This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json) Hash identifier: LxjS6IxnvxsNlPn/rQmRizAXeJFIUdWbHcUcBb9o7Tw= Subject key identifier: 58:CD:57:83:F5:BF:9A:85:DF:39:4F:FF:8A:C3:5D:F2:AA:42:8F:84 Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca Certificate serial: 019AF12EF46E5296D54DE2F850AC71633E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft Manifest number: 057C Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: dFxtqW+lKeQMzpxVLLLFbo9i8C8ahaMCLHVnwgr76n8=) 2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f4:6e:52:96:d5:4d:e2:f8:50:ac:71:63:3e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=58cd5783f5bf9a85df394fff8ac35df2aa428f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:20:3c:82:65:78:70:c1:79:08:1d:0f:4b: 91:fe:94:da:2b:6d:a6:b8:7e:ee:02:c6:1d:01:29: ac:a7:0a:6f:30:18:d8:88:03:6a:b8:06:aa:0c:35: 49:9b:3c:80:28:0f:4f:ef:a0:c4:1b:2a:ca:14:99: 5e:67:ca:2f:3d:d5:90:06:59:e5:ee:c9:10:b6:83: 21:23:ec:a0:e1:14:42:5d:54:b8:6a:76:8b:fb:1f: f6:86:fa:cf:27:ce:a1:d9:40:e7:aa:d1:32:67:eb: dc:db:a7:2c:9a:e5:d5:44:e0:0f:06:f6:35:cc:29: f2:94:0d:fb:cf:a3:53:8b:21:59:43:25:25:63:ab: 66:b0:fd:80:99:c0:f9:be:2b:4f:11:4c:dd:85:aa: 52:59:e9:19:e3:d7:5c:76:ed:86:c6:1c:92:8a:21: 95:ab:9c:02:7c:66:db:13:87:e6:fb:57:a9:a9:9c: b2:f6:95:89:88:ff:8d:5a:35:31:6c:66:ca:24:9a: 1b:77:ae:78:f9:c5:70:a5:0b:14:e5:fa:84:85:db: bf:15:ce:a4:5b:12:93:7d:d3:1f:d0:4c:ed:63:49: 0a:f4:ae:d4:97:8c:d5:79:1a:30:8b:60:cb:50:68: 4f:c3:72:36:7c:eb:16:28:83:17:7d:96:16:a4:f0: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:57:83:F5:BF:9A:85:DF:39:4F:FF:8A:C3:5D:F2:AA:42:8F:84 X509v3 Authority Key Identifier: keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b3:94:78:0f:0b:9a:5e:0f:3e:42:24:86:06:c7:65:d3:9b: 48:b8:f2:78:19:7d:26:61:7a:c6:c2:a6:a9:07:87:e1:2c:40: fc:3c:c7:89:32:a3:91:a3:8c:b9:39:2b:30:c7:72:80:78:63: 26:39:0d:77:d1:1f:34:ef:ec:98:69:44:c9:55:52:88:19:66: 45:e9:d7:c6:48:d3:89:30:28:85:71:b4:26:7d:60:7a:30:4e: 0f:7e:31:d4:81:0b:d8:d0:a9:14:d3:d3:32:24:d6:76:d0:72: 9a:a3:e7:bd:98:a4:55:03:78:14:ac:80:7d:2d:a0:9d:e6:f2: f7:8d:b5:34:46:8c:0b:c3:a4:11:50:8a:e9:76:0d:54:72:b3: 7d:7a:25:e1:06:06:f2:71:d7:fd:67:d4:77:ae:e8:a5:b0:ae: 3b:40:99:f8:76:4d:ac:f9:e9:8a:de:ec:75:c5:46:0a:e2:41: a8:11:06:3d:94:31:e0:fe:71:5e:75:39:bb:c7:00:f9:8c:3f: 74:d8:de:f9:a4:81:77:df:e5:c0:7c:54:2b:fc:61:97:34:e2: 0b:0c:c0:5a:b2:09:5c:f3:24:cd:71:ce:9a:b2:b6:d0:a6:19: af:c0:eb:1c:e5:95:0e:56:cd:44:bd:93:01:b1:17:57:a0:64: 28:35:41:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvRuUpbVTeL4UKxxYz4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj NGUxY2EwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD Eyg1OGNkNTc4M2Y1YmY5YTg1ZGYzOTRmZmY4YWMzNWRmMmFhNDI4Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRAgPIJleHDBeQgdD0uR/pTaK22m uH7uAsYdASmspwpvMBjYiANquAaqDDVJmzyAKA9P76DEGyrKFJleZ8ovPdWQBlnl 7skQtoMhI+yg4RRCXVS4anaL+x/2hvrPJ86h2UDnqtEyZ+vc26csmuXVROAPBvY1 zCnylA37z6NTiyFZQyUlY6tmsP2AmcD5vitPEUzdhapSWekZ49dcdu2GxhySiiGV q5wCfGbbE4fm+1epqZyy9pWJiP+NWjUxbGbKJJobd654+cVwpQsU5fqEhdu/Fc6k WxKTfdMf0EztY0kK9K7Ul4zVeRowi2DLUGhPw3I2fOsWKIMXfZYWpPCS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjNV4P1v5qF3zlP/4rDXfKqQo+EMB8GA1UdIwQY MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLOUeA8L ml4PPkIkhgbHZdObSLjyeBl9JmF6xsKmqQeH4SxA/DzHiTKjkaOMuTkrMMdygHhj JjkNd9EfNO/smGlEyVVSiBlmRenXxkjTiTAohXG0Jn1gejBOD34x1IEL2NCpFNPT MiTWdtBymqPnvZikVQN4FKyAfS2gneby9421NEaMC8OkEVCK6XYNVHKzfXol4QYG 8nHX/WfUd67opbCuO0CZ+HZNrPnpit7sdcVGCuJBqBEGPZQx4P5xXnU5u8cA+Yw/ dNje+aSBd9/lwHxUK/xhlzTiCwzAWrIJXPMkzXHOmrK20KYZr8DrHOWVDlbNRL2T AbEXV6BkKDVB+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:14 2025 by rpki-client