This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json) Hash identifier: UOrJApnWcVVoOgLp0vY30q0iwt16npPBBIcEoWQqZOo= Subject key identifier: 0E:BA:BD:BC:EA:47:D0:44:70:83:8B:77:D3:CE:93:FF:95:FC:87:BF Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Certificate serial: 019B40FFD71C247B2420011CC61B79D57BCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft Manifest number: 0377 Signing time: Sun 21 Dec 2025 13:01:07 +0000 Manifest this update: Sun 21 Dec 2025 13:01:07 +0000 Manifest next update: Mon 22 Dec 2025 13:01:07 +0000 Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: pq0/N24Hc9z60JND5JcWapJ24tBEVyh5U6FVAPYuu8E=) 2: on5-XY5_69ZqoMpI3X4OhIb7uc4.roa (hash: 4oa5fFDXWm4dHc0nsqOubqefekgWac8ztkJvtrP5fzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:d7:1c:24:7b:24:20:01:1c:c6:1b:79:d5:7b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0 Validity Not Before: Dec 21 13:01:07 2025 GMT Not After : Dec 22 13:01:07 2025 GMT Subject: CN=0ebabdbcea47d04470838b77d3ce93ff95fc87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:6d:6f:38:c9:c2:af:41:ec:5d:90:15:d9: 6f:88:6b:a8:da:85:f3:60:55:af:e4:9d:ce:31:10: a2:7f:4f:de:c4:48:32:6a:28:ae:68:f2:0f:52:84: 89:aa:27:d3:fb:ff:38:48:49:ec:2e:5d:65:62:54: a4:a8:2c:cc:2c:25:28:f2:76:4e:e3:71:99:ec:b3: 25:fb:24:0b:98:b9:7d:98:01:df:9a:41:c4:ae:ea: bc:db:39:37:eb:86:1b:bd:6c:16:72:a4:65:d9:b6: 37:39:57:18:ee:b2:11:a4:fd:23:9b:71:5e:c7:cf: 9c:7f:07:bd:0a:92:cf:26:9c:e0:cc:fd:fa:1d:b4: 4e:80:ce:fe:f8:87:5d:e6:da:79:71:84:37:0d:78: 27:18:01:73:63:2a:a8:52:2b:0e:1c:36:9e:7c:1b: 86:8e:e9:14:e0:f8:cd:f7:28:12:7f:32:02:d5:ef: 68:0a:ba:46:ff:92:d9:e5:d7:d8:4a:73:e5:b5:ba: b2:98:5d:05:5e:3f:9f:59:31:a7:b1:52:fd:43:87: 40:cd:8d:39:67:2b:43:c4:ef:b2:ea:7e:b3:06:f3: c7:87:68:53:5a:b5:49:6d:d1:d0:1d:bb:b7:fc:28: 25:84:f3:fa:e8:e6:3e:e7:a3:7e:7f:73:c5:6c:3d: a7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:BD:BC:EA:47:D0:44:70:83:8B:77:D3:CE:93:FF:95:FC:87:BF X509v3 Authority Key Identifier: keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c1:db:89:4a:54:59:f9:1d:10:4d:c8:ae:16:c7:46:43:8f: de:87:68:d9:2c:f1:a9:11:5a:62:90:67:40:c5:4f:8d:aa:19: 6c:6c:19:78:61:cb:9c:ba:68:9e:96:5d:cd:62:8e:07:8c:4d: 57:d7:3d:3b:40:61:41:02:38:d7:e1:b4:9b:64:7e:b0:59:87: b1:35:b3:dd:cf:68:20:dd:9b:b3:1b:7d:5d:db:a8:fe:be:64: 31:e0:17:5f:fa:2c:04:5b:f5:fd:27:b0:4d:2d:5a:c7:7e:87: 01:a1:39:32:3d:c9:2d:c1:83:17:23:4a:b0:60:6c:30:99:8a: a6:dd:d7:16:02:a3:32:ea:8d:47:7c:50:9d:72:af:0c:9b:5d: 97:6c:f3:67:74:b6:46:43:25:42:df:70:eb:0e:16:b6:4c:37: 86:c9:86:ac:e7:02:b1:bf:4c:dc:28:ee:ec:6c:7c:d2:16:58: 64:ce:6c:18:d1:db:a2:17:a4:8b:93:57:76:a1:93:b1:4d:1f: 3d:04:75:d0:ed:6c:b4:86:90:d2:bd:7e:d3:2a:40:f8:3a:58: ad:5a:e6:ac:ca:48:a0:ba:68:1a:9e:d4:5d:cb:5e:78:51:ea: ad:f7:77:2d:79:54:0e:98:f9:c2:22:01:29:59:ab:8a:29:18: 60:66:5d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/9ccJHskIAEcxht51XvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NmY4ZTM3ZTRhNmM4NGIzZjNiNWJhNzdlMjEwOWQzZWY1 OWFhZTAwHhcNMjUxMjIxMTMwMTA3WhcNMjUxMjIyMTMwMTA3WjAzMTEwLwYDVQQD EygwZWJhYmRiY2VhNDdkMDQ0NzA4MzhiNzdkM2NlOTNmZjk1ZmM4N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhhtbzjJwq9B7F2QFdlviGuo2oXz YFWv5J3OMRCif0/exEgyaiiuaPIPUoSJqifT+/84SEnsLl1lYlSkqCzMLCUo8nZO 43GZ7LMl+yQLmLl9mAHfmkHEruq82zk364YbvWwWcqRl2bY3OVcY7rIRpP0jm3Fe x8+cfwe9CpLPJpzgzP36HbROgM7++Idd5tp5cYQ3DXgnGAFzYyqoUisOHDaefBuG jukU4PjN9ygSfzIC1e9oCrpG/5LZ5dfYSnPltbqymF0FXj+fWTGnsVL9Q4dAzY05 ZytDxO+y6n6zBvPHh2hTWrVJbdHQHbu3/CglhPP66OY+56N+f3PFbD2n6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA66vbzqR9BEcIOLd9POk/+V/Ie/MB8GA1UdIwQY MBaAFJZvjjfkpshLPztbp34hCdPvWargMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYt OThhYzY2NWIxOTA4LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYtOThhYzY2NWIxOTA4 LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMHbiUpU WfkdEE3IrhbHRkOP3odo2SzxqRFaYpBnQMVPjaoZbGwZeGHLnLponpZdzWKOB4xN V9c9O0BhQQI41+G0m2R+sFmHsTWz3c9oIN2bsxt9Xduo/r5kMeAXX/osBFv1/Sew TS1ax36HAaE5Mj3JLcGDFyNKsGBsMJmKpt3XFgKjMuqNR3xQnXKvDJtdl2zzZ3S2 RkMlQt9w6w4Wtkw3hsmGrOcCsb9M3Cju7Gx80hZYZM5sGNHboheki5NXdqGTsU0f PQR10O1stIaQ0r1+0ypA+DpYrVrmrMpIoLpoGp7UXcteeFHqrfd3LXlUDpj5wiIB KVmriikYYGZdGg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:12:54 2025 by rpki-client