This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json) Hash identifier: ii5j7lnDo6+K4hQqc14Qg6e3MNLOtVMPi+F/8WcPHzM= Subject key identifier: 16:E9:7F:29:AB:01:83:24:65:AC:E6:EA:44:2D:AF:AA:83:20:E9:83 Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Certificate serial: 019B4091EE4EC07E8176ACD2E646E6D521E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft Manifest number: 1470 Signing time: Sun 21 Dec 2025 11:01:03 +0000 Manifest this update: Sun 21 Dec 2025 11:01:03 +0000 Manifest next update: Mon 22 Dec 2025 11:01:03 +0000 Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: J+Wpu5SczsJJ6U0yK1hSEFjPGUXm3mUqrNYxeP9nMTU=) 2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ee:4e:c0:7e:81:76:ac:d2:e6:46:e6:d5:21:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d Validity Not Before: Dec 21 11:01:03 2025 GMT Not After : Dec 22 11:01:03 2025 GMT Subject: CN=16e97f29ab01832465ace6ea442dafaa8320e983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:78:54:3e:03:7a:71:ec:fb:23:d7:18:63:3b: cb:df:a3:48:b9:19:30:81:fc:a9:92:63:2c:02:9f: 48:6d:3e:87:18:57:d6:45:92:95:b9:fe:a2:a3:6d: dc:09:f8:a3:de:43:9d:22:c2:19:18:64:3a:bb:67: 39:3f:33:bd:32:ab:8a:ad:27:f9:dc:0d:ff:4d:56: 29:10:e1:75:f2:3b:5c:7c:5b:de:88:ac:48:51:fe: 5c:4a:1f:17:ae:36:41:b8:08:2b:08:ae:4e:09:16: 27:9a:75:e6:19:6c:e9:42:39:c5:be:7d:89:f6:a9: b0:8e:52:a2:1e:50:01:15:72:46:bc:59:07:0b:4b: 87:b1:86:11:8e:9c:01:ab:73:26:17:e1:a7:b5:70: fa:d5:9b:4a:a8:b8:71:36:cc:cd:8f:e9:59:b0:1e: 53:aa:4d:54:c4:50:d4:6a:86:47:50:7f:4c:25:96: ea:77:69:8c:eb:8c:cd:60:3b:ad:d9:4b:22:bd:79: eb:9e:d5:78:a0:7e:f8:1f:f4:ff:b2:3b:d4:51:3c: b5:49:0f:eb:0f:fd:4b:e6:7c:94:ec:3c:84:7a:db: 5e:2d:38:ef:99:9d:4c:0d:c1:a1:0f:e5:b7:f5:93: 25:cd:c9:44:37:9c:5d:4a:7c:b4:bf:65:01:88:ad: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:7F:29:AB:01:83:24:65:AC:E6:EA:44:2D:AF:AA:83:20:E9:83 X509v3 Authority Key Identifier: keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:db:4a:cc:5a:02:89:4f:35:64:71:dc:7e:49:c6:e9:6b:fa: 51:8d:95:78:0b:db:ef:5c:d6:03:37:67:0b:a3:dd:10:49:47: d1:2f:67:36:06:58:e8:3a:89:2a:62:fe:d5:b8:f2:af:3e:6e: a4:21:bb:75:e6:dd:69:df:db:b1:67:22:54:12:ef:e0:68:07: 24:f3:fc:a8:a2:d6:0e:68:00:24:a0:55:2f:b5:0f:8f:f9:cd: 7a:f1:1b:eb:d8:0b:ab:e4:61:d2:41:4f:ba:f6:24:92:39:66: 74:2a:fb:be:91:80:c0:0b:00:f5:7a:58:f8:3c:f8:20:ed:16: 9f:51:bd:ba:cf:4a:46:d9:6d:6a:08:09:59:6f:bb:74:56:f4: c7:1a:be:75:85:b3:09:39:cd:77:f2:0b:91:c1:4d:5a:6f:83: 6b:dd:e6:fe:c3:2d:41:ea:d0:46:93:e3:72:c0:8b:ae:53:f3: 19:7f:99:b5:06:81:eb:ff:aa:01:c7:b5:a5:a6:f6:cd:05:a3: 85:07:13:c6:76:51:06:13:f8:6c:67:23:1e:1c:16:88:91:97: de:e6:fb:a7:66:1d:dd:80:5e:e0:42:ef:3a:0d:c1:11:a5:fe: 1c:bd:7d:59:8b:0c:e7:5b:e8:14:1a:41:89:59:e6:bf:fc:10: 8c:bc:96:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAke5OwH6BdqzS5kbm1SHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh M2Q3NGQwHhcNMjUxMjIxMTEwMTAzWhcNMjUxMjIyMTEwMTAzWjAzMTEwLwYDVQQD EygxNmU5N2YyOWFiMDE4MzI0NjVhY2U2ZWE0NDJkYWZhYTgzMjBlOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnhUPgN6cez7I9cYYzvL36NIuRkw gfypkmMsAp9IbT6HGFfWRZKVuf6io23cCfij3kOdIsIZGGQ6u2c5PzO9MquKrSf5 3A3/TVYpEOF18jtcfFveiKxIUf5cSh8XrjZBuAgrCK5OCRYnmnXmGWzpQjnFvn2J 9qmwjlKiHlABFXJGvFkHC0uHsYYRjpwBq3MmF+GntXD61ZtKqLhxNszNj+lZsB5T qk1UxFDUaoZHUH9MJZbqd2mM64zNYDut2UsivXnrntV4oH74H/T/sjvUUTy1SQ/r D/1L5nyU7DyEetteLTjvmZ1MDcGhD+W39ZMlzclEN5xdSny0v2UBiK2pfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbpfymrAYMkZazm6kQtr6qDIOmDMB8GA1UdIwQY MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9tKzFoC iU81ZHHcfknG6Wv6UY2VeAvb71zWAzdnC6PdEElH0S9nNgZY6DqJKmL+1bjyrz5u pCG7debdad/bsWciVBLv4GgHJPP8qKLWDmgAJKBVL7UPj/nNevEb69gLq+Rh0kFP uvYkkjlmdCr7vpGAwAsA9XpY+Dz4IO0Wn1G9us9KRtltaggJWW+7dFb0xxq+dYWz CTnNd/ILkcFNWm+Da93m/sMtQerQRpPjcsCLrlPzGX+ZtQaB6/+qAce1pab2zQWj hQcTxnZRBhP4bGcjHhwWiJGX3ub7p2Yd3YBe4ELvOg3BEaX+HL19WYsM51voFBpB iVnmv/wQjLyWDA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:22:57 2025 by rpki-client