This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json) Hash identifier: w9JxbXWeumlx6YZvSN0q2jKx/wJpe7bBiCgdkN+9J7I= Subject key identifier: 32:34:91:1B:0E:2A:CF:62:7B:BD:28:F2:17:0B:55:6A:40:A4:47:BE Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4 Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4 Certificate serial: 019AF2095C25D6249D558F4E8E4039E3C093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=) 2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: b6iuwUjALyHACgnX9pXeDOrrbd/alZ8Fx6zz994P63w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:25:d6:24:9d:55:8f:4e:8e:40:39:e3:c0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=3234911b0e2acf627bbd28f2170b556a40a447be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:88:88:62:03:a9:a8:ec:e1:ef:7c:c3:d3: f7:0a:c8:42:6b:78:8c:0f:a0:a0:97:02:a5:0a:61: 2f:42:4f:81:21:3a:90:a9:fe:09:ad:cb:d4:42:ce: 96:cd:27:44:fb:ec:50:87:58:75:c7:38:4e:a8:32: 89:d4:6e:74:10:d2:ed:8b:d6:b3:20:94:dc:18:bf: 00:2d:bc:fc:d7:24:52:14:1a:5b:ee:7a:08:05:46: 56:7a:a7:fb:00:55:c8:16:3d:2e:29:bf:0a:24:8d: 1d:d9:12:19:93:50:88:9f:9f:24:24:32:c2:9d:88: dd:5a:8a:55:2e:de:f3:80:e8:38:f2:4d:c8:e9:3e: d8:db:21:07:26:34:fc:1c:47:1b:73:2b:0e:8c:2f: 0b:f9:2a:e6:48:48:f7:21:29:23:38:cc:ae:4b:c8: 4a:da:72:6b:db:89:6e:c1:94:ef:1f:58:90:ed:1d: 67:8a:ff:57:f0:13:ed:56:68:cc:4f:28:53:f0:62: c7:b3:b2:5e:4b:96:13:ee:ce:cd:b7:0d:f0:f1:b0: c8:f1:32:c3:1d:bf:6e:94:f9:80:04:d7:9f:bb:3a: d6:43:0e:1b:d0:4c:b2:76:e5:9a:d4:6e:e0:44:70: d8:24:3f:80:86:2e:e3:3c:8d:0d:c4:3a:9a:06:76: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:91:1B:0E:2A:CF:62:7B:BD:28:F2:17:0B:55:6A:40:A4:47:BE X509v3 Authority Key Identifier: keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f2:1d:6f:c4:a9:e8:2f:e7:71:96:70:bf:b4:c4:fc:fe:02: df:47:2a:a1:d4:50:d9:a0:55:2a:99:b9:63:c6:41:d1:be:0c: 56:d5:9b:d8:e9:2e:3b:ba:9f:e2:d1:47:09:9a:83:92:ed:11: bd:6f:b8:ea:5e:54:42:1c:ef:71:ac:c5:50:6e:d1:ff:5a:3b: 34:43:6d:bf:2a:5c:75:04:cc:a8:c3:6e:e5:cb:0c:fc:f1:80: 60:eb:9b:fe:2f:77:6a:cb:99:f5:73:77:65:13:d3:32:3d:3e: ad:0a:ef:76:ff:72:51:a5:22:56:29:00:a2:c8:99:47:40:ee: d0:68:28:36:9c:05:73:0f:10:18:e8:75:ce:d8:3c:cb:73:08: f3:83:63:1e:cc:7f:75:42:44:53:c2:49:bf:39:a2:48:72:6c: b8:76:66:2f:0a:ca:08:e1:b6:4a:1a:89:0c:76:ca:b0:e4:bb: e1:99:6c:af:86:52:bb:3c:8f:d2:2c:9b:35:c2:58:d7:c5:cb: 49:94:7c:bb:a1:3b:68:cf:73:3f:c7:31:87:25:23:b4:1c:f3: 73:40:a2:96:02:aa:17:f2:74:1a:62:4d:68:e8:4d:79:f4:8d: f4:0f:33:a2:a0:88:c6:4d:d3:0c:1e:87:37:6c:b7:97:d8:8a: 98:62:fc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVwl1iSdVY9OjkA548CTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk MTM3ZjQwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygzMjM0OTExYjBlMmFjZjYyN2JiZDI4ZjIxNzBiNTU2YTQwYTQ0N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+IiGIDqajs4e98w9P3CshCa3iM D6CglwKlCmEvQk+BITqQqf4JrcvUQs6WzSdE++xQh1h1xzhOqDKJ1G50ENLti9az IJTcGL8ALbz81yRSFBpb7noIBUZWeqf7AFXIFj0uKb8KJI0d2RIZk1CIn58kJDLC nYjdWopVLt7zgOg48k3I6T7Y2yEHJjT8HEcbcysOjC8L+SrmSEj3ISkjOMyuS8hK 2nJr24luwZTvH1iQ7R1niv9X8BPtVmjMTyhT8GLHs7JeS5YT7s7Ntw3w8bDI8TLD Hb9ulPmABNefuzrWQw4b0EyyduWa1G7gRHDYJD+Ahi7jPI0NxDqaBnZLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI0kRsOKs9ie70o8hcLVWpApEe+MB8GA1UdIwQY MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt ZTQwMzBmYTFiMDRhLzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvfIdb8Sp 6C/ncZZwv7TE/P4C30cqodRQ2aBVKpm5Y8ZB0b4MVtWb2OkuO7qf4tFHCZqDku0R vW+46l5UQhzvcazFUG7R/1o7NENtvypcdQTMqMNu5csM/PGAYOub/i93asuZ9XN3 ZRPTMj0+rQrvdv9yUaUiVikAosiZR0Du0GgoNpwFcw8QGOh1ztg8y3MI84NjHsx/ dUJEU8JJvzmiSHJsuHZmLwrKCOG2ShqJDHbKsOS74Zlsr4ZSuzyP0iybNcJY18XL SZR8u6E7aM9zP8cxhyUjtBzzc0CilgKqF/J0GmJNaOhNefSN9A8zoqCIxk3TDB6H N2y3l9iKmGL8MA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:49 2025 by rpki-client