This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: zcNabApHiUSF/YPkR5B4CDn/dluHzaWUkOee8Mv3BCI= Subject key identifier: A3:8F:98:83:15:5B:39:37:AE:31:96:0C:15:C8:CD:EB:7A:82:E9:62 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 019B42490ADFDDCDC3DAE9E586346A27563C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 0A6D Signing time: Sun 21 Dec 2025 19:00:41 +0000 Manifest this update: Sun 21 Dec 2025 19:00:41 +0000 Manifest next update: Mon 22 Dec 2025 19:00:41 +0000 Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: UVdB5LDv7ZaRqX+jRJn6uSqNOorxVfKmIrkcLy5LAjA=) 2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:0a:df:dd:cd:c3:da:e9:e5:86:34:6a:27:56:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Dec 21 19:00:41 2025 GMT Not After : Dec 22 19:00:41 2025 GMT Subject: CN=a38f9883155b3937ae31960c15c8cdeb7a82e962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:e7:f4:b9:46:7e:64:41:6e:32:78:a4:cc: 78:fc:af:53:a3:4c:6b:83:9e:27:9d:fb:84:85:8e: 3d:ef:35:f9:e6:9b:62:5e:4a:59:eb:50:2f:fa:fc: a9:d8:f5:bd:fa:c5:b0:57:00:df:16:5a:25:ec:fc: 76:11:24:d3:f7:27:04:df:bd:6a:22:33:3a:3d:3e: f1:07:13:01:42:93:81:e7:15:44:62:e1:a8:0c:c4: fd:6b:c4:df:bb:cd:64:90:3c:c5:53:b0:df:7a:6e: 33:3d:56:f4:24:ed:85:92:2a:cb:49:71:b7:8f:8a: 79:3e:46:19:aa:98:9d:57:ec:76:5a:27:ea:12:c0: 4b:30:f8:ee:4e:d7:ba:27:2d:f1:6d:f4:8e:20:fb: 68:46:17:45:79:3c:2d:99:1e:a2:e4:4d:65:bd:15: 83:21:7a:57:1d:8e:b1:9b:24:53:8f:03:35:f3:59: 52:d9:6f:1b:38:34:63:8a:66:b6:75:c3:88:67:ff: 8c:6e:46:4e:59:e7:02:ba:71:df:69:63:e4:5d:18: 1e:8e:57:a3:03:6b:68:b4:64:ea:7b:9b:17:8c:b0: 3f:08:9a:50:f4:7a:3c:ee:12:5a:c3:3f:7c:fa:6c: 88:5f:9f:26:09:19:d9:85:0d:e2:ca:af:22:51:fc: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:98:83:15:5B:39:37:AE:31:96:0C:15:C8:CD:EB:7A:82:E9:62 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c2:6f:59:f7:63:cd:4d:43:c2:be:df:b7:17:14:d1:a5:e5: 0d:ff:2e:2a:3f:23:38:cc:a6:10:b6:8a:0a:13:23:a0:d6:08: e6:75:84:59:15:18:e7:56:1b:f3:1b:a5:93:45:91:36:a9:7d: 64:24:19:b6:5d:85:24:cd:29:46:27:6e:04:81:a3:91:4c:7f: 8d:8e:5a:75:10:70:68:d6:71:87:88:ef:9c:18:84:99:d6:ef: b3:d9:26:48:f9:d4:3f:c9:6d:f1:6b:2a:4f:15:af:35:bf:35: 52:01:a6:5f:f5:6a:37:f0:bb:63:2d:57:c4:de:00:c9:fe:88: 0a:bf:18:30:99:26:27:cd:09:c9:a8:4b:8c:eb:53:37:16:fc: 89:41:91:68:e6:f7:fb:f3:fd:fa:ac:99:59:ad:ea:ae:79:bd: 76:f6:bf:67:06:c7:aa:fe:83:d5:de:9c:86:17:08:4b:a0:6c: cd:6e:08:57:b7:05:0c:6a:7c:27:42:65:d3:45:06:d1:22:d5: 2f:60:db:69:36:09:1b:fb:a3:1f:42:24:88:af:a3:d1:64:46: 3b:bd:57:ae:b9:d2:bb:6c:83:38:53:fb:73:64:e6:86:02:62: b0:9b:c7:5c:2d:24:25:58:a0:a7:b0:f8:c8:38:bf:82:05:16: 5d:a0:16:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSQrf3c3D2unlhjRqJ1Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjUxMjIxMTkwMDQxWhcNMjUxMjIyMTkwMDQxWjAzMTEwLwYDVQQD EyhhMzhmOTg4MzE1NWIzOTM3YWUzMTk2MGMxNWM4Y2RlYjdhODJlOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQXn9LlGfmRBbjJ4pMx4/K9To0xr g54nnfuEhY497zX55ptiXkpZ61Av+vyp2PW9+sWwVwDfFlol7Px2ESTT9ycE371q IjM6PT7xBxMBQpOB5xVEYuGoDMT9a8Tfu81kkDzFU7Dfem4zPVb0JO2FkirLSXG3 j4p5PkYZqpidV+x2WifqEsBLMPjuTte6Jy3xbfSOIPtoRhdFeTwtmR6i5E1lvRWD IXpXHY6xmyRTjwM181lS2W8bODRjima2dcOIZ/+MbkZOWecCunHfaWPkXRgejlej A2totGTqe5sXjLA/CJpQ9Ho87hJawz98+myIX58mCRnZhQ3iyq8iUfwC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOPmIMVWzk3rjGWDBXIzet6guliMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcJvWfdj zU1Dwr7ftxcU0aXlDf8uKj8jOMymELaKChMjoNYI5nWEWRUY51Yb8xulk0WRNql9 ZCQZtl2FJM0pRiduBIGjkUx/jY5adRBwaNZxh4jvnBiEmdbvs9kmSPnUP8lt8Wsq TxWvNb81UgGmX/VqN/C7Yy1XxN4Ayf6ICr8YMJkmJ80JyahLjOtTNxb8iUGRaOb3 +/P9+qyZWa3qrnm9dva/ZwbHqv6D1d6chhcIS6BszW4IV7cFDGp8J0Jl00UG0SLV L2DbaTYJG/ujH0IkiK+j0WRGO71XrrnSu2yDOFP7c2TmhgJisJvHXC0kJVigp7D4 yDi/ggUWXaAWXA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:46 2025 by rpki-client