This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json) Hash identifier: aveRc8UEU3ropZq0iCyAj8+R45HtjQ7J4ghiq3dVpHE= Subject key identifier: 93:E6:FA:FB:49:C9:07:5D:BC:46:58:B3:A7:40:2F:C0:AC:F2:C3:50 Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a Certificate serial: 019B4C95A6702D04990148C5729A40CAA49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft Manifest number: 1012 Signing time: Tue 23 Dec 2025 19:00:34 +0000 Manifest this update: Tue 23 Dec 2025 19:00:34 +0000 Manifest next update: Wed 24 Dec 2025 19:00:34 +0000 Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: d6IclYwlXrEnNzc2QSTN17J7iu7w/ICLub7nC6SJnDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:a6:70:2d:04:99:01:48:c5:72:9a:40:ca:a4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a Validity Not Before: Dec 23 19:00:34 2025 GMT Not After : Dec 24 19:00:34 2025 GMT Subject: CN=93e6fafb49c9075dbc4658b3a7402fc0acf2c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:57:34:dc:48:81:fe:16:ad:0a:13:c5:a3: f0:ae:48:55:9a:cb:da:0c:45:c9:12:6c:9a:2b:c7: 03:36:ac:9d:45:37:6b:c6:2a:36:ad:42:13:32:92: 4e:eb:23:81:1e:76:1a:32:0d:19:43:68:bb:3d:42: 9e:33:ec:66:2c:14:05:53:f8:c8:f3:5c:7c:cd:27: b9:40:59:d3:92:3e:1a:b9:00:e3:d7:8e:ea:cc:46: 99:03:5a:67:bb:14:73:ed:d9:a7:2d:22:83:11:d3: 74:96:98:2b:be:a6:d9:d3:05:d2:e2:40:30:a6:c8: 91:1c:d6:87:f2:9d:22:84:ac:31:bb:b6:ad:c2:68: 8e:86:47:d4:7d:c5:66:31:97:db:34:b3:eb:9b:7e: 22:5e:65:c2:e6:6b:ac:00:89:36:3e:bf:83:ea:15: 98:e4:8c:fc:18:3a:38:27:c4:02:58:40:7f:d8:c3: 73:db:b5:81:ef:4c:ab:cc:6f:61:7f:3a:fd:e6:57: 0a:18:7e:db:ff:c6:d1:e1:e9:5b:9b:44:62:f6:f7: 9f:bb:56:bb:1a:5c:42:85:f2:09:38:b9:a3:84:63: 9c:19:fa:3f:02:71:d4:46:59:43:bc:15:8e:99:4c: 23:22:66:ab:52:a3:64:30:84:8b:b1:c3:6d:c3:ea: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:FA:FB:49:C9:07:5D:BC:46:58:B3:A7:40:2F:C0:AC:F2:C3:50 X509v3 Authority Key Identifier: keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0f:e9:cf:4d:c1:12:09:d6:87:53:00:27:49:e1:1f:33:f0: 47:3f:db:ff:de:87:41:d9:e2:54:37:5d:0b:77:9e:d1:06:72: 31:b0:09:13:f7:43:fb:37:87:5e:d6:8f:e9:90:26:23:c9:cc: 6d:7e:b1:a7:c8:78:18:00:f5:c6:52:19:b8:0a:51:4b:b3:79: b0:c5:21:f0:7c:6a:02:e9:d1:89:ac:98:20:99:c3:3a:eb:c5: 62:81:5d:c2:d8:51:5e:05:38:09:9d:23:47:94:f5:1e:25:7b: 13:85:54:de:3c:f4:be:e4:5f:16:a9:e8:de:29:cf:c4:08:ff: 7d:59:7c:b4:8e:48:d0:06:63:cc:2e:cc:9d:00:fb:ac:4b:d1: f8:31:d1:a6:19:5b:33:63:64:9c:7e:30:1d:10:00:c6:64:0c: a8:40:68:cd:0d:0c:54:af:a4:e1:f1:1b:bb:52:8a:ac:6b:4e: f5:dc:34:6f:1d:f3:fe:8b:a5:28:16:8e:97:90:93:76:80:ef: 27:d0:4d:6c:fa:ae:48:8b:03:7e:bb:51:b5:76:4a:5e:ca:86: c8:a7:c3:47:b9:92:4f:65:27:89:a6:59:8d:21:cf:7f:11:6d: ad:52:9c:51:f2:78:e5:d3:bf:f2:79:10:1c:2a:f4:60:79:ff: c7:24:ef:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlaZwLQSZAUjFcppAyqSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MGU2OGM4Mzg5YjA5ZGMzNDU0NjRhNDAwYWYyNzY1Njhl N2Y5NmEwHhcNMjUxMjIzMTkwMDM0WhcNMjUxMjI0MTkwMDM0WjAzMTEwLwYDVQQD Eyg5M2U2ZmFmYjQ5YzkwNzVkYmM0NjU4YjNhNzQwMmZjMGFjZjJjMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjStXNNxIgf4WrQoTxaPwrkhVmsva DEXJEmyaK8cDNqydRTdrxio2rUITMpJO6yOBHnYaMg0ZQ2i7PUKeM+xmLBQFU/jI 81x8zSe5QFnTkj4auQDj147qzEaZA1pnuxRz7dmnLSKDEdN0lpgrvqbZ0wXS4kAw psiRHNaH8p0ihKwxu7atwmiOhkfUfcVmMZfbNLPrm34iXmXC5musAIk2Pr+D6hWY 5Iz8GDo4J8QCWEB/2MNz27WB70yrzG9hfzr95lcKGH7b/8bR4elbm0Ri9vefu1a7 GlxChfIJOLmjhGOcGfo/AnHURllDvBWOmUwjImarUqNkMISLscNtw+rSeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPm+vtJyQddvEZYs6dAL8Cs8sNQMB8GA1UdIwQY MBaAFJYOaMg4mwncNFRkpACvJ2Vo5/lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMt NjMzMzE4NjU4OWE5LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMtNjMzMzE4NjU4OWE5 LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEw/pz03B EgnWh1MAJ0nhHzPwRz/b/96HQdniVDddC3ee0QZyMbAJE/dD+zeHXtaP6ZAmI8nM bX6xp8h4GAD1xlIZuApRS7N5sMUh8HxqAunRiayYIJnDOuvFYoFdwthRXgU4CZ0j R5T1HiV7E4VU3jz0vuRfFqno3inPxAj/fVl8tI5I0AZjzC7MnQD7rEvR+DHRphlb M2NknH4wHRAAxmQMqEBozQ0MVK+k4fEbu1KKrGtO9dw0bx3z/oulKBaOl5CTdoDv J9BNbPquSIsDfrtRtXZKXsqGyKfDR7mST2UniaZZjSHPfxFtrVKcUfJ45dO/8nkQ HCr0YHn/xyTvEQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:38:45 2025 by rpki-client