This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json) Hash identifier: xg1tTDOcccdeEwTNklht/9y8m7RGaSebmUMQVTiDo54= Subject key identifier: 7D:C8:BA:3E:72:63:DB:C4:D9:C2:22:75:A2:4A:BC:B0:49:91:C8:BF Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Certificate serial: 019B48B94DC700EC244C7A7D3E60A1D9E702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft Manifest number: 037B Signing time: Tue 23 Dec 2025 01:01:02 +0000 Manifest this update: Tue 23 Dec 2025 01:01:02 +0000 Manifest next update: Wed 24 Dec 2025 01:01:02 +0000 Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: u34VW/TPg8Tu9weCWzKi2umrR6PG75u0x0mw2jzs978=) 2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:4d:c7:00:ec:24:4c:7a:7d:3e:60:a1:d9:e7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Validity Not Before: Dec 23 01:01:02 2025 GMT Not After : Dec 24 01:01:02 2025 GMT Subject: CN=7dc8ba3e7263dbc4d9c22275a24abcb04991c8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:e0:07:4d:da:a2:53:22:ea:f1:1b:92:01: 95:30:b5:c7:5a:9d:25:ed:7d:44:0d:ef:4f:83:bb: be:4d:4c:19:8a:5b:39:b3:86:d8:ed:27:71:c0:fb: b6:ba:71:d2:5f:d2:9e:d9:94:a9:e3:1f:9e:9c:86: 61:b0:fb:b9:c6:81:96:a3:e5:29:75:77:22:68:a3: 1d:66:08:3c:12:70:b5:10:44:30:64:7e:96:39:c0: e4:72:72:bf:88:a7:f4:b6:0f:53:63:f2:68:69:76: 83:39:e5:96:28:e6:f6:c2:5d:0a:43:fc:d4:68:ab: 73:aa:e7:20:07:32:7e:85:50:ff:f7:aa:7c:be:7b: b0:c8:35:18:cc:00:75:f4:12:b2:94:32:85:be:68: 63:72:4d:b7:00:c7:d6:26:34:c5:6b:65:a2:f7:a8: 3a:5c:02:d3:c3:3c:0a:9b:6d:4f:f9:01:b2:bf:56: 1a:29:6e:14:fd:29:a2:49:e3:48:1e:55:0a:a2:28: 2b:c0:60:e1:81:55:60:30:44:76:61:52:29:65:4c: 46:f2:59:ed:4e:b1:be:89:0d:a0:89:0d:55:c1:08: 28:4e:2a:ed:f8:bc:82:32:a2:81:43:30:f4:64:98: a2:5a:3c:82:a0:2f:2e:f9:f3:0c:21:8a:e1:5d:81: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C8:BA:3E:72:63:DB:C4:D9:C2:22:75:A2:4A:BC:B0:49:91:C8:BF X509v3 Authority Key Identifier: keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f2:c0:43:a0:82:18:89:cc:6a:19:f3:9b:d3:0f:00:99:84: 97:62:0d:97:48:cf:fb:82:31:bc:17:65:2f:67:f9:be:78:bd: 76:d0:9c:eb:db:3c:d6:cb:ee:cc:ed:23:20:fe:8f:a7:a9:3b: ff:2b:53:b2:b8:09:fc:ac:9a:63:87:35:18:f4:a6:e4:7c:00: 5c:8b:5d:ab:a5:27:67:ec:0d:c7:8f:5a:11:5b:75:6e:09:e1: bb:26:62:a4:d1:83:b4:2d:f7:50:43:d0:1e:8f:ac:26:9b:ee: 83:8f:09:ed:2c:67:46:20:e7:31:78:97:a2:97:3f:45:a5:8b: e2:6a:5f:c2:16:35:7e:8d:1f:0e:de:19:16:48:95:2b:da:84: 00:f5:d0:ba:ab:95:be:38:36:de:7a:b9:ec:a4:16:ca:f5:16: 33:21:10:a8:a7:83:c6:b6:36:14:dd:5d:ce:67:91:e3:4e:3b: 46:99:2e:ee:01:7b:eb:f2:49:21:b6:20:d0:29:9c:5c:0a:3f: ff:05:cd:9f:f3:8a:32:9a:e8:c0:a0:65:ee:d3:b2:0c:e0:04: 4c:23:9e:2e:a7:bb:29:fa:16:f2:4d:55:1a:b0:88:51:6f:80: 50:67:2b:43:33:f6:72:d1:53:83:ce:4e:fd:c7:a6:cf:43:c7: d9:0f:f4:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuU3HAOwkTHp9PmCh2ecCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmY4ZTM3ZTRhNmM4NGIzZjNiNWJhNzdlMjEwOWQzZWY1 OWFhZTAwHhcNMjUxMjIzMDEwMTAyWhcNMjUxMjI0MDEwMTAyWjAzMTEwLwYDVQQD Eyg3ZGM4YmEzZTcyNjNkYmM0ZDljMjIyNzVhMjRhYmNiMDQ5OTFjOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vngB03aolMi6vEbkgGVMLXHWp0l 7X1EDe9Pg7u+TUwZils5s4bY7SdxwPu2unHSX9Ke2ZSp4x+enIZhsPu5xoGWo+Up dXciaKMdZgg8EnC1EEQwZH6WOcDkcnK/iKf0tg9TY/JoaXaDOeWWKOb2wl0KQ/zU aKtzqucgBzJ+hVD/96p8vnuwyDUYzAB19BKylDKFvmhjck23AMfWJjTFa2Wi96g6 XALTwzwKm21P+QGyv1YaKW4U/SmiSeNIHlUKoigrwGDhgVVgMER2YVIpZUxG8lnt TrG+iQ2giQ1VwQgoTirt+LyCMqKBQzD0ZJiiWjyCoC8u+fMMIYrhXYErbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3Iuj5yY9vE2cIidaJKvLBJkci/MB8GA1UdIwQY MBaAFJZvjjfkpshLPztbp34hCdPvWargMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYt OThhYzY2NWIxOTA4LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYtOThhYzY2NWIxOTA4 LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPLAQ6CC GInMahnzm9MPAJmEl2INl0jP+4IxvBdlL2f5vni9dtCc69s81svuzO0jIP6Pp6k7 /ytTsrgJ/KyaY4c1GPSm5HwAXItdq6UnZ+wNx49aEVt1bgnhuyZipNGDtC33UEPQ Ho+sJpvug48J7SxnRiDnMXiXopc/RaWL4mpfwhY1fo0fDt4ZFkiVK9qEAPXQuquV vjg23nq57KQWyvUWMyEQqKeDxrY2FN1dzmeR4047Rpku7gF76/JJIbYg0CmcXAo/ /wXNn/OKMprowKBl7tOyDOAETCOeLqe7KfoW8k1VGrCIUW+AUGcrQzP2ctFTg85O /cemz0PH2Q/0Dg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:52:14 2025 by rpki-client