This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json) Hash identifier: ElAXyISZ/ntVacPWjmFmgXKHFbITK6110Phksl7QD+4= Subject key identifier: 11:A5:13:36:D1:D4:16:EC:1D:70:A9:40:8E:63:47:3C:DF:AE:E0:18 Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784 Certificate serial: 019AF3F791359983998E7E12A46D06D6DBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft Manifest number: 1487 Signing time: Sat 06 Dec 2025 14:01:19 +0000 Manifest this update: Sat 06 Dec 2025 14:01:19 +0000 Manifest next update: Sun 07 Dec 2025 14:01:19 +0000 Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: mxLknOH2G9uDNiyLYiyYkJvzLKfb3I3OU5OO8A/Try8=) 2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:91:35:99:83:99:8e:7e:12:a4:6d:06:d6:db:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784 Validity Not Before: Dec 6 14:01:19 2025 GMT Not After : Dec 7 14:01:19 2025 GMT Subject: CN=11a51336d1d416ec1d70a9408e63473cdfaee018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:5c:28:a7:d0:13:a2:65:45:6a:2d:35:ba: a6:fb:7e:a6:6e:d8:0d:ae:1d:ca:12:b2:15:b5:25: 2b:34:a0:cd:3f:14:fe:d4:fc:c4:4f:26:fa:72:58: d3:f1:b2:37:b0:ef:1a:22:2b:bd:42:18:ad:24:fc: 13:35:00:15:78:2a:aa:7d:d8:cf:66:b5:35:1c:04: 68:82:6a:b3:88:1a:c4:18:9a:35:29:51:cf:19:a9: 06:14:66:34:59:72:3a:6e:a2:cf:c1:f3:aa:47:d6: 19:2b:b1:af:e0:11:8b:4b:ca:37:d0:74:c9:71:fd: 19:db:29:c6:75:7b:f6:3e:ee:c9:e3:ed:1d:4f:4a: 5e:4a:33:a0:74:1c:7e:d3:e5:80:ff:66:8e:59:57: 35:6d:d0:1e:d9:a9:5b:ce:f3:bc:7e:6c:a0:59:a4: eb:f6:9e:a7:7c:f2:6a:27:7d:50:e5:82:c8:9b:39: 95:d6:69:03:d4:7c:e8:98:ff:c0:ba:48:db:45:88: 49:65:4a:1e:5f:38:6d:92:1b:e7:64:8b:a5:05:2e: d3:96:29:63:fe:c2:04:e3:ef:a7:21:a5:43:3d:50: af:1e:3c:97:1b:83:d3:e0:cc:f9:78:cf:1f:80:3b: dc:25:f5:65:67:25:e4:d0:f2:b7:52:14:5b:d9:6d: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:13:36:D1:D4:16:EC:1D:70:A9:40:8E:63:47:3C:DF:AE:E0:18 X509v3 Authority Key Identifier: keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fb:d6:5d:a5:20:16:47:7c:b2:26:84:f2:a3:dc:ca:d9:27: 0c:eb:3c:82:53:98:93:fb:04:16:46:43:b0:f7:5f:f7:05:1a: cd:3d:59:8c:89:84:5a:96:a1:4f:54:e7:2c:5b:49:d6:75:46: 10:98:01:3f:e2:14:4e:91:2a:bb:a2:3f:b1:eb:33:d0:98:12: 9f:29:3a:6b:6f:d3:06:99:ac:35:84:7e:47:60:2c:8e:94:fd: 0f:88:28:48:05:b5:cb:2a:41:e8:b2:3a:21:e1:84:95:8a:3b: 9c:6a:01:82:f6:4b:10:73:43:a8:a4:05:5e:73:63:46:1d:88: e3:ad:ec:8b:48:b9:43:8e:6e:a3:d6:59:fb:a8:bd:f3:17:6f: f6:70:df:43:b6:75:b1:03:c6:e6:7b:f6:27:b1:51:5f:e2:c1: cc:6a:c4:97:b3:c7:22:19:b3:66:db:a6:3e:aa:d7:96:8d:12: 94:75:6f:fc:87:0d:6e:da:f7:bc:2a:0d:c1:dd:c5:82:fe:51: 88:48:29:1f:51:87:29:ad:a2:dc:e2:3a:13:7e:e4:d3:17:72: f2:e2:1c:3b:2b:e6:ac:d5:35:f8:c2:e1:55:f0:c7:77:c3:50: f9:54:de:16:43:fc:27:fa:2a:27:82:10:f5:d9:bd:1c:ea:83: bc:98:1b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95E1mYOZjn4SpG0G1tviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2 NDE3ODQwHhcNMjUxMjA2MTQwMTE5WhcNMjUxMjA3MTQwMTE5WjAzMTEwLwYDVQQD EygxMWE1MTMzNmQxZDQxNmVjMWQ3MGE5NDA4ZTYzNDczY2RmYWVlMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxcKKfQE6JlRWotNbqm+36mbtgN rh3KErIVtSUrNKDNPxT+1PzETyb6cljT8bI3sO8aIiu9QhitJPwTNQAVeCqqfdjP ZrU1HARogmqziBrEGJo1KVHPGakGFGY0WXI6bqLPwfOqR9YZK7Gv4BGLS8o30HTJ cf0Z2ynGdXv2Pu7J4+0dT0peSjOgdBx+0+WA/2aOWVc1bdAe2albzvO8fmygWaTr 9p6nfPJqJ31Q5YLImzmV1mkD1HzomP/AukjbRYhJZUoeXzhtkhvnZIulBS7Tlilj /sIE4++nIaVDPVCvHjyXG4PT4Mz5eM8fgDvcJfVlZyXk0PK3UhRb2W0CtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGlEzbR1BbsHXCpQI5jRzzfruAYMB8GA1UdIwQY MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt NDkwNjFmZmZkMDJhLzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPvWXaUg Fkd8siaE8qPcytknDOs8glOYk/sEFkZDsPdf9wUazT1ZjImEWpahT1TnLFtJ1nVG EJgBP+IUTpEqu6I/sesz0JgSnyk6a2/TBpmsNYR+R2AsjpT9D4goSAW1yypB6LI6 IeGElYo7nGoBgvZLEHNDqKQFXnNjRh2I463si0i5Q45uo9ZZ+6i98xdv9nDfQ7Z1 sQPG5nv2J7FRX+LBzGrEl7PHIhmzZtumPqrXlo0SlHVv/IcNbtr3vCoNwd3Fgv5R iEgpH1GHKa2i3OI6E37k0xdy8uIcOyvmrNU1+MLhVfDHd8NQ+VTeFkP8J/oqJ4IQ 9dm9HOqDvJgbtw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:52 2025 by rpki-client