This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft File: LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json) Hash identifier: sxxVWQBeC39MQ9zbrDl/lBsYx51XSHJLaly6Rm8tJeY= Subject key identifier: B4:7F:56:3C:61:57:63:13:2E:67:A5:FB:78:69:51:09:03:AA:FE:C3 Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2 Certificate serial: 019AF2AD4B4514102F0C5394B333510E8C0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: /0/9nulaENIAsMSr/PTpi0SWa1KaS10o2fC1cArN1LY=) 2: qeNFeM9Dqgcz2nh_idpetNCJurE.roa (hash: NrX7eodgnt6imSwfbL3iQbyuAebVy0fGhfCD+iBitDM=) 3: vFgo2fcMFH1qOUYrkjlx17yCv1M.roa (hash: 2YQo4Uqir13EMfjJ9TnN1NRVWIzLXUPu2su8ibLa58Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4b:45:14:10:2f:0c:53:94:b3:33:51:0e:8c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2 Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=b47f563c615763132e67a5fb7869510903aafec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:7a:39:54:8f:c4:5f:18:58:de:3f:e2:ac: 02:be:87:38:0f:54:ef:ae:2e:d9:85:40:9b:1d:d1: 65:d4:af:a4:d3:f5:9d:5a:35:63:ba:b1:be:62:ed: 15:c5:a8:ba:1d:14:6c:60:65:34:c7:52:63:b1:81: fb:a7:37:c6:45:46:b4:15:2d:49:aa:59:2c:d7:ea: f4:78:13:2d:fe:d0:c6:1d:6c:fe:a5:66:32:87:43: 7f:17:e4:cc:fc:39:f7:a4:57:f3:69:1d:5a:9d:5e: 5b:f8:96:f1:b3:64:b7:06:c2:7c:28:ed:6f:25:70: 96:cf:71:7d:05:b9:68:35:27:6f:db:06:42:07:09: 57:3c:4d:66:18:a5:a5:aa:10:8b:32:a2:f6:9c:62: 58:5e:fb:59:98:0d:77:23:d2:b7:88:04:f7:76:36: c9:05:d1:c5:d9:db:62:39:a4:24:42:31:20:8c:8b: fa:8f:a9:d8:8e:f1:ad:6e:f0:14:2f:58:38:07:57: 7c:03:40:34:af:4f:af:c7:e5:0b:b7:1c:20:7e:40: ff:ed:53:18:80:6e:2c:54:15:cd:34:c5:84:98:f7: bf:1e:76:41:27:92:9f:e6:66:a0:28:b2:03:d6:cd: e2:6f:c0:db:fb:65:51:6d:4d:28:d1:60:36:89:cc: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7F:56:3C:61:57:63:13:2E:67:A5:FB:78:69:51:09:03:AA:FE:C3 X509v3 Authority Key Identifier: keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:47:da:80:38:af:03:31:81:ee:d4:21:5b:2e:fa:75:20:43: a1:d8:d8:e7:f5:d8:1e:b8:d2:04:c8:38:0c:65:ca:a6:ff:8e: a4:f3:d6:6d:4b:b0:14:f1:cc:f3:69:19:55:f6:5a:42:01:c2: 2d:24:1a:74:e5:a8:ac:8a:3d:f1:62:24:6f:9a:d5:05:7a:2d: c7:83:09:2f:f3:38:0e:da:c9:c8:d9:82:46:e1:21:c2:09:c7: 6f:74:85:60:98:08:bf:06:f2:71:55:53:3a:b2:1c:b4:09:e0: 93:3b:61:b0:6a:9b:11:d2:b8:00:33:35:b6:55:25:40:16:36: dc:6b:b6:34:e7:c3:7c:e4:6e:96:3d:33:80:33:2d:f5:d0:cb: ba:2f:f4:2f:1b:00:53:a8:23:94:ff:15:b0:60:b4:6e:80:ab: f2:64:1b:06:ef:44:ad:ae:9c:88:be:4b:84:d4:17:d9:2c:96: 8c:e5:60:8d:7f:8b:e2:fe:45:40:70:39:7d:21:28:d8:7d:9a: 4c:f2:3c:af:b8:aa:3a:b9:71:6e:55:fa:48:96:77:55:20:0c: d1:e6:ae:3a:97:28:b6:22:53:63:02:ce:05:8c:b7:94:3f:15: 81:a8:60:25:fd:91:53:3b:a2:5a:a9:ed:23:53:c2:eb:01:ad: 5d:d3:d7:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUtFFBAvDFOUszNRDowKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTk3MjY4YTU3NTM0ZjhjZjFiNjNiNzk0ZWVmMGQ3N2M3 YjQzYTIwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD EyhiNDdmNTYzYzYxNTc2MzEzMmU2N2E1ZmI3ODY5NTEwOTAzYWFmZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHx6OVSPxF8YWN4/4qwCvoc4D1Tv ri7ZhUCbHdFl1K+k0/WdWjVjurG+Yu0Vxai6HRRsYGU0x1JjsYH7pzfGRUa0FS1J qlks1+r0eBMt/tDGHWz+pWYyh0N/F+TM/Dn3pFfzaR1anV5b+Jbxs2S3BsJ8KO1v JXCWz3F9BbloNSdv2wZCBwlXPE1mGKWlqhCLMqL2nGJYXvtZmA13I9K3iAT3djbJ BdHF2dtiOaQkQjEgjIv6j6nYjvGtbvAUL1g4B1d8A0A0r0+vx+ULtxwgfkD/7VMY gG4sVBXNNMWEmPe/HnZBJ5Kf5magKLID1s3ib8Db+2VRbU0o0WA2iczCAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR/VjxhV2MTLmel+3hpUQkDqv7DMB8GA1UdIwQY MBaAFC1ZcmildTT4zxtjt5Tu8Nd8e0OiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDkt NGUwNDgxZGM3ZDFjLzEvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDktNGUwNDgxZGM3ZDFj LzEvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUfagDiv AzGB7tQhWy76dSBDodjY5/XYHrjSBMg4DGXKpv+OpPPWbUuwFPHM82kZVfZaQgHC LSQadOWorIo98WIkb5rVBXotx4MJL/M4DtrJyNmCRuEhwgnHb3SFYJgIvwbycVVT OrIctAngkzthsGqbEdK4ADM1tlUlQBY23Gu2NOfDfORulj0zgDMt9dDLui/0LxsA U6gjlP8VsGC0boCr8mQbBu9Era6ciL5LhNQX2SyWjOVgjX+L4v5FQHA5fSEo2H2a TPI8r7iqOrlxblX6SJZ3VSAM0eauOpcotiJTYwLOBYy3lD8VgahgJf2RUzuiWqnt I1PC6wGtXdPXbA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:54 2025 by rpki-client