This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json) Hash identifier: epYGbBNYI8Tp977qiqu9MyAOHTl3OVqCyNC9m9Vs69Q= Subject key identifier: 42:6F:76:44:83:82:7C:0E:8A:A9:3B:07:3A:BD:26:08:2E:B9:2D:D5 Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206 Certificate serial: 019B3268D1A0D7C5577E240B7A88461D0B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft Manifest number: 0E0F Signing time: Thu 18 Dec 2025 17:01:28 +0000 Manifest this update: Thu 18 Dec 2025 17:01:28 +0000 Manifest next update: Fri 19 Dec 2025 17:01:28 +0000 Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=) 2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: 0rmQq/7Dtf0zTUOgzDG3n/0rq2hhLMZ73w6PvXGoGJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:d1:a0:d7:c5:57:7e:24:0b:7a:88:46:1d:0b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206 Validity Not Before: Dec 18 17:01:28 2025 GMT Not After : Dec 19 17:01:28 2025 GMT Subject: CN=426f764483827c0e8aa93b073abd26082eb92dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:8a:49:50:30:00:55:8b:a5:dd:15:e4:c5: f9:15:74:a0:e1:34:a6:6f:26:87:50:f9:3f:62:c4: 50:73:68:6f:a7:b4:46:55:f5:63:8c:1d:7a:bb:d9: 19:92:6e:2c:8d:10:48:cb:58:12:42:37:47:d7:6e: 56:eb:ae:63:73:d1:a3:01:35:f5:53:80:e4:a9:9f: 95:ab:16:fc:12:76:27:45:28:09:ae:45:7c:c9:a7: 2c:87:45:64:e6:5a:a5:52:ce:a0:b4:a1:ee:87:89: 20:34:54:e3:a3:ef:fa:3c:f5:6a:ea:8d:0c:2e:2e: 0c:a3:5a:19:df:56:e1:1e:15:a5:36:10:2a:1b:83: ac:e9:de:7e:a2:d6:6e:a5:d2:e5:ef:64:2b:de:85: aa:bd:06:e9:46:79:16:4a:0e:a0:6d:d2:7e:eb:6e: 3f:b9:23:83:83:2a:f7:29:c4:8d:1a:11:31:f8:a2: 68:6f:d5:cf:a1:60:0b:19:55:8b:ab:d9:b4:fd:a4: fa:78:b4:7f:7b:79:73:21:09:97:d2:85:1c:4d:da: 4e:a2:f8:d7:86:f7:b6:d4:82:f0:e5:97:5d:6b:0f: 37:77:bc:fe:94:c7:25:fa:8b:38:a8:52:3c:43:67: de:75:f4:41:b2:53:a4:07:71:35:86:3e:3f:82:42: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:76:44:83:82:7C:0E:8A:A9:3B:07:3A:BD:26:08:2E:B9:2D:D5 X509v3 Authority Key Identifier: keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4f:3d:c5:51:e4:ae:a4:48:8c:a0:5d:9c:2b:87:ae:d4:b4: 69:ad:a9:65:2c:87:a8:6f:bc:85:40:95:49:64:94:8c:34:ec: 28:75:ee:e5:9a:d8:52:a2:e6:54:2f:46:ac:6c:85:a4:2c:8d: 7e:fb:52:fa:c1:cd:8c:c4:d2:60:54:c5:2c:06:7c:d2:89:ab: 58:db:72:90:cf:b4:72:10:c9:f5:df:0c:a8:fb:25:9b:e5:01: 6e:c9:42:7e:15:ca:dc:9d:aa:57:6b:d4:b2:f4:c3:b1:e6:65: b9:1d:e4:14:3d:68:50:4d:8c:2d:00:59:43:aa:67:b4:e7:33: 9f:f4:ba:4d:d4:53:7e:e8:42:3d:84:07:f3:20:30:6e:e5:89: 9c:fe:0e:10:c8:99:15:86:40:bf:ae:f0:b6:04:3e:f5:47:31: 6b:ff:73:55:03:10:0a:bd:cb:69:8f:cc:28:4b:3c:97:fc:54: 24:e7:f5:c8:c2:6b:9f:a0:95:90:8a:e1:89:72:08:0d:7f:8c: 80:e8:08:7b:48:7f:40:df:b4:e3:bb:05:31:86:49:8a:26:9a: 57:57:e0:cd:ec:e0:3b:be:2b:43:b5:c5:4a:8f:c8:d1:31:2f: 31:a8:fb:ff:1f:1e:79:7c:59:d8:38:3f:3e:04:97:3f:64:d2: a7:4a:78:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaNGg18VXfiQLeohGHQtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0 NjAyMDYwHhcNMjUxMjE4MTcwMTI4WhcNMjUxMjE5MTcwMTI4WjAzMTEwLwYDVQQD Eyg0MjZmNzY0NDgzODI3YzBlOGFhOTNiMDczYWJkMjYwODJlYjkyZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RCKSVAwAFWLpd0V5MX5FXSg4TSm byaHUPk/YsRQc2hvp7RGVfVjjB16u9kZkm4sjRBIy1gSQjdH125W665jc9GjATX1 U4DkqZ+Vqxb8EnYnRSgJrkV8yacsh0Vk5lqlUs6gtKHuh4kgNFTjo+/6PPVq6o0M Li4Mo1oZ31bhHhWlNhAqG4Os6d5+otZupdLl72Qr3oWqvQbpRnkWSg6gbdJ+624/ uSODgyr3KcSNGhEx+KJob9XPoWALGVWLq9m0/aT6eLR/e3lzIQmX0oUcTdpOovjX hve21ILw5Zddaw83d7z+lMcl+os4qFI8Q2fedfRBslOkB3E1hj4/gkKmPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJvdkSDgnwOiqk7Bzq9JgguuS3VMB8GA1UdIwQY MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU89xVHk rqRIjKBdnCuHrtS0aa2pZSyHqG+8hUCVSWSUjDTsKHXu5ZrYUqLmVC9GrGyFpCyN fvtS+sHNjMTSYFTFLAZ80omrWNtykM+0chDJ9d8MqPslm+UBbslCfhXK3J2qV2vU svTDseZluR3kFD1oUE2MLQBZQ6pntOczn/S6TdRTfuhCPYQH8yAwbuWJnP4OEMiZ FYZAv67wtgQ+9Ucxa/9zVQMQCr3LaY/MKEs8l/xUJOf1yMJrn6CVkIrhiXIIDX+M gOgIe0h/QN+047sFMYZJiiaaV1fgzezgO74rQ7XFSo/I0TEvMaj7/x8eeXxZ2Dg/ PgSXP2TSp0p4Pw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:31:09 2025 by rpki-client