This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: 7zj4exZQjCnd5rMGgezE0ebtocLdpnjZ8gBRpGSapiI= Subject key identifier: 4C:C9:E4:E3:74:02:34:C3:98:71:C7:B4:C4:A0:45:B5:58:21:EC:00 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 019AF12CDCE77E9E8AF6D64308975B0F5836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 0A43 Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: p7jZ+uIaYGOxVMfbVcVTa2k++C1chR/ikKQSfiwPMlA=) 2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dc:e7:7e:9e:8a:f6:d6:43:08:97:5b:0f:58:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=4cc9e4e3740234c39871c7b4c4a045b55821ec00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:3b:32:3f:fa:95:22:ce:d7:c6:de:fe:48: c1:d0:ec:c1:c5:db:aa:e8:23:b6:4b:7f:09:9f:58: b2:40:c1:f7:7f:1c:e6:17:88:07:2e:a3:8a:87:3e: 4f:19:cd:c4:5c:e3:dd:60:b6:49:91:c3:f3:0f:e3: 51:67:2d:da:27:e1:2a:99:7e:44:ba:ec:4a:ed:95: e4:77:5e:5a:7b:35:b5:74:24:7f:e1:04:33:19:d8: 17:3c:a9:78:2f:4c:4a:ab:c0:5e:fd:8a:90:b6:56: d3:e8:1d:cc:d7:53:90:81:ad:08:8f:8a:70:59:6b: 65:52:c7:7e:a1:00:bc:47:81:a6:c6:dd:b4:0d:bd: 3a:e6:fa:0b:97:d3:2f:6b:d5:56:b0:7a:2b:a6:a9: 0a:64:93:37:fe:99:56:d8:ca:ff:fa:94:98:c6:eb: 29:1a:93:ee:f9:fe:05:20:54:be:14:76:3c:e9:9c: e8:e7:be:c5:8a:33:b1:76:64:2b:6b:66:79:9a:95: 31:99:e8:32:9e:3c:2a:3e:17:32:79:78:b8:15:6b: 7e:bd:ec:98:e6:9f:ae:09:85:15:71:f6:f9:ee:19: d8:43:c5:fe:e2:45:85:74:d8:b3:e6:f8:ba:11:76: 3b:9a:37:b3:d1:94:7f:7e:b8:4c:bc:bb:ec:fd:b7: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:E4:E3:74:02:34:C3:98:71:C7:B4:C4:A0:45:B5:58:21:EC:00 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:1a:86:6e:a0:2f:14:68:12:b0:7e:5c:36:61:b2:a1:25: 3e:95:d5:6f:1f:93:bb:da:8e:77:04:c1:71:b9:2a:43:d3:c4: d7:03:09:b1:a3:6e:69:0c:0d:df:07:c8:78:6a:59:ea:1c:86: ff:e4:cb:14:9c:ff:b1:35:9b:e7:10:15:f1:70:ab:e9:1d:dc: 8c:b8:0b:ba:4e:cf:ec:d2:7b:c1:59:04:0a:81:68:b9:7b:6b: 9a:df:4e:ad:2f:28:00:c5:d5:02:b6:35:e3:f4:ac:43:5a:b7: 59:43:94:cf:33:14:82:05:36:7a:2b:3b:74:d6:1b:9f:47:dc: 50:c0:67:f0:7c:63:8b:f1:5e:e5:ef:ec:e8:c0:51:ca:b7:7f: 91:56:21:64:95:6c:2c:9e:bf:2e:e5:97:25:39:62:2c:44:f2: 4c:9f:85:6d:eb:09:e9:c9:e6:a6:ba:08:61:82:13:e3:27:ce: 2f:84:5c:c8:58:56:d3:b6:ee:50:d4:05:a0:7f:51:23:b4:df: f6:e4:71:04:44:9d:ee:f2:77:a6:06:1c:46:bf:bb:45:a8:ab: 71:24:ce:49:42:64:06:8e:a4:8c:b5:39:6b:ea:7d:d3:e1:70: e7:14:6d:e5:d6:24:39:e9:1e:c0:59:99:33:19:6b:8d:a5:19: 3a:ca:94:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNznfp6K9tZDCJdbD1g2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD Eyg0Y2M5ZTRlMzc0MDIzNGMzOTg3MWM3YjRjNGEwNDViNTU4MjFlYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB87Mj/6lSLO18be/kjB0OzBxduq 6CO2S38Jn1iyQMH3fxzmF4gHLqOKhz5PGc3EXOPdYLZJkcPzD+NRZy3aJ+EqmX5E uuxK7ZXkd15aezW1dCR/4QQzGdgXPKl4L0xKq8Be/YqQtlbT6B3M11OQga0Ij4pw WWtlUsd+oQC8R4Gmxt20Db065voLl9Mva9VWsHorpqkKZJM3/plW2Mr/+pSYxusp GpPu+f4FIFS+FHY86Zzo577FijOxdmQra2Z5mpUxmegynjwqPhcyeXi4FWt+veyY 5p+uCYUVcfb57hnYQ8X+4kWFdNiz5vi6EXY7mjez0ZR/frhMvLvs/bf51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzJ5ON0AjTDmHHHtMSgRbVYIewAMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxIahm6g LxRoErB+XDZhsqElPpXVbx+Tu9qOdwTBcbkqQ9PE1wMJsaNuaQwN3wfIeGpZ6hyG /+TLFJz/sTWb5xAV8XCr6R3cjLgLuk7P7NJ7wVkECoFouXtrmt9OrS8oAMXVArY1 4/SsQ1q3WUOUzzMUggU2eis7dNYbn0fcUMBn8Hxji/Fe5e/s6MBRyrd/kVYhZJVs LJ6/LuWXJTliLETyTJ+FbesJ6cnmproIYYIT4yfOL4RcyFhW07buUNQFoH9RI7Tf 9uRxBESd7vJ3pgYcRr+7RaircSTOSUJkBo6kjLU5a+p90+Fw5xRt5dYkOekewFmZ MxlrjaUZOsqUpA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:10 2025 by rpki-client