0= Subject key identifier: 99:94:D5:AC:23:3A:68:3D:6F:41:33:59:A1:09:7D:A2:7C:19:49:71 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019B59E45123E4AD3120A74F9971C8DE7B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft Manifest number: 17A9 Signing time: Fri 26 Dec 2025 09:01:33 +0000 Manifest this update: Fri 26 Dec 2025 09:01:33 +0000 Manifest next update: Sat 27 Dec 2025 09:01:33 +0000 Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: QhoEW6UcXLY74fS82MHRSa/k8gEUHey8/9SR/vdXjn0=) 2: Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa (hash: 1KviszHGUWXOr/tWRch996CmVk/jhxQWF3ZbHboz1x0=) 3: TVdMvWqw1htszUYNzjNbJCLoB5E.roa (hash: foQV6nzx0p2Jf/6zVQhbgSh2HWXGgIdVnlGoTKdrM+4=) 4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:51:23:e4:ad:31:20:a7:4f:99:71:c8:de:7b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Dec 26 09:01:33 2025 GMT Not After : Dec 27 09:01:33 2025 GMT Subject: CN=9994d5ac233a683d6f413359a1097da27c194971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:2e:69:1d:3e:f2:80:c9:ea:b4:ca:87:25: 98:b4:6c:32:ca:2a:60:2e:19:11:33:71:3f:ed:ec: 77:9b:16:7c:d9:e0:c2:56:d2:04:20:19:9e:d1:71: 37:e5:5f:73:19:48:3f:63:d5:8c:88:d0:df:a1:b9: f4:f5:7d:6b:49:2b:c4:2c:a4:f0:18:eb:b3:e3:7e: 25:32:b0:2d:c6:b0:b4:11:c5:5f:1f:1c:8f:e6:56: 73:39:0a:73:f7:f9:de:42:85:86:84:57:ca:5f:49: 97:41:24:28:c7:67:77:85:66:0e:76:56:26:fd:e6: 4d:ea:ba:b5:9d:d8:ee:ea:c6:9f:43:e4:db:f1:66: 43:e6:bf:83:fa:fd:0f:90:89:4c:24:4f:bd:49:de: cb:78:67:a5:1d:70:4f:99:8e:2e:79:e5:00:66:8b: f2:92:a9:31:cf:c0:e8:93:f9:b4:a4:7c:23:6d:25: ec:49:c7:e0:d5:9a:d4:26:54:dd:3f:e4:5a:28:67: 23:20:12:67:9c:81:0a:10:08:30:75:83:f8:9a:c1: c2:57:17:41:e3:3e:f9:40:36:34:04:16:d3:c4:98: c4:c5:c3:f3:d8:64:4c:9c:cf:3e:55:61:d1:0d:03: 28:4d:c4:78:7b:99:ea:64:d5:0b:d1:ca:07:b4:84: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:D5:AC:23:3A:68:3D:6F:41:33:59:A1:09:7D:A2:7C:19:49:71 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:af:12:6a:92:42:a6:12:6f:42:04:e9:8d:ec:ce:a6:77: 5b:28:73:f5:77:fb:2b:04:76:c1:ee:29:da:24:21:94:a4:58: 7e:f4:78:ed:a3:cb:6d:cc:cd:94:03:7b:21:d7:ac:9a:1e:a5: db:ad:11:d3:00:bd:59:86:3b:fe:78:f7:82:87:d3:31:9e:f1: 36:41:51:0f:f5:98:1a:12:24:7d:ac:0e:24:1c:78:1d:f1:98: 87:28:99:0c:ed:c7:11:57:03:ff:38:3f:43:fc:20:21:bd:33: dd:77:af:ba:8c:56:47:eb:45:cb:d3:33:7a:f9:ff:46:7b:86: c0:e9:2b:99:bb:a7:cc:b7:06:9c:55:e1:b3:77:f1:9e:5e:8f: c9:03:bf:7c:05:da:76:79:ba:7c:03:9d:ed:78:01:67:97:a7: c8:a8:19:4a:5a:05:52:b0:3b:32:0c:52:3a:43:ad:af:61:43: 1d:94:38:de:b1:48:35:f4:0f:1f:64:42:9a:31:a1:d6:e4:5c: 58:30:c5:86:65:e3:de:f8:a8:f4:eb:9b:18:3f:16:d8:91:8d: 2d:28:04:01:f1:2f:fd:c4:b2:21:4c:16:4f:25:08:43:3c:01: 7b:e3:43:74:6d:0c:7a:4b:f5:03:39:2f:37:63:b2:18:50:b0: 57:57:7e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FEj5K0xIKdPmXHI3nssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjUxMjI2MDkwMTMzWhcNMjUxMjI3MDkwMTMzWjAzMTEwLwYDVQQD Eyg5OTk0ZDVhYzIzM2E2ODNkNmY0MTMzNTlhMTA5N2RhMjdjMTk0OTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ouaR0+8oDJ6rTKhyWYtGwyyipg LhkRM3E/7ex3mxZ82eDCVtIEIBme0XE35V9zGUg/Y9WMiNDfobn09X1rSSvELKTw GOuz434lMrAtxrC0EcVfHxyP5lZzOQpz9/neQoWGhFfKX0mXQSQox2d3hWYOdlYm /eZN6rq1ndju6safQ+Tb8WZD5r+D+v0PkIlMJE+9Sd7LeGelHXBPmY4ueeUAZovy kqkxz8Dok/m0pHwjbSXsScfg1ZrUJlTdP+RaKGcjIBJnnIEKEAgwdYP4msHCVxdB 4z75QDY0BBbTxJjExcPz2GRMnM8+VWHRDQMoTcR4e5nqZNUL0coHtISfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmU1awjOmg9b0EzWaEJfaJ8GUlxMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3uvEmqS QqYSb0IE6Y3szqZ3Wyhz9Xf7KwR2we4p2iQhlKRYfvR47aPLbczNlAN7Idesmh6l 260R0wC9WYY7/nj3gofTMZ7xNkFRD/WYGhIkfawOJBx4HfGYhyiZDO3HEVcD/zg/ Q/wgIb0z3XevuoxWR+tFy9Mzevn/RnuGwOkrmbunzLcGnFXhs3fxnl6PyQO/fAXa dnm6fAOd7XgBZ5enyKgZSloFUrA7MgxSOkOtr2FDHZQ43rFINfQPH2RCmjGh1uRc WDDFhmXj3vio9OubGD8W2JGNLSgEAfEv/cSyIUwWTyUIQzwBe+NDdG0Mekv1Azkv N2OyGFCwV1d+Mg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:23 2025 by rpki-client