This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json) Hash identifier: iisKVrbKfTAk9pFzlqJAgj6ky1xeP0QTGoUvPm51A30= Subject key identifier: 61:D1:2D:70:5A:53:53:74:1C:C1:F5:11:CC:2C:50:FA:CC:56:02:41 Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Certificate serial: 019B0EC96F0D75DE837391F393CA45F891BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft Manifest number: 035D Signing time: Thu 11 Dec 2025 19:00:40 +0000 Manifest this update: Thu 11 Dec 2025 19:00:40 +0000 Manifest next update: Fri 12 Dec 2025 19:00:40 +0000 Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: TOvUH69j+WZudbrtiyoHhtIQYNjng5LrOSx3EZvWYUY=) 2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:6f:0d:75:de:83:73:91:f3:93:ca:45:f8:91:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Validity Not Before: Dec 11 19:00:40 2025 GMT Not After : Dec 12 19:00:40 2025 GMT Subject: CN=61d12d705a5353741cc1f511cc2c50facc560241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:9b:bb:16:c7:05:cb:6f:da:55:65:c4:02: 8e:92:ac:40:6e:41:09:cb:ff:6f:dc:ce:50:bd:46: af:46:b7:07:41:69:d3:a5:25:29:0d:ef:4c:3e:44: c2:90:8e:0a:84:c9:ef:a7:9e:dc:69:5f:84:0d:11: 17:cc:d9:f6:ac:e6:00:0f:21:ac:03:c6:02:e4:a2: af:3d:cb:d7:29:4b:db:ee:c0:1f:bd:dc:01:fa:ce: 92:e7:05:57:21:b7:5e:de:73:6c:27:77:6b:5b:9a: 24:02:07:4f:60:17:a2:4d:ae:27:e1:47:63:27:2d: d4:1a:87:27:78:67:13:5b:44:71:6e:0f:6f:5b:80: 27:8f:e0:06:bc:3d:58:07:71:6a:2d:a3:0b:c9:fe: de:0c:e5:09:21:c0:a3:a8:c3:89:09:cd:79:88:9a: dc:cf:40:92:a8:d8:41:17:40:0e:0c:e6:9c:68:2a: c7:93:82:f1:2b:c5:41:8c:25:74:9b:4d:67:af:6d: 41:d8:d3:0f:d1:47:8a:11:b6:70:80:fd:bf:46:b4: b0:89:55:a8:09:da:e9:f5:b0:7f:f5:90:f4:04:20: 55:8b:c9:f3:46:f0:6d:36:ac:2e:d8:bf:41:b5:40: 8d:76:b8:85:dd:a3:14:1e:fb:e9:d8:0e:dd:c8:6a: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D1:2D:70:5A:53:53:74:1C:C1:F5:11:CC:2C:50:FA:CC:56:02:41 X509v3 Authority Key Identifier: keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6c:e4:7f:32:2c:a1:9a:2b:23:d8:ba:0c:6b:7a:8f:6c:77: c3:10:d2:a8:4e:11:63:49:c0:92:4f:8e:ab:7e:e9:37:2a:0a: a8:47:07:9f:f2:e6:2c:7c:50:19:5c:11:65:c5:a0:81:1a:ae: a4:df:bc:c5:7a:94:76:44:98:0e:9a:20:48:20:32:55:40:28: 4c:87:b1:be:2c:ae:82:a1:4e:bc:62:08:65:fb:18:f7:cd:f5: 1b:3f:cd:b2:bd:29:3d:ae:b0:56:57:eb:6e:20:b3:3c:48:b7: 0c:74:d3:a2:5c:bb:c3:00:77:59:47:1d:5c:7a:dd:c5:22:27: bc:73:f2:e2:d5:25:4c:93:75:6a:3e:53:96:aa:25:b6:0b:92: da:e4:19:50:2c:46:24:a5:4c:53:bd:0d:cd:50:bb:f6:0d:da: 4b:21:8d:53:9f:5d:e1:a7:56:f2:ab:b3:c8:59:ec:8a:c0:8b: f4:3e:ad:f0:30:d8:a1:8d:cb:68:c1:9e:c0:9f:3d:98:89:b5: b6:84:78:f9:bc:6f:f2:c2:c4:bf:6a:79:41:ce:cf:c6:f3:67: 34:b6:4d:f6:c5:38:48:ff:8e:5f:c4:32:54:1d:ad:91:38:6b: bc:20:15:79:7f:6d:c2:c0:75:d2:53:a6:31:dc:82:6e:ab:41: e5:a2:a7:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyW8Ndd6Dc5Hzk8pF+JG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmY4ZTM3ZTRhNmM4NGIzZjNiNWJhNzdlMjEwOWQzZWY1 OWFhZTAwHhcNMjUxMjExMTkwMDQwWhcNMjUxMjEyMTkwMDQwWjAzMTEwLwYDVQQD Eyg2MWQxMmQ3MDVhNTM1Mzc0MWNjMWY1MTFjYzJjNTBmYWNjNTYwMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslebuxbHBctv2lVlxAKOkqxAbkEJ y/9v3M5QvUavRrcHQWnTpSUpDe9MPkTCkI4KhMnvp57caV+EDREXzNn2rOYADyGs A8YC5KKvPcvXKUvb7sAfvdwB+s6S5wVXIbde3nNsJ3drW5okAgdPYBeiTa4n4Udj Jy3UGocneGcTW0Rxbg9vW4Anj+AGvD1YB3FqLaMLyf7eDOUJIcCjqMOJCc15iJrc z0CSqNhBF0AODOacaCrHk4LxK8VBjCV0m01nr21B2NMP0UeKEbZwgP2/RrSwiVWo Cdrp9bB/9ZD0BCBVi8nzRvBtNqwu2L9BtUCNdriF3aMUHvvp2A7dyGqv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHRLXBaU1N0HMH1EcwsUPrMVgJBMB8GA1UdIwQY MBaAFJZvjjfkpshLPztbp34hCdPvWargMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYt OThhYzY2NWIxOTA4LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYtOThhYzY2NWIxOTA4 LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGzkfzIs oZorI9i6DGt6j2x3wxDSqE4RY0nAkk+Oq37pNyoKqEcHn/LmLHxQGVwRZcWggRqu pN+8xXqUdkSYDpogSCAyVUAoTIexviyugqFOvGIIZfsY9831Gz/Nsr0pPa6wVlfr biCzPEi3DHTToly7wwB3WUcdXHrdxSInvHPy4tUlTJN1aj5TlqoltguS2uQZUCxG JKVMU70NzVC79g3aSyGNU59d4adW8quzyFnsisCL9D6t8DDYoY3LaMGewJ89mIm1 toR4+bxv8sLEv2p5Qc7PxvNnNLZN9sU4SP+OX8QyVB2tkThrvCAVeX9twsB10lOm MdyCbqtB5aKnxA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:22 2025 by rpki-client