This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json) Hash identifier: hFtp1pvXqnv7W37VMV2OgcxvTez+Eb4cBq6T7DeFtzY= Subject key identifier: FA:D1:D6:94:98:38:1E:8F:2E:17:C0:BD:DD:FB:72:4F:A2:A4:76:48 Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Certificate serial: 019AF208DC61AEDB5EB99487EC099A2B945F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft Manifest number: 09D7 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: WdQO5JVMz5iEd/qKb6YthM5oR7sI6lA13qhj/cfISNo=) 2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:61:ae:db:5e:b9:94:87:ec:09:9a:2b:94:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=fad1d69498381e8f2e17c0bdddfb724fa2a47648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:87:e6:92:1b:04:da:2b:be:ac:e4:db:fa: fa:a3:b0:74:7e:b9:8c:f1:42:ec:75:4e:c6:73:e3: e0:29:6e:bb:28:48:d5:fd:6b:06:c6:5b:a7:25:4c: 36:8e:c1:66:70:9f:c8:71:fd:96:68:32:ed:38:12: 81:9b:e3:88:bf:06:1f:27:83:12:ed:ac:03:4a:3c: a6:5c:b6:6b:c1:60:b6:32:17:ed:af:2c:95:05:c7: d8:93:b6:33:da:7c:1e:58:3f:a7:04:50:6c:f2:38: 61:8c:9e:ee:9a:76:70:5a:72:cc:62:fa:b0:53:5a: 37:94:c0:e5:97:cf:af:76:25:07:5f:b8:a6:6d:48: 93:29:b6:f2:f2:b7:e8:2b:32:63:da:1f:a7:76:b1: 4f:37:5e:e9:10:bf:30:91:cc:28:49:b7:d6:f5:16: 19:1d:63:6f:28:68:dc:dc:03:e9:ff:35:54:7c:d1: 87:6c:97:04:26:15:de:24:a2:9c:26:e2:f2:9e:00: 3f:eb:1a:7e:b7:b3:fc:1c:bd:e8:7e:f2:7d:4a:50: b4:b4:21:0f:a5:c7:dd:44:be:65:48:83:b4:7a:3a: f9:54:33:a2:96:8d:ea:9c:7c:da:3d:ce:71:d6:ae: 39:28:55:b0:be:80:ab:12:9f:15:db:55:61:7f:62: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D1:D6:94:98:38:1E:8F:2E:17:C0:BD:DD:FB:72:4F:A2:A4:76:48 X509v3 Authority Key Identifier: keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:fa:3c:b9:60:de:ae:8f:8a:70:17:77:d3:7f:5d:e9:ea: 7e:49:e8:ef:ea:9d:44:39:17:f0:19:4d:4a:67:6e:f5:bf:2a: a9:6c:70:8a:a8:3e:6e:be:51:1c:48:b3:50:1b:5b:ef:0d:cb: ee:96:15:aa:0e:a3:f9:9d:f4:b0:c9:97:af:2b:9c:f4:54:51: f5:e9:07:87:72:59:55:b0:1b:c1:10:cc:fa:f7:37:2e:78:d7: fb:ff:fd:36:e3:a5:71:88:16:da:16:91:02:76:97:46:6c:b7: 54:10:b6:14:03:2e:73:4a:6b:67:0c:46:bb:68:8f:24:d1:6a: 45:34:a3:98:07:5e:3a:e5:54:88:a4:5f:c0:2e:cd:48:74:d9: 7d:8a:89:51:1b:ea:49:0d:14:83:db:2f:7b:b9:97:bc:24:81: e8:8b:e0:b6:a0:4b:3e:c9:a1:d3:f6:af:77:bf:7c:dd:33:48: 42:6e:97:47:ee:8f:11:e2:28:0e:3a:cb:22:86:fc:00:42:53: cb:2b:4c:3b:7a:43:1d:76:42:7c:89:14:1e:64:f1:02:d4:9b: 8f:06:fd:9b:68:6d:14:a8:57:f8:13:3e:ff:00:a3:36:31:bd: 22:c1:74:56:1e:41:dc:3e:8c:ce:a8:06:2d:a1:c1:59:5d:a3: 47:cf:11:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNxhrtteuZSH7AmaK5RfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi ZDc0MzMwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhmYWQxZDY5NDk4MzgxZThmMmUxN2MwYmRkZGZiNzI0ZmEyYTQ3NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmeH5pIbBNorvqzk2/r6o7B0frmM 8ULsdU7Gc+PgKW67KEjV/WsGxlunJUw2jsFmcJ/Icf2WaDLtOBKBm+OIvwYfJ4MS 7awDSjymXLZrwWC2MhftryyVBcfYk7Yz2nweWD+nBFBs8jhhjJ7umnZwWnLMYvqw U1o3lMDll8+vdiUHX7imbUiTKbby8rfoKzJj2h+ndrFPN17pEL8wkcwoSbfW9RYZ HWNvKGjc3APp/zVUfNGHbJcEJhXeJKKcJuLyngA/6xp+t7P8HL3ofvJ9SlC0tCEP pcfdRL5lSIO0ejr5VDOilo3qnHzaPc5x1q45KFWwvoCrEp8V21Vhf2IikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrR1pSYOB6PLhfAvd37ck+ipHZIMB8GA1UdIwQY MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1L6PLlg 3q6PinAXd9N/Xenqfkno7+qdRDkX8BlNSmdu9b8qqWxwiqg+br5RHEizUBtb7w3L 7pYVqg6j+Z30sMmXryuc9FRR9ekHh3JZVbAbwRDM+vc3LnjX+//9NuOlcYgW2haR AnaXRmy3VBC2FAMuc0prZwxGu2iPJNFqRTSjmAdeOuVUiKRfwC7NSHTZfYqJURvq SQ0Ug9sve7mXvCSB6IvgtqBLPsmh0/avd7983TNIQm6XR+6PEeIoDjrLIob8AEJT yytMO3pDHXZCfIkUHmTxAtSbjwb9m2htFKhX+BM+/wCjNjG9IsF0Vh5B3D6MzqgG LaHBWV2jR88RuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:43 2025 by rpki-client