This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft File: LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json) Hash identifier: NeyVGcr2bb8cDCWSY8dqKksmnJIXeE+F4xylqs8OEn0= Subject key identifier: 95:9F:DC:AD:02:F4:94:AC:AC:5D:B0:C7:78:D9:97:3E:6F:A7:07:79 Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Certificate serial: 019B1BAA138F7D238EB8328CA66CB84E81F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 07:01:29 +0000 Manifest this update: Sun 14 Dec 2025 07:01:29 +0000 Manifest next update: Mon 15 Dec 2025 07:01:29 +0000 Files and hashes: 1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: J3TehiAL9OTAqXPI9xfHuWwXKk2jbROaGP68ZcJTKKg=) 2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:13:8f:7d:23:8e:b8:32:8c:a6:6c:b8:4e:81:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Validity Not Before: Dec 14 07:01:29 2025 GMT Not After : Dec 15 07:01:29 2025 GMT Subject: CN=959fdcad02f494acac5db0c778d9973e6fa70779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:6f:96:a4:f7:01:10:7b:ae:64:df:69:7b: a9:c6:a3:cf:08:1f:39:c7:c4:19:ef:f2:98:4a:e5: d8:f5:2d:8e:d7:fe:79:f7:c1:26:d3:f5:bb:95:49: 5d:ab:0d:03:56:fc:9a:bc:37:6b:ef:a5:a5:15:87: 85:8c:2e:5a:46:af:e0:75:20:64:88:95:26:7c:af: ce:62:1e:68:a1:ac:77:34:d2:bb:2b:31:5b:50:8b: 7f:be:a4:6a:96:46:c0:cf:e6:46:2c:ba:30:98:00: 29:8b:6c:13:7a:e9:32:5b:8b:b2:2a:38:85:54:89: 75:12:f7:a8:47:ad:75:86:aa:36:ca:a1:3a:61:bd: e5:fc:9a:37:1a:dc:85:71:88:4a:6f:2c:ec:b2:c2: a5:c8:b9:81:27:17:f3:78:3e:57:27:c8:b6:ff:dd: 04:21:0f:a0:0e:49:86:70:79:6b:c4:42:f9:39:64: 16:f9:1c:07:c1:4d:cf:45:92:f4:3a:91:aa:78:3d: 8f:18:72:b0:ca:bd:0a:cd:dc:47:61:94:90:00:90: 5c:cb:20:1d:d1:e4:4f:9a:86:e8:f4:3c:25:50:98: 50:42:2d:ee:c5:3b:38:04:33:78:bc:34:5c:4d:e1: b2:7c:14:1d:dd:73:4e:0f:76:dd:3f:05:54:14:00: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9F:DC:AD:02:F4:94:AC:AC:5D:B0:C7:78:D9:97:3E:6F:A7:07:79 X509v3 Authority Key Identifier: keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a3:c3:b4:8e:54:94:1b:ab:f7:da:79:7e:ca:58:53:e9:88: 8d:2c:db:ff:69:a2:19:1e:5c:23:12:8b:00:35:c8:91:3a:04: 46:8a:f0:29:77:d9:6d:84:1d:f8:31:0b:b4:e9:cd:50:70:6a: 23:01:5b:be:84:12:51:91:d4:1a:52:c7:1c:40:11:01:38:b2: 5d:b0:21:15:b6:cc:45:d3:7f:ab:4e:a7:6d:b4:5e:43:ba:49: bb:a7:2c:ec:e5:28:c1:33:5e:8d:47:ce:c3:b8:ff:a3:4a:e4: 1a:3a:b1:98:bb:7b:12:6c:6a:b3:e5:04:3d:f7:9b:fa:98:41: c0:07:fd:34:8e:3e:c1:75:78:36:4b:6c:ba:c7:a9:a5:e1:0e: 84:fb:3d:ba:39:2b:a5:fa:7f:be:a0:1e:99:a1:bc:e4:e5:05: fc:c7:ae:9d:79:d9:49:6e:1d:94:f3:9a:f4:c2:40:56:d0:b4: 9e:6d:75:e5:04:bc:ab:97:3c:de:5a:74:8b:86:5f:b8:41:ab: fd:16:6f:2f:50:ea:28:32:a7:3c:7f:0e:af:1c:6b:31:c4:a4: 71:c3:b1:9f:de:b5:a6:4a:b9:51:3b:2a:d4:73:a1:4d:ec:93: d9:1f:c8:e5:dc:33:22:bb:e5:52:27:f9:fb:2c:30:f0:85:e5: 8e:59:3c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqhOPfSOOuDKMpmy4ToH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmYzY2M1ZDc4NTk0MmU2MDQ4MDkzYzc0MzM5NzNhZWIx NWZlMjIwHhcNMjUxMjE0MDcwMTI5WhcNMjUxMjE1MDcwMTI5WjAzMTEwLwYDVQQD Eyg5NTlmZGNhZDAyZjQ5NGFjYWM1ZGIwYzc3OGQ5OTczZTZmYTcwNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31RvlqT3ARB7rmTfaXupxqPPCB85 x8QZ7/KYSuXY9S2O1/5598Em0/W7lUldqw0DVvyavDdr76WlFYeFjC5aRq/gdSBk iJUmfK/OYh5ooax3NNK7KzFbUIt/vqRqlkbAz+ZGLLowmAApi2wTeukyW4uyKjiF VIl1EveoR611hqo2yqE6Yb3l/Jo3GtyFcYhKbyzsssKlyLmBJxfzeD5XJ8i2/90E IQ+gDkmGcHlrxEL5OWQW+RwHwU3PRZL0OpGqeD2PGHKwyr0KzdxHYZSQAJBcyyAd 0eRPmobo9DwlUJhQQi3uxTs4BDN4vDRcTeGyfBQd3XNOD3bdPwVUFACsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWf3K0C9JSsrF2wx3jZlz5vpwd5MB8GA1UdIwQY MBaAFCxvPMXXhZQuYEgJPHQzlzrrFf4iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYt NmNmMWNhNTA4ZDFhLzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYtNmNmMWNhNTA4ZDFh LzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6PDtI5U lBur99p5fspYU+mIjSzb/2miGR5cIxKLADXIkToERorwKXfZbYQd+DELtOnNUHBq IwFbvoQSUZHUGlLHHEARATiyXbAhFbbMRdN/q06nbbReQ7pJu6cs7OUowTNejUfO w7j/o0rkGjqxmLt7Emxqs+UEPfeb+phBwAf9NI4+wXV4NktsuseppeEOhPs9ujkr pfp/vqAemaG85OUF/MeunXnZSW4dlPOa9MJAVtC0nm115QS8q5c83lp0i4ZfuEGr /RZvL1DqKDKnPH8OrxxrMcSkccOxn961pkq5UTsq1HOhTeyT2R/I5dwzIrvlUif5 +yww8IXljlk8MA== -----END CERTIFICATE-----Generated at Sun Dec 14 10:39:28 2025 by rpki-client