This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json) Hash identifier: 2/k0JCYVFLt3KMO77eqR/UdJ86RgNpt/LdcTNOjSFmI= Subject key identifier: 0B:18:D9:9C:61:47:E0:29:2A:A4:55:77:A4:CB:E9:E6:07:64:7A:E2 Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86 Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86 Certificate serial: 019AF12EE4BD22AB7D406CCE822B29871092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft Manifest number: 0642 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: rzC8p5g33XovUUch4Q8MTrzRL0yBJ8ADoVvZ1zupgQc=) 2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e4:bd:22:ab:7d:40:6c:ce:82:2b:29:87:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=0b18d99c6147e0292aa45577a4cbe9e607647ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:7f:74:b0:2b:2d:bb:8d:7c:09:43:6f:06: f8:bb:d5:e6:ee:36:c0:75:e4:d6:f0:2f:7b:bd:6e: ee:a3:87:1b:fa:ab:fd:01:6c:c8:b9:bf:73:fe:af: 9a:a3:fe:54:68:5f:11:2f:44:4b:92:23:a0:08:b1: 3e:0f:bc:6c:c7:b4:eb:e7:d4:d3:56:ca:f0:54:e7: 3c:58:04:88:20:17:0f:28:a1:43:37:5f:8e:2f:48: da:b5:a8:d9:87:9d:d9:d1:bc:1c:ba:c8:50:d6:00: e1:d9:ac:79:72:b1:d6:8b:c8:48:bb:ad:95:39:24: 13:fc:6d:65:f5:9e:95:39:76:4a:7f:14:cb:56:55: f7:a9:67:03:84:71:95:96:31:a1:c7:80:1d:78:92: 08:13:be:65:99:79:bf:4d:49:ae:b5:5a:c6:04:83: d2:a7:c5:e3:a6:73:50:83:05:83:59:ad:f7:fd:92: 74:19:e7:87:2b:25:39:67:21:43:0e:ac:b4:18:b9: 47:be:00:10:db:ae:bd:5f:d0:13:b5:b8:d2:1d:5d: e0:0e:7f:85:70:76:04:f9:75:2d:cd:15:6c:ed:f8: 52:ea:79:9c:68:c8:de:4b:ab:10:78:b8:78:df:c8: b2:ff:7d:0d:11:0e:58:ad:42:17:07:81:08:64:be: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:D9:9C:61:47:E0:29:2A:A4:55:77:A4:CB:E9:E6:07:64:7A:E2 X509v3 Authority Key Identifier: keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3e:fd:55:0a:15:a3:75:96:c9:3c:fe:14:00:d8:17:11:14: 3a:5b:eb:ad:76:ad:54:52:5d:9e:d6:c5:ec:be:1c:3d:c9:0b: 54:69:77:d4:3e:ee:4e:94:eb:c9:43:af:69:72:24:b2:43:40: c5:c5:58:c1:09:1a:4a:2e:2d:a0:db:56:4a:aa:8d:ab:d0:6b: ea:30:e5:d1:94:74:15:8c:1f:2c:0b:0d:6c:0c:9e:bd:d0:1e: 7a:cf:f5:28:e3:2d:08:0f:01:92:40:9d:d1:84:f2:c8:12:15: 5a:36:41:d5:89:56:80:65:10:ec:de:c0:95:a4:f1:37:97:eb: b6:51:97:0a:db:6b:c0:85:5b:83:71:29:2a:ae:b6:8a:22:59: 25:d8:b3:06:98:bd:91:04:92:03:c7:5c:0d:c1:ef:fc:b4:c7: 6d:18:ec:70:95:ce:f6:79:86:2f:3e:95:e5:78:71:ff:59:0c: 1d:a8:b5:86:8c:89:1e:99:73:2a:4c:87:fa:13:b0:54:44:20: 3e:60:ff:60:da:dc:c7:81:f1:e8:77:de:a9:f9:df:45:46:43: b7:5c:8f:d3:da:05:0a:f4:8d:50:ba:dc:9f:da:a9:57:00:24: ac:d3:c3:fe:3f:af:8d:fd:eb:ce:73:05:f6:7a:e4:95:42:32: 74:29:bf:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuS9Iqt9QGzOgisphxCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGEyMzE2ZjRlOWI1OGFhNTJkZWVlNWM3ZDFmNGI4NDQ3 NmVjODYwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygwYjE4ZDk5YzYxNDdlMDI5MmFhNDU1NzdhNGNiZTllNjA3NjQ3YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoB/dLArLbuNfAlDbwb4u9Xm7jbA deTW8C97vW7uo4cb+qv9AWzIub9z/q+ao/5UaF8RL0RLkiOgCLE+D7xsx7Tr59TT VsrwVOc8WASIIBcPKKFDN1+OL0jatajZh53Z0bwcushQ1gDh2ax5crHWi8hIu62V OSQT/G1l9Z6VOXZKfxTLVlX3qWcDhHGVljGhx4AdeJIIE75lmXm/TUmutVrGBIPS p8XjpnNQgwWDWa33/ZJ0GeeHKyU5ZyFDDqy0GLlHvgAQ2669X9ATtbjSHV3gDn+F cHYE+XUtzRVs7fhS6nmcaMjeS6sQeLh438iy/30NEQ5YrUIXB4EIZL4t0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsY2ZxhR+ApKqRVd6TL6eYHZHriMB8GA1UdIwQY MBaAFC4KIxb06bWKpS3u5cfR9LhEduyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jNDU4MTEtNzViYS00ZGQ3LWE0MjEt ZjM2ZDllZTM0NmQ0LzEvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jNDU4MTEtNzViYS00ZGQ3LWE0MjEtZjM2ZDllZTM0NmQ0 LzEvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj79VQoV o3WWyTz+FADYFxEUOlvrrXatVFJdntbF7L4cPckLVGl31D7uTpTryUOvaXIkskNA xcVYwQkaSi4toNtWSqqNq9Br6jDl0ZR0FYwfLAsNbAyevdAees/1KOMtCA8BkkCd 0YTyyBIVWjZB1YlWgGUQ7N7AlaTxN5frtlGXCttrwIVbg3EpKq62iiJZJdizBpi9 kQSSA8dcDcHv/LTHbRjscJXO9nmGLz6V5Xhx/1kMHai1hoyJHplzKkyH+hOwVEQg PmD/YNrcx4Hx6HfeqfnfRUZDt1yP09oFCvSNULrcn9qpVwAkrNPD/j+vjf3rznMF 9nrklUIydCm/9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:27 2025 by rpki-client