This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft File: LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json) Hash identifier: o2PG3pq9SWpspON8iyaYEMh/eU+qCHsxupC0LnatrH0= Subject key identifier: AD:C3:08:7A:19:95:46:E5:FF:EF:0B:AD:EE:08:50:DE:B5:07:71:EE Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Certificate serial: 019B405B649ACD16DD148013C868894A7524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:29 +0000 Manifest this update: Sun 21 Dec 2025 10:01:29 +0000 Manifest next update: Mon 22 Dec 2025 10:01:29 +0000 Files and hashes: 1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: d4IkwcyRxSu7V1taeAxJhN/Z5etPrz2oiXNSQ9rnn7k=) 2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:64:9a:cd:16:dd:14:80:13:c8:68:89:4a:75:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22 Validity Not Before: Dec 21 10:01:29 2025 GMT Not After : Dec 22 10:01:29 2025 GMT Subject: CN=adc3087a199546e5ffef0badee0850deb50771ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:ae:f1:ad:89:84:46:e0:39:60:80:a1:4f: 48:e2:2b:11:69:7d:1f:88:14:56:94:04:44:93:56: 97:d5:3d:59:07:45:a8:90:45:c4:f6:21:22:1e:1f: 42:d2:0c:8c:21:38:39:bb:f9:23:11:8b:8f:cc:30: f5:4e:f6:71:8f:07:29:ee:0f:fb:13:33:54:2b:8d: cd:2a:20:3f:ff:fb:1c:4a:7e:f4:34:3e:40:e5:7a: 2c:8a:75:95:6a:3a:d5:b6:26:75:ec:d3:18:53:98: 7e:71:45:0f:1e:66:87:26:b6:d0:a4:ea:23:47:24: 9f:f4:1f:db:fe:10:6f:3a:92:a3:99:72:63:03:18: c9:d0:6e:b0:07:cd:23:88:db:14:08:e0:fc:7e:8b: c1:db:b6:e6:09:82:ce:6d:f0:2f:cb:63:f3:e1:ec: 08:e2:7f:ab:b0:2e:1d:30:7b:db:d2:e1:4e:99:75: 70:09:95:25:a2:51:8f:2d:59:74:32:c1:97:18:b8: 08:ba:e0:f4:5b:c8:70:61:b7:6f:44:6b:2c:32:d5: e1:db:3e:76:20:b5:80:92:b8:ab:93:db:b6:2b:b7: f0:66:a8:23:44:b0:84:78:51:e7:2a:96:23:6b:c8: c2:42:78:40:86:4b:89:ef:ac:aa:0e:1f:ef:2d:5c: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:08:7A:19:95:46:E5:FF:EF:0B:AD:EE:08:50:DE:B5:07:71:EE X509v3 Authority Key Identifier: keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:62:70:d0:e2:e9:1e:0b:ec:8f:3a:2a:a6:c3:04:f3:13: 9d:a2:38:3b:2f:25:e0:44:39:10:d0:ff:7e:04:da:a2:c7:c4: fb:36:73:d2:3d:05:64:da:8d:54:e6:b9:1d:90:dc:3b:1f:d5: 38:76:cc:d8:34:60:24:2b:dd:86:e9:55:01:7b:fa:7d:0f:0b: 5f:aa:3c:4f:31:26:e5:8b:91:fc:5b:58:eb:c5:84:07:a8:54: ba:22:e1:5b:98:88:d6:33:1c:b6:0e:84:f6:4d:9e:3c:03:05: 1b:35:50:4e:b1:24:68:22:bd:38:a3:fb:25:4d:fc:5c:3a:36: a1:72:6f:2d:c1:a3:47:71:4c:d3:a4:e7:90:cd:4b:c5:b6:6b: c6:28:50:19:82:29:41:9b:8e:8a:c8:c0:5b:8e:6f:35:36:04: 59:25:2c:5e:cc:be:40:c5:19:2d:b3:08:33:cc:07:c7:cf:e0: 12:89:81:db:44:99:41:83:a8:0e:00:41:a9:c0:71:51:24:0d: 7b:78:1b:20:76:35:21:54:dc:06:11:c8:f2:25:3a:90:7e:e8: f1:73:ba:15:83:13:31:fc:fe:8a:0b:df:39:e8:5f:39:48:49: 30:b4:3a:7c:bc:86:e7:68:a9:21:b9:8d:91:b2:15:4e:a6:40: 51:b7:53:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2SazRbdFIATyGiJSnUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNmYzY2M1ZDc4NTk0MmU2MDQ4MDkzYzc0MzM5NzNhZWIx NWZlMjIwHhcNMjUxMjIxMTAwMTI5WhcNMjUxMjIyMTAwMTI5WjAzMTEwLwYDVQQD EyhhZGMzMDg3YTE5OTU0NmU1ZmZlZjBiYWRlZTA4NTBkZWI1MDc3MWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSmu8a2JhEbgOWCAoU9I4isRaX0f iBRWlAREk1aX1T1ZB0WokEXE9iEiHh9C0gyMITg5u/kjEYuPzDD1TvZxjwcp7g/7 EzNUK43NKiA///scSn70ND5A5XosinWVajrVtiZ17NMYU5h+cUUPHmaHJrbQpOoj RySf9B/b/hBvOpKjmXJjAxjJ0G6wB80jiNsUCOD8fovB27bmCYLObfAvy2Pz4ewI 4n+rsC4dMHvb0uFOmXVwCZUlolGPLVl0MsGXGLgIuuD0W8hwYbdvRGssMtXh2z52 ILWAkrirk9u2K7fwZqgjRLCEeFHnKpYja8jCQnhAhkuJ76yqDh/vLVzaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3DCHoZlUbl/+8Lre4IUN61B3HuMB8GA1UdIwQY MBaAFCxvPMXXhZQuYEgJPHQzlzrrFf4iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYt NmNmMWNhNTA4ZDFhLzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jNzkxZGQtOGIxNy00OWM1LWExZWYtNmNmMWNhNTA4ZDFh LzEvTEc4OHhkZUZsQzVnU0FrOGRET1hPdXNWX2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSpicNDi 6R4L7I86KqbDBPMTnaI4Oy8l4EQ5END/fgTaosfE+zZz0j0FZNqNVOa5HZDcOx/V OHbM2DRgJCvdhulVAXv6fQ8LX6o8TzEm5YuR/FtY68WEB6hUuiLhW5iI1jMctg6E 9k2ePAMFGzVQTrEkaCK9OKP7JU38XDo2oXJvLcGjR3FM06TnkM1LxbZrxihQGYIp QZuOisjAW45vNTYEWSUsXsy+QMUZLbMIM8wHx8/gEomB20SZQYOoDgBBqcBxUSQN e3gbIHY1IVTcBhHI8iU6kH7o8XO6FYMTMfz+igvfOehfOUhJMLQ6fLyG52ipIbmN kbIVTqZAUbdTHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:17:41 2025 by rpki-client