This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft File: lvMFpB83TbAVgTN3CNHHnr6nlxw.mft (raw, json) Hash identifier: ias6+8GUBaEK5xmSUawSEPsnFWdCfxUqJIbhrUVCBps= Subject key identifier: AD:35:5F:E3:10:7A:FA:D1:99:5A:7B:B4:33:41:5D:0B:4F:D6:04:CD Authority key identifier: 96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C Certificate issuer: /CN=96f305a41f374db01581337708d1c79ebea7971c Certificate serial: 019AF12DCDBA61133FF74DBD6628EBF535C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft Manifest number: 05E3 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: lvMFpB83TbAVgTN3CNHHnr6nlxw.crl (hash: n813efHw0FQKrpZXhyuvlPW2namOBmCK/XH3x8gOrqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cd:ba:61:13:3f:f7:4d:bd:66:28:eb:f5:35:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f305a41f374db01581337708d1c79ebea7971c Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=ad355fe3107afad1995a7bb433415d0b4fd604cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:fa:0b:09:6a:77:1d:89:f4:70:0e:c1:b2: 8d:fe:97:45:fe:27:14:d2:8c:03:f3:1f:5b:7a:55: d2:ed:e6:d3:6f:78:3e:6f:6d:7e:db:74:99:be:4c: d4:ee:ad:10:62:c4:9c:4b:68:d1:b2:69:d7:02:69: 8b:0c:62:58:28:c7:7d:30:01:44:a0:7e:cd:02:a7: e0:3c:ee:d9:a6:ae:7f:43:ca:e2:2d:ba:2c:7a:62: c0:3c:78:1b:3e:78:a2:e8:9b:f1:25:25:9c:d7:95: eb:9b:53:da:e7:0b:a3:aa:61:7c:c2:94:46:6a:1c: 51:9b:95:2c:11:04:41:a9:1d:e8:23:5a:06:bb:f8: 5c:17:72:76:ad:d3:cb:74:ad:6d:04:7f:27:6d:e1: 15:bc:5d:a7:49:96:f0:2e:da:8f:3a:99:ce:da:ce: e4:44:a5:27:b2:21:d5:e6:a0:4d:73:eb:9a:79:b2: 5d:e2:f3:4c:a5:3e:cc:7e:a6:7c:e0:a3:f7:f9:98: 29:5a:5e:35:a6:d3:af:fd:87:ce:e6:52:d2:24:94: 63:b2:8d:8c:cf:d1:eb:86:58:91:6d:83:32:b3:e9: 7c:62:1b:cb:5c:38:ff:10:7e:f5:83:5a:b7:ac:be: c3:5f:2d:56:38:14:49:af:99:9a:0c:ae:55:bc:bc: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:5F:E3:10:7A:FA:D1:99:5A:7B:B4:33:41:5D:0B:4F:D6:04:CD X509v3 Authority Key Identifier: keyid:96:F3:05:A4:1F:37:4D:B0:15:81:33:77:08:D1:C7:9E:BE:A7:97:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvMFpB83TbAVgTN3CNHHnr6nlxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3108a3-5b5d-48d2-853b-f12b6ac5a2b2/1/lvMFpB83TbAVgTN3CNHHnr6nlxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:55:45:d5:b5:f8:6f:c7:64:a4:f2:cc:8e:df:de:b0:b3:4c: 1a:b2:f8:f2:bb:63:be:24:6e:44:00:99:59:bb:72:ab:db:d0: 5b:c3:bf:ab:3b:e4:52:83:55:45:be:65:34:ad:95:1c:b3:b7: a0:e5:04:ea:13:6b:6f:48:9b:0d:db:56:54:3d:9b:a7:2b:58: 0a:05:a7:5e:b1:f3:7d:c8:8e:f2:68:5e:6e:45:b0:64:9d:05: a1:13:4c:72:d9:59:06:c2:91:33:79:cc:48:79:6e:82:4b:a8: 25:fb:89:dd:ce:c8:59:3c:69:29:29:37:30:e6:3c:51:c8:5e: 6b:25:48:c3:55:bb:49:1e:fc:45:e5:1b:3f:ed:1c:48:9b:ad: 34:49:ee:94:ec:f0:1e:cd:73:3a:27:8a:87:d8:6a:46:14:bf: fd:39:0f:c7:db:80:e5:67:c6:f5:0d:4d:32:9a:f6:f2:af:7f: 9b:c0:49:3a:59:05:30:e0:76:9f:be:70:5e:fb:46:d7:3f:2d: 11:ce:8d:7d:4c:78:ac:b8:71:69:58:c5:45:41:08:77:f3:36: 72:c5:99:0f:07:a6:0d:66:00:f3:0c:7a:a7:29:71:e9:53:fb: 6d:9f:7a:96:87:92:00:a9:2e:b7:0a:60:73:50:bb:42:20:fb: 5d:89:eb:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLc26YRM/9029Zijr9TXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjMwNWE0MWYzNzRkYjAxNTgxMzM3NzA4ZDFjNzllYmVh Nzk3MWMwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EyhhZDM1NWZlMzEwN2FmYWQxOTk1YTdiYjQzMzQxNWQwYjRmZDYwNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujD6Cwlqdx2J9HAOwbKN/pdF/icU 0owD8x9belXS7ebTb3g+b21+23SZvkzU7q0QYsScS2jRsmnXAmmLDGJYKMd9MAFE oH7NAqfgPO7Zpq5/Q8riLbosemLAPHgbPnii6JvxJSWc15Xrm1Pa5wujqmF8wpRG ahxRm5UsEQRBqR3oI1oGu/hcF3J2rdPLdK1tBH8nbeEVvF2nSZbwLtqPOpnO2s7k RKUnsiHV5qBNc+uaebJd4vNMpT7MfqZ84KP3+ZgpWl41ptOv/YfO5lLSJJRjso2M z9HrhliRbYMys+l8YhvLXDj/EH71g1q3rL7DXy1WOBRJr5maDK5VvLyhNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK01X+MQevrRmVp7tDNBXQtP1gTNMB8GA1UdIwQY MBaAFJbzBaQfN02wFYEzdwjRx56+p5ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZNRnBCODNUYkFWZ1ROM0NOSEhucjZubHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zMTA4YTMtNWI1ZC00OGQyLTg1M2It ZjEyYjZhYzVhMmIyLzEvbHZNRnBCODNUYkFWZ1ROM0NOSEhucjZubHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zMTA4YTMtNWI1ZC00OGQyLTg1M2ItZjEyYjZhYzVhMmIy LzEvbHZNRnBCODNUYkFWZ1ROM0NOSEhucjZubHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFVF1bX4 b8dkpPLMjt/esLNMGrL48rtjviRuRACZWbtyq9vQW8O/qzvkUoNVRb5lNK2VHLO3 oOUE6hNrb0ibDdtWVD2bpytYCgWnXrHzfciO8mhebkWwZJ0FoRNMctlZBsKRM3nM SHlugkuoJfuJ3c7IWTxpKSk3MOY8UcheayVIw1W7SR78ReUbP+0cSJutNEnulOzw Hs1zOieKh9hqRhS//TkPx9uA5WfG9Q1NMpr28q9/m8BJOlkFMOB2n75wXvtG1z8t Ec6NfUx4rLhxaVjFRUEId/M2csWZDwemDWYA8wx6pylx6VP7bZ96loeSAKkutwpg c1C7QiD7XYnrzg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:42 2025 by rpki-client