This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json) Hash identifier: R+LH47hJ/l2BpvJjNNbjkm6RjIesxqHBC+IoxxmPYU4= Subject key identifier: 2C:22:A6:CC:E2:A1:E4:BB:E5:D9:01:F2:F5:0C:4C:7B:EB:DB:DD:44 Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Certificate serial: 019AF163EE22EBDF6B1D01204D6B31D8DDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft Manifest number: 05B9 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=) 2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: UC6ZZF3KVHHHUoIfaZuaBRbvBo77YhXEg83v52Rcxg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:22:eb:df:6b:1d:01:20:4d:6b:31:d8:dd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=2c22a6cce2a1e4bbe5d901f2f50c4c7bebdbdd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:d9:7a:3f:25:74:26:e6:7a:80:68:50:af: 52:20:93:d0:2a:d8:d7:93:6f:d0:61:fe:f8:94:0e: 27:a2:27:af:fd:41:6a:74:3f:c3:32:f0:5e:b2:a8: c2:de:9d:25:be:2b:13:80:2a:b2:78:52:59:09:c0: ff:08:3b:2f:95:f7:0d:8b:08:ae:fa:ee:a8:5c:49: 24:60:d6:51:11:97:f0:f4:2b:ad:7a:d3:ad:c7:2d: 82:a5:00:77:d3:65:c3:76:44:87:97:03:5a:1e:4d: d1:0e:a9:96:d8:4f:de:8c:50:2d:04:65:d0:e8:9f: 16:e7:5e:71:91:48:2f:4c:00:cf:ca:e1:7a:00:a1: 3a:34:52:2a:37:32:a9:b1:66:b3:f3:bc:09:0f:b7: 0c:bb:fe:3a:6a:ff:15:35:03:0c:69:42:a3:67:50: c4:6c:e0:ad:9a:28:4b:97:59:74:f7:80:91:1b:88: 3c:93:db:33:6e:c2:83:bd:c3:32:0e:a1:75:b1:31: ad:9c:85:cb:63:95:27:50:4e:72:1c:a5:6e:fc:80: 8f:08:b5:71:b4:88:4a:92:6d:8b:8b:ac:f0:02:cb: 9c:ba:e0:ed:2d:3a:b0:23:cd:31:23:3f:b4:ca:d9: 19:f2:68:31:12:09:1a:65:40:8b:c4:27:0d:5f:2f: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:A6:CC:E2:A1:E4:BB:E5:D9:01:F2:F5:0C:4C:7B:EB:DB:DD:44 X509v3 Authority Key Identifier: keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c0:c7:9b:0c:cb:1c:5e:71:85:4a:bf:28:fc:27:b5:93:dd: 05:39:28:87:ed:3c:4c:7b:66:9e:08:5d:76:af:5b:8a:8c:03: f3:91:13:2d:64:70:56:17:ac:95:a4:a8:8e:01:57:7f:f8:d9: bf:21:3d:5e:b9:fd:4c:47:ae:30:e6:3a:f1:35:60:ce:a1:7c: db:d1:bf:d2:8d:77:b2:71:d8:f2:07:65:40:40:5f:20:80:b6: a3:16:e6:cd:c9:9a:2e:9d:8b:d3:09:9d:a7:fd:7d:22:76:e7: ba:08:88:4a:bc:87:e0:69:71:8a:96:ff:10:1d:ba:e0:3f:0f: b0:96:49:c7:38:fd:fc:88:18:a1:f7:28:57:06:e6:22:2e:da: 85:4c:2b:2d:dc:db:51:94:a0:d5:ef:4e:50:6b:6e:8e:7b:6f: 4f:0b:d9:e8:4f:6d:c1:72:9c:03:38:89:8c:62:5d:4d:e3:59: b8:92:ba:90:ec:a5:61:19:a8:ba:34:a7:5d:35:11:d9:9b:17: 11:a1:05:0c:38:1d:43:a5:71:8e:bb:b2:30:0e:50:67:93:de: a9:fc:23:90:01:65:82:69:d6:dd:66:7c:3e:2f:0d:df:99:24: 62:84:f6:f5:b2:2b:1f:da:63:c9:47:98:aa:02:de:75:00:cb: e3:c2:cd:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+4i699rHQEgTWsx2N3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1 NTYxZTQwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygyYzIyYTZjY2UyYTFlNGJiZTVkOTAxZjJmNTBjNGM3YmViZGJkZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzzZej8ldCbmeoBoUK9SIJPQKtjX k2/QYf74lA4noiev/UFqdD/DMvBesqjC3p0lvisTgCqyeFJZCcD/CDsvlfcNiwiu +u6oXEkkYNZREZfw9CutetOtxy2CpQB302XDdkSHlwNaHk3RDqmW2E/ejFAtBGXQ 6J8W515xkUgvTADPyuF6AKE6NFIqNzKpsWaz87wJD7cMu/46av8VNQMMaUKjZ1DE bOCtmihLl1l094CRG4g8k9szbsKDvcMyDqF1sTGtnIXLY5UnUE5yHKVu/ICPCLVx tIhKkm2Li6zwAsucuuDtLTqwI80xIz+0ytkZ8mgxEgkaZUCLxCcNXy9OMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwipszioeS75dkB8vUMTHvr291EMB8GA1UdIwQY MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0 LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasDHmwzL HF5xhUq/KPwntZPdBTkoh+08THtmnghddq9biowD85ETLWRwVheslaSojgFXf/jZ vyE9Xrn9TEeuMOY68TVgzqF829G/0o13snHY8gdlQEBfIIC2oxbmzcmaLp2L0wmd p/19InbnugiISryH4Glxipb/EB264D8PsJZJxzj9/IgYofcoVwbmIi7ahUwrLdzb UZSg1e9OUGtujntvTwvZ6E9twXKcAziJjGJdTeNZuJK6kOylYRmoujSnXTUR2ZsX EaEFDDgdQ6VxjruyMA5QZ5PeqfwjkAFlgmnW3WZ8Pi8N35kkYoT29bIrH9pjyUeY qgLedQDL48LNsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:20 2025 by rpki-client