This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json) Hash identifier: FS4sIHdsDPc+mEKB+UbKjSq/vdCSAJkG/l1tMIBN1x0= Subject key identifier: F2:12:CC:5F:B3:FA:F0:93:B0:36:D9:D1:4D:8A:8E:6B:20:58:F7:6D Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019AF23FE69D6E6759205DB417742E355142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft Manifest number: 0807 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: c+Ntan7TPVAaaANiVnsejmHi+72J4ZDUEyKWk5HRzwA=) 2: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=) 3: orj-Fixx4A4juS-1X934vffLD8o.roa (hash: J+pYVYwK1M5g1D7W7QYyMTB9RQs4NzDsKsiKv4dwqAY=) 4: uLBMYegUP8tr8kerX1auVghRTuo.roa (hash: ObMmlvRRjGND9SS2xSn/Yi9qsVHAdvZK1zpCASvTGOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e6:9d:6e:67:59:20:5d:b4:17:74:2e:35:51:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=f212cc5fb3faf093b036d9d14d8a8e6b2058f76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:89:fd:9b:22:3b:a6:70:4d:68:0a:37:97: e0:47:89:ef:30:65:bc:e0:7e:b9:ae:58:1f:ba:b5: 65:c5:7b:d7:6c:d3:2b:e6:82:35:52:cb:0f:d1:62: ad:fa:37:41:ea:e6:bb:92:cc:d0:1f:08:04:b4:4c: 64:ce:8a:e5:1d:4e:bb:73:2e:33:1e:46:30:98:b4: f1:f5:98:4b:11:b6:4d:07:c2:4b:74:4d:c3:7f:74: a3:e9:06:61:8a:2f:6d:17:15:c2:62:f1:b4:f7:36: e0:a8:03:26:39:8c:82:d7:e9:86:7f:b8:20:bc:52: dd:db:0f:33:ef:10:1e:f6:21:f2:d9:1f:8f:b0:e5: a5:43:97:10:94:ca:65:3d:8c:11:cf:1f:bf:a0:a9: a1:aa:31:29:8e:9d:95:e9:b7:73:d2:40:ff:5b:0e: 31:52:d5:04:29:4b:12:cd:d9:7c:5d:bc:92:b3:39: 28:43:3b:22:a6:dc:36:5d:67:1e:88:5f:fa:d9:a9: 57:53:ef:7d:58:67:81:d6:04:e4:f9:e8:aa:4d:74: 49:70:1b:74:a9:0a:1a:56:49:62:aa:88:57:a5:40: 5b:fe:f5:ba:9e:d5:f2:77:6c:ee:23:7f:ea:0a:0b: 32:a4:65:79:b2:d4:ab:44:a8:a6:57:cb:17:5d:73: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:CC:5F:B3:FA:F0:93:B0:36:D9:D1:4D:8A:8E:6B:20:58:F7:6D X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2c:9e:f3:36:10:0f:58:a2:ff:31:99:c5:5e:e2:16:dd:f5: 0b:3a:18:3a:4a:26:fc:7d:53:8b:94:83:3c:75:0c:2c:c4:14: a9:a8:9f:64:6e:29:3c:68:94:05:f7:ec:93:31:13:a7:06:ff: 61:64:a9:45:3f:a1:58:0c:d6:55:e6:3b:f0:97:3a:a0:4f:fe: a9:6b:ee:d1:54:99:f3:1d:1d:d8:17:7f:f0:7a:95:0c:ec:22: 63:5d:f2:02:d3:58:8b:ff:ed:5b:88:ee:e9:0e:a3:0b:40:8d: 6e:94:c5:c8:11:a4:66:65:2b:a8:56:dd:52:e0:dc:2a:a3:a8: 6f:c0:22:9b:18:17:89:57:15:eb:95:40:b3:39:95:b1:3d:b2: 87:ed:77:9c:9e:29:4e:6e:7b:fc:97:31:e3:8e:8e:ec:88:76: fe:a8:a3:53:d2:a4:ae:80:51:2a:46:0c:56:52:52:d8:06:18: 85:57:55:79:17:5e:ba:a5:5c:9d:45:89:43:31:a6:f6:9e:9b: 5d:8b:bd:6c:73:26:54:01:20:3f:8d:ad:d5:70:0d:e1:4a:5d: df:4c:7e:fb:d3:7b:fc:47:70:3c:b8:90:5f:5c:6d:b0:fd:f9: d1:a9:8d:7b:06:ab:c3:fa:ff:ab:88:70:21:b8:d4:d8:31:69: b1:84:2e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+adbmdZIF20F3QuNVFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhmMjEyY2M1ZmIzZmFmMDkzYjAzNmQ5ZDE0ZDhhOGU2YjIwNThmNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyqJ/ZsiO6ZwTWgKN5fgR4nvMGW8 4H65rlgfurVlxXvXbNMr5oI1UssP0WKt+jdB6ua7kszQHwgEtExkzorlHU67cy4z HkYwmLTx9ZhLEbZNB8JLdE3Df3Sj6QZhii9tFxXCYvG09zbgqAMmOYyC1+mGf7gg vFLd2w8z7xAe9iHy2R+PsOWlQ5cQlMplPYwRzx+/oKmhqjEpjp2V6bdz0kD/Ww4x UtUEKUsSzdl8XbySszkoQzsiptw2XWceiF/62alXU+99WGeB1gTk+eiqTXRJcBt0 qQoaVkliqohXpUBb/vW6ntXyd2zuI3/qCgsypGV5stSrRKimV8sXXXNZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPISzF+z+vCTsDbZ0U2KjmsgWPdtMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSye8zYQ D1ii/zGZxV7iFt31CzoYOkom/H1Ti5SDPHUMLMQUqaifZG4pPGiUBffskzETpwb/ YWSpRT+hWAzWVeY78Jc6oE/+qWvu0VSZ8x0d2Bd/8HqVDOwiY13yAtNYi//tW4ju 6Q6jC0CNbpTFyBGkZmUrqFbdUuDcKqOob8AimxgXiVcV65VAszmVsT2yh+13nJ4p Tm57/Jcx446O7Ih2/qijU9KkroBRKkYMVlJS2AYYhVdVeRdeuqVcnUWJQzGm9p6b XYu9bHMmVAEgP42t1XAN4Upd30x++9N7/EdwPLiQX1xtsP350amNewarw/r/q4hw IbjU2DFpsYQuMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:10 2025 by rpki-client