This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft File: LpT_AwG-edgSYKxmrHNi762WikE.mft (raw, json) Hash identifier: o985YB/INdtru0u+60sD3K/0fIEfW8CSrriywO0Xo9A= Subject key identifier: 86:DF:7A:8E:BF:24:7B:5D:1B:DE:F4:B5:A9:05:75:30:96:1F:54:9E Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41 Certificate serial: 019B26645214352BBD0288795C55E13349BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft Manifest number: 0DBA Signing time: Tue 16 Dec 2025 09:01:07 +0000 Manifest this update: Tue 16 Dec 2025 09:01:07 +0000 Manifest next update: Wed 17 Dec 2025 09:01:07 +0000 Files and hashes: 1: LpT_AwG-edgSYKxmrHNi762WikE.crl (hash: vi9vFuqxtAB/7HAcrcTnGTBVxF70bg9rsWhPrw/ERMI=) 2: xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa (hash: gmBp6MHi7PgcV0+T6HOJKzGRBuPuBU2bj1lv4nMBWYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:52:14:35:2b:bd:02:88:79:5c:55:e1:33:49:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41 Validity Not Before: Dec 16 09:01:07 2025 GMT Not After : Dec 17 09:01:07 2025 GMT Subject: CN=86df7a8ebf247b5d1bdef4b5a9057530961f549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:6f:7d:48:1e:4c:ff:91:a9:41:8b:60:85: 7e:2d:66:91:5b:c2:2f:d0:ba:b7:fe:eb:ae:dd:45: d2:c4:01:62:36:b8:98:86:7e:3e:d9:24:a8:65:2a: 27:47:68:ec:a2:86:86:c7:b2:1d:82:02:c2:f2:51: ca:3b:4f:01:d7:20:ba:df:28:07:65:b5:ca:4c:52: 90:ed:40:36:ce:1d:c8:f6:34:41:6f:f2:ab:dc:4a: 38:e5:12:cc:ce:b1:fb:5d:02:ee:31:f5:f5:49:e3: 06:53:14:1f:35:21:0f:f4:6f:43:95:9b:93:82:45: 57:f4:f7:a5:6b:0f:49:69:59:02:8e:7a:bd:84:3e: 53:e5:3d:9a:ad:8a:5b:53:d0:2b:8a:ca:d0:0e:4c: 19:16:79:c0:9b:3e:38:5e:e4:ff:71:72:d8:57:11: 4d:e2:58:3a:5f:c2:a4:ce:ea:b2:2b:77:13:2d:a7: 7d:d1:ce:ff:0e:dd:6f:32:be:c7:3b:37:ac:d4:08: a7:2e:4d:b1:56:a9:74:bc:5f:75:b9:ad:15:20:5f: f8:9c:f2:0e:7a:65:f5:cb:03:91:64:c8:51:df:76: 47:48:01:24:bb:9a:f8:74:aa:05:b4:0e:ec:1c:98: 6d:dd:b1:45:4f:61:61:37:4b:b3:73:cc:07:53:4a: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DF:7A:8E:BF:24:7B:5D:1B:DE:F4:B5:A9:05:75:30:96:1F:54:9E X509v3 Authority Key Identifier: keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b7:b1:cc:c2:9a:4f:4c:59:59:c4:82:9c:18:f8:0b:d9:20: 62:1e:e5:3c:75:66:cd:d0:11:13:f3:a0:9d:3a:b1:24:c4:e0: 01:e8:10:ca:19:04:96:1a:78:b9:1f:76:6b:e8:ef:4a:46:64: f8:ae:eb:20:11:2c:e1:bf:b0:a1:aa:55:04:ed:b6:9d:c6:08: cc:09:30:c6:62:7c:3b:f4:60:85:d1:a0:2d:58:9e:49:c2:15: 43:46:d1:e2:56:79:23:3b:8b:37:98:2f:f9:01:fb:65:dd:24: 5e:13:6d:44:68:7c:f1:eb:b9:b6:b7:15:6c:a3:68:f9:c5:1b: 85:e1:0a:52:a8:3d:cf:f7:c1:56:22:81:c6:96:3f:c0:52:69: 20:70:c8:cc:75:cd:c5:91:f8:89:11:e0:a8:7e:74:05:b4:1a: 44:14:6a:33:5a:d8:ba:27:d8:03:50:92:62:f2:69:be:53:0e: c0:b1:6b:a9:1e:58:b1:d0:d5:2d:20:7e:f3:9e:5f:d5:7f:a4: f3:06:5f:4c:09:1b:22:a1:ca:15:46:32:60:fc:cc:5b:88:87: 29:0e:92:71:be:2f:e0:43:2d:39:33:ec:da:e6:53:ab:64:c4: bb:46:aa:28:66:4e:4e:8d:eb:66:9b:bd:6d:55:3a:63:68:e9: 71:23:0e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZFIUNSu9Aoh5XFXhM0m8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOTRmZjAzMDFiZTc5ZDgxMjYwYWM2NmFjNzM2MmVmYWQ5 NjhhNDEwHhcNMjUxMjE2MDkwMTA3WhcNMjUxMjE3MDkwMTA3WjAzMTEwLwYDVQQD Eyg4NmRmN2E4ZWJmMjQ3YjVkMWJkZWY0YjVhOTA1NzUzMDk2MWY1NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39vfUgeTP+RqUGLYIV+LWaRW8Iv 0Lq3/uuu3UXSxAFiNriYhn4+2SSoZSonR2jsooaGx7IdggLC8lHKO08B1yC63ygH ZbXKTFKQ7UA2zh3I9jRBb/Kr3Eo45RLMzrH7XQLuMfX1SeMGUxQfNSEP9G9DlZuT gkVX9Pelaw9JaVkCjnq9hD5T5T2arYpbU9ArisrQDkwZFnnAmz44XuT/cXLYVxFN 4lg6X8KkzuqyK3cTLad90c7/Dt1vMr7HOzes1AinLk2xVql0vF91ua0VIF/4nPIO emX1ywORZMhR33ZHSAEku5r4dKoFtA7sHJht3bFFT2FhN0uzc8wHU0pTiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbfeo6/JHtdG970takFdTCWH1SeMB8GA1UdIwQY MBaAFC6U/wMBvnnYEmCsZqxzYu+tlopBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGIt NjhlN2ZiMTdhNDRiLzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGItNjhlN2ZiMTdhNDRi LzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbexzMKa T0xZWcSCnBj4C9kgYh7lPHVmzdARE/OgnTqxJMTgAegQyhkElhp4uR92a+jvSkZk +K7rIBEs4b+woapVBO22ncYIzAkwxmJ8O/RghdGgLVieScIVQ0bR4lZ5IzuLN5gv +QH7Zd0kXhNtRGh88eu5trcVbKNo+cUbheEKUqg9z/fBViKBxpY/wFJpIHDIzHXN xZH4iRHgqH50BbQaRBRqM1rYuifYA1CSYvJpvlMOwLFrqR5YsdDVLSB+855f1X+k 8wZfTAkbIqHKFUYyYPzMW4iHKQ6Scb4v4EMtOTPs2uZTq2TEu0aqKGZOTo3rZpu9 bVU6Y2jpcSMOQg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:57:27 2025 by rpki-client