This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: x8ACCaT+iv3SInYKjayF/eDK5g6UFEhyvPW5SooHqGw= Subject key identifier: 30:AE:98:B7:99:0D:62:D1:D7:45:2A:22:7D:1A:12:03:B4:C3:E6:60 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 019B4A02974E5286E1A9F04AF728AA201148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 0A71 Signing time: Tue 23 Dec 2025 07:00:42 +0000 Manifest this update: Tue 23 Dec 2025 07:00:42 +0000 Manifest next update: Wed 24 Dec 2025 07:00:42 +0000 Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: cKdC+C8pn1i7AxEm+pmh+aHPXasDLywoz1cjnRSjyhM=) 2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:97:4e:52:86:e1:a9:f0:4a:f7:28:aa:20:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Dec 23 07:00:42 2025 GMT Not After : Dec 24 07:00:42 2025 GMT Subject: CN=30ae98b7990d62d1d7452a227d1a1203b4c3e660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:46:e5:bd:16:de:55:53:0d:2c:42:53:90: de:56:a8:bb:f6:d9:46:05:c4:1e:6d:ff:dc:64:5f: c4:48:51:2d:9c:b6:aa:13:46:fd:75:78:8c:a0:c3: d5:df:af:fa:8b:45:70:84:2c:b3:16:84:17:0e:41: 6b:76:67:ed:e5:b9:3f:d5:55:65:e0:66:e6:10:c5: 0b:7e:43:d7:83:87:f1:d1:f3:06:35:e8:f8:f5:41: 64:39:61:38:03:eb:41:17:f6:f7:c2:97:e6:1b:db: 18:7a:e8:23:27:98:a2:f5:ad:c7:5f:04:fb:9f:6e: c7:c5:89:bd:54:92:cb:71:14:32:00:f0:1b:a8:8d: bc:f5:37:4d:47:20:8a:fd:19:f3:ce:11:75:1f:1a: dc:84:da:7a:1e:15:23:e0:25:96:6f:9e:9b:35:9d: 9f:40:c9:47:96:8e:ae:92:fa:b0:a9:36:96:3d:bc: 58:27:62:6b:a9:6c:14:e3:0d:7d:c4:5f:d9:0c:a4: 19:4e:1e:2b:ed:68:05:14:45:c4:d2:76:53:47:b1: 08:73:cc:5f:e1:72:21:3b:be:d8:4b:2e:09:78:d8: 06:39:38:f3:3b:b5:04:88:06:0d:ce:79:d4:d7:98: 7f:58:4c:e2:0f:45:9a:f5:ff:ef:74:63:87:f2:87: 95:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:98:B7:99:0D:62:D1:D7:45:2A:22:7D:1A:12:03:B4:C3:E6:60 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:24:8d:bf:70:7b:57:5d:e7:d9:6f:19:44:f9:23:e2:47:0b: 9d:31:e4:d0:3e:c8:d6:17:36:c2:2b:85:b8:2c:f6:11:91:55: fa:3d:b8:7b:78:4e:1b:1f:54:47:fd:3d:4f:02:0f:03:f8:a4: 4b:07:94:51:24:a2:66:97:9f:79:37:76:1a:ae:03:ad:0b:86: 99:1a:cf:87:45:cf:25:a8:00:3d:0d:8a:bc:1a:db:3e:ea:14: 2d:c0:3b:65:43:d4:6e:11:c1:d0:e4:19:9e:91:08:71:90:c2: c4:84:08:71:4c:d9:8f:44:55:37:71:63:2b:ff:cd:6c:ae:ff: f9:6e:2e:09:ec:be:1c:ad:7d:dc:a9:c3:0b:81:b7:4d:fe:3a: df:98:4f:4a:5c:bd:aa:d8:da:2e:79:86:ec:f4:97:aa:64:42: 0a:bb:3b:0f:30:cf:8c:48:fa:ec:8f:d3:80:7d:38:38:98:da: 61:04:b4:1f:01:a7:6b:72:4f:3b:14:af:b1:4a:b7:77:71:5d: 2e:ec:78:58:df:43:0a:2e:80:3c:4f:a1:f1:57:cf:fc:34:95: 04:20:52:a8:3d:0f:6b:40:61:df:f0:e2:33:30:75:fe:df:75: 52:11:fa:1c:d5:5c:44:66:5a:59:dc:51:8e:ab:18:4a:28:b9: e1:09:98:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKApdOUobhqfBK9yiqIBFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjUxMjIzMDcwMDQyWhcNMjUxMjI0MDcwMDQyWjAzMTEwLwYDVQQD EygzMGFlOThiNzk5MGQ2MmQxZDc0NTJhMjI3ZDFhMTIwM2I0YzNlNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KlG5b0W3lVTDSxCU5DeVqi79tlG BcQebf/cZF/ESFEtnLaqE0b9dXiMoMPV36/6i0VwhCyzFoQXDkFrdmft5bk/1VVl 4GbmEMULfkPXg4fx0fMGNej49UFkOWE4A+tBF/b3wpfmG9sYeugjJ5ii9a3HXwT7 n27HxYm9VJLLcRQyAPAbqI289TdNRyCK/RnzzhF1HxrchNp6HhUj4CWWb56bNZ2f QMlHlo6ukvqwqTaWPbxYJ2JrqWwU4w19xF/ZDKQZTh4r7WgFFEXE0nZTR7EIc8xf 4XIhO77YSy4JeNgGOTjzO7UEiAYNznnU15h/WEziD0Wa9f/vdGOH8oeVJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCumLeZDWLR10UqIn0aEgO0w+ZgMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALySNv3B7 V13n2W8ZRPkj4kcLnTHk0D7I1hc2wiuFuCz2EZFV+j24e3hOGx9UR/09TwIPA/ik SweUUSSiZpefeTd2Gq4DrQuGmRrPh0XPJagAPQ2KvBrbPuoULcA7ZUPUbhHB0OQZ npEIcZDCxIQIcUzZj0RVN3FjK//NbK7/+W4uCey+HK193KnDC4G3Tf4635hPSly9 qtjaLnmG7PSXqmRCCrs7DzDPjEj67I/TgH04OJjaYQS0HwGna3JPOxSvsUq3d3Fd Lux4WN9DCi6APE+h8VfP/DSVBCBSqD0Pa0Bh3/DiMzB1/t91UhH6HNVcRGZaWdxR jqsYSii54QmYbg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:15:48 2025 by rpki-client