This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json) Hash identifier: ARyMGj+Ci9Z6CwTIjdd1POcjXiL5PfdhXVed+l/r/iI= Subject key identifier: AC:1F:58:28:C0:69:9B:77:7A:18:79:52:03:7A:C0:D4:EE:93:42:10 Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Certificate serial: 019AF19AFA316201C4362F2C438CE6F530F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft Manifest number: 062B Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: U9Ne+PU+jfmsZLLF2jrz0K2Vo5bihgLH68hi69pPjmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fa:31:62:01:c4:36:2f:2c:43:8c:e6:f5:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=ac1f5828c0699b777a187952037ac0d4ee934210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:cf:c5:5d:0a:fe:e7:00:79:b9:a3:e8:58: 10:47:04:bd:0d:ff:c1:f3:bb:eb:67:b3:4a:fd:b6: 4d:d9:30:67:8a:75:06:d4:4b:87:ae:79:ce:e0:70: 8e:f0:11:e3:b0:e6:ec:e7:a4:03:11:3b:8d:6a:c2: 71:a9:c2:d7:fd:4d:34:6b:91:f2:cf:98:ce:dc:28: de:19:dc:5c:9f:13:5d:c5:58:ce:1d:0b:c4:b9:12: 3a:c2:a5:49:0d:12:d7:ce:f8:57:4e:2e:fe:06:66: 37:20:fa:2e:ad:2b:73:ed:31:4d:e4:41:5b:63:fc: 22:5e:16:30:39:e4:9c:12:02:76:b1:39:fa:c4:8e: 33:e6:d3:17:ff:33:7d:c4:15:32:43:c8:d3:de:e2: f7:06:c0:d9:15:c4:10:8c:ec:19:19:56:d1:77:72: 48:09:3a:67:f2:67:2f:80:58:4d:1b:59:92:c9:4c: ca:12:59:95:de:be:b4:14:05:e0:60:b6:bc:f6:77: ca:90:85:86:24:3d:fc:a9:2c:b8:be:63:c1:b6:1f: 7c:a7:7d:76:da:e9:d5:d0:e5:7d:bc:9a:a6:9b:81: 94:d0:f3:0f:d9:8c:29:29:e5:d4:c6:25:47:d4:96: 92:2d:a6:6c:26:1b:3a:66:da:fd:7d:0c:0f:79:da: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:58:28:C0:69:9B:77:7A:18:79:52:03:7A:C0:D4:EE:93:42:10 X509v3 Authority Key Identifier: keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:ef:c2:89:a1:5f:f3:e0:70:69:07:45:b0:28:0e:57:aa: a0:b1:87:7b:58:5a:10:79:1a:bf:df:ca:e9:5b:a6:7f:fb:6e: 4e:95:e0:02:e4:c4:68:80:72:a2:c3:8e:43:64:48:ca:b9:9e: 36:08:8b:ed:a9:e7:70:19:c8:63:be:61:46:07:2d:e8:6d:3f: ed:4e:a6:9b:76:35:b7:7e:09:d3:50:ca:20:c8:56:20:1a:56: 04:e7:54:be:47:18:04:9a:4b:72:20:1a:e0:2a:88:a7:f8:bb: e0:f6:3c:7c:28:d0:9f:22:97:25:ec:10:b3:89:9c:6b:57:6b: dc:0f:60:41:4c:01:7f:b6:65:8a:f7:d5:d8:30:82:1f:31:a6: 14:d0:98:17:67:40:d8:dc:b4:5b:b7:8d:c3:07:c8:bf:dc:a7: 33:d3:c1:33:6c:da:51:b7:a4:1c:96:30:47:de:00:55:7b:ca: 73:d3:5e:ce:ec:72:d3:29:6e:9e:03:fa:c8:7d:27:7c:b0:16: 22:28:04:ce:c7:7b:18:b4:f2:b8:0a:64:d2:c9:ba:0b:2d:14: a2:9e:15:9a:e8:80:78:1b:d9:6e:ad:71:2d:9c:93:70:e6:af: a6:82:44:0b:ba:fa:77:0e:11:98:e5:f4:f3:79:87:88:d8:e4: 58:c4:9f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvoxYgHENi8sQ4zm9TDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Zjc1MjNhN2IzMzJlYmRmMTE0YTVjMDhkYzFkNWYzMmNi ZDczYzYwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD EyhhYzFmNTgyOGMwNjk5Yjc3N2ExODc5NTIwMzdhYzBkNGVlOTM0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfXPxV0K/ucAebmj6FgQRwS9Df/B 87vrZ7NK/bZN2TBninUG1EuHrnnO4HCO8BHjsObs56QDETuNasJxqcLX/U00a5Hy z5jO3CjeGdxcnxNdxVjOHQvEuRI6wqVJDRLXzvhXTi7+BmY3IPourStz7TFN5EFb Y/wiXhYwOeScEgJ2sTn6xI4z5tMX/zN9xBUyQ8jT3uL3BsDZFcQQjOwZGVbRd3JI CTpn8mcvgFhNG1mSyUzKElmV3r60FAXgYLa89nfKkIWGJD38qSy4vmPBth98p312 2unV0OV9vJqmm4GU0PMP2YwpKeXUxiVH1JaSLaZsJhs6Ztr9fQwPedpZ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwfWCjAaZt3ehh5UgN6wNTuk0IQMB8GA1UdIwQY MBaAFJb3Ujp7My698RSlwI3B1fMsvXPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUt MzYwNTdlMzU0ODc2LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUtMzYwNTdlMzU0ODc2 LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7zvwomh X/PgcGkHRbAoDleqoLGHe1haEHkav9/K6Vumf/tuTpXgAuTEaIByosOOQ2RIyrme NgiL7anncBnIY75hRgct6G0/7U6mm3Y1t34J01DKIMhWIBpWBOdUvkcYBJpLciAa 4CqIp/i74PY8fCjQnyKXJewQs4mca1dr3A9gQUwBf7ZlivfV2DCCHzGmFNCYF2dA 2Ny0W7eNwwfIv9ynM9PBM2zaUbekHJYwR94AVXvKc9Nezuxy0ylungP6yH0nfLAW IigEzsd7GLTyuApk0sm6Cy0Uop4VmuiAeBvZbq1xLZyTcOavpoJEC7r6dw4RmOX0 83mHiNjkWMSfsA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:56 2025 by rpki-client