This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json) Hash identifier: Sd6qID7KoLNsPpCbD1eEpMLe0dE4u0w7SJQk+Ss0K4Y= Subject key identifier: 96:5C:6A:A0:B3:B3:FD:FA:43:DF:BD:3E:25:CF:6E:C2:A2:6B:C2:52 Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Certificate serial: 019B32D64A768256CDF414E5FCD496BD6DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft Manifest number: 1005 Signing time: Thu 18 Dec 2025 19:01:03 +0000 Manifest this update: Thu 18 Dec 2025 19:01:03 +0000 Manifest next update: Fri 19 Dec 2025 19:01:03 +0000 Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=) 2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: v9uSeI23NNfSbSPOZQwT/rUUUFabAe2VgPpyAp+LKMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:4a:76:82:56:cd:f4:14:e5:fc:d4:96:bd:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Validity Not Before: Dec 18 19:01:03 2025 GMT Not After : Dec 19 19:01:03 2025 GMT Subject: CN=965c6aa0b3b3fdfa43dfbd3e25cf6ec2a26bc252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:fc:a0:ab:bc:30:22:8d:a8:a0:75:0e:9b: b8:94:6c:21:f5:00:85:87:1c:ab:e8:a0:16:db:d7: 03:30:79:01:04:67:8a:12:04:38:e6:9f:8b:e8:c4: 1c:e4:dc:f2:46:9d:73:41:64:24:c0:4e:e7:73:af: 53:29:be:31:26:82:51:ad:c8:b8:56:3b:1a:f2:d1: 43:45:5f:96:d8:9a:85:02:1c:a1:1d:95:a2:49:ae: 8a:a9:2b:20:69:46:a0:59:c1:c0:4a:a0:8f:18:e3: 43:f7:9a:59:39:af:e7:a7:94:fb:b0:d0:a9:9d:b0: cb:df:96:a0:1c:4b:d6:9c:5c:bf:38:5f:ab:79:59: 79:e7:03:20:2b:2f:bd:d0:9a:99:e3:19:38:7d:49: b4:14:ed:42:3f:c5:2a:a8:c2:18:b2:62:44:f9:05: 36:15:be:81:f3:41:73:3d:4a:eb:d8:6e:eb:6f:9d: b0:b4:39:29:b0:50:2d:ad:f4:a3:a0:44:ca:e6:6e: 17:b7:78:16:fb:29:b7:c0:d9:23:3f:8a:26:8b:94: 7c:6a:33:25:e9:ce:c5:6f:62:5e:d5:84:6a:95:be: 4f:3a:32:24:1e:5d:fa:cf:bb:d6:eb:fb:f1:87:78: b4:59:38:eb:48:a2:5e:51:20:7f:ee:d4:23:db:e7: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5C:6A:A0:B3:B3:FD:FA:43:DF:BD:3E:25:CF:6E:C2:A2:6B:C2:52 X509v3 Authority Key Identifier: keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ec:cf:b6:fb:e7:88:81:63:0f:5f:e2:20:89:a1:4f:9e:bd: f8:cd:15:41:a8:56:58:d5:3e:6c:e7:38:94:cb:dc:21:b0:b6: 15:0e:2c:70:91:3c:c6:9f:aa:56:82:81:e4:52:11:c5:00:2f: 08:ce:ea:da:5b:50:9d:17:df:86:14:99:59:2a:97:06:b2:61: 03:ac:8c:c5:58:f8:af:12:36:0a:0d:35:28:08:3a:63:74:d4: f4:5f:d7:34:34:df:6c:3b:4d:90:94:58:c2:5a:2e:30:39:d3: 55:30:6d:c5:4b:cb:5d:28:2f:1d:81:19:f6:d5:b3:75:ed:7e: 22:b1:d0:39:d7:a6:d5:46:31:69:70:e3:24:f3:e8:b5:ea:f5: a8:d3:15:a2:11:da:05:ba:7c:c1:84:90:45:75:4f:38:29:03: 1a:84:29:bb:b5:63:5c:89:3a:5b:72:62:6c:05:7b:b4:14:29: c1:2d:c2:34:fb:f2:c4:e4:59:9b:3c:43:a7:2d:f0:9c:43:a9: 3e:3d:f2:90:d0:09:08:66:bf:2a:db:2c:7b:42:ea:a2:9f:80: 13:02:3d:61:04:b9:3c:e2:f1:b9:84:05:ff:53:05:25:1c:7c: 57:35:b4:5d:0a:1d:d4:31:18:c1:d8:30:37:d1:b1:25:0e:6c: da:7a:bd:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1kp2glbN9BTl/NSWvW2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj Y2ZlNzUwHhcNMjUxMjE4MTkwMTAzWhcNMjUxMjE5MTkwMTAzWjAzMTEwLwYDVQQD Eyg5NjVjNmFhMGIzYjNmZGZhNDNkZmJkM2UyNWNmNmVjMmEyNmJjMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgb8oKu8MCKNqKB1Dpu4lGwh9QCF hxyr6KAW29cDMHkBBGeKEgQ45p+L6MQc5NzyRp1zQWQkwE7nc69TKb4xJoJRrci4 Vjsa8tFDRV+W2JqFAhyhHZWiSa6KqSsgaUagWcHASqCPGOND95pZOa/np5T7sNCp nbDL35agHEvWnFy/OF+reVl55wMgKy+90JqZ4xk4fUm0FO1CP8UqqMIYsmJE+QU2 Fb6B80FzPUrr2G7rb52wtDkpsFAtrfSjoETK5m4Xt3gW+ym3wNkjP4omi5R8ajMl 6c7Fb2Je1YRqlb5POjIkHl36z7vW6/vxh3i0WTjrSKJeUSB/7tQj2+fFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZcaqCzs/36Q9+9PiXPbsKia8JSMB8GA1UdIwQY MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauzPtvvn iIFjD1/iIImhT569+M0VQahWWNU+bOc4lMvcIbC2FQ4scJE8xp+qVoKB5FIRxQAv CM7q2ltQnRffhhSZWSqXBrJhA6yMxVj4rxI2Cg01KAg6Y3TU9F/XNDTfbDtNkJRY wlouMDnTVTBtxUvLXSgvHYEZ9tWzde1+IrHQOdem1UYxaXDjJPPoter1qNMVohHa Bbp8wYSQRXVPOCkDGoQpu7VjXIk6W3JibAV7tBQpwS3CNPvyxORZmzxDpy3wnEOp Pj3ykNAJCGa/Ktsse0Lqop+AEwI9YQS5POLxuYQF/1MFJRx8VzW0XQod1DEYwdgw N9GxJQ5s2nq9bg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:36 2025 by rpki-client