This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json) Hash identifier: nW1yFn7hbooji2mANuHJ9WSA183qXWGP06iHcQHI41U= Subject key identifier: AC:1E:9D:65:E3:6C:DD:09:C6:93:12:57:1D:53:70:9D:A6:0F:AD:B5 Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Certificate serial: 019B2F67FB3957FF337C5FDEF5CD9391A0D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft Manifest number: 064B Signing time: Thu 18 Dec 2025 03:01:42 +0000 Manifest this update: Thu 18 Dec 2025 03:01:42 +0000 Manifest next update: Fri 19 Dec 2025 03:01:42 +0000 Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: kQJL67QLlx2+mGi6J/fOmBSauFc3dLZkRze1kOZNHCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:fb:39:57:ff:33:7c:5f:de:f5:cd:93:91:a0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Validity Not Before: Dec 18 03:01:42 2025 GMT Not After : Dec 19 03:01:42 2025 GMT Subject: CN=ac1e9d65e36cdd09c69312571d53709da60fadb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:be:7d:98:af:ca:c3:05:cd:da:4c:c7:5c: 76:65:a1:66:0e:4b:b0:f7:d4:27:e6:bd:95:45:d6: 62:a5:cb:de:ca:93:e0:95:81:25:09:6a:6c:76:3d: 9a:dc:e1:63:86:36:fa:2a:e6:d3:6b:a6:b6:2a:b6: 43:c7:97:33:c9:e4:f2:3b:ac:bf:dc:a2:79:c6:45: 27:5d:03:bf:03:3f:3c:47:1d:f7:0f:cc:ec:ca:b9: 65:bc:94:2e:8b:6b:ba:88:1c:1e:d3:02:a5:9f:2b: 2b:62:b1:64:c1:a2:18:4a:1b:9a:3f:75:38:5b:d5: 34:8a:06:90:23:a4:89:63:c1:43:bf:09:d4:43:b6: 7c:07:58:e7:c1:dd:ed:4f:4c:27:1a:2c:a0:ac:4a: 89:73:67:d3:f2:8b:81:45:e5:c0:49:56:50:84:6f: c2:da:8b:ed:9a:6e:11:9c:4e:ac:5d:39:42:d5:94: f1:3b:5e:4e:eb:8a:63:4a:f2:87:73:17:f6:29:3f: 54:6f:a4:4c:e4:39:36:2c:80:ae:35:dc:7a:cb:ed: 03:32:ba:b9:22:fc:b1:f3:7c:1c:37:19:6e:1d:e1: 9a:d6:6c:c9:cb:3b:ca:e7:6e:54:94:42:fa:5a:10: c0:eb:23:19:ee:98:9e:c7:50:92:38:6f:0c:00:da: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1E:9D:65:E3:6C:DD:09:C6:93:12:57:1D:53:70:9D:A6:0F:AD:B5 X509v3 Authority Key Identifier: keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:79:0d:7b:35:fb:f1:3c:2c:54:23:25:3b:c8:79:2c:c3:52: e1:a0:b6:13:12:76:2f:a1:96:89:e3:9a:66:8e:16:ba:5d:5f: d0:4b:f0:bd:e3:c7:d0:17:ab:65:dc:fb:65:37:3d:e5:49:d7: 98:57:fb:fe:52:f5:28:52:c2:db:e4:df:b6:3e:ca:44:18:93: 75:21:d6:20:7b:43:d8:f3:51:af:19:a6:b1:41:a2:9e:d1:5f: af:3f:10:7d:ac:73:3c:e4:a5:c9:2f:3a:dc:7e:1e:d5:da:de: 6f:34:c8:b9:d7:0b:59:b8:7f:ea:e2:21:00:0a:39:84:1d:5c: 26:6d:7e:8b:52:f4:88:6e:fa:f6:cb:65:df:a2:66:2a:a6:e7: ec:5f:7a:a2:24:69:db:59:40:10:41:d9:64:61:04:97:1e:1e: 7b:e6:6e:09:f8:de:82:53:0f:1d:5c:41:1e:be:47:0c:9e:9d: 8f:6e:0b:ea:df:b3:8a:94:da:bb:6c:94:b3:6f:7e:21:d5:fc: ed:87:0a:ad:54:56:8f:29:64:df:b6:81:7c:3d:a7:54:cc:6b: f3:4b:af:70:f3:9d:0e:f3:3e:5c:62:0e:6d:c3:42:4f:1b:f8: 07:77:23:3d:cd:b0:e3:f3:6f:12:3f:4b:59:36:05:92:63:a5: 8b:10:bc:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ/s5V/8zfF/e9c2TkaDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Zjc1MjNhN2IzMzJlYmRmMTE0YTVjMDhkYzFkNWYzMmNi ZDczYzYwHhcNMjUxMjE4MDMwMTQyWhcNMjUxMjE5MDMwMTQyWjAzMTEwLwYDVQQD EyhhYzFlOWQ2NWUzNmNkZDA5YzY5MzEyNTcxZDUzNzA5ZGE2MGZhZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF++fZivysMFzdpMx1x2ZaFmDkuw 99Qn5r2VRdZipcveypPglYElCWpsdj2a3OFjhjb6KubTa6a2KrZDx5czyeTyO6y/ 3KJ5xkUnXQO/Az88Rx33D8zsyrllvJQui2u6iBwe0wKlnysrYrFkwaIYShuaP3U4 W9U0igaQI6SJY8FDvwnUQ7Z8B1jnwd3tT0wnGiygrEqJc2fT8ouBReXASVZQhG/C 2ovtmm4RnE6sXTlC1ZTxO15O64pjSvKHcxf2KT9Ub6RM5Dk2LICuNdx6y+0DMrq5 Ivyx83wcNxluHeGa1mzJyzvK525UlEL6WhDA6yMZ7piex1CSOG8MANrknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwenWXjbN0JxpMSVx1TcJ2mD621MB8GA1UdIwQY MBaAFJb3Ujp7My698RSlwI3B1fMsvXPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUt MzYwNTdlMzU0ODc2LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUtMzYwNTdlMzU0ODc2 LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3kNezX7 8TwsVCMlO8h5LMNS4aC2ExJ2L6GWieOaZo4Wul1f0EvwvePH0BerZdz7ZTc95UnX mFf7/lL1KFLC2+Tftj7KRBiTdSHWIHtD2PNRrxmmsUGintFfrz8QfaxzPOSlyS86 3H4e1drebzTIudcLWbh/6uIhAAo5hB1cJm1+i1L0iG769stl36JmKqbn7F96oiRp 21lAEEHZZGEElx4ee+ZuCfjeglMPHVxBHr5HDJ6dj24L6t+zipTau2yUs29+IdX8 7YcKrVRWjylk37aBfD2nVMxr80uvcPOdDvM+XGIObcNCTxv4B3cjPc2w4/NvEj9L WTYFkmOlixC8AQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:41 2025 by rpki-client