This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json) Hash identifier: EfGVrJjdZaX7uazrkyHRQnW+jWlNcez7PjSHtq01zqA= Subject key identifier: 3B:08:2E:7B:3F:6C:92:8A:28:52:FF:48:01:F1:D8:F0:CD:57:61:0A Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d Certificate serial: 019B2C66352701ABD1B64CAC5249EB214C6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft Manifest number: 11D8 Signing time: Wed 17 Dec 2025 13:00:54 +0000 Manifest this update: Wed 17 Dec 2025 13:00:54 +0000 Manifest next update: Thu 18 Dec 2025 13:00:54 +0000 Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=) 2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: P6G1ZQJetfd2QAmESgzgZql5NFoVvNwIUhABSQFs8Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:35:27:01:ab:d1:b6:4c:ac:52:49:eb:21:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d Validity Not Before: Dec 17 13:00:54 2025 GMT Not After : Dec 18 13:00:54 2025 GMT Subject: CN=3b082e7b3f6c928a2852ff4801f1d8f0cd57610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:ae:25:b0:bf:f0:ec:9e:79:32:41:3c:8b: 44:ad:eb:73:ee:db:5e:cd:30:8d:4e:07:66:11:eb: f1:70:4a:f4:33:2f:40:7d:53:4a:f4:4b:d7:c0:5d: 60:65:57:e5:c6:4d:05:9b:54:e6:98:ae:1c:b7:e8: 49:03:c4:b5:5f:17:0d:c0:c4:79:66:20:36:67:89: 04:8c:18:3e:77:c9:bd:fe:49:32:b3:8f:28:1f:02: ff:26:41:0f:c0:58:2a:5b:69:7e:00:39:80:8e:56: 2a:b8:41:89:6f:4e:a4:29:d8:9a:82:79:ae:27:a6: 27:8e:80:89:da:c3:39:1b:96:ce:fe:77:b0:00:c5: 74:3a:fd:1c:fe:94:7d:ce:a9:5d:50:7f:9c:26:6f: 1e:dd:84:02:af:e6:59:d3:a4:d6:ec:a0:25:a1:97: 0f:f4:c4:31:11:5b:01:d9:a7:33:e7:61:75:9a:47: 33:5c:37:7c:02:89:6d:f3:46:5d:4c:79:e9:5a:b6: 09:45:42:20:51:7f:93:cf:6f:5b:42:89:fc:36:84: c5:4f:4a:8c:39:07:3a:33:06:d6:59:2c:7e:6c:19: 73:51:58:59:ac:5b:cb:43:9c:66:d4:80:ec:4f:fd: ab:4c:85:53:df:09:f5:52:6b:1d:29:79:ae:56:9a: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:2E:7B:3F:6C:92:8A:28:52:FF:48:01:F1:D8:F0:CD:57:61:0A X509v3 Authority Key Identifier: keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:dd:3d:6c:e6:4f:de:1f:34:cc:39:de:96:3f:cc:61:b8:a5: bd:95:ad:e5:aa:72:d6:2a:36:45:d6:7a:62:92:63:d0:2a:d4: 19:de:b4:48:bb:c0:a5:3f:f3:67:a3:d3:05:05:5b:60:06:44: 9f:33:e6:02:a5:69:c6:ce:1b:32:4d:d2:14:8d:9f:48:6b:fc: 67:6a:a7:d1:49:61:2c:c1:64:bf:de:4e:e6:76:c8:e1:26:de: cf:f6:23:07:75:97:11:36:f6:3e:56:e7:34:21:b8:07:00:7f: 76:b8:a3:d8:94:82:4b:86:23:5c:c5:9e:3c:95:7a:29:ec:4c: ca:6a:2f:d8:03:52:ec:9a:47:c9:cb:9e:a7:21:05:0c:fc:7f: cf:dc:90:37:25:f9:0c:99:dc:56:c8:33:79:e4:6f:a4:4f:0c: 93:fe:4c:4b:70:28:a9:2d:d8:b8:72:ea:b1:ea:6a:3d:16:a7: 6a:cd:d9:07:d1:e3:2a:91:ce:ac:5f:21:cf:64:23:74:d4:26: ef:25:fe:74:90:73:56:cc:25:1f:96:63:5e:8a:ef:0d:ae:e7: 07:a7:32:36:03:14:b7:6e:c1:86:1b:d7:bc:63:79:88:cd:c5: 09:bf:ae:0e:dc:e1:a1:79:3c:bd:67:63:5b:a8:72:31:38:a2: b8:f2:31:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZjUnAavRtkysUknrIUxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTVjNGRkN2YyMTJmYzQ4OTZiZDBjOTcxODYwYzA1YjMw ZWViOGQwHhcNMjUxMjE3MTMwMDU0WhcNMjUxMjE4MTMwMDU0WjAzMTEwLwYDVQQD EygzYjA4MmU3YjNmNmM5MjhhMjg1MmZmNDgwMWYxZDhmMGNkNTc2MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlCuJbC/8OyeeTJBPItEretz7tte zTCNTgdmEevxcEr0My9AfVNK9EvXwF1gZVflxk0Fm1TmmK4ct+hJA8S1XxcNwMR5 ZiA2Z4kEjBg+d8m9/kkys48oHwL/JkEPwFgqW2l+ADmAjlYquEGJb06kKdiagnmu J6YnjoCJ2sM5G5bO/newAMV0Ov0c/pR9zqldUH+cJm8e3YQCr+ZZ06TW7KAloZcP 9MQxEVsB2acz52F1mkczXDd8Aolt80ZdTHnpWrYJRUIgUX+Tz29bQon8NoTFT0qM OQc6MwbWWSx+bBlzUVhZrFvLQ5xm1IDsT/2rTIVT3wn1UmsdKXmuVpr9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsILns/bJKKKFL/SAHx2PDNV2EKMB8GA1UdIwQY MBaAFC1VxN1/IS/EiWvQyXGGDAWzDuuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2Qt ODBkMzVlOWQzOWVhLzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2QtODBkMzVlOWQzOWVh LzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlt09bOZP 3h80zDnelj/MYbilvZWt5apy1io2RdZ6YpJj0CrUGd60SLvApT/zZ6PTBQVbYAZE nzPmAqVpxs4bMk3SFI2fSGv8Z2qn0UlhLMFkv95O5nbI4Sbez/YjB3WXETb2Plbn NCG4BwB/drij2JSCS4YjXMWePJV6KexMymov2ANS7JpHycuepyEFDPx/z9yQNyX5 DJncVsgzeeRvpE8Mk/5MS3AoqS3YuHLqsepqPRanas3ZB9HjKpHOrF8hz2QjdNQm 7yX+dJBzVswlH5ZjXorvDa7nB6cyNgMUt27BhhvXvGN5iM3FCb+uDtzhoXk8vWdj W6hyMTiiuPIxMA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:43:26 2025 by rpki-client