This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json) Hash identifier: P6MWfdEIkXrkoNyZtcgudpYl5mIf08y3FF1xJvbYb3I= Subject key identifier: CA:E8:29:A6:7C:BD:DC:C5:CA:30:15:7C:D3:86:6F:41:7C:F4:CD:F8 Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Certificate serial: 019AF2E4435ABA43D6CBAE086C98363DDE9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft Manifest number: 0EAC Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa (hash: RLZOdnWaQDPusAoiFOrFgYMm/8VCugzHSsyaalfrB2g=) 2: RNaLWw_7VynkakNVv0RB26fPjUY.roa (hash: n49s4ueNWoQ0BCZzERKKYtGr3mJSZHvzJ3B7Ky6mJzA=) 3: _41gquUxogOoHWCKFYbWi_vSDC8.roa (hash: M2zvcs7Z6gkeVy1BDzE0VTUjwyY3RsEd2ac2dCksOEU=) 4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: rFV6WBpAjDRDtWG74jstkN1WXFDLtLUh35lprG3CT4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:43:5a:ba:43:d6:cb:ae:08:6c:98:36:3d:de:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=cae829a67cbddcc5ca30157cd3866f417cf4cdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:d1:40:38:2b:2f:2e:8e:a4:ab:c3:2b:b8: 38:1b:bf:c7:3a:1d:fd:b0:56:03:dd:c2:9a:93:f3: 8d:86:a0:72:2d:b4:4d:d0:08:55:79:59:a9:6a:6e: 03:6f:38:fc:85:60:5c:cd:b0:c3:57:45:57:7a:36: 0b:70:17:14:11:0a:2d:c3:46:f5:ee:5a:4a:eb:96: 84:a6:df:13:4b:6f:2a:8f:c8:67:bd:01:fb:b5:ac: 21:c3:4e:2b:25:29:0d:89:1a:da:10:26:02:eb:32: b0:d0:5f:c9:4d:15:6c:ef:42:cc:a7:89:41:af:56: 9a:5d:53:f1:01:c9:47:4d:14:ac:08:1a:28:96:5c: 40:69:a4:f3:a7:98:e0:9b:71:c4:4b:72:0a:c1:0d: 9c:de:21:5c:2d:a1:9a:46:35:f0:8c:ad:a2:22:ae: 0c:64:02:0c:7c:15:72:c7:f2:4d:ce:bf:aa:1a:f7: 06:f9:16:b6:46:d5:10:df:90:5a:40:0a:d3:96:ef: a7:cd:d9:03:8a:8e:76:b4:2e:94:77:73:14:1b:51: 6c:e9:14:f5:b3:90:46:a3:74:45:ec:02:1b:de:eb: 14:a9:bc:ff:5d:80:10:23:17:73:c9:08:92:40:51: ba:06:94:d1:41:b4:8e:d7:07:fe:42:68:9b:19:1a: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:29:A6:7C:BD:DC:C5:CA:30:15:7C:D3:86:6F:41:7C:F4:CD:F8 X509v3 Authority Key Identifier: keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:85:5a:98:39:8a:ec:9a:af:d5:f9:0c:4e:8f:c4:55:0c:52: e8:82:fc:47:d1:61:d8:65:16:cd:18:28:f1:01:a2:7d:6f:27: 99:74:62:d2:36:91:fe:bc:d1:61:f7:ff:04:85:22:a2:67:cf: fb:61:96:11:ec:5e:c8:de:4d:8f:f3:43:e7:10:a1:af:c9:1b: 3b:f9:80:0f:ea:1b:f1:38:d2:06:dc:cb:9c:0d:65:09:76:4f: b6:84:27:b6:87:5b:f1:9c:72:3d:61:de:8a:8f:6e:de:2c:55: 77:88:4b:d1:aa:80:fc:90:f2:e4:78:e2:44:f5:ac:d8:f7:78: 22:4e:86:77:8f:e2:d5:24:ce:03:04:b7:f9:86:f3:a4:fb:a5: ab:35:dc:ea:1d:f4:b9:61:e0:ff:67:88:67:f4:5e:e0:e0:5a: 19:ce:78:44:8e:4d:27:a1:96:cd:cc:b4:77:3e:ba:0f:b9:02: cf:14:4e:87:61:50:e2:18:2a:91:6f:c9:39:37:e2:7a:72:38: 69:60:fb:89:83:e0:2d:a8:30:ed:28:8f:37:da:76:63:83:4b: c0:b3:27:fc:0c:b9:a1:e1:a9:8f:2b:c9:06:eb:76:da:32:a2: 54:bf:b1:0d:12:30:71:f9:cf:f8:cf:58:24:1d:7f:92:d2:1f: 53:a7:72:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5ENaukPWy64IbJg2Pd6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3 OTUyZDEwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EyhjYWU4MjlhNjdjYmRkY2M1Y2EzMDE1N2NkMzg2NmY0MTdjZjRjZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5TRQDgrLy6OpKvDK7g4G7/HOh39 sFYD3cKak/ONhqByLbRN0AhVeVmpam4Dbzj8hWBczbDDV0VXejYLcBcUEQotw0b1 7lpK65aEpt8TS28qj8hnvQH7tawhw04rJSkNiRraECYC6zKw0F/JTRVs70LMp4lB r1aaXVPxAclHTRSsCBoollxAaaTzp5jgm3HES3IKwQ2c3iFcLaGaRjXwjK2iIq4M ZAIMfBVyx/JNzr+qGvcG+Ra2RtUQ35BaQArTlu+nzdkDio52tC6Ud3MUG1Fs6RT1 s5BGo3RF7AIb3usUqbz/XYAQIxdzyQiSQFG6BpTRQbSO1wf+QmibGRrIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMroKaZ8vdzFyjAVfNOGb0F89M34MB8GA1UdIwQY MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt MGY1ZDM3OTdhMzI1LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1 LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIVamDmK 7Jqv1fkMTo/EVQxS6IL8R9Fh2GUWzRgo8QGifW8nmXRi0jaR/rzRYff/BIUiomfP +2GWEexeyN5Nj/ND5xChr8kbO/mAD+ob8TjSBtzLnA1lCXZPtoQntodb8ZxyPWHe io9u3ixVd4hL0aqA/JDy5HjiRPWs2Pd4Ik6Gd4/i1STOAwS3+YbzpPulqzXc6h30 uWHg/2eIZ/Re4OBaGc54RI5NJ6GWzcy0dz66D7kCzxROh2FQ4hgqkW/JOTfienI4 aWD7iYPgLagw7SiPN9p2Y4NLwLMn/Ay5oeGpjyvJBut22jKiVL+xDRIwcfnP+M9Y JB1/ktIfU6dyuw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:02 2025 by rpki-client