This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json) Hash identifier: D/KZnpYYtJfF3XTUk7/PT4dpFkxFvKuJQrOMQI7QnxA= Subject key identifier: 4B:8A:54:DB:65:52:95:3A:E6:27:E4:41:13:4C:37:D4:9A:65:77:5B Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349 Certificate serial: 019AFD9F4FC3237B2220EFE48EEAF6134484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft Manifest number: 1766 Signing time: Mon 08 Dec 2025 11:01:07 +0000 Manifest this update: Mon 08 Dec 2025 11:01:07 +0000 Manifest next update: Tue 09 Dec 2025 11:01:07 +0000 Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=) 2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: RBwr7VvPzwOyOOhk0F4NWHyAWQMeLLL7Br3qiWoY3ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:4f:c3:23:7b:22:20:ef:e4:8e:ea:f6:13:44:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349 Validity Not Before: Dec 8 11:01:07 2025 GMT Not After : Dec 9 11:01:07 2025 GMT Subject: CN=4b8a54db6552953ae627e441134c37d49a65775b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b1:2b:09:25:cd:a8:ce:26:87:a4:65:db:b0: 11:ac:52:22:5d:58:65:3f:d6:71:ea:01:d3:19:74: c0:55:72:6b:d6:5b:ce:37:6c:c0:3c:59:cb:68:cb: f5:9e:f4:cb:d7:9b:a3:6d:0f:03:12:18:5c:2e:89: 73:43:05:03:7a:9e:dd:fe:b6:cc:2d:4a:1e:43:ef: 42:18:27:e7:2b:5f:df:62:70:08:55:af:74:7d:dd: 5a:23:d9:c6:7d:5b:7a:8a:18:48:43:f9:35:b1:14: 3f:f8:62:24:e8:da:3b:5e:b7:9b:ee:ae:80:5f:ce: 59:a8:4d:17:5c:34:28:b9:ec:30:e9:93:a0:8a:7a: bd:e9:cd:a0:28:8d:e4:ca:ef:40:fc:1c:96:8d:b6: 11:91:f3:af:e9:b2:24:c2:4b:83:a4:ff:f2:d6:af: 51:87:41:a4:43:90:b3:2a:55:f9:4c:81:96:3b:a3: e5:90:6e:d2:9c:2a:5d:70:db:b6:f3:48:fa:47:64: a5:04:91:8c:bc:72:bf:ff:ce:26:e7:fc:35:79:4f: ce:9b:09:e1:8f:68:d8:0d:3c:78:7d:b4:f7:eb:f8: 97:d7:bb:10:72:d6:09:48:92:ee:69:88:b5:83:01: 1f:59:e0:d7:a3:7e:7e:d6:6c:b1:01:5f:ee:c3:1b: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:54:DB:65:52:95:3A:E6:27:E4:41:13:4C:37:D4:9A:65:77:5B X509v3 Authority Key Identifier: keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ad:77:eb:93:1a:60:f4:ee:4e:29:7c:db:a4:82:e7:60:8f: 88:89:33:9f:f1:d6:27:2c:eb:66:0b:99:cc:1d:35:57:62:cf: 8b:3a:a0:45:99:46:31:40:6c:30:f2:34:b1:92:29:58:81:fa: e2:4c:60:21:16:d7:0f:db:d2:1d:ab:ea:69:47:a7:42:0f:53: 8b:dd:7e:ab:72:f4:b0:51:f8:6b:23:fb:9a:28:41:0f:27:19: 74:e5:ab:be:21:73:97:eb:3f:1b:70:c5:6d:6a:de:6e:89:5c: a6:5d:4b:34:bd:b4:40:81:cc:58:54:7d:56:ec:cd:14:5e:0e: 45:0f:48:0c:8b:d3:f3:78:4c:54:fa:5e:b8:26:a2:ea:3d:10: b1:34:4b:f1:bc:e2:18:ec:39:44:f1:30:fc:78:36:50:c5:14: 67:70:50:0b:33:37:5c:80:0b:d6:50:84:58:4c:57:a2:d8:d1: 3e:7b:89:2e:77:39:85:c5:9f:b7:0b:46:c8:9e:46:ee:e3:b0: 38:0f:51:73:3d:0a:72:4a:31:75:e7:85:30:20:a5:43:56:00: 4c:7b:bb:20:62:a9:04:0f:6a:4c:85:56:ea:b6:00:7f:a9:bf: af:26:c1:36:4a:ce:5a:57:d7:cc:2c:0c:46:39:78:e1:9e:74: c6:b2:fd:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9n0/DI3siIO/kjur2E0SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh M2IzNDkwHhcNMjUxMjA4MTEwMTA3WhcNMjUxMjA5MTEwMTA3WjAzMTEwLwYDVQQD Eyg0YjhhNTRkYjY1NTI5NTNhZTYyN2U0NDExMzRjMzdkNDlhNjU3NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97ErCSXNqM4mh6Rl27ARrFIiXVhl P9Zx6gHTGXTAVXJr1lvON2zAPFnLaMv1nvTL15ujbQ8DEhhcLolzQwUDep7d/rbM LUoeQ+9CGCfnK1/fYnAIVa90fd1aI9nGfVt6ihhIQ/k1sRQ/+GIk6No7Xreb7q6A X85ZqE0XXDQoueww6ZOginq96c2gKI3kyu9A/ByWjbYRkfOv6bIkwkuDpP/y1q9R h0GkQ5CzKlX5TIGWO6PlkG7SnCpdcNu280j6R2SlBJGMvHK//84m5/w1eU/Omwnh j2jYDTx4fbT36/iX17sQctYJSJLuaYi1gwEfWeDXo35+1myxAV/uwxv7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuKVNtlUpU65ifkQRNMN9SaZXdbMB8GA1UdIwQY MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAva1365Ma YPTuTil826SC52CPiIkzn/HWJyzrZguZzB01V2LPizqgRZlGMUBsMPI0sZIpWIH6 4kxgIRbXD9vSHavqaUenQg9Ti91+q3L0sFH4ayP7mihBDycZdOWrviFzl+s/G3DF bWrebolcpl1LNL20QIHMWFR9VuzNFF4ORQ9IDIvT83hMVPpeuCai6j0QsTRL8bzi GOw5RPEw/Hg2UMUUZ3BQCzM3XIAL1lCEWExXotjRPnuJLnc5hcWftwtGyJ5G7uOw OA9Rcz0KckoxdeeFMCClQ1YATHu7IGKpBA9qTIVW6rYAf6m/rybBNkrOWlfXzCwM Rjl44Z50xrL9KQ== -----END CERTIFICATE-----Generated at Mon Dec 8 17:39:59 2025 by rpki-client