This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json) Hash identifier: HhG9S8DntADrkV1TqHhGcJ78pnge95Y99rB6LcB8tjI= Subject key identifier: 9E:10:1E:5E:98:83:A2:DC:B0:E3:68:5C:16:E5:1D:F7:C5:0D:BC:94 Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86 Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86 Certificate serial: 019B3A908105B9BA65E5620CA67348BFA8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft Manifest number: 0668 Signing time: Sat 20 Dec 2025 07:01:47 +0000 Manifest this update: Sat 20 Dec 2025 07:01:47 +0000 Manifest next update: Sun 21 Dec 2025 07:01:47 +0000 Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: tu3KeP7CmAAy5rOf23DK7/jHRZ3fvNmY39dfIf9s0oc=) 2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:81:05:b9:ba:65:e5:62:0c:a6:73:48:bf:a8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86 Validity Not Before: Dec 20 07:01:47 2025 GMT Not After : Dec 21 07:01:47 2025 GMT Subject: CN=9e101e5e9883a2dcb0e3685c16e51df7c50dbc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:dc:46:95:9b:49:3a:fd:84:be:68:77:17: 65:5e:26:19:62:cb:b9:8b:fd:64:4a:d8:6a:3a:9b: e0:74:66:30:fe:74:34:79:7a:3d:cb:aa:48:eb:77: 19:be:3b:07:5b:ef:cf:e1:fc:74:a8:bc:99:08:a6: b5:f8:aa:2f:b9:24:28:a4:29:35:7e:b4:cb:71:b3: 00:df:b1:d7:d3:70:a4:f7:51:1a:27:a4:5e:20:27: 1d:86:b5:e6:14:5d:db:22:88:63:78:81:89:81:f4: 71:c5:52:b9:7b:66:0d:84:c9:38:7a:57:03:5f:7d: ca:f2:67:e7:0e:c7:cb:23:0c:24:29:10:31:d0:b0: 51:b4:cc:26:12:0a:12:a3:4a:16:76:de:37:f0:ff: 71:03:65:97:cb:78:14:2a:74:3a:39:ae:37:a0:c5: fb:53:58:28:70:4c:03:09:46:03:de:de:9d:c0:c5: 99:fc:db:92:56:08:fc:9f:cc:e3:c4:b9:41:c4:85: 58:20:79:a8:de:0f:bd:0c:a0:ba:5c:42:c7:d5:3e: b2:52:6f:2c:7d:c8:df:81:9e:d7:bd:22:19:0d:31: 43:94:5a:f8:8e:3c:f4:32:b4:6e:be:a2:f2:0f:db: 4f:34:82:b7:b1:00:a8:fc:3f:7b:cd:f1:ac:a7:f8: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:1E:5E:98:83:A2:DC:B0:E3:68:5C:16:E5:1D:F7:C5:0D:BC:94 X509v3 Authority Key Identifier: keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:6c:7a:7c:32:15:e5:1c:95:91:ae:95:e7:ef:7b:f6:bf: 60:a9:05:4e:5c:54:b6:af:16:52:0e:91:bc:e7:cc:31:6f:5b: 82:42:98:c7:82:9f:04:9f:1e:73:87:33:48:9e:78:cd:6a:68: 4f:1f:ee:0c:12:60:35:8a:2e:e3:1d:0a:73:ca:60:95:6f:e9: 29:b5:52:bb:ed:1e:47:49:46:da:04:89:74:ad:37:19:23:2b: c1:ca:c1:27:d7:b9:11:4c:05:41:4a:20:78:e8:69:68:9c:3b: 85:14:23:9c:ee:d1:15:b6:f3:10:e3:de:3d:c8:df:c9:31:d5: 62:51:45:0e:0c:72:63:11:0f:b3:1f:71:44:95:af:21:fd:d6: 58:77:c7:64:0c:e9:29:4f:de:d6:32:b2:32:89:c5:50:bd:f2: fb:5b:62:5b:80:45:37:b2:aa:ed:00:db:f9:62:b6:b3:9a:fd: 19:50:10:57:4a:85:26:5b:f3:e5:d5:d0:b6:73:67:3a:89:f0: 78:d7:6a:3d:c0:f0:7c:05:af:04:5e:bc:0f:bb:24:72:5d:ce: ef:41:b5:f0:6f:61:bc:78:3b:63:bd:73:84:a6:49:aa:1f:e0: d7:39:a0:de:d3:41:f2:c3:be:7d:2a:c0:05:7f:cc:01:54:aa: c2:6c:37:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kIEFubpl5WIMpnNIv6jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGEyMzE2ZjRlOWI1OGFhNTJkZWVlNWM3ZDFmNGI4NDQ3 NmVjODYwHhcNMjUxMjIwMDcwMTQ3WhcNMjUxMjIxMDcwMTQ3WjAzMTEwLwYDVQQD Eyg5ZTEwMWU1ZTk4ODNhMmRjYjBlMzY4NWMxNmU1MWRmN2M1MGRiYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT3cRpWbSTr9hL5odxdlXiYZYsu5 i/1kSthqOpvgdGYw/nQ0eXo9y6pI63cZvjsHW+/P4fx0qLyZCKa1+KovuSQopCk1 frTLcbMA37HX03Ck91EaJ6ReICcdhrXmFF3bIohjeIGJgfRxxVK5e2YNhMk4elcD X33K8mfnDsfLIwwkKRAx0LBRtMwmEgoSo0oWdt438P9xA2WXy3gUKnQ6Oa43oMX7 U1gocEwDCUYD3t6dwMWZ/NuSVgj8n8zjxLlBxIVYIHmo3g+9DKC6XELH1T6yUm8s fcjfgZ7XvSIZDTFDlFr4jjz0MrRuvqLyD9tPNIK3sQCo/D97zfGsp/h3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4QHl6Yg6LcsONoXBblHffFDbyUMB8GA1UdIwQY MBaAFC4KIxb06bWKpS3u5cfR9LhEduyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jNDU4MTEtNzViYS00ZGQ3LWE0MjEt ZjM2ZDllZTM0NmQ0LzEvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jNDU4MTEtNzViYS00ZGQ3LWE0MjEtZjM2ZDllZTM0NmQ0 LzEvTGdvakZ2VHB0WXFsTGU3bHg5SDB1RVIyN0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGFsenwy FeUclZGulefve/a/YKkFTlxUtq8WUg6RvOfMMW9bgkKYx4KfBJ8ec4czSJ54zWpo Tx/uDBJgNYou4x0Kc8pglW/pKbVSu+0eR0lG2gSJdK03GSMrwcrBJ9e5EUwFQUog eOhpaJw7hRQjnO7RFbbzEOPePcjfyTHVYlFFDgxyYxEPsx9xRJWvIf3WWHfHZAzp KU/e1jKyMonFUL3y+1tiW4BFN7Kq7QDb+WK2s5r9GVAQV0qFJlvz5dXQtnNnOonw eNdqPcDwfAWvBF68D7skcl3O70G18G9hvHg7Y71zhKZJqh/g1zmg3tNB8sO+fSrA BX/MAVSqwmw3Yg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:35 2025 by rpki-client