This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft File: lvwwAHd_a3tF8DtuyBwcAQv5l94.mft (raw, json) Hash identifier: OQvAiEmxCgnUU1s9SzHTV41HB4PnswDStAID3ZCQafg= Subject key identifier: A6:72:A4:D1:65:B6:F4:85:37:5A:B8:CE:BE:FD:02:D7:8A:9D:D9:7D Authority key identifier: 96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE Certificate issuer: /CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de Certificate serial: 019AF0BF354EC671EBD72A99FAD91261D85A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft Manifest number: 015D Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: lvwwAHd_a3tF8DtuyBwcAQv5l94.crl (hash: ib5L/pblod95wTy+iwwMvdkNIKkT3hZxlxmcF2D40M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:35:4e:c6:71:eb:d7:2a:99:fa:d9:12:61:d8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fc3000777f6b7b45f03b6ec81c1c010bf997de Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=a672a4d165b6f485375ab8cebefd02d78a9dd97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:29:17:c7:a8:a2:85:0b:1d:a0:84:9b:2d: 31:df:07:9d:55:e9:bf:89:c6:ca:81:b9:97:d0:99: 49:3e:c0:c7:ef:a1:37:0e:fd:28:5b:97:bb:c6:2b: 21:44:5c:54:a8:92:25:40:f9:77:e1:18:2d:dc:47: 91:c6:b7:34:65:77:9e:bc:71:62:0e:40:2d:1f:5b: 51:3f:63:ec:12:6e:d7:7f:51:15:7c:f0:88:b5:8c: a1:25:b0:d4:5d:13:77:8d:9c:75:35:56:c8:03:c0: cf:6d:c8:01:6c:fb:78:59:dd:8e:da:ab:d5:a5:04: 39:02:35:46:a6:6d:c9:fa:30:fb:5c:c9:e4:7c:70: 00:2b:0a:ba:61:22:12:34:b6:13:22:f2:c4:98:f2: 9b:c8:e0:b6:8a:1c:c6:13:fa:1d:ed:f6:2f:ab:5b: 7a:26:74:9a:66:5a:19:5f:a4:11:da:1d:4d:43:1b: 32:cc:a8:e0:3f:e8:0a:76:ab:f6:82:3a:49:73:56: 49:6f:9b:fb:c1:26:7d:9e:f4:ac:87:fc:09:aa:d8: ab:f9:b4:3f:a8:8e:68:3e:0a:6c:c2:00:4b:81:79: bf:9f:07:86:03:b1:0c:b4:07:99:bf:02:64:ce:5d: 0d:fd:6c:ff:11:58:64:21:ad:d7:d3:26:66:7d:c1: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:72:A4:D1:65:B6:F4:85:37:5A:B8:CE:BE:FD:02:D7:8A:9D:D9:7D X509v3 Authority Key Identifier: keyid:96:FC:30:00:77:7F:6B:7B:45:F0:3B:6E:C8:1C:1C:01:0B:F9:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvwwAHd_a3tF8DtuyBwcAQv5l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/776f58-c9fa-4e2f-9ff1-756d2a6fc7bc/1/lvwwAHd_a3tF8DtuyBwcAQv5l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3f:1c:6a:ae:41:86:22:9c:60:6c:d4:a1:c4:c2:5a:5d:ef: 0a:c4:c2:aa:78:6e:f4:f4:d5:52:4f:19:ca:c7:58:df:70:6e: 93:4c:9e:f8:90:e1:08:b5:f1:0c:4c:97:a4:07:fc:c3:a2:86: 2b:f5:8f:2d:c9:39:ea:1b:c4:4a:1a:8a:4b:4e:38:d2:a1:6f: 58:5e:0e:de:3f:2a:e0:d4:7f:8d:9d:e0:a3:ac:b3:b3:12:cf: 44:04:64:06:85:11:5c:f5:4a:8c:15:34:ae:55:54:29:cd:cb: 17:38:95:8c:6f:5a:15:70:dd:8a:94:6f:90:e2:64:e7:1d:16: 09:e4:49:85:00:77:a9:e9:62:4e:5d:07:91:e6:d5:b2:e0:66: 02:d9:95:be:3d:5a:d6:7d:c5:0c:96:b9:4d:54:63:30:49:58: 4a:b5:e5:02:82:10:75:85:4d:5c:a1:a9:88:f3:e2:e5:38:8f: 43:8f:f1:70:23:4d:fd:26:22:9a:bb:d0:e9:39:8e:aa:e7:16: 16:55:bc:a5:11:4d:96:3b:9a:e4:1c:0c:fd:8f:bb:68:c9:0c: da:3b:9c:18:de:06:33:ba:8a:9c:e9:e1:31:92:25:74:24:21: fa:5f:ed:db:ae:48:3e:a4:35:c2:95:2f:3e:70:05:c4:73:b0: a9:34:d9:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzVOxnHr1yqZ+tkSYdhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmMzMDAwNzc3ZjZiN2I0NWYwM2I2ZWM4MWMxYzAxMGJm OTk3ZGUwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EyhhNjcyYTRkMTY1YjZmNDg1Mzc1YWI4Y2ViZWZkMDJkNzhhOWRkOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq8pF8eoooULHaCEmy0x3wedVem/ icbKgbmX0JlJPsDH76E3Dv0oW5e7xishRFxUqJIlQPl34Rgt3EeRxrc0ZXeevHFi DkAtH1tRP2PsEm7Xf1EVfPCItYyhJbDUXRN3jZx1NVbIA8DPbcgBbPt4Wd2O2qvV pQQ5AjVGpm3J+jD7XMnkfHAAKwq6YSISNLYTIvLEmPKbyOC2ihzGE/od7fYvq1t6 JnSaZloZX6QR2h1NQxsyzKjgP+gKdqv2gjpJc1ZJb5v7wSZ9nvSsh/wJqtir+bQ/ qI5oPgpswgBLgXm/nweGA7EMtAeZvwJkzl0N/Wz/EVhkIa3X0yZmfcHmowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZypNFltvSFN1q4zr79AteKndl9MB8GA1UdIwQY MBaAFJb8MAB3f2t7RfA7bsgcHAEL+ZfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83NzZmNTgtYzlmYS00ZTJmLTlmZjEt NzU2ZDJhNmZjN2JjLzEvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83NzZmNTgtYzlmYS00ZTJmLTlmZjEtNzU2ZDJhNmZjN2Jj LzEvbHZ3d0FIZF9hM3RGOER0dXlCd2NBUXY1bDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcz8caq5B hiKcYGzUocTCWl3vCsTCqnhu9PTVUk8ZysdY33Buk0ye+JDhCLXxDEyXpAf8w6KG K/WPLck56hvEShqKS0440qFvWF4O3j8q4NR/jZ3go6yzsxLPRARkBoURXPVKjBU0 rlVUKc3LFziVjG9aFXDdipRvkOJk5x0WCeRJhQB3qeliTl0HkebVsuBmAtmVvj1a 1n3FDJa5TVRjMElYSrXlAoIQdYVNXKGpiPPi5TiPQ4/xcCNN/SYimrvQ6TmOqucW FlW8pRFNljua5BwM/Y+7aMkM2jucGN4GM7qKnOnhMZIldCQh+l/t265IPqQ1wpUv PnAFxHOwqTTZFw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:10 2025 by rpki-client