This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json) Hash identifier: LUKKztB4K9cameS7kLglkmsUtR1Wev2lpJa0amAqJ5Y= Subject key identifier: 5B:05:16:91:58:16:0C:8F:75:4E:90:05:D0:1C:F7:F1:8C:4C:65:7A Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Certificate serial: 019AF2E43288495FAE4B426C1E8777EE0C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft Manifest number: 0B3F Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=) 2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: zQxw6p7Chl5m+EM8MvaU3b8VDFtdoRZ3nPuRUlwPN3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:32:88:49:5f:ae:4b:42:6c:1e:87:77:ee:0c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=5b05169158160c8f754e9005d01cf7f18c4c657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:14:d0:bf:85:23:d7:5b:51:73:62:b0:73: 92:ad:32:b0:5a:eb:9c:d5:0c:7d:24:30:1f:be:96: dd:e5:d7:d6:74:d5:28:fb:5f:9a:5e:78:cf:eb:5e: 89:80:54:b3:aa:6c:13:d0:45:3e:50:48:34:18:c4: 7f:6d:b2:e0:ba:21:42:7b:b9:3a:c2:6a:1f:fe:30: a6:a0:98:2d:25:b3:16:67:72:b2:01:c5:d9:82:ce: 5e:ab:99:5f:71:37:e6:8f:34:87:65:86:68:48:5c: 81:bc:8c:7d:48:8d:22:c9:d7:08:19:b4:f3:b4:0b: ea:63:58:9b:66:0f:b6:b4:9d:6f:b1:38:2b:2f:ea: 97:67:46:28:8e:9c:37:3a:3f:71:8c:82:d0:52:73: ad:b4:54:5d:4b:c8:b5:08:19:cf:14:99:b1:a2:b0: 71:01:a4:13:c3:31:83:bb:7f:a8:f6:a5:6f:40:a9: 71:e0:c4:ba:8f:da:4f:1c:6b:3d:75:f6:90:fa:24: e5:7f:0d:dc:5a:f1:2e:fa:2d:c6:93:9a:22:ec:84: e8:85:7a:3f:ba:31:4d:ae:75:4c:c9:49:db:93:e4: 00:bc:4f:62:0f:e6:27:ba:a8:ca:df:e0:d6:bb:07: d2:33:5c:83:07:61:78:5e:e3:83:72:12:59:c7:5e: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:05:16:91:58:16:0C:8F:75:4E:90:05:D0:1C:F7:F1:8C:4C:65:7A X509v3 Authority Key Identifier: keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:4f:4f:46:46:75:d2:c7:2c:a1:1a:f0:1f:1f:1f:23:9e: e2:7c:ef:d9:fe:70:db:ff:d6:c0:70:02:26:ee:34:75:72:d1: 83:da:42:22:f3:8e:85:73:81:67:37:fd:ee:11:5a:17:18:a9: 67:05:b3:23:9e:98:56:e6:f6:05:c4:b5:cf:d1:14:d3:f7:db: ef:dd:f6:75:e0:bf:94:4b:46:44:b8:58:1e:d3:e2:79:87:5d: d9:b8:b9:de:62:4b:13:f0:1e:7c:0c:43:da:dc:89:4d:29:c4: f2:af:f9:a3:af:e7:55:53:89:cc:c1:26:9c:6f:dc:db:bd:22: 26:e5:dc:99:cc:71:23:e1:fe:77:b6:55:d2:b1:e9:e1:0b:d6: 77:d7:bf:99:33:73:0a:3b:58:90:f4:09:b0:6c:8a:62:3c:5e: 95:7d:8b:6e:84:60:7c:a3:dd:09:44:cf:ee:63:fd:2f:45:7a: a9:78:30:d1:ea:03:f1:ba:6b:d7:9e:44:25:66:93:ed:9c:d6: 76:d0:71:c6:be:48:57:bb:89:1e:d5:9f:9c:af:f1:6c:67:c0: 7f:df:79:21:36:b9:49:98:ee:9c:02:a8:c7:02:59:e8:66:da: 49:9c:d6:c2:ab:93:c7:3d:ae:77:ce:cf:3c:eb:26:70:ab:63: 78:98:a6:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DKISV+uS0JsHod37gwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjJkYTJmYTFiYzhlZDJmMmJjNmI3MDNhOGJmMTUzNDBm OTdjZmEwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD Eyg1YjA1MTY5MTU4MTYwYzhmNzU0ZTkwMDVkMDFjZjdmMThjNGM2NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu00U0L+FI9dbUXNisHOSrTKwWuuc 1Qx9JDAfvpbd5dfWdNUo+1+aXnjP616JgFSzqmwT0EU+UEg0GMR/bbLguiFCe7k6 wmof/jCmoJgtJbMWZ3KyAcXZgs5eq5lfcTfmjzSHZYZoSFyBvIx9SI0iydcIGbTz tAvqY1ibZg+2tJ1vsTgrL+qXZ0Yojpw3Oj9xjILQUnOttFRdS8i1CBnPFJmxorBx AaQTwzGDu3+o9qVvQKlx4MS6j9pPHGs9dfaQ+iTlfw3cWvEu+i3Gk5oi7ITohXo/ ujFNrnVMyUnbk+QAvE9iD+YnuqjK3+DWuwfSM1yDB2F4XuODchJZx14fKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsFFpFYFgyPdU6QBdAc9/GMTGV6MB8GA1UdIwQY MBaAFJby2i+hvI7S8rxrcDqL8VNA+Xz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEt OTNiNGZlNTE1N2VjLzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEtOTNiNGZlNTE1N2Vj LzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDFPT0ZG ddLHLKEa8B8fHyOe4nzv2f5w2//WwHACJu40dXLRg9pCIvOOhXOBZzf97hFaFxip ZwWzI56YVub2BcS1z9EU0/fb7932deC/lEtGRLhYHtPieYdd2bi53mJLE/AefAxD 2tyJTSnE8q/5o6/nVVOJzMEmnG/c270iJuXcmcxxI+H+d7ZV0rHp4QvWd9e/mTNz CjtYkPQJsGyKYjxelX2LboRgfKPdCUTP7mP9L0V6qXgw0eoD8bpr155EJWaT7ZzW dtBxxr5IV7uJHtWfnK/xbGfAf995ITa5SZjunAKoxwJZ6GbaSZzWwquTxz2ud87P POsmcKtjeJim4A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:24 2025 by rpki-client