This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json) Hash identifier: T48tAujgvUmb5w4LYMs9Sp09RJHIqi99j1/4zNsNJhE= Subject key identifier: A4:0D:11:04:C3:83:B1:E0:C6:7D:EA:07:67:56:73:A6:55:27:83:66 Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Certificate serial: 019B3FECCACD07FC91F4C503F88F4C94168A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft Manifest number: 0721 Signing time: Sun 21 Dec 2025 08:00:41 +0000 Manifest this update: Sun 21 Dec 2025 08:00:41 +0000 Manifest next update: Mon 22 Dec 2025 08:00:41 +0000 Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: t6BegiGd7WhynwKLA5iM3Cbv/sDzwVsBzdqE2KetXn8=) 2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ca:cd:07:fc:91:f4:c5:03:f8:8f:4c:94:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Validity Not Before: Dec 21 08:00:41 2025 GMT Not After : Dec 22 08:00:41 2025 GMT Subject: CN=a40d1104c383b1e0c67dea07675673a655278366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:12:c4:2b:8d:3b:15:54:08:fc:2b:ac:55: 9c:73:ba:a4:9b:df:2b:52:23:44:af:23:4a:7f:81: 72:04:2e:65:fa:18:b8:82:0d:16:88:a8:a8:54:88: 9d:10:d4:04:9c:ba:1b:98:e4:8a:98:b7:2c:08:55: 4a:cd:26:d7:42:17:ad:25:70:1c:d4:04:57:42:9f: 02:81:32:4d:f4:0f:80:4f:3f:2b:98:9f:2f:83:3e: b5:61:1a:1b:0a:d3:58:07:03:3a:a9:e4:be:f5:8f: 29:d5:ab:3a:15:51:20:83:8b:e3:ee:2a:a2:d4:6a: 0f:1d:aa:f6:4d:09:1c:87:2c:07:27:25:c7:35:79: 75:a0:54:15:45:f2:12:f2:b8:81:29:91:b9:3a:90: ca:67:ff:71:9d:05:7e:20:3c:3b:9a:2f:d6:38:c6: 18:e0:97:e2:47:36:ac:dd:20:54:b5:ec:c5:73:90: 88:5b:61:5b:db:5a:d0:59:5c:18:f5:1d:1a:67:1c: bc:81:99:f4:f4:1a:74:6d:7b:8a:81:44:57:a0:7b: 77:cf:34:f7:a5:fe:01:93:5c:03:a1:7a:9c:9b:db: 23:6a:e5:94:6e:3e:f8:50:29:72:24:ac:0d:83:8a: d5:16:a3:4e:97:be:c0:70:d4:e4:77:62:86:ac:95: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0D:11:04:C3:83:B1:E0:C6:7D:EA:07:67:56:73:A6:55:27:83:66 X509v3 Authority Key Identifier: keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:52:1e:02:8a:3c:9e:a1:56:fe:49:57:c4:26:59:b1:59:74: e2:6b:96:ae:c2:35:96:fb:22:6b:77:e7:42:10:96:f3:21:2c: c8:df:76:a5:32:f5:2a:37:15:c3:fd:c9:5d:25:60:74:96:53: 9f:8e:3b:2b:42:fc:e3:64:7b:4c:bb:db:12:ce:aa:77:a4:47: 85:02:15:bd:db:e3:ea:a4:e7:ce:1b:d2:04:c8:98:7d:58:a8: f9:70:13:3f:d5:95:65:38:75:43:95:60:59:76:c9:b2:c9:9a: 7f:6f:01:13:d2:08:36:3a:2e:79:8a:ff:4d:9f:5a:ca:ae:1a: e2:63:e5:b4:e8:a5:8d:53:7e:c9:6d:ca:33:af:b8:e3:1d:c7: 11:2c:1b:4e:dd:a9:a3:6b:12:5e:ed:2c:35:73:68:8d:86:f2: e5:97:55:97:c8:56:3f:89:e6:f5:ab:5d:2c:51:47:1b:52:65: a1:35:f1:e3:85:b0:34:ea:2a:da:b8:fb:b7:ce:82:1e:7f:11: 60:9b:9e:0f:f5:a5:85:24:ee:21:d5:20:b2:ec:96:98:6b:39: 1a:b2:8f:bd:3a:65:db:3e:29:da:47:3c:8d:1b:74:6c:41:36: b5:37:8b:d2:e5:64:2e:1c:e9:11:7e:5e:e1:5f:a4:f0:f1:e1: a5:eb:11:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7MrNB/yR9MUD+I9MlBaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmJkMWJmY2EyZjhhMTU3OGZhYWI1YjEwYzBmYzM1NTU2 MWNjNjUwHhcNMjUxMjIxMDgwMDQxWhcNMjUxMjIyMDgwMDQxWjAzMTEwLwYDVQQD EyhhNDBkMTEwNGMzODNiMWUwYzY3ZGVhMDc2NzU2NzNhNjU1Mjc4MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0cSxCuNOxVUCPwrrFWcc7qkm98r UiNEryNKf4FyBC5l+hi4gg0WiKioVIidENQEnLobmOSKmLcsCFVKzSbXQhetJXAc 1ARXQp8CgTJN9A+ATz8rmJ8vgz61YRobCtNYBwM6qeS+9Y8p1as6FVEgg4vj7iqi 1GoPHar2TQkchywHJyXHNXl1oFQVRfIS8riBKZG5OpDKZ/9xnQV+IDw7mi/WOMYY 4JfiRzas3SBUtezFc5CIW2Fb21rQWVwY9R0aZxy8gZn09Bp0bXuKgURXoHt3zzT3 pf4Bk1wDoXqcm9sjauWUbj74UClyJKwNg4rVFqNOl77AcNTkd2KGrJVNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQNEQTDg7Hgxn3qB2dWc6ZVJ4NmMB8GA1UdIwQY MBaAFJa70b/KL4oVePqrWxDA/DVVYcxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMt YTg3ZTI4NzJhZDhhLzEvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMtYTg3ZTI4NzJhZDhh LzEvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1IeAoo8 nqFW/klXxCZZsVl04muWrsI1lvsia3fnQhCW8yEsyN92pTL1KjcVw/3JXSVgdJZT n447K0L842R7TLvbEs6qd6RHhQIVvdvj6qTnzhvSBMiYfVio+XATP9WVZTh1Q5Vg WXbJssmaf28BE9IINjoueYr/TZ9ayq4a4mPltOiljVN+yW3KM6+44x3HESwbTt2p o2sSXu0sNXNojYby5ZdVl8hWP4nm9atdLFFHG1JloTXx44WwNOoq2rj7t86CHn8R YJueD/WlhSTuIdUgsuyWmGs5GrKPvTpl2z4p2kc8jRt0bEE2tTeL0uVkLhzpEX5e 4V+k8PHhpesRhA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:38:24 2025 by rpki-client