This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json) Hash identifier: d6u8T0rPUV1DvCBOfcSh13S89iNzRPb8AG2KRfY77zw= Subject key identifier: 2D:5D:35:31:D8:3F:A0:9A:CF:F1:6E:D4:DF:51:33:54:B3:B4:9E:1B Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Certificate serial: 019AF2AD45426268C2B271EB45D26FBA2EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft Manifest number: 1194 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=) 2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=) 3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: 2CiQdz/cb4F0FOp+J3EiA3L8iHS2cell5FElbqNAPxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:45:42:62:68:c2:b2:71:eb:45:d2:6f:ba:2e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=2d5d3531d83fa09acff16ed4df513354b3b49e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:d8:82:a0:bb:49:ce:8e:ea:22:fa:a4:a4: a2:41:ef:69:00:6c:9f:ed:db:b7:f2:d8:18:c4:c2: 23:c2:7d:c0:28:8c:77:96:c6:ee:bf:a6:9a:2d:50: fa:6d:8c:26:eb:bd:06:f4:4d:dc:61:7b:cb:ba:0c: 97:54:c3:3f:f9:d2:f4:ea:19:27:34:eb:ea:22:4f: de:c5:e7:03:5e:a0:4d:92:44:6c:ee:ca:64:c9:a9: e3:fd:5d:29:79:d0:a7:98:df:8e:06:cd:09:bb:02: 76:ee:9a:77:06:b3:8b:dd:02:02:16:35:4e:f7:b8: 6c:fb:11:07:cd:a0:10:cc:e5:46:ef:82:f0:e2:96: a4:14:05:56:97:90:21:11:d2:7a:f0:02:83:ea:69: eb:12:f1:ca:cf:14:ac:55:e4:47:1a:db:ce:0b:42: 53:b0:39:87:ee:8a:59:85:79:3a:e2:38:2e:e5:45: 46:a4:7e:e8:0c:4b:83:af:7c:84:cd:52:1e:de:a9: 21:c9:b9:f4:cb:ba:11:8c:da:31:cf:94:10:76:ba: 23:3b:95:93:70:e9:7c:3f:d8:52:bc:e2:12:24:a3: 84:93:19:ee:f9:aa:82:d4:05:70:4b:20:62:6f:0a: 04:5c:30:59:a1:57:de:b1:7a:8b:68:87:95:17:dc: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5D:35:31:D8:3F:A0:9A:CF:F1:6E:D4:DF:51:33:54:B3:B4:9E:1B X509v3 Authority Key Identifier: keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:11:a9:4c:c1:3b:dd:12:37:f1:9c:80:3d:10:db:50:07:b3: 9e:85:2a:d7:a3:6a:c1:c5:96:4e:33:a1:81:b5:e9:aa:a7:87: cb:23:99:6f:dc:91:d2:17:97:51:0b:26:2e:86:f4:81:db:c3: dd:44:50:c4:1d:69:8c:3c:28:4d:0b:62:96:0f:d8:8b:45:da: 5a:2b:98:91:68:ab:f4:18:b7:29:e1:7d:c7:26:e0:7c:f9:28: 58:d8:dc:1a:9a:87:a7:99:f6:46:bd:e1:8f:b8:f7:12:30:bd: 5b:e5:5d:b5:67:d1:10:ad:83:a6:8c:c4:83:22:33:2c:b4:10: 94:1c:f2:60:a7:6b:d5:d3:1f:fa:f7:7c:2e:e8:85:41:0d:77: 91:5c:2a:44:d4:36:ff:a4:e1:5e:fa:66:c9:b2:f7:c3:e1:de: 5a:dc:c9:ab:67:fa:c3:36:ae:b2:97:ff:0b:bc:a8:86:3c:a9: df:f7:5b:19:66:a2:d0:92:61:a0:9e:bf:a2:53:09:ca:20:ab: 60:58:a6:17:ea:8a:9b:05:e1:0c:38:ad:25:39:7f:4c:ae:23: a1:ca:79:ef:48:d7:e3:92:ab:a5:06:2b:94:d5:28:c6:8b:31: cb:e6:9e:b8:c2:02:e5:81:14:27:35:d7:45:b7:dd:77:36:75: 5e:43:67:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUVCYmjCsnHrRdJvui61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3 ZWYxNjYwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD EygyZDVkMzUzMWQ4M2ZhMDlhY2ZmMTZlZDRkZjUxMzM1NGIzYjQ5ZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEvYgqC7Sc6O6iL6pKSiQe9pAGyf 7du38tgYxMIjwn3AKIx3lsbuv6aaLVD6bYwm670G9E3cYXvLugyXVMM/+dL06hkn NOvqIk/execDXqBNkkRs7spkyanj/V0pedCnmN+OBs0JuwJ27pp3BrOL3QICFjVO 97hs+xEHzaAQzOVG74Lw4pakFAVWl5AhEdJ68AKD6mnrEvHKzxSsVeRHGtvOC0JT sDmH7opZhXk64jgu5UVGpH7oDEuDr3yEzVIe3qkhybn0y7oRjNoxz5QQdrojO5WT cOl8P9hSvOISJKOEkxnu+aqC1AVwSyBibwoEXDBZoVfesXqLaIeVF9zBOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1dNTHYP6Caz/Fu1N9RM1SztJ4bMB8GA1UdIwQY MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBGpTME7 3RI38ZyAPRDbUAeznoUq16NqwcWWTjOhgbXpqqeHyyOZb9yR0heXUQsmLob0gdvD 3URQxB1pjDwoTQtilg/Yi0XaWiuYkWir9Bi3KeF9xybgfPkoWNjcGpqHp5n2Rr3h j7j3EjC9W+VdtWfREK2DpozEgyIzLLQQlBzyYKdr1dMf+vd8LuiFQQ13kVwqRNQ2 /6ThXvpmybL3w+HeWtzJq2f6wzauspf/C7yohjyp3/dbGWai0JJhoJ6/olMJyiCr YFimF+qKmwXhDDitJTl/TK4jocp570jX45KrpQYrlNUoxosxy+aeuMIC5YEUJzXX RbfddzZ1XkNnYA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:04 2025 by rpki-client