This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json) Hash identifier: SlZ+nMlvRfQS6Zkx+2wKm97kLs3sVTopEJhuEqi4gvM= Subject key identifier: C5:75:4E:BB:10:6D:55:EE:6B:0E:E5:12:AE:CF:5C:A6:0D:9F:93:62 Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814 Certificate serial: 019AF91D81D35D635B6A2CA623C693AF7A07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft Manifest number: 12FE Signing time: Sun 07 Dec 2025 14:00:51 +0000 Manifest this update: Sun 07 Dec 2025 14:00:51 +0000 Manifest next update: Mon 08 Dec 2025 14:00:51 +0000 Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 244X/dokrUOWyOml29UlG40vbgtT1gpHj4slRFnZI2Y=) 2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:81:d3:5d:63:5b:6a:2c:a6:23:c6:93:af:7a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f809613877deab874a9401d156db14ff4d2814 Validity Not Before: Dec 7 14:00:51 2025 GMT Not After : Dec 8 14:00:51 2025 GMT Subject: CN=c5754ebb106d55ee6b0ee512aecf5ca60d9f9362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:e7:fd:bc:cc:a2:c8:42:bb:2e:7b:8e:69: 44:1b:55:43:22:ab:da:43:b0:64:a9:79:f0:dc:08: 53:ee:25:8f:50:6f:d4:43:55:cc:b1:d5:cb:64:c0: 03:34:68:19:a6:0f:1a:1b:44:65:56:ac:d9:4b:49: e8:d8:01:a0:a3:a3:01:b3:42:15:25:51:42:1c:8d: 0a:4e:bf:60:1e:2a:13:92:c1:16:ce:4a:79:c8:ee: f7:2f:0d:af:23:11:03:76:89:eb:88:89:87:b4:4f: df:3e:d1:10:ed:8f:25:e6:db:8f:57:a5:19:a6:22: a5:02:88:9a:c5:ba:27:8e:b4:0e:1e:70:2a:79:ec: ce:7d:af:30:0b:6f:1b:c6:d0:83:4d:f8:b4:18:ae: 61:49:0c:2c:f9:b7:fe:92:0b:93:fa:5f:ce:06:f9: b9:99:6b:bc:b9:50:1e:4a:60:52:dd:55:f5:34:b0: d4:46:dc:52:83:68:52:35:93:37:fd:f2:87:06:31: 95:72:6b:10:f7:c8:e5:11:f8:55:00:08:86:71:d2: a4:b4:bb:11:0d:9f:f7:4d:c5:2a:41:ea:05:fd:42: ef:7a:05:49:8a:51:58:6e:78:e4:7e:75:6b:0d:10: a5:73:4f:7d:ee:38:2d:47:8d:33:e4:2b:d1:19:ae: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:75:4E:BB:10:6D:55:EE:6B:0E:E5:12:AE:CF:5C:A6:0D:9F:93:62 X509v3 Authority Key Identifier: keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:17:04:ec:c7:61:f6:15:5a:08:e6:eb:8c:dc:07:15:63:55: e7:92:cf:b0:61:a9:d8:f5:52:d1:18:68:9d:cc:f0:80:e9:98: 32:f5:61:24:20:df:d2:64:5e:32:6a:82:74:90:95:f6:fb:96: 7a:12:4c:71:d9:54:61:de:c1:31:de:21:85:f7:d2:64:64:50: 4c:c4:97:93:d4:9f:4f:8e:e3:cb:66:d6:19:41:4f:45:c7:6d: ae:00:e0:d8:85:cb:81:ed:f6:e5:7e:c7:3f:40:7d:18:bf:a3: ca:b4:ce:ad:48:af:43:7b:91:32:bf:d6:d0:16:4e:c8:e3:e4: 8b:1f:86:c4:89:cb:f5:a1:62:38:ed:1d:57:6b:e8:ab:c9:93: 31:58:20:bb:ce:c7:9e:34:97:2b:c4:a0:19:93:70:d3:39:29: 6f:11:44:a6:62:68:cf:2c:9e:44:0e:fd:4b:29:ad:32:17:3c: 1b:66:49:90:6e:8f:33:ff:a1:e9:27:c1:40:cc:9e:8a:54:e7: 7d:ba:3c:ee:73:a2:6b:24:e5:d7:c6:12:02:7e:49:a0:19:c0: 67:ad:69:65:6d:ab:1c:49:be:8b:e1:aa:eb:5f:87:f1:c7:03: 48:13:a8:3c:05:d5:43:ad:aa:2e:24:5c:02:7a:b9:f1:89:d6: 7d:fc:ba:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HYHTXWNbaiymI8aTr3oHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0 ZDI4MTQwHhcNMjUxMjA3MTQwMDUxWhcNMjUxMjA4MTQwMDUxWjAzMTEwLwYDVQQD EyhjNTc1NGViYjEwNmQ1NWVlNmIwZWU1MTJhZWNmNWNhNjBkOWY5MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVTn/bzMoshCuy57jmlEG1VDIqva Q7BkqXnw3AhT7iWPUG/UQ1XMsdXLZMADNGgZpg8aG0RlVqzZS0no2AGgo6MBs0IV JVFCHI0KTr9gHioTksEWzkp5yO73Lw2vIxEDdonriImHtE/fPtEQ7Y8l5tuPV6UZ piKlAoiaxbonjrQOHnAqeezOfa8wC28bxtCDTfi0GK5hSQws+bf+kguT+l/OBvm5 mWu8uVAeSmBS3VX1NLDURtxSg2hSNZM3/fKHBjGVcmsQ98jlEfhVAAiGcdKktLsR DZ/3TcUqQeoF/ULvegVJilFYbnjkfnVrDRClc0997jgtR40z5CvRGa7QVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV1TrsQbVXuaw7lEq7PXKYNn5NiMB8GA1UdIwQY MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhcE7Mdh 9hVaCObrjNwHFWNV55LPsGGp2PVS0RhonczwgOmYMvVhJCDf0mReMmqCdJCV9vuW ehJMcdlUYd7BMd4hhffSZGRQTMSXk9SfT47jy2bWGUFPRcdtrgDg2IXLge325X7H P0B9GL+jyrTOrUivQ3uRMr/W0BZOyOPkix+GxInL9aFiOO0dV2voq8mTMVggu87H njSXK8SgGZNw0zkpbxFEpmJozyyeRA79SymtMhc8G2ZJkG6PM/+h6SfBQMyeilTn fbo87nOiayTl18YSAn5JoBnAZ61pZW2rHEm+i+Gq61+H8ccDSBOoPAXVQ62qLiRc Anq58YnWffy6mQ== -----END CERTIFICATE-----Generated at Sun Dec 7 21:04:24 2025 by rpki-client