This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft File: LpT_AwG-edgSYKxmrHNi762WikE.mft (raw, json) Hash identifier: k57B89+AKfHfFJIukx3PY8mGpsHwImuGso0Fe9uV5b4= Subject key identifier: D2:AA:16:F0:48:B3:E3:56:04:14:98:45:AB:89:FC:35:A4:ED:26:CE Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41 Certificate serial: 019B28525B7F50F94A0EAE8E520328A4CEF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft Manifest number: 0DBB Signing time: Tue 16 Dec 2025 18:00:44 +0000 Manifest this update: Tue 16 Dec 2025 18:00:44 +0000 Manifest next update: Wed 17 Dec 2025 18:00:44 +0000 Files and hashes: 1: LpT_AwG-edgSYKxmrHNi762WikE.crl (hash: U5JCKc12YJev9EaWzBV192/tAGaAfYrRyRjl7xn+S6w=) 2: xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa (hash: gmBp6MHi7PgcV0+T6HOJKzGRBuPuBU2bj1lv4nMBWYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:5b:7f:50:f9:4a:0e:ae:8e:52:03:28:a4:ce:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41 Validity Not Before: Dec 16 18:00:44 2025 GMT Not After : Dec 17 18:00:44 2025 GMT Subject: CN=d2aa16f048b3e35604149845ab89fc35a4ed26ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:d0:16:6c:ce:79:81:1c:a1:c7:53:91:42: 0b:3a:80:56:8b:3e:60:0e:74:03:ef:3e:20:30:de: cf:37:fa:f6:4e:e2:48:af:aa:54:ec:4a:ae:27:73: f0:d1:2a:a8:d2:5e:c8:5f:88:71:62:a3:3d:99:ec: 5a:ae:b2:b4:bf:71:58:6d:13:5b:b7:5d:8a:7b:4d: b0:8d:ae:c2:46:f2:d2:b8:30:1d:8c:dc:2b:fd:28: 15:55:51:47:da:09:7b:04:9c:d9:55:98:4b:62:6c: b7:ed:c2:05:08:28:b2:75:7d:c6:72:93:34:3b:f1: bd:d7:32:7f:85:80:93:1a:38:12:9f:35:7c:9e:41: 2b:98:b9:d0:b7:01:c3:95:b8:4c:4b:cc:a7:1b:2b: 60:04:d6:92:96:05:ad:97:fa:17:40:85:f1:42:f0: b2:c6:f8:9f:b6:52:14:6b:a5:ef:33:a3:9b:ab:f7: 07:9b:93:32:ec:52:4f:9a:b7:8d:c6:eb:81:bc:ae: 9d:c6:2e:82:80:4b:af:c4:25:86:b3:e7:37:e2:ba: 0f:32:ac:7c:64:0c:22:bc:a4:5b:23:7f:36:11:ef: d8:b9:a6:38:d6:4b:fd:1e:7f:d6:8f:7d:2b:76:f0: 8e:c2:c2:35:4c:e1:e0:3e:37:e6:48:fa:ca:36:08: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:16:F0:48:B3:E3:56:04:14:98:45:AB:89:FC:35:A4:ED:26:CE X509v3 Authority Key Identifier: keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a5:79:f0:ba:5e:0a:ad:9a:2a:b8:5f:e2:b5:8c:e0:51:f2: 95:4e:d9:5c:18:54:0b:7f:48:30:b1:67:43:5d:a7:3f:00:3d: df:36:63:e1:f5:ea:b5:a1:ea:ce:09:7c:98:b8:da:e7:48:b3: 61:2a:18:14:96:8e:8e:f9:b7:9d:b2:13:9b:bb:15:e7:d5:95: 34:60:26:9e:cd:ba:d9:44:99:2e:79:5d:7e:13:00:9e:e3:31: ef:07:a5:b1:ae:d2:ad:25:82:17:98:77:1e:d0:0b:f0:14:df: 94:3a:c8:a7:eb:8e:0e:bd:23:2c:15:49:05:d7:ac:f9:8d:21: 6c:af:fe:f9:c1:f7:96:48:00:61:c8:43:8e:4a:7f:4d:c8:fb: 6a:81:7a:de:55:61:87:39:94:3f:61:57:2e:ec:99:32:4f:55: 7b:0c:62:29:09:d0:12:3c:76:38:4d:97:e5:b5:a4:69:79:e1: 5c:c0:bc:79:6a:2b:5a:84:68:87:5b:2c:cd:03:37:61:d3:83: d2:e8:f2:52:b7:1a:39:dc:28:51:42:8b:ce:7f:75:98:e0:d7: 0f:cf:75:21:5b:44:f5:88:1f:a0:13:a7:72:95:64:ca:d5:69: 49:7a:be:a3:7f:c7:28:dd:15:26:29:c4:8f:09:45:b2:3a:cd: f2:f8:17:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUlt/UPlKDq6OUgMopM7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTRmZjAzMDFiZTc5ZDgxMjYwYWM2NmFjNzM2MmVmYWQ5 NjhhNDEwHhcNMjUxMjE2MTgwMDQ0WhcNMjUxMjE3MTgwMDQ0WjAzMTEwLwYDVQQD EyhkMmFhMTZmMDQ4YjNlMzU2MDQxNDk4NDVhYjg5ZmMzNWE0ZWQyNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRPQFmzOeYEcocdTkUILOoBWiz5g DnQD7z4gMN7PN/r2TuJIr6pU7EquJ3Pw0Sqo0l7IX4hxYqM9mexarrK0v3FYbRNb t12Ke02wja7CRvLSuDAdjNwr/SgVVVFH2gl7BJzZVZhLYmy37cIFCCiydX3GcpM0 O/G91zJ/hYCTGjgSnzV8nkErmLnQtwHDlbhMS8ynGytgBNaSlgWtl/oXQIXxQvCy xviftlIUa6XvM6Obq/cHm5My7FJPmreNxuuBvK6dxi6CgEuvxCWGs+c34roPMqx8 ZAwivKRbI382Ee/YuaY41kv9Hn/Wj30rdvCOwsI1TOHgPjfmSPrKNgivQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKqFvBIs+NWBBSYRauJ/DWk7SbOMB8GA1UdIwQY MBaAFC6U/wMBvnnYEmCsZqxzYu+tlopBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGIt NjhlN2ZiMTdhNDRiLzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGItNjhlN2ZiMTdhNDRi LzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6V58Lpe Cq2aKrhf4rWM4FHylU7ZXBhUC39IMLFnQ12nPwA93zZj4fXqtaHqzgl8mLja50iz YSoYFJaOjvm3nbITm7sV59WVNGAmns262USZLnldfhMAnuMx7welsa7SrSWCF5h3 HtAL8BTflDrIp+uODr0jLBVJBdes+Y0hbK/++cH3lkgAYchDjkp/Tcj7aoF63lVh hzmUP2FXLuyZMk9VewxiKQnQEjx2OE2X5bWkaXnhXMC8eWorWoRoh1sszQM3YdOD 0ujyUrcaOdwoUUKLzn91mODXD891IVtE9YgfoBOncpVkytVpSXq+o3/HKN0VJinE jwlFsjrN8vgXHg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:57:07 2025 by rpki-client