This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft File: LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json) Hash identifier: OU1b3DEFPLW3qvwrdYiAkrGE2AC+dYn0Ta2a+K0kD2U= Subject key identifier: EF:D0:58:57:60:F4:8C:D5:13:54:D4:AD:11:D7:FD:22:5A:76:60:7B Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1 Certificate issuer: /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1 Certificate serial: 019B3C7FA3B032C82FCE9F696127D965D30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:02:36 +0000 Manifest this update: Sat 20 Dec 2025 16:02:36 +0000 Manifest next update: Sun 21 Dec 2025 16:02:36 +0000 Files and hashes: 1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: Eit3cDYfys92CDgf6ucmfcD9EEsBUdQPptade5D6xIY=) 2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:a3:b0:32:c8:2f:ce:9f:69:61:27:d9:65:d3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1 Validity Not Before: Dec 20 16:02:36 2025 GMT Not After : Dec 21 16:02:36 2025 GMT Subject: CN=efd0585760f48cd51354d4ad11d7fd225a76607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:25:4d:e6:78:a9:f2:ab:0c:8d:c2:9e:78: 46:c5:79:c8:d3:68:9d:ed:77:20:73:aa:51:74:97: 1c:db:28:97:24:5c:66:48:eb:16:62:c0:63:0e:90: 1f:02:1e:1f:5a:b7:cf:6b:e0:28:03:46:01:99:35: 21:e8:93:b9:1e:a9:d9:c4:fe:e9:f1:a9:cc:4e:64: 54:15:40:bd:23:19:8a:dd:e4:56:fc:fb:80:75:8a: 81:c9:f8:63:b6:52:0d:87:2b:f8:39:e5:c9:b1:11: 24:79:17:b9:37:9a:d9:cb:bc:e5:71:00:0a:ec:4f: bf:4e:95:79:2d:32:6f:d9:2c:5a:73:a3:dd:57:25: 0f:63:53:5a:f3:33:de:e3:aa:80:19:b0:76:2f:f7: b8:d2:c2:0b:cc:c4:78:59:1f:a3:78:a9:6f:89:f1: 69:f8:89:21:28:b3:49:aa:ac:f7:e8:49:6f:b5:da: 1d:fa:6f:44:e9:c3:a3:d3:2b:4e:75:0b:7e:d2:dd: 73:19:dc:5d:d5:02:d3:8d:60:cf:11:8a:8c:a1:72: dc:a0:e3:b7:7d:d7:0b:92:35:5f:71:ed:09:2b:85: ab:1e:f7:dd:ca:c2:ce:82:eb:24:8c:04:c6:45:06: 39:9c:45:64:fd:cd:71:7f:72:96:56:11:93:cf:9e: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D0:58:57:60:F4:8C:D5:13:54:D4:AD:11:D7:FD:22:5A:76:60:7B X509v3 Authority Key Identifier: keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:86:d6:40:d4:34:4c:7d:18:7c:af:e9:c0:a5:46:00:d9:94: b0:b0:cb:db:07:4d:87:8f:2f:c5:dc:56:90:1a:da:c6:1c:7f: d3:2d:2d:e7:04:4f:5e:fe:ad:f4:18:e8:51:8e:d4:fb:a2:ed: 17:ca:69:17:60:72:cd:09:10:20:68:35:43:6c:6e:91:db:77: 8f:0d:66:cf:1c:81:55:e7:b9:15:0a:8a:ca:98:bb:33:06:45: 58:93:df:89:48:5d:44:ea:2f:4b:02:79:1e:f5:f7:4d:04:19: 72:fa:90:5e:b8:38:a1:6d:77:79:44:19:ef:60:dd:d5:51:d7: 61:89:c9:01:32:78:c0:f1:2b:b7:60:07:7b:e3:ee:9c:da:26: 88:c8:da:40:14:22:29:a7:17:67:de:a9:b3:0d:98:a6:20:9b: 88:ee:b5:10:71:3e:a1:d4:69:28:9a:e8:c3:d9:e8:2a:5a:9f: b0:fd:88:c2:eb:e8:1f:83:9b:87:59:c4:21:b4:37:d8:fd:50: 4e:6c:89:2a:0d:64:31:13:bc:0e:48:66:32:82:d0:f9:7b:2a: a0:00:15:4a:d8:a1:73:dd:af:c7:a1:da:c1:92:95:44:b1:20: 83:e3:57:50:b9:2e:5c:a3:ea:57:ff:5c:0a:32:07:da:79:33: 31:a2:5c:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6OwMsgvzp9pYSfZZdMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmQ0NjJkNjU4NGUzZGExZmYyNTE1NTRhMzQ1ZTQ5YzZh ZDBmYjEwHhcNMjUxMjIwMTYwMjM2WhcNMjUxMjIxMTYwMjM2WjAzMTEwLwYDVQQD EyhlZmQwNTg1NzYwZjQ4Y2Q1MTM1NGQ0YWQxMWQ3ZmQyMjVhNzY2MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6wlTeZ4qfKrDI3CnnhGxXnI02id 7Xcgc6pRdJcc2yiXJFxmSOsWYsBjDpAfAh4fWrfPa+AoA0YBmTUh6JO5HqnZxP7p 8anMTmRUFUC9IxmK3eRW/PuAdYqByfhjtlINhyv4OeXJsREkeRe5N5rZy7zlcQAK 7E+/TpV5LTJv2Sxac6PdVyUPY1Na8zPe46qAGbB2L/e40sILzMR4WR+jeKlvifFp +IkhKLNJqqz36Elvtdod+m9E6cOj0ytOdQt+0t1zGdxd1QLTjWDPEYqMoXLcoOO3 fdcLkjVfce0JK4WrHvfdysLOguskjATGRQY5nEVk/c1xf3KWVhGTz57/xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/QWFdg9IzVE1TUrRHX/SJadmB7MB8GA1UdIwQY MBaAFCxtRi1lhOPaH/JRVUo0XknGrQ+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQt YWZlOGNkOTRhOGQ5LzEvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC82NzU3MDQtOGQ3ZC00N2ZhLTgyZTQtYWZlOGNkOTRhOGQ5 LzEvTEcxR0xXV0U0OW9mOGxGVlNqUmVTY2F0RDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYbWQNQ0 TH0YfK/pwKVGANmUsLDL2wdNh48vxdxWkBraxhx/0y0t5wRPXv6t9BjoUY7U+6Lt F8ppF2ByzQkQIGg1Q2xukdt3jw1mzxyBVee5FQqKypi7MwZFWJPfiUhdROovSwJ5 HvX3TQQZcvqQXrg4oW13eUQZ72Dd1VHXYYnJATJ4wPErt2AHe+PunNomiMjaQBQi KacXZ96psw2YpiCbiO61EHE+odRpKJrow9noKlqfsP2IwuvoH4Obh1nEIbQ32P1Q TmyJKg1kMRO8DkhmMoLQ+XsqoAAVStihc92vx6HawZKVRLEgg+NXULkuXKPqV/9c CjIH2nkzMaJcBg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:39 2025 by rpki-client