This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json) Hash identifier: 50OouQ8ZGhJQyMn6Rcm+LcvU6Oq9vudyFhvMPqFnmWs= Subject key identifier: B8:19:EF:7E:C9:E6:C1:37:C6:A4:9D:68:8E:7F:5E:0A:27:15:1D:B1 Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Certificate serial: 019AF3C04732441BF55C243315D3382FC770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 13:00:55 +0000 Manifest this update: Sat 06 Dec 2025 13:00:55 +0000 Manifest next update: Sun 07 Dec 2025 13:00:55 +0000 Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: w8ibHsH0v6mCiFVVcxsd+3WiEhu9JJtZ2vN2+qPp7Qc=) 2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:47:32:44:1b:f5:5c:24:33:15:d3:38:2f:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532 Validity Not Before: Dec 6 13:00:55 2025 GMT Not After : Dec 7 13:00:55 2025 GMT Subject: CN=b819ef7ec9e6c137c6a49d688e7f5e0a27151db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:a0:ed:52:33:4e:c6:1e:48:97:fc:14:3f: 15:39:99:cb:5d:6a:6d:f8:ea:f0:17:25:55:30:5b: 64:1a:d3:fc:c0:a9:5e:e9:b7:64:65:0f:74:83:8b: 70:b3:01:9b:b0:82:d0:f8:07:e9:0a:c2:78:98:cf: 24:a1:82:96:12:23:72:3b:ed:e2:d2:1a:5e:05:44: e0:f7:d2:01:ff:c3:b1:0b:d1:60:7e:e0:4b:40:70: 2c:d6:21:ed:b0:9d:17:f5:c8:e9:74:83:54:30:a1: eb:20:f2:65:b2:0e:63:ab:71:df:9a:38:08:fc:1c: 73:94:8c:67:89:86:01:43:d8:6e:88:6b:e1:49:a8: c2:2b:f8:43:35:42:5a:1a:6d:b8:c4:52:1c:0d:8f: fc:0c:21:03:95:cb:a4:7f:e7:3f:5f:0a:ec:7b:78: 7a:c2:b4:3c:4a:5f:50:37:bb:af:79:fc:28:8d:ab: 4f:f6:23:35:1c:c3:74:e9:6b:3c:89:44:1e:bd:4b: bc:08:d1:ed:8f:ad:37:fc:3a:db:99:32:3a:f1:fe: 69:d2:cc:75:06:c9:25:dc:2b:69:e1:89:44:ca:bb: 07:79:2e:c5:e8:95:4b:a4:13:0f:12:7d:b2:e1:27: 65:23:26:b6:ef:9a:84:26:cb:cd:52:44:e2:c7:2c: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:EF:7E:C9:E6:C1:37:C6:A4:9D:68:8E:7F:5E:0A:27:15:1D:B1 X509v3 Authority Key Identifier: keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:56:56:f9:ba:95:61:15:09:a9:c3:c4:52:b6:1a:76:98:4d: 36:d7:a6:52:78:18:60:5c:b2:ac:a9:1c:31:83:23:81:65:1b: a6:bb:6d:05:a9:78:65:c0:77:25:52:ca:11:b6:fc:b1:e5:ed: 58:52:29:f4:73:2a:bf:50:95:07:e3:18:1e:e0:bd:c1:4f:d1: fe:18:c8:00:eb:a1:c8:c4:2d:fa:d7:ef:cd:7f:27:37:6a:49: 17:06:7b:8d:f5:d9:ff:4f:97:ac:22:eb:5d:7e:30:b2:fe:77: 43:95:51:65:c9:56:d9:31:b6:99:42:92:59:0a:fd:9a:e1:44: 4f:f2:7e:1a:f1:c5:5c:94:63:8f:bc:d5:37:5d:58:8e:f8:25: 16:c7:fe:75:33:cf:1e:38:c7:c9:12:ef:1e:5d:42:3d:94:2b: 25:89:0b:62:6d:e3:35:ed:06:de:9d:e1:51:a5:88:d5:ce:b4: bc:a3:5c:21:4c:6b:79:2c:b9:a5:5b:3e:42:bf:49:55:72:ce: 5f:01:b8:98:34:28:c5:3d:ac:42:cc:fa:ff:59:d0:82:35:c4: ad:f4:a1:e6:9b:99:c9:5c:80:7f:dc:72:df:da:2d:b7:c5:8f: 65:02:a5:e4:79:29:8d:63:08:d9:cf:b9:4c:10:06:81:bb:e6: 02:bd:74:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEcyRBv1XCQzFdM4L8dwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MGRkN2NkY2U1ODhiZGFhMmI3YThjYjA1NmQ0ZGIwMTY3 MDE1MzIwHhcNMjUxMjA2MTMwMDU1WhcNMjUxMjA3MTMwMDU1WjAzMTEwLwYDVQQD EyhiODE5ZWY3ZWM5ZTZjMTM3YzZhNDlkNjg4ZTdmNWUwYTI3MTUxZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscKg7VIzTsYeSJf8FD8VOZnLXWpt +OrwFyVVMFtkGtP8wKle6bdkZQ90g4twswGbsILQ+AfpCsJ4mM8koYKWEiNyO+3i 0hpeBUTg99IB/8OxC9FgfuBLQHAs1iHtsJ0X9cjpdINUMKHrIPJlsg5jq3HfmjgI /BxzlIxniYYBQ9huiGvhSajCK/hDNUJaGm24xFIcDY/8DCEDlcukf+c/Xwrse3h6 wrQ8Sl9QN7uvefwojatP9iM1HMN06Ws8iUQevUu8CNHtj603/DrbmTI68f5p0sx1 Bskl3Ctp4YlEyrsHeS7F6JVLpBMPEn2y4SdlIya275qEJsvNUkTixyzaawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZ737J5sE3xqSdaI5/XgonFR2xMB8GA1UdIwQY MBaAFJYN183OWIvaoreoywVtTbAWcBUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzIt OTAyZmYxN2JjNDk0LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kMzEyMzAtY2JkYy00MmMxLTg3MzItOTAyZmYxN2JjNDk0 LzEvbGczWHpjNVlpOXFpdDZqTEJXMU5zQlp3RlRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVZW+bqV YRUJqcPEUrYadphNNtemUngYYFyyrKkcMYMjgWUbprttBal4ZcB3JVLKEbb8seXt WFIp9HMqv1CVB+MYHuC9wU/R/hjIAOuhyMQt+tfvzX8nN2pJFwZ7jfXZ/0+XrCLr XX4wsv53Q5VRZclW2TG2mUKSWQr9muFET/J+GvHFXJRjj7zVN11YjvglFsf+dTPP HjjHyRLvHl1CPZQrJYkLYm3jNe0G3p3hUaWI1c60vKNcIUxreSy5pVs+Qr9JVXLO XwG4mDQoxT2sQsz6/1nQgjXErfSh5puZyVyAf9xy39ott8WPZQKl5HkpjWMI2c+5 TBAGgbvmAr104A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:19 2025 by rpki-client