This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json) Hash identifier: fChYPH84dZyjjWCAfEq7GVqBynvLWE2YhWGgONQNLTw= Subject key identifier: 92:E1:B4:7A:CD:21:E6:7E:70:57:22:91:60:A4:8E:C1:0E:02:A8:7A Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349 Certificate serial: 019AF20903179AF59F94811520ECF0B4D7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=) 2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: l7TwQGFszC4JgBEjmEJZAtmaHG1PN+QjndM2tcf49FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:03:17:9a:f5:9f:94:81:15:20:ec:f0:b4:d7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=92e1b47acd21e67e7057229160a48ec10e02a87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:13:21:47:59:44:53:7c:74:da:8c:13:01: d6:20:bd:a9:f2:5d:51:75:ba:2a:73:22:9a:a4:c1: 25:74:1d:c2:bb:39:ad:e8:b7:78:e0:de:36:c0:a1: ec:a9:1f:90:f6:8f:4c:71:f0:0c:da:b3:69:0d:38: fc:4c:07:a2:5b:94:d2:b1:77:f8:c4:c0:e9:f9:41: 99:24:44:b7:71:59:7e:fb:ce:d1:8f:f7:f3:6d:76: 44:de:24:36:8f:ff:51:84:45:12:ee:41:d7:d5:db: 40:7a:ee:ce:56:53:00:1e:75:75:16:3b:d6:ef:72: 8d:d5:6c:f3:12:04:34:a5:f2:b7:03:98:b1:87:cc: ed:f7:4b:6c:6c:36:e8:f9:2e:8b:cc:fc:e2:85:87: 64:98:5f:d5:63:0a:20:4d:a5:54:97:f1:22:82:6e: 8c:2b:92:36:0f:5c:85:45:5c:c8:dd:3f:b0:f7:73: 8c:a5:08:c7:72:14:b4:51:7c:85:bd:86:43:e7:94: 05:3f:e2:de:dc:42:63:e5:6e:b0:2b:5c:a1:c2:68: a6:b1:7b:c8:e8:d8:19:9a:04:46:d3:ca:19:12:c2: bb:bd:85:92:ca:74:c4:1f:59:fa:2e:94:04:a3:28: 10:c1:2a:38:87:09:3e:5c:54:f8:e8:be:c6:e8:c8: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:B4:7A:CD:21:E6:7E:70:57:22:91:60:A4:8E:C1:0E:02:A8:7A X509v3 Authority Key Identifier: keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:78:b5:68:90:7a:ff:f2:b4:19:3d:e0:f4:29:08:98:de:9e: 5d:40:ed:87:74:3b:98:16:4b:ff:a9:0b:98:81:15:40:cc:fe: 18:07:78:ac:b0:21:ed:bf:7c:85:21:24:ec:d3:4e:4f:6c:af: 51:a4:3e:ef:b6:0d:6e:f3:92:d0:a2:73:a4:7b:62:39:96:79: 68:db:2c:c6:7b:0b:05:81:13:61:df:cc:73:52:38:1c:36:ed: 0a:8a:3c:76:df:30:dc:8b:30:c5:d0:58:94:b8:68:b5:fa:7e: 0d:53:7a:02:4b:b7:26:7b:5f:18:43:83:6e:e4:3b:9b:21:02: d9:3f:7c:07:b0:07:55:f9:b3:64:c9:b3:48:ec:7f:54:2b:f1: f5:8f:53:bf:6f:d2:97:06:e6:c1:c8:6a:e5:94:13:38:2d:c1: 40:f1:60:17:85:cd:34:55:93:a9:aa:7c:d4:76:66:51:20:c4: 22:8b:f5:35:bd:f8:88:ae:ed:f3:34:df:d0:c1:3d:9d:57:fd: ae:c5:ec:6c:74:49:5e:04:cf:0b:ab:32:e0:16:bc:ad:2d:5b: ed:ed:eb:e9:ce:23:25:84:bf:c1:39:0c:50:db:df:22:aa:66: 35:31:b2:a8:86:cc:7a:00:ba:23:b5:b9:9c:f0:9e:9e:c2:78: 16:d3:d9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQMXmvWflIEVIOzwtNfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh M2IzNDkwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD Eyg5MmUxYjQ3YWNkMjFlNjdlNzA1NzIyOTE2MGE0OGVjMTBlMDJhODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AETIUdZRFN8dNqMEwHWIL2p8l1R dboqcyKapMEldB3Cuzmt6Ld44N42wKHsqR+Q9o9McfAM2rNpDTj8TAeiW5TSsXf4 xMDp+UGZJES3cVl++87Rj/fzbXZE3iQ2j/9RhEUS7kHX1dtAeu7OVlMAHnV1FjvW 73KN1WzzEgQ0pfK3A5ixh8zt90tsbDbo+S6LzPzihYdkmF/VYwogTaVUl/Eigm6M K5I2D1yFRVzI3T+w93OMpQjHchS0UXyFvYZD55QFP+Le3EJj5W6wK1yhwmimsXvI 6NgZmgRG08oZEsK7vYWSynTEH1n6LpQEoygQwSo4hwk+XFT46L7G6MhhJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLhtHrNIeZ+cFcikWCkjsEOAqh6MB8GA1UdIwQY MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXi1aJB6 //K0GT3g9CkImN6eXUDth3Q7mBZL/6kLmIEVQMz+GAd4rLAh7b98hSEk7NNOT2yv UaQ+77YNbvOS0KJzpHtiOZZ5aNssxnsLBYETYd/Mc1I4HDbtCoo8dt8w3IswxdBY lLhotfp+DVN6Aku3JntfGEODbuQ7myEC2T98B7AHVfmzZMmzSOx/VCvx9Y9Tv2/S lwbmwchq5ZQTOC3BQPFgF4XNNFWTqap81HZmUSDEIov1Nb34iK7t8zTf0ME9nVf9 rsXsbHRJXgTPC6sy4Ba8rS1b7e3r6c4jJYS/wTkMUNvfIqpmNTGyqIbMegC6I7W5 nPCensJ4FtPZug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:37 2025 by rpki-client