This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: mt9SY0hRFGZLNXlTR/oFbRo/kzvqBpz5fvyAZKDgAHw=
Subject key identifier: B0:81:65:E2:25:46:A6:FB:CC:C9:23:D9:E2:5C:1A:DA:73:16:AD:99
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 019AF08817C1A42B22F122B839BB796420FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 11B9
Signing time: Fri 05 Dec 2025 22:00:41 +0000
Manifest this update: Fri 05 Dec 2025 22:00:41 +0000
Manifest next update: Sat 06 Dec 2025 22:00:41 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: LdMoQFXqUeMPY0e2HEis0a7SRjsmMcBI21yu7eSvjJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:88:17:c1:a4:2b:22:f1:22:b8:39:bb:79:64:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Dec 5 22:00:41 2025 GMT
Not After : Dec 6 22:00:41 2025 GMT
Subject: CN=b08165e22546a6fbccc923d9e25c1ada7316ad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:57:0e:b2:d7:4c:13:c7:46:46:7f:7d:f3:
ee:76:31:7c:50:3b:f2:0c:3a:20:af:4f:e0:19:9f:
18:b8:30:96:8f:fd:a2:f0:88:5a:06:80:99:20:2a:
cd:eb:44:6f:8c:2d:81:85:72:cf:90:40:46:ec:37:
38:81:a1:d3:d0:35:69:c3:8a:9f:32:74:9f:14:ba:
36:95:53:81:c3:60:7b:fc:d0:4f:5d:7c:49:9c:d9:
cc:ee:d3:97:15:15:57:3c:03:77:bf:27:10:bc:b9:
db:32:13:55:12:11:cd:82:de:3d:d3:59:60:15:2e:
d9:36:fe:16:ef:0e:45:22:f2:bb:48:33:7c:42:e7:
1d:d4:1e:45:67:31:5f:d4:5e:fe:c7:26:05:df:72:
5a:dd:e4:b1:87:0f:a3:02:bc:05:ca:43:b7:fa:ee:
92:1a:fb:fd:3b:6b:cc:78:1b:dd:c9:70:45:05:0f:
95:e6:3c:53:b7:77:39:e2:6a:28:85:1e:07:aa:9a:
b5:b0:19:72:27:ce:bd:d6:c6:98:b9:a4:44:52:d7:
3d:6c:28:a4:17:c0:f2:3a:7e:ab:cd:1c:ea:64:c6:
1d:52:6b:9e:4b:4c:bd:17:a8:1d:6d:4f:a4:fb:d3:
e7:c4:5e:30:f7:f0:21:df:a1:ba:f3:52:26:c5:3b:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:65:E2:25:46:A6:FB:CC:C9:23:D9:E2:5C:1A:DA:73:16:AD:99
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:02:60:9e:d5:db:87:ca:87:27:0a:ea:ec:69:01:32:c3:
40:bb:2d:cb:1b:08:92:5d:00:aa:32:23:49:4b:1c:71:cd:2a:
46:59:e3:67:7e:a7:cc:08:3b:19:f0:4f:80:80:09:bf:a0:12:
97:b7:a2:fb:87:4f:09:21:80:a8:13:9f:e8:3f:53:e0:07:93:
0c:5c:d4:0d:7f:d5:67:e6:b5:25:c0:fd:19:91:b9:93:da:89:
7a:55:c6:16:ef:83:b1:f2:96:67:e1:e1:d5:e9:85:0a:4a:cb:
f1:41:5d:a5:46:c5:f7:d2:42:d6:52:d4:2f:db:55:71:a9:72:
84:46:0c:04:5c:c8:99:4b:71:f7:96:19:a4:ef:2a:64:b0:a4:
1b:aa:48:bb:bb:67:9a:18:e4:16:8f:16:f6:ac:2f:52:6b:4f:
06:9f:70:89:6c:cc:76:5b:59:cd:04:15:ef:2e:95:49:6c:83:
dc:52:f9:ee:97:0b:39:86:0d:d3:49:49:83:06:0e:6e:97:aa:
5c:f6:8b:75:fa:bd:08:5c:d1:54:dd:f1:0b:52:5e:2e:15:86:
c6:80:e8:b9:25:85:2a:f0:10:c8:85:d1:c6:1d:48:50:ef:ca:
d0:6e:42:a6:dd:b8:7c:3c:5e:1e:2d:b3:d3:c1:2f:c0:a6:a3:
0b:40:a0:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwiBfBpCsi8SK4Obt5ZCD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTVjNGRkN2YyMTJmYzQ4OTZiZDBjOTcxODYwYzA1YjMw
ZWViOGQwHhcNMjUxMjA1MjIwMDQxWhcNMjUxMjA2MjIwMDQxWjAzMTEwLwYDVQQD
EyhiMDgxNjVlMjI1NDZhNmZiY2NjOTIzZDllMjVjMWFkYTczMTZhZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGBXDrLXTBPHRkZ/ffPudjF8UDvy
DDogr0/gGZ8YuDCWj/2i8IhaBoCZICrN60RvjC2BhXLPkEBG7Dc4gaHT0DVpw4qf
MnSfFLo2lVOBw2B7/NBPXXxJnNnM7tOXFRVXPAN3vycQvLnbMhNVEhHNgt4901lg
FS7ZNv4W7w5FIvK7SDN8Qucd1B5FZzFf1F7+xyYF33Ja3eSxhw+jArwFykO3+u6S
Gvv9O2vMeBvdyXBFBQ+V5jxTt3c54moohR4Hqpq1sBlyJ8691saYuaREUtc9bCik
F8DyOn6rzRzqZMYdUmueS0y9F6gdbU+k+9PnxF4w9/Ah36G681ImxTtt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCBZeIlRqb7zMkj2eJcGtpzFq2ZMB8GA1UdIwQY
MBaAFC1VxN1/IS/EiWvQyXGGDAWzDuuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2Qt
ODBkMzVlOWQzOWVhLzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2QtODBkMzVlOWQzOWVh
LzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVECYJ7V
24fKhycK6uxpATLDQLstyxsIkl0AqjIjSUsccc0qRlnjZ36nzAg7GfBPgIAJv6AS
l7ei+4dPCSGAqBOf6D9T4AeTDFzUDX/VZ+a1JcD9GZG5k9qJelXGFu+DsfKWZ+Hh
1emFCkrL8UFdpUbF99JC1lLUL9tVcalyhEYMBFzImUtx95YZpO8qZLCkG6pIu7tn
mhjkFo8W9qwvUmtPBp9wiWzMdltZzQQV7y6VSWyD3FL57pcLOYYN00lJgwYObpeq
XPaLdfq9CFzRVN3xC1JeLhWGxoDouSWFKvAQyIXRxh1IUO/K0G5Cpt24fDxeHi2z
08EvwKajC0Cg3w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:03 2025 by rpki-client