This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json) Hash identifier: Omv2ycHFu9JDpBmWQbJMDcvI5olegecNVc2iZO/BaKc= Subject key identifier: 12:04:54:17:3F:C4:B4:82:D6:05:DC:3C:68:F5:58:DE:AC:DA:53:6A Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349 Certificate serial: 019B2250F7CB4C107AE714882B50AC7B1149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 14:01:30 +0000 Manifest this update: Mon 15 Dec 2025 14:01:30 +0000 Manifest next update: Tue 16 Dec 2025 14:01:30 +0000 Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=) 2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: Bv7aKpwdBl0w+jstQUMNB1cL/YdFv4URNhT3RjLj+MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:f7:cb:4c:10:7a:e7:14:88:2b:50:ac:7b:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349 Validity Not Before: Dec 15 14:01:30 2025 GMT Not After : Dec 16 14:01:30 2025 GMT Subject: CN=120454173fc4b482d605dc3c68f558deacda536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:ef:40:81:61:02:08:0e:f6:de:50:c4:6a: 97:ec:e7:f2:ec:73:56:ec:30:9b:04:6b:f6:c3:17: eb:02:06:b9:21:f4:49:d3:aa:b4:ea:eb:b6:60:c0: d1:ab:7d:58:eb:1b:f9:3f:c5:b9:c4:80:5d:11:23: a1:8f:1d:5a:e9:59:e1:ea:4d:83:9d:b1:00:54:0c: 76:fd:fa:4a:32:16:31:95:e2:80:72:63:0f:5d:eb: 21:4b:05:1e:a8:c3:20:84:85:5e:01:5f:d6:3b:f6: 84:be:bb:3f:05:eb:c0:76:54:5e:1d:1f:7a:5f:dc: 41:e7:6c:af:63:b5:17:ba:5c:20:b3:e3:5a:05:c0: f0:3f:1d:25:51:e3:cf:16:f1:b1:cc:e2:48:cc:e5: 2b:a8:b2:49:5e:45:a6:01:f9:4c:73:7b:99:91:e7: e9:bf:ef:bd:50:70:d8:73:d5:c6:30:24:2b:0d:a2: cd:7a:3e:a6:c7:05:55:b0:cc:ae:c5:5e:37:23:85: 14:2f:f1:08:c1:56:82:8c:71:83:2d:50:a8:00:89: 19:34:08:4c:8a:7b:f3:b7:a1:08:1f:e2:ff:a7:39: 09:b2:4e:40:63:d6:10:3e:ea:13:6a:49:39:b3:45: ce:5d:26:4a:98:d9:1c:53:e6:6d:93:61:8d:97:67: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:54:17:3F:C4:B4:82:D6:05:DC:3C:68:F5:58:DE:AC:DA:53:6A X509v3 Authority Key Identifier: keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:f5:c4:48:cd:14:4b:ab:24:e8:b5:2a:a6:07:fb:19:f5: 8f:7b:a2:7f:86:9b:71:58:fc:df:9d:0b:fb:05:8f:4e:ab:bb: d8:f1:31:37:f5:0f:bc:bf:30:e4:88:c2:58:ed:94:df:6f:c9: e9:0a:13:ef:4b:1f:c0:6c:9d:58:58:a9:a2:3b:9f:07:c1:75: 49:99:88:ac:ca:fc:16:ee:88:b9:43:0f:37:d0:f6:b4:53:ba: d0:f9:b8:41:71:b7:d0:7a:58:03:4c:6b:63:6d:03:50:de:9c: 5b:37:1c:fa:89:27:3e:45:7b:c1:03:fe:29:ce:b9:78:81:6c: c6:36:17:43:62:1f:5b:d0:37:a5:ae:b3:86:89:54:64:53:bc: 34:f2:80:78:21:8b:62:fa:55:1d:21:f2:65:90:14:18:c4:63: c4:d9:f2:4c:29:bb:65:46:ce:1f:df:91:49:d3:7d:46:8e:69: 83:fb:82:bd:78:20:16:51:87:c5:28:da:0a:ef:3a:01:38:70: ca:ff:4e:d0:8d:b6:d2:14:6f:88:0a:e8:01:1b:3b:9c:77:f0: 27:0f:46:10:a5:da:b7:6c:28:73:f7:a5:32:cc:67:b2:ff:69: a2:04:57:6b:16:b4:79:87:b2:fa:e7:19:23:db:52:db:a1:b2: 67:1c:5f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUPfLTBB65xSIK1CsexFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh M2IzNDkwHhcNMjUxMjE1MTQwMTMwWhcNMjUxMjE2MTQwMTMwWjAzMTEwLwYDVQQD EygxMjA0NTQxNzNmYzRiNDgyZDYwNWRjM2M2OGY1NThkZWFjZGE1MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHvQIFhAggO9t5QxGqX7Ofy7HNW 7DCbBGv2wxfrAga5IfRJ06q06uu2YMDRq31Y6xv5P8W5xIBdESOhjx1a6Vnh6k2D nbEAVAx2/fpKMhYxleKAcmMPXeshSwUeqMMghIVeAV/WO/aEvrs/BevAdlReHR96 X9xB52yvY7UXulwgs+NaBcDwPx0lUePPFvGxzOJIzOUrqLJJXkWmAflMc3uZkefp v++9UHDYc9XGMCQrDaLNej6mxwVVsMyuxV43I4UUL/EIwVaCjHGDLVCoAIkZNAhM invzt6EIH+L/pzkJsk5AY9YQPuoTakk5s0XOXSZKmNkcU+Ztk2GNl2c32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIEVBc/xLSC1gXcPGj1WN6s2lNqMB8GA1UdIwQY MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2T1xEjN FEurJOi1KqYH+xn1j3uif4abcVj8350L+wWPTqu72PExN/UPvL8w5IjCWO2U32/J 6QoT70sfwGydWFipojufB8F1SZmIrMr8Fu6IuUMPN9D2tFO60Pm4QXG30HpYA0xr Y20DUN6cWzcc+oknPkV7wQP+Kc65eIFsxjYXQ2IfW9A3pa6zholUZFO8NPKAeCGL YvpVHSHyZZAUGMRjxNnyTCm7ZUbOH9+RSdN9Ro5pg/uCvXggFlGHxSjaCu86AThw yv9O0I220hRviAroARs7nHfwJw9GEKXat2woc/elMsxnsv9pogRXaxa0eYey+ucZ I9tS26GyZxxfXA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:51:00 2025 by rpki-client