This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json) Hash identifier: FhSV/vjdjmaJNV4wPB0C0PESJzXIcWxMk/mkWJLc6sY= Subject key identifier: 95:35:2E:4B:F9:DA:44:CB:2B:88:64:0A:2C:85:F0:DE:84:8D:EA:60 Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Certificate serial: 019AF1648DA7462913D303D2D6FCFFC1CDFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft Manifest number: 1447 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: zoR2ddNcGYB7WvpFy3g3QViyG5kejvQaqrtAEiYG/BE=) 2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8d:a7:46:29:13:d3:03:d2:d6:fc:ff:c1:cd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=95352e4bf9da44cb2b88640a2c85f0de848dea60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:e3:2b:ff:8e:8d:af:6e:98:2f:c1:86:0a: ff:6c:95:1f:7c:17:64:0d:1a:4d:b4:d2:0b:c7:1f: b0:8a:9a:12:6a:c3:4c:d2:4d:d2:d4:ae:7d:7a:47: 78:da:29:b9:5c:73:b5:cb:96:c9:6c:6d:d2:54:db: cf:87:6a:0b:61:8a:89:40:13:e4:3b:7a:94:bb:9a: 1b:89:ec:89:cd:6b:84:e8:dd:c0:0b:de:3b:12:04: 90:fd:cf:de:2d:00:ec:a6:68:f1:d0:09:f1:63:95: ba:13:57:f9:61:01:54:e7:8f:24:63:36:ab:64:85: a0:d3:b2:67:71:fd:84:cc:63:a9:b7:9d:d4:f5:d9: 00:8e:af:6b:32:74:6d:72:9d:a2:b9:13:34:17:f7: 9a:af:47:86:d8:60:cf:5d:2c:43:34:60:04:b4:f2: 5c:a0:36:2a:41:d9:42:e8:7f:43:bf:69:f8:1b:19: fa:31:6d:a6:bc:93:f4:0c:d8:fc:c3:73:fb:e0:ac: da:a3:cf:8f:6f:0a:07:53:eb:15:01:d7:7e:10:6a: 04:fd:26:9f:6b:56:38:05:18:4a:d5:7c:a3:d8:71: dd:5d:60:9c:0b:ed:aa:8a:b8:d8:38:02:d5:64:e4: 4b:2a:5f:23:df:9e:e4:50:41:94:45:df:18:da:fa: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:35:2E:4B:F9:DA:44:CB:2B:88:64:0A:2C:85:F0:DE:84:8D:EA:60 X509v3 Authority Key Identifier: keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:df:50:ae:ca:73:89:92:c8:8f:12:2b:a6:7b:3b:6f:bc: d3:01:53:8d:7a:47:dd:f8:8b:94:7b:a7:7b:1b:e0:e0:9f:15: 24:6c:4b:5c:86:fb:b6:e2:2e:f2:b0:99:cf:6f:76:b5:40:50: 97:9a:0e:fe:af:5f:3d:ea:4b:d6:cb:e4:8a:bd:71:36:53:67: b2:be:ce:7c:64:7e:ed:4f:32:dd:07:58:54:42:87:65:24:83: 1d:52:4d:78:a7:40:b2:fd:77:22:73:7a:d8:5e:b1:32:bf:8f: 21:9a:c5:ec:fe:71:05:45:3e:d8:dd:1d:ac:ef:9c:65:8a:b5: ae:1d:df:30:41:07:80:3f:25:f7:c6:64:b0:cc:3d:6c:11:99: 57:ec:d4:42:af:2e:6d:5f:62:ea:97:70:8a:dd:21:30:9d:db: 26:22:6b:ea:57:98:55:9f:d5:55:76:99:f0:8d:0d:4d:f2:2a: b8:7c:63:32:ef:ba:5d:08:16:b0:79:c9:d3:ea:fa:58:3a:78: 11:e3:04:05:82:c4:ee:a3:88:45:45:c7:bc:89:4a:67:98:0b: 6a:97:67:6d:d2:72:46:9a:b6:69:85:cb:36:08:fd:97:e2:11: fd:b4:3f:cc:89:84:27:2f:07:4e:35:68:b5:79:2a:4e:53:d9: e6:9d:ce:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI2nRikT0wPS1vz/wc3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh M2Q3NGQwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD Eyg5NTM1MmU0YmY5ZGE0NGNiMmI4ODY0MGEyYzg1ZjBkZTg0OGRlYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlvjK/+Oja9umC/Bhgr/bJUffBdk DRpNtNILxx+wipoSasNM0k3S1K59ekd42im5XHO1y5bJbG3SVNvPh2oLYYqJQBPk O3qUu5obieyJzWuE6N3AC947EgSQ/c/eLQDspmjx0AnxY5W6E1f5YQFU548kYzar ZIWg07Jncf2EzGOpt53U9dkAjq9rMnRtcp2iuRM0F/ear0eG2GDPXSxDNGAEtPJc oDYqQdlC6H9Dv2n4Gxn6MW2mvJP0DNj8w3P74Kzao8+PbwoHU+sVAdd+EGoE/Saf a1Y4BRhK1Xyj2HHdXWCcC+2qirjYOALVZORLKl8j357kUEGURd8Y2vpczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU1Lkv52kTLK4hkCiyF8N6EjepgMB8GA1UdIwQY MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvvfUK7K c4mSyI8SK6Z7O2+80wFTjXpH3fiLlHunexvg4J8VJGxLXIb7tuIu8rCZz292tUBQ l5oO/q9fPepL1svkir1xNlNnsr7OfGR+7U8y3QdYVEKHZSSDHVJNeKdAsv13InN6 2F6xMr+PIZrF7P5xBUU+2N0drO+cZYq1rh3fMEEHgD8l98ZksMw9bBGZV+zUQq8u bV9i6pdwit0hMJ3bJiJr6leYVZ/VVXaZ8I0NTfIquHxjMu+6XQgWsHnJ0+r6WDp4 EeMEBYLE7qOIRUXHvIlKZ5gLapdnbdJyRpq2aYXLNgj9l+IR/bQ/zImEJy8HTjVo tXkqTlPZ5p3OnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:26 2025 by rpki-client