This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft File: LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json) Hash identifier: xHvhvvwGhiB3riHeSopvphxrQb9mOufXy9S/CJGAFNA= Subject key identifier: 58:A2:40:7C:7A:0A:69:F4:5F:FC:0C:F1:EA:8B:8A:38:3D:D7:D3:88 Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Certificate serial: 019AF31C16EF9E04C4257091D6E8E762FDD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: NhR49PBaARvGTmuvEjsTmJCl26Dh4VvcgSp0I3QrE0A=) 2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:16:ef:9e:04:c4:25:70:91:d6:e8:e7:62:fd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=58a2407c7a0a69f45ffc0cf1ea8b8a383dd7d388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:51:5a:47:19:cd:0e:fc:60:ab:cc:13:dc: 70:08:65:8b:14:28:f2:ed:e2:63:f4:79:11:e9:dd: c6:c6:ee:38:1b:ed:32:03:6c:97:8f:7b:fa:e4:56: 33:b0:58:fd:b1:55:c3:62:1d:73:a2:9a:26:cb:cf: 26:c3:cc:69:20:71:2d:24:18:00:80:07:eb:ba:92: 61:f1:c6:86:3e:54:5c:e1:02:33:e5:2e:15:a2:54: 1a:b9:dc:98:f4:50:e6:91:d2:6b:ab:37:a0:7d:14: 69:ff:6a:a7:73:08:d5:01:57:8c:4c:ad:c1:02:41: f9:45:2d:96:9a:11:14:e7:55:28:95:67:56:a1:d4: 33:a2:2f:f4:69:53:79:48:5f:e1:81:7a:8d:7f:73: 30:5e:b1:b8:e1:78:ac:3c:69:43:dc:46:65:b8:9c: 0e:7a:1e:05:e2:3c:54:82:59:7b:e6:46:58:bf:5b: 9e:bb:ea:1f:fe:78:36:de:35:fe:ec:15:02:54:ff: 98:63:64:ea:8e:c0:3f:1a:9c:a4:05:e6:09:35:6c: e5:c6:99:17:30:de:2f:59:8d:d1:2f:b0:3d:9e:0d: f5:94:96:d6:c3:10:98:35:fb:77:7f:b5:0d:20:18: f9:35:f8:67:45:a5:ed:99:da:12:7a:56:ff:4a:60: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A2:40:7C:7A:0A:69:F4:5F:FC:0C:F1:EA:8B:8A:38:3D:D7:D3:88 X509v3 Authority Key Identifier: keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c6:20:02:12:fc:04:4f:5c:57:fc:17:d5:32:30:44:79:6f: 17:62:cf:2b:28:a5:51:db:5a:94:d8:dd:97:34:b8:91:af:73: e9:84:09:d2:7e:c2:f6:7d:8e:bb:bb:a5:38:5c:ba:71:bf:c5: 1c:cf:67:0d:d8:e8:c5:ef:c8:13:a7:ed:00:d9:1f:4b:0d:dd: e5:f8:98:5c:53:65:2a:5d:45:b9:a6:00:10:f7:68:23:4a:9c: e7:67:86:9c:54:97:4e:e5:7a:27:b3:ca:9a:dc:c3:ce:d9:fd: 20:27:1a:be:40:71:03:e8:21:cf:3f:59:ed:6d:7b:fd:2a:d8: 6c:37:61:57:9f:e9:72:52:72:58:6c:71:2b:96:d5:87:6a:59: 07:96:38:89:66:36:43:12:ad:8d:1b:ee:3e:de:5d:3f:50:26: c8:0c:d5:20:6c:ee:e6:3a:dd:a3:0b:cc:75:46:6e:c9:16:34: 8b:51:90:1a:ab:30:d7:d0:3d:3f:b3:d8:25:95:b4:2a:03:a5: 8e:9a:6f:ba:7a:33:55:86:58:5a:b0:44:73:36:d7:d2:e9:7f: 53:0a:2c:06:ba:84:93:1c:dd:f6:1e:80:b6:23:55:18:5b:16: 70:e7:b2:03:8d:75:8d:e4:6c:29:cc:1b:3d:aa:1d:1f:82:16: ab:a5:a9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBbvngTEJXCR1ujnYv3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmYzY2M1ZDc4NTk0MmU2MDQ4MDkzYzc0MzM5NzNhZWIx NWZlMjIwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD Eyg1OGEyNDA3YzdhMGE2OWY0NWZmYzBjZjFlYThiOGEzODNkZDdkMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmJRWkcZzQ78YKvME9xwCGWLFCjy 7eJj9HkR6d3Gxu44G+0yA2yXj3v65FYzsFj9sVXDYh1zopomy88mw8xpIHEtJBgA gAfrupJh8caGPlRc4QIz5S4VolQaudyY9FDmkdJrqzegfRRp/2qncwjVAVeMTK3B AkH5RS2WmhEU51UolWdWodQzoi/0aVN5SF/hgXqNf3MwXrG44XisPGlD3EZluJwO eh4F4jxUgll75kZYv1ueu+of/ng23jX+7BUCVP+YY2TqjsA/GpykBeYJNWzlxpkX MN4vWY3RL7A9ng31lJbWwxCYNft3f7UNIBj5NfhnRaXtmdoSelb/SmBg8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiiQHx6Cmn0X/wM8eqLijg919OIMB8GA1UdIwQY MBaAFCxvPMXXhZQuYEgJPHQzlzrrFf4iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYt NmNmMWNhNTA4ZDFhLzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYtNmNmMWNhNTA4ZDFh LzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMYgAhL8 BE9cV/wX1TIwRHlvF2LPKyilUdtalNjdlzS4ka9z6YQJ0n7C9n2Ou7ulOFy6cb/F HM9nDdjoxe/IE6ftANkfSw3d5fiYXFNlKl1FuaYAEPdoI0qc52eGnFSXTuV6J7PK mtzDztn9ICcavkBxA+ghzz9Z7W17/SrYbDdhV5/pclJyWGxxK5bVh2pZB5Y4iWY2 QxKtjRvuPt5dP1AmyAzVIGzu5jrdowvMdUZuyRY0i1GQGqsw19A9P7PYJZW0KgOl jppvunozVYZYWrBEczbX0ul/UwosBrqEkxzd9h6AtiNVGFsWcOeyA411jeRsKcwb PaodH4IWq6WpUg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:20 2025 by rpki-client