This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json) Hash identifier: qZ7vspwlv5o/7xFHL8c+Ok/hWiVVR2j44Ht8U7c8vM8= Subject key identifier: 7A:3D:47:C9:D9:BB:3C:06:44:2E:E2:46:40:0C:26:8E:F0:A9:6B:AE Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019AF80AA072A5FF491A951DD90296739DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft Manifest number: 080A Signing time: Sun 07 Dec 2025 09:00:37 +0000 Manifest this update: Sun 07 Dec 2025 09:00:37 +0000 Manifest next update: Mon 08 Dec 2025 09:00:37 +0000 Files and hashes: 1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: +G+IQlla6Saax5bZ44xRrggK/oLbPYTEy+inP+9pnQk=) 2: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=) 3: orj-Fixx4A4juS-1X934vffLD8o.roa (hash: J+pYVYwK1M5g1D7W7QYyMTB9RQs4NzDsKsiKv4dwqAY=) 4: uLBMYegUP8tr8kerX1auVghRTuo.roa (hash: ObMmlvRRjGND9SS2xSn/Yi9qsVHAdvZK1zpCASvTGOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:a0:72:a5:ff:49:1a:95:1d:d9:02:96:73:9d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 7 09:00:37 2025 GMT Not After : Dec 8 09:00:37 2025 GMT Subject: CN=7a3d47c9d9bb3c06442ee246400c268ef0a96bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:8f:f0:81:c5:49:a9:e9:e9:1d:c4:de:9e: 9d:a2:51:5b:5f:33:0b:9a:f0:ca:4e:c4:56:c7:26: 9a:50:a1:48:eb:4b:d9:0b:57:20:0c:d1:11:8c:d5: 3f:6b:42:8a:f2:6f:04:5c:64:29:cb:f4:38:f0:d3: 7f:9f:7a:cc:0b:b5:c5:83:e5:d2:f3:5a:63:1d:3f: 7d:87:f6:71:7f:28:df:4d:4e:21:b9:11:1e:4e:2d: ff:08:ee:0a:d0:a6:32:42:c7:aa:37:8e:3d:17:43: 97:d1:c3:9b:d4:a5:7d:50:de:78:7d:58:02:55:bb: b7:93:75:66:ab:1d:76:f8:51:a3:d7:ed:20:6a:26: dc:2a:76:e7:c0:5c:8b:00:8d:10:c1:d3:81:e9:7b: 01:bd:c4:35:bb:3f:65:ec:05:7e:fa:2a:0b:26:1a: 0e:2b:09:9f:54:d9:62:82:8d:db:30:ca:50:73:0f: 2d:10:1e:16:d7:6d:a9:8a:f6:ad:70:11:03:0d:76: 65:44:91:f6:d5:9e:80:42:ca:21:c9:7c:94:f8:3b: a9:db:0f:bf:84:f9:0f:b0:3d:65:cc:7d:66:79:bf: 8f:28:00:6b:49:14:29:9e:32:bf:0d:ff:79:85:80: ae:78:21:79:e4:6b:c5:54:9e:40:9a:35:b4:8a:ed: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3D:47:C9:D9:BB:3C:06:44:2E:E2:46:40:0C:26:8E:F0:A9:6B:AE X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ec:3c:13:26:4a:70:28:9f:73:f4:a5:08:32:3e:0a:09:14: 3f:68:67:96:dd:d4:7f:3d:56:a5:55:60:9b:d4:f7:12:8f:b0: 8c:d2:40:d0:fb:6f:91:69:11:40:73:aa:1c:fe:0e:96:b7:53: 9c:6d:ee:82:28:c1:08:17:cd:91:f0:1c:22:e8:79:95:7a:c7: ba:03:5e:ba:9a:14:11:4e:10:c0:ec:8d:d5:8d:7f:3b:9e:0f: e4:83:34:fe:eb:a6:e1:ee:23:3b:a8:31:a9:91:83:36:fd:20: 7c:4a:b2:02:2a:96:03:d2:2b:9b:39:26:a0:df:cf:2e:4e:2a: 54:5d:f4:68:23:4e:1b:2e:69:3c:40:40:00:93:d9:ad:2f:65: 9a:d3:28:ea:ac:dd:ef:ed:9e:44:42:36:7e:f3:9c:2d:49:88: ab:2a:be:a1:3b:d4:ee:7c:17:b6:f0:89:f4:66:7b:4f:9a:3d: 2d:f1:24:ce:1b:24:00:fc:bc:24:ea:1d:1d:f8:62:10:2c:db: 2a:4c:a8:77:f5:89:03:fe:f5:d7:1f:c3:fd:d5:aa:b7:da:3c: 37:77:d8:83:85:19:ac:dd:b9:41:67:06:d8:f9:57:2e:ca:d0: d0:30:f0:cf:05:70:e8:8a:0f:ee:e4:ed:b8:63:0a:57:77:a4: 3b:66:56:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CqBypf9JGpUd2QKWc524MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjA3MDkwMDM3WhcNMjUxMjA4MDkwMDM3WjAzMTEwLwYDVQQD Eyg3YTNkNDdjOWQ5YmIzYzA2NDQyZWUyNDY0MDBjMjY4ZWYwYTk2YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOqP8IHFSanp6R3E3p6dolFbXzML mvDKTsRWxyaaUKFI60vZC1cgDNERjNU/a0KK8m8EXGQpy/Q48NN/n3rMC7XFg+XS 81pjHT99h/ZxfyjfTU4huREeTi3/CO4K0KYyQseqN449F0OX0cOb1KV9UN54fVgC Vbu3k3Vmqx12+FGj1+0gaibcKnbnwFyLAI0QwdOB6XsBvcQ1uz9l7AV++ioLJhoO KwmfVNligo3bMMpQcw8tEB4W122pivatcBEDDXZlRJH21Z6AQsohyXyU+Dup2w+/ hPkPsD1lzH1meb+PKABrSRQpnjK/Df95hYCueCF55GvFVJ5AmjW0iu2u3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo9R8nZuzwGRC7iRkAMJo7wqWuuMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuw8EyZK cCifc/SlCDI+CgkUP2hnlt3Ufz1WpVVgm9T3Eo+wjNJA0PtvkWkRQHOqHP4OlrdT nG3ugijBCBfNkfAcIuh5lXrHugNeupoUEU4QwOyN1Y1/O54P5IM0/uum4e4jO6gx qZGDNv0gfEqyAiqWA9IrmzkmoN/PLk4qVF30aCNOGy5pPEBAAJPZrS9lmtMo6qzd 7+2eREI2fvOcLUmIqyq+oTvU7nwXtvCJ9GZ7T5o9LfEkzhskAPy8JOodHfhiECzb Kkyod/WJA/711x/D/dWqt9o8N3fYg4UZrN25QWcG2PlXLsrQ0DDwzwVw6IoP7uTt uGMKV3ekO2ZWMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 19:17:43 2025 by rpki-client