This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json) Hash identifier: V3MVK9iEhdiFRctkXkOYJX2paC4d5BsEisYczwK8RSA= Subject key identifier: B1:54:1F:20:1C:ED:06:1D:19:06:C3:EB:BC:05:B8:7E:C1:B0:98:EF Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019B38A27DB17B95F195198C4E9449E51829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft Manifest number: 082D Signing time: Fri 19 Dec 2025 22:02:11 +0000 Manifest this update: Fri 19 Dec 2025 22:02:11 +0000 Manifest next update: Sat 20 Dec 2025 22:02:11 +0000 Files and hashes: 1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: 0mpkLSL4c0XxYMAEmI4A8XeLm4D+jX9yJ7G67mAhJfI=) 2: mEKtfvYTAxtM6bZgtdK_dA7354E.roa (hash: 6ZHlqAoO39Sn5BGYKBp6Jdixn3sYjX1kubhVv/phslc=) 3: uLBMYegUP8tr8kerX1auVghRTuo.roa (hash: ObMmlvRRjGND9SS2xSn/Yi9qsVHAdvZK1zpCASvTGOw=) 4: uPwV1m04Cl05MAGLs8mqEkawCY8.roa (hash: j7gJ5GP+ZMHhzP22b7gn8c/ARySRDGbn2G48M52EIsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:7d:b1:7b:95:f1:95:19:8c:4e:94:49:e5:18:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Dec 19 22:02:11 2025 GMT Not After : Dec 20 22:02:11 2025 GMT Subject: CN=b1541f201ced061d1906c3ebbc05b87ec1b098ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:7d:93:90:b1:24:56:ec:80:c6:d0:12:39: a9:ac:e4:0d:8f:2f:9b:b0:47:84:00:ad:43:08:98: 2d:86:2b:5f:9a:9d:eb:b5:14:0c:73:e5:ab:d9:5e: 8d:14:51:09:21:00:d5:a8:41:7d:42:a4:5a:2f:c4: 36:fa:f4:ae:82:c8:71:80:b7:50:88:80:3d:35:56: aa:d4:74:c4:0d:ea:ad:b2:c6:00:d9:ff:2e:44:ed: c1:24:14:26:be:2e:36:ad:c8:67:e2:51:a3:1e:af: d0:61:a3:36:cc:8d:77:a3:31:53:6e:e9:85:b1:fe: a0:a4:b4:80:d2:13:0f:55:fa:61:90:a8:43:2e:c5: f2:31:e5:96:01:e1:ba:68:d4:e8:19:f2:51:27:84: f3:57:d8:7b:66:e4:a6:e0:c4:72:44:3e:67:7c:e5: fb:7e:fd:b4:f8:3d:6d:c7:5e:28:10:3b:09:65:1b: c6:30:29:75:39:1c:5a:d6:a8:b0:d2:78:e8:4f:c1: e1:79:6c:24:d0:69:a6:76:de:39:a5:7f:39:48:f6: 71:72:b2:26:22:16:94:e4:73:c6:d6:c3:6a:c0:bd: ac:a2:3b:95:a0:b1:b7:13:f8:02:63:13:8b:53:62: b1:fb:ef:6d:f5:95:1c:a7:b7:c0:29:32:f3:58:99: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:54:1F:20:1C:ED:06:1D:19:06:C3:EB:BC:05:B8:7E:C1:B0:98:EF X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:f2:c9:f2:65:8c:2b:29:4e:9f:1d:91:cb:c8:39:fa:8f: 7a:bc:61:09:91:06:22:6d:d5:84:77:74:74:ed:36:d5:3f:a5: e5:8d:64:12:d8:b5:15:78:67:08:7a:a2:70:4d:3c:29:36:9f: d2:7a:93:13:ee:a3:33:9f:e1:53:0e:33:5a:d0:20:ba:94:27: b7:2c:43:3b:01:ec:48:d3:7f:5e:ca:d2:b5:85:cc:38:e1:85: d7:da:08:bf:09:06:e8:20:73:28:65:5b:8d:e1:29:4c:0c:c3: 35:78:be:f8:5e:86:89:61:53:91:7e:bc:9a:e8:8e:b9:e7:79: bb:d3:78:dc:24:7d:d0:b4:d4:31:76:f0:f5:25:9d:0f:59:40: bf:89:a1:b4:cc:07:88:f0:44:ce:f8:f3:bb:9e:e1:da:6a:02: 68:9f:55:23:cb:f9:08:34:b5:88:d0:af:f6:63:ba:df:f6:00: 0d:55:64:44:c5:1a:6e:18:ee:d4:05:e3:d9:a2:24:ab:5d:8e: e1:43:df:8d:6f:d7:37:20:f1:52:57:07:37:9f:48:98:f0:8b: a8:08:19:1b:bc:8a:5e:5f:93:f0:c8:40:48:cc:38:58:6a:c6: ff:70:91:54:76:fa:33:d9:60:fb:ea:11:0e:08:33:1e:3d:ff: 8c:f1:03:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4on2xe5XxlRmMTpRJ5RgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjUxMjE5MjIwMjExWhcNMjUxMjIwMjIwMjExWjAzMTEwLwYDVQQD EyhiMTU0MWYyMDFjZWQwNjFkMTkwNmMzZWJiYzA1Yjg3ZWMxYjA5OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8x9k5CxJFbsgMbQEjmprOQNjy+b sEeEAK1DCJgthitfmp3rtRQMc+Wr2V6NFFEJIQDVqEF9QqRaL8Q2+vSugshxgLdQ iIA9NVaq1HTEDeqtssYA2f8uRO3BJBQmvi42rchn4lGjHq/QYaM2zI13ozFTbumF sf6gpLSA0hMPVfphkKhDLsXyMeWWAeG6aNToGfJRJ4TzV9h7ZuSm4MRyRD5nfOX7 fv20+D1tx14oEDsJZRvGMCl1ORxa1qiw0njoT8HheWwk0Gmmdt45pX85SPZxcrIm IhaU5HPG1sNqwL2sojuVoLG3E/gCYxOLU2Kx++9t9ZUcp7fAKTLzWJlPrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFUHyAc7QYdGQbD67wFuH7BsJjvMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuzyyfJl jCspTp8dkcvIOfqPerxhCZEGIm3VhHd0dO021T+l5Y1kEti1FXhnCHqicE08KTaf 0nqTE+6jM5/hUw4zWtAgupQntyxDOwHsSNN/XsrStYXMOOGF19oIvwkG6CBzKGVb jeEpTAzDNXi++F6GiWFTkX68muiOued5u9N43CR90LTUMXbw9SWdD1lAv4mhtMwH iPBEzvjzu57h2moCaJ9VI8v5CDS1iNCv9mO63/YADVVkRMUabhju1AXj2aIkq12O 4UPfjW/XNyDxUlcHN59ImPCLqAgZG7yKXl+T8MhASMw4WGrG/3CRVHb6M9lg++oR DggzHj3/jPEDgw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:36 2025 by rpki-client