This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json) Hash identifier: NQwMO4OwgdZhrVUCPX5G7gol8UaNDnrNip7pPFZvcyY= Subject key identifier: 2B:28:9A:49:44:EA:E4:19:28:91:5B:10:59:A4:58:D7:B5:DC:F5:01 Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Certificate serial: 019B3A58806E341D5767CEB66C3002431FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft Manifest number: 0B64 Signing time: Sat 20 Dec 2025 06:00:37 +0000 Manifest this update: Sat 20 Dec 2025 06:00:37 +0000 Manifest next update: Sun 21 Dec 2025 06:00:37 +0000 Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=) 2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: Kp7S+aYPTrbsqF3oxuac3liGixCDf2/wvASJEYZmRCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:80:6e:34:1d:57:67:ce:b6:6c:30:02:43:1f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa Validity Not Before: Dec 20 06:00:37 2025 GMT Not After : Dec 21 06:00:37 2025 GMT Subject: CN=2b289a4944eae41928915b1059a458d7b5dcf501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:07:43:77:d4:2b:f6:9f:64:74:10:df:50: 94:6d:47:f1:98:92:b3:d2:83:e0:b8:03:2c:e2:c1: 64:ba:d0:97:c1:bd:5e:b0:87:4e:88:74:14:65:8d: 68:82:c5:5d:d1:4f:49:16:85:74:f4:cd:d7:86:12: 44:20:9c:35:da:4c:5f:ef:8c:e5:4e:11:42:4f:d8: 73:dd:96:50:c9:0e:64:62:db:de:d1:bb:64:25:49: d1:55:c8:68:a3:15:ba:e2:6f:2e:07:bf:d4:9d:c7: 0d:76:15:da:f9:ea:b8:5e:21:2e:3f:f7:19:91:9d: 46:87:94:70:d8:fc:31:e9:f9:ad:30:4a:33:ae:f8: 33:f6:ae:c3:e6:1b:0c:a8:55:2f:59:e6:ec:ef:ee: a3:4e:18:e2:1c:f2:e8:d4:14:a8:df:ed:3d:44:a8: 0a:96:11:d6:7e:1e:54:f9:9f:5e:47:58:f3:f4:15: 34:bb:02:50:4a:4d:fb:b4:91:c2:a9:26:b3:ec:c5: c3:0d:13:15:59:49:ac:56:d8:64:b0:3c:7e:a2:4a: 34:0e:72:87:3a:5c:62:3c:ec:d3:11:9d:0f:dc:7b: 09:b2:7b:c9:68:21:eb:61:39:27:1a:74:3e:44:23: f2:ad:55:3c:24:88:a8:5a:06:9e:a2:14:0c:bf:d0: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:28:9A:49:44:EA:E4:19:28:91:5B:10:59:A4:58:D7:B5:DC:F5:01 X509v3 Authority Key Identifier: keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4e:1b:de:da:4e:13:b7:e4:aa:d5:e7:ce:64:f8:29:a9:92: 40:1d:6d:30:c5:9a:19:8e:b8:02:e8:14:e4:1d:7d:24:a1:35: a2:3d:af:af:90:a0:ed:58:95:24:48:df:a9:3b:a7:06:b1:8e: a0:fc:6f:45:fc:a3:02:b3:5d:74:69:05:92:3d:07:ba:9c:cf: 2e:f7:26:76:82:ea:3e:10:43:10:8f:ac:fc:b4:a3:b3:aa:9a: 3d:a6:6c:4a:6b:65:94:01:7a:a7:56:03:e2:2c:2c:52:6e:dc: e9:70:75:cb:18:89:74:3f:ce:17:dc:d6:7d:71:d3:82:8c:88: d1:19:98:9a:c8:07:be:1c:55:b4:10:dd:1d:c0:12:8f:f0:76: 7b:0c:13:6e:7b:81:b5:f8:6d:ee:ae:34:39:16:e3:02:72:93: 23:82:e1:39:06:1b:1d:29:85:4d:e8:28:33:fa:4d:94:56:7c: 64:5b:cc:30:db:a0:bb:96:bb:fb:8a:c1:55:dc:6b:29:75:46: 0a:b8:67:16:10:2d:90:18:7b:55:30:29:5a:b1:0d:a2:b5:7e: a2:40:03:e7:7a:c8:20:47:38:f6:b8:d4:7a:1a:6e:26:3d:3a: ef:2e:a3:a8:d7:c5:47:fe:90:11:86:d9:4c:df:f5:5b:9c:ba: 53:c4:be:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIBuNB1XZ862bDACQx/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjJkYTJmYTFiYzhlZDJmMmJjNmI3MDNhOGJmMTUzNDBm OTdjZmEwHhcNMjUxMjIwMDYwMDM3WhcNMjUxMjIxMDYwMDM3WjAzMTEwLwYDVQQD EygyYjI4OWE0OTQ0ZWFlNDE5Mjg5MTViMTA1OWE0NThkN2I1ZGNmNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQIHQ3fUK/afZHQQ31CUbUfxmJKz 0oPguAMs4sFkutCXwb1esIdOiHQUZY1ogsVd0U9JFoV09M3XhhJEIJw12kxf74zl ThFCT9hz3ZZQyQ5kYtve0btkJUnRVchooxW64m8uB7/UnccNdhXa+eq4XiEuP/cZ kZ1Gh5Rw2Pwx6fmtMEozrvgz9q7D5hsMqFUvWebs7+6jThjiHPLo1BSo3+09RKgK lhHWfh5U+Z9eR1jz9BU0uwJQSk37tJHCqSaz7MXDDRMVWUmsVthksDx+oko0DnKH OlxiPOzTEZ0P3HsJsnvJaCHrYTknGnQ+RCPyrVU8JIioWgaeohQMv9BH/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsomklE6uQZKJFbEFmkWNe13PUBMB8GA1UdIwQY MBaAFJby2i+hvI7S8rxrcDqL8VNA+Xz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEt OTNiNGZlNTE1N2VjLzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mYzQ2OTAtMDgwZi00MDE4LTg5YTEtOTNiNGZlNTE1N2Vj LzEvbHZMYUw2RzhqdEx5dkd0d09vdnhVMEQ1ZlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU4b3tpO E7fkqtXnzmT4KamSQB1tMMWaGY64AugU5B19JKE1oj2vr5Cg7ViVJEjfqTunBrGO oPxvRfyjArNddGkFkj0HupzPLvcmdoLqPhBDEI+s/LSjs6qaPaZsSmtllAF6p1YD 4iwsUm7c6XB1yxiJdD/OF9zWfXHTgoyI0RmYmsgHvhxVtBDdHcASj/B2ewwTbnuB tfht7q40ORbjAnKTI4LhOQYbHSmFTegoM/pNlFZ8ZFvMMNugu5a7+4rBVdxrKXVG CrhnFhAtkBh7VTApWrENorV+okAD53rIIEc49rjUehpuJj067y6jqNfFR/6QEYbZ TN/1W5y6U8S+DA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:28 2025 by rpki-client