This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft File: lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json) Hash identifier: 7lebsfr47+lf2ArWA0FXr8oPof6q9thwROSG/cHYS4U= Subject key identifier: C4:47:B9:05:29:63:D3:57:DA:DE:12:98:01:A0:42:58:BA:27:BD:40 Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C Certificate issuer: /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c Certificate serial: 019B4FCF278320086DD900C7F3094A8A66FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft Manifest number: 1352 Signing time: Wed 24 Dec 2025 10:02:14 +0000 Manifest this update: Wed 24 Dec 2025 10:02:14 +0000 Manifest next update: Thu 25 Dec 2025 10:02:14 +0000 Files and hashes: 1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: YI/pNnhJKG4U8lU+afKTPXIH3APK0/ArLEvMku2pHiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:27:83:20:08:6d:d9:00:c7:f3:09:4a:8a:66:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c Validity Not Before: Dec 24 10:02:14 2025 GMT Not After : Dec 25 10:02:14 2025 GMT Subject: CN=c447b9052963d357dade129801a04258ba27bd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:3f:6b:48:70:43:3a:73:7e:6e:dd:07:73: d6:27:df:00:d2:d8:65:c5:22:b5:80:dd:5e:29:1e: b4:9f:8a:fd:9f:cb:64:e2:84:83:34:6f:00:25:25: 36:a4:e9:41:d6:eb:56:18:4c:07:be:0e:22:fa:c3: c7:af:6b:9a:56:1c:de:50:72:26:6e:25:0d:4c:f6: 82:ce:46:32:39:bc:10:2e:58:71:41:92:50:61:9c: a8:d0:e1:09:d3:57:28:fa:ef:79:2d:37:02:6d:4c: 38:73:35:dd:a8:17:e5:24:dd:a1:3c:52:e8:b5:e4: 66:2b:79:46:96:a8:d9:15:20:d4:f2:5f:90:83:aa: c7:74:8b:19:30:2e:09:78:2b:0a:a2:19:d4:9e:bd: cc:af:7f:a6:43:a4:70:21:48:00:49:0a:78:99:96: 2c:29:9d:c8:db:96:f9:97:0f:0e:6a:0c:67:39:54: d1:f5:ad:71:03:f1:52:15:88:9f:d3:a7:23:80:8a: 79:e7:bf:25:7c:a7:f0:34:49:d8:37:2a:2c:f2:b8: 7a:73:7f:95:7a:75:37:68:5c:80:25:c8:f6:81:27: 0a:9d:bd:6e:5d:2f:56:81:10:f5:5a:63:2f:0b:fb: a0:a5:0b:73:e2:97:a4:61:30:ca:79:49:14:de:7c: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:B9:05:29:63:D3:57:DA:DE:12:98:01:A0:42:58:BA:27:BD:40 X509v3 Authority Key Identifier: keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:07:85:a6:0f:f1:24:e4:e4:7c:8e:b3:df:31:3c:05:ac: 0d:92:74:fe:aa:a4:89:c7:92:b9:2e:30:e0:be:d7:29:38:17: f6:ab:10:65:fe:48:ef:f5:b5:c1:9f:87:17:dd:d5:59:c6:9f: 23:76:3f:ec:6d:10:be:63:9e:26:ad:a8:a7:1d:4f:a3:49:e2: cf:95:58:55:13:1d:1e:c2:55:ea:05:86:82:21:eb:e3:30:b6: 20:c2:70:44:c9:b2:fb:36:44:a4:31:2b:61:ca:bc:ba:b8:b7: 73:24:4e:ec:cf:7b:5e:ab:8e:fd:c5:62:c1:29:e9:f4:7a:2e: 2c:7d:36:b4:c4:e8:bd:74:c7:37:b6:de:3b:80:c1:6b:24:0a: 72:0f:aa:94:ee:27:49:f4:96:c3:4a:7f:f1:c6:fd:85:b0:8c: d3:7f:c6:63:40:94:87:2d:cc:f2:da:6e:18:e9:76:ca:0c:1e: 77:f5:67:1a:f3:39:8c:fa:cf:8d:b6:bf:b6:e5:41:4e:01:bd: f0:cf:d3:18:d5:4d:5b:37:d0:26:b9:53:92:0b:7b:f0:ff:25: 44:5f:49:23:99:97:75:74:d2:97:d3:f4:ef:6e:92:ba:49:37: 4d:d4:8f:29:31:98:81:04:b3:d5:a8:33:f7:59:0c:90:a9:e5: 7f:ab:7a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzyeDIAht2QDH8wlKimb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzgyYzk0MzlhNDE0N2IyZWEyYjU5N2NmZmM1MTAwYmE4 ZDMyN2MwHhcNMjUxMjI0MTAwMjE0WhcNMjUxMjI1MTAwMjE0WjAzMTEwLwYDVQQD EyhjNDQ3YjkwNTI5NjNkMzU3ZGFkZTEyOTgwMWEwNDI1OGJhMjdiZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfA/a0hwQzpzfm7dB3PWJ98A0thl xSK1gN1eKR60n4r9n8tk4oSDNG8AJSU2pOlB1utWGEwHvg4i+sPHr2uaVhzeUHIm biUNTPaCzkYyObwQLlhxQZJQYZyo0OEJ01co+u95LTcCbUw4czXdqBflJN2hPFLo teRmK3lGlqjZFSDU8l+Qg6rHdIsZMC4JeCsKohnUnr3Mr3+mQ6RwIUgASQp4mZYs KZ3I25b5lw8OagxnOVTR9a1xA/FSFYif06cjgIp5578lfKfwNEnYNyos8rh6c3+V enU3aFyAJcj2gScKnb1uXS9WgRD1WmMvC/ugpQtz4pekYTDKeUkU3nw+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRHuQUpY9NX2t4SmAGgQli6J71AMB8GA1UdIwQY MBaAFJbILJQ5pBR7LqK1l8/8UQC6jTJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYt ZGNjNGM0NWJmMTYyLzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYtZGNjNGM0NWJmMTYy LzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotUHhaYP 8STk5HyOs98xPAWsDZJ0/qqkiceSuS4w4L7XKTgX9qsQZf5I7/W1wZ+HF93VWcaf I3Y/7G0QvmOeJq2opx1Po0niz5VYVRMdHsJV6gWGgiHr4zC2IMJwRMmy+zZEpDEr Ycq8uri3cyRO7M97XquO/cViwSnp9HouLH02tMTovXTHN7beO4DBayQKcg+qlO4n SfSWw0p/8cb9hbCM03/GY0CUhy3M8tpuGOl2ygwed/VnGvM5jPrPjba/tuVBTgG9 8M/TGNVNWzfQJrlTkgt78P8lRF9JI5mXdXTSl9P0726Sukk3TdSPKTGYgQSz1agz 91kMkKnlf6t6yw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:46 2025 by rpki-client