This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json) Hash identifier: E1xiupk+v0KOHHqJEpdsevatl4qTYP2+9mZgXwVxDDc= Subject key identifier: C4:99:D3:5B:48:CD:D8:16:81:EF:B8:B7:B3:2A:5B:72:70:66:A5:9B Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Certificate serial: 019AF31B787194B0CE7392D5D5100D0498CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft Manifest number: 0FE4 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=) 2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: 1ROzw7M2VVNG2Sk2/1fZ28tLEEVerTGsAkyG36XmitI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:78:71:94:b0:ce:73:92:d5:d5:10:0d:04:98:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=c499d35b48cdd81681efb8b7b32a5b727066a59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:04:1a:3e:cb:df:b4:e9:de:c8:f9:bf:1c: aa:30:91:82:c6:76:cd:89:b8:12:52:5b:c5:89:c6: 97:00:a3:01:13:43:e2:f0:95:41:5b:6e:7f:a0:b3: ea:79:53:f1:1f:cc:06:13:46:56:d6:7c:8a:1e:54: 88:e1:4a:ca:01:2b:00:91:33:8b:47:6a:f3:ab:ed: b0:de:74:71:2e:0f:d7:ff:7b:5b:06:67:bc:1a:c0: 0c:33:e5:c8:e1:a9:bd:c7:0b:cf:8a:4f:b9:35:b9: db:69:ae:d4:c6:96:9b:1d:5c:65:49:5c:de:56:8e: ba:63:94:35:e2:ac:55:1c:24:14:55:20:77:df:c4: c9:78:f8:69:c5:9e:58:17:2e:79:ee:be:f5:d2:2d: 9c:7e:da:c2:0b:ed:b9:db:cd:c6:8b:d2:83:a3:60: d9:0d:79:da:bc:63:39:d3:57:be:de:12:b7:0e:24: 3f:69:c3:92:03:b1:92:9d:45:62:54:cd:9f:35:f9: 2b:8a:44:df:fc:ac:b6:da:22:3a:0c:2c:e2:86:58: b3:de:89:07:20:e0:f0:b9:f5:f4:b4:42:5c:ac:37: 78:f5:15:cd:02:4f:97:38:c7:66:f1:1f:e4:71:7d: d6:35:63:6f:22:f1:ec:87:88:7b:22:96:f0:ee:49: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:D3:5B:48:CD:D8:16:81:EF:B8:B7:B3:2A:5B:72:70:66:A5:9B X509v3 Authority Key Identifier: keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:55:f6:45:cb:50:b5:77:fe:9f:97:43:78:6d:77:79:90:42: 3e:df:bb:87:70:8c:75:18:03:93:cb:46:1f:70:47:c6:af:3b: eb:9a:2d:da:3a:26:b9:fc:0f:bc:84:41:bf:2f:cf:35:73:30: 01:6b:d4:5d:26:da:66:a3:21:16:54:e7:89:89:bc:b8:ea:5f: ff:e6:cb:9c:1c:d4:92:9a:17:22:29:09:10:21:d2:91:c6:56: 42:35:b2:c2:5c:11:f8:fe:2b:de:8b:74:f4:9f:08:39:49:35: 56:b6:e4:cb:8c:69:e3:e1:66:a7:63:a5:33:f4:c3:89:1e:1e: df:51:42:a6:0e:a2:44:93:d8:66:6a:16:d0:d7:0a:e7:1d:91: 7e:a5:0b:0e:b7:7e:d3:34:ae:06:f3:9c:42:b9:16:7b:b5:ac: 5d:cc:2d:29:38:fe:7a:ee:d6:d9:3f:e5:4c:48:29:d8:4d:c1: 65:7b:43:39:67:2a:fe:9d:6e:1a:c2:60:71:cc:d8:ae:74:f3: 84:c4:13:96:40:04:8a:08:3f:2d:28:0b:84:cd:e5:c0:3a:d1: f2:7a:90:4f:92:4b:ad:87:07:73:77:18:4e:ee:ce:7d:91:c5: c7:14:c8:3a:69:b2:a8:a3:50:48:51:e6:af:d3:72:0b:36:67: 5e:5c:05:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3hxlLDOc5LV1RANBJjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj Y2ZlNzUwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EyhjNDk5ZDM1YjQ4Y2RkODE2ODFlZmI4YjdiMzJhNWI3MjcwNjZhNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9kEGj7L37Tp3sj5vxyqMJGCxnbN ibgSUlvFicaXAKMBE0Pi8JVBW25/oLPqeVPxH8wGE0ZW1nyKHlSI4UrKASsAkTOL R2rzq+2w3nRxLg/X/3tbBme8GsAMM+XI4am9xwvPik+5Nbnbaa7UxpabHVxlSVze Vo66Y5Q14qxVHCQUVSB338TJePhpxZ5YFy557r710i2cftrCC+25283Gi9KDo2DZ DXnavGM501e+3hK3DiQ/acOSA7GSnUViVM2fNfkrikTf/Ky22iI6DCzihliz3okH IODwufX0tEJcrDd49RXNAk+XOMdm8R/kcX3WNWNvIvHsh4h7Ipbw7klwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSZ01tIzdgWge+4t7MqW3JwZqWbMB8GA1UdIwQY MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVX2RctQ tXf+n5dDeG13eZBCPt+7h3CMdRgDk8tGH3BHxq8765ot2jomufwPvIRBvy/PNXMw AWvUXSbaZqMhFlTniYm8uOpf/+bLnBzUkpoXIikJECHSkcZWQjWywlwR+P4r3ot0 9J8IOUk1Vrbky4xp4+Fmp2OlM/TDiR4e31FCpg6iRJPYZmoW0NcK5x2RfqULDrd+ 0zSuBvOcQrkWe7WsXcwtKTj+eu7W2T/lTEgp2E3BZXtDOWcq/p1uGsJgcczYrnTz hMQTlkAEigg/LSgLhM3lwDrR8nqQT5JLrYcHc3cYTu7OfZHFxxTIOmmyqKNQSFHm r9NyCzZnXlwF8g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:03 2025 by rpki-client