This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json) Hash identifier: te/daIl5VBsTAOD1W1U2/MLs5eOFcdF2RO8K8cBc2ys= Subject key identifier: 9B:63:D6:89:17:FB:E4:0C:3B:90:72:4D:8A:21:2F:DE:61:E9:29:3A Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Certificate serial: 019AF164816FD986CE921DCF8C2C98C3EEA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa (hash: XfsGt0J7O4EdBwVu7o4CD1xoooiqwOChTXXKbThpML4=) 2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: faMtVrVdSzPo2rOJyWX/+fLufJ7+7xjA56X3f54PbJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:81:6f:d9:86:ce:92:1d:cf:8c:2c:98:c3:ee:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=9b63d68917fbe40c3b90724d8a212fde61e9293a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:1d:19:7d:27:ab:ac:6d:3b:51:75:bd:80: bd:af:90:07:0a:31:9d:65:21:b7:2b:df:0f:96:0a: 9c:57:94:83:ac:2c:a9:db:21:e8:7b:1e:2b:05:b3: 75:f7:04:0a:ba:db:7a:a3:7d:2a:2b:5b:48:7d:1a: 30:b4:fb:20:00:37:23:5c:76:eb:1f:88:2b:94:ba: a9:27:e7:bc:eb:7b:e5:ca:45:3c:e5:6c:58:c6:64: 9f:91:4c:b4:05:cd:b3:71:62:e6:0f:a5:55:a0:dd: 45:3a:79:00:27:d1:55:71:63:0e:ec:71:ea:b0:64: 80:7f:9f:fe:85:20:97:8a:b5:aa:a7:71:25:1a:16: bd:85:b6:79:b7:63:83:4a:59:f6:d5:0a:1d:fe:e0: d3:54:39:bc:5e:97:88:40:1b:e0:f4:08:7e:e7:90: 78:99:28:21:d9:66:11:08:ae:c4:10:7a:f7:58:6b: 8f:0a:83:59:28:5f:06:5b:67:7d:af:5e:0f:f1:7f: a1:6f:88:2e:9e:a3:d5:1d:7f:9c:5f:05:3f:d9:61: 9e:17:a0:45:54:d9:b5:6e:b7:dd:17:bf:33:4a:33: 1e:a8:bf:3f:aa:7d:c9:46:78:59:95:a8:a4:f9:05: 7c:9d:ac:71:74:8f:39:8c:1c:d1:de:ed:dc:e3:a8: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:D6:89:17:FB:E4:0C:3B:90:72:4D:8A:21:2F:DE:61:E9:29:3A X509v3 Authority Key Identifier: keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f7:27:fc:79:a5:12:30:21:ac:5a:49:4b:4c:c9:c4:6b:8e: fe:23:61:8b:ad:c4:99:4d:4f:ab:e3:94:6b:b5:83:a8:66:d2: f0:37:a8:cf:3f:2e:c1:39:33:bf:33:b2:7a:ae:8e:85:2d:6d: 03:b0:18:a8:13:ee:1b:f0:5e:6e:4e:c2:bf:3f:ab:96:ac:d1: 07:e7:1a:42:67:bc:7d:ec:ee:49:6b:aa:2b:50:3b:9e:0c:89: c1:d5:39:6f:e8:a2:4a:12:ef:e6:6a:40:1f:07:b5:5f:55:2c: 14:05:5a:c2:09:3a:42:a3:ed:b4:73:14:14:6e:48:6b:6f:c1: d3:fa:b2:25:3b:1d:1d:e7:8a:62:34:6c:16:46:c6:33:6e:9e: 4c:10:57:53:b9:24:37:89:76:ec:68:97:c5:23:f1:ff:53:84: ec:c9:f1:31:d0:ef:a2:80:21:d5:a5:60:49:ff:3a:fc:56:42: 23:16:ee:df:d4:46:e5:df:80:91:38:38:f6:04:cb:d7:b3:67: a2:93:5e:a7:07:55:dd:5e:7d:22:ea:b6:27:c6:6b:ba:3d:ed: 03:cb:d9:6c:c8:fe:19:01:86:56:74:f6:7d:e5:8f:38:29:d6: d7:76:38:14:73:44:82:cb:8b:30:fc:19:72:0b:3f:29:a9:4c: 04:8b:ea:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIFv2YbOkh3PjCyYw+6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw MzA0ZjgwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD Eyg5YjYzZDY4OTE3ZmJlNDBjM2I5MDcyNGQ4YTIxMmZkZTYxZTkyOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK0dGX0nq6xtO1F1vYC9r5AHCjGd ZSG3K98PlgqcV5SDrCyp2yHoex4rBbN19wQKutt6o30qK1tIfRowtPsgADcjXHbr H4grlLqpJ+e863vlykU85WxYxmSfkUy0Bc2zcWLmD6VVoN1FOnkAJ9FVcWMO7HHq sGSAf5/+hSCXirWqp3ElGha9hbZ5t2ODSln21Qod/uDTVDm8XpeIQBvg9Ah+55B4 mSgh2WYRCK7EEHr3WGuPCoNZKF8GW2d9r14P8X+hb4gunqPVHX+cXwU/2WGeF6BF VNm1brfdF78zSjMeqL8/qn3JRnhZlaik+QV8naxxdI85jBzR3u3c46jzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtj1okX++QMO5ByTYohL95h6Sk6MB8GA1UdIwQY MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt YmRhYTZmYmQ0MzQ3LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3 LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfcn/Hml EjAhrFpJS0zJxGuO/iNhi63EmU1Pq+OUa7WDqGbS8Deozz8uwTkzvzOyeq6OhS1t A7AYqBPuG/Bebk7Cvz+rlqzRB+caQme8fezuSWuqK1A7ngyJwdU5b+iiShLv5mpA Hwe1X1UsFAVawgk6QqPttHMUFG5Ia2/B0/qyJTsdHeeKYjRsFkbGM26eTBBXU7kk N4l27GiXxSPx/1OE7MnxMdDvooAh1aVgSf86/FZCIxbu39RG5d+AkTg49gTL17Nn opNepwdV3V59Iuq2J8Zruj3tA8vZbMj+GQGGVnT2feWPOCnW13Y4FHNEgsuLMPwZ cgs/KalMBIvqKw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client