This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json) Hash identifier: PWkBUifdebgOehsTdl2bjNEPEoYFnbh4DvWUxH1HPOk= Subject key identifier: 83:65:09:8D:B9:42:A7:D0:7E:1E:FD:91:DA:F0:2F:17:CC:CD:44:E8 Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Certificate serial: 019AF19AA9E2F37E28A5B8FE3842A4FED981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=) 2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: OBTzDNwyXGmarcCUWESKwXV+mSAc7EqW++JWnzDfSTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a9:e2:f3:7e:28:a5:b8:fe:38:42:a4:fe:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=8365098db942a7d07e1efd91daf02f17cccd44e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:55:1c:6f:46:ab:aa:3a:d0:7c:fe:35:76: 75:78:e4:fe:ef:81:66:7d:ca:ae:32:0f:ad:0b:bd: ee:25:06:89:f6:4e:98:23:ba:33:35:a1:00:53:8b: e1:84:cb:82:b1:a6:72:7d:0e:8c:e6:c6:c3:56:50: 9c:8c:2e:d8:09:98:b7:ca:85:fb:29:8c:77:31:ac: 57:2d:95:48:38:5b:73:1f:32:23:28:4b:eb:a2:ee: af:03:ed:3a:e7:5c:e2:bb:d7:b2:65:cf:5f:c8:63: f8:25:a8:e3:22:fc:bb:3a:8b:4c:32:12:45:8a:8c: 49:9b:a3:2e:2d:fe:34:0f:22:ac:9b:f9:62:c4:af: a7:db:c8:7c:ac:ba:65:f9:1b:21:ae:f1:99:cb:ff: 86:70:84:02:ac:c1:2f:93:61:eb:f5:4f:20:ab:74: 26:1f:ba:c3:de:f0:4f:e7:66:96:33:56:bd:93:a4: fa:f2:f6:f0:ed:e0:70:17:43:f0:f4:ef:64:dc:80: 53:7c:bd:68:90:d4:04:3e:01:ce:2f:f3:ae:6c:18: e3:92:cc:c6:3b:32:f5:1b:8d:49:3c:25:f1:8c:fa: bc:c2:43:cc:8b:72:ea:cb:d6:fa:cd:9c:81:76:37: cd:c1:e1:72:6e:a1:dc:93:fc:07:3b:27:22:58:2b: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:09:8D:B9:42:A7:D0:7E:1E:FD:91:DA:F0:2F:17:CC:CD:44:E8 X509v3 Authority Key Identifier: keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cf:06:b3:c0:a0:ab:6d:d8:e5:ff:03:46:30:51:e1:fc:7b: f0:49:da:2f:0f:2d:0c:bb:e3:ee:c7:79:15:76:84:b3:23:71: 3b:d9:d9:d0:22:f7:81:3b:a2:64:49:d6:46:1d:6c:6a:f3:d6: 0f:12:d3:64:e0:98:8a:a9:de:02:9b:f1:a4:f4:ac:06:64:f7: a9:e2:41:6f:78:aa:57:bb:d3:f7:7a:f4:fb:65:62:10:08:d6: 7b:9a:e1:c1:13:06:f3:45:9c:67:f4:a7:dd:07:f0:3c:7d:c5: c5:f8:f6:09:95:3d:10:44:cb:cc:af:d6:59:7c:f5:bf:82:fb: 4c:0c:1f:d6:3f:20:b8:a2:bc:25:f7:d1:52:55:d8:67:0c:e6: e8:f7:ed:4f:29:c1:4b:3d:ce:0c:8d:80:a9:52:de:4e:01:5f: b4:db:5c:d7:cd:bc:c6:24:8d:a3:ca:aa:cf:86:3e:e4:de:84: 90:d3:fb:a7:8d:a3:b9:2f:8c:bc:02:e5:fd:4a:b4:df:02:18: 81:ae:9d:a4:4b:c2:fc:e2:54:f9:05:9f:cc:98:c5:99:63:a1: 96:9c:d7:30:e0:63:99:4f:02:d5:f1:a9:8c:b8:1c:cd:08:44: 58:62:38:85:94:65:37:cb:75:39:c7:35:38:24:73:08:ba:1e: a6:b4:7b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqni834opbj+OEKk/tmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3 YWUxMDgwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD Eyg4MzY1MDk4ZGI5NDJhN2QwN2UxZWZkOTFkYWYwMmYxN2NjY2Q0NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgBVHG9Gq6o60Hz+NXZ1eOT+74Fm fcquMg+tC73uJQaJ9k6YI7ozNaEAU4vhhMuCsaZyfQ6M5sbDVlCcjC7YCZi3yoX7 KYx3MaxXLZVIOFtzHzIjKEvrou6vA+0651ziu9eyZc9fyGP4JajjIvy7OotMMhJF ioxJm6MuLf40DyKsm/lixK+n28h8rLpl+RshrvGZy/+GcIQCrMEvk2Hr9U8gq3Qm H7rD3vBP52aWM1a9k6T68vbw7eBwF0Pw9O9k3IBTfL1okNQEPgHOL/OubBjjkszG OzL1G41JPCXxjPq8wkPMi3Lqy9b6zZyBdjfNweFybqHck/wHOyciWCv27wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINlCY25QqfQfh79kdrwLxfMzUToMB8GA1UdIwQY MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA88Gs8Cg q23Y5f8DRjBR4fx78EnaLw8tDLvj7sd5FXaEsyNxO9nZ0CL3gTuiZEnWRh1savPW DxLTZOCYiqneApvxpPSsBmT3qeJBb3iqV7vT93r0+2ViEAjWe5rhwRMG80WcZ/Sn 3QfwPH3Fxfj2CZU9EETLzK/WWXz1v4L7TAwf1j8guKK8JffRUlXYZwzm6PftTynB Sz3ODI2AqVLeTgFftNtc1828xiSNo8qqz4Y+5N6EkNP7p42juS+MvALl/Uq03wIY ga6dpEvC/OJU+QWfzJjFmWOhlpzXMOBjmU8C1fGpjLgczQhEWGI4hZRlN8t1Occ1 OCRzCLoeprR7Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:55 2025 by rpki-client