This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft File: LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json) Hash identifier: ehpsdZjGOi/82/kE5Kwlu0fdNrlscMn/pg6VmtBw6U0= Subject key identifier: AD:4E:59:D4:92:98:DC:A8:BE:4A:40:26:16:27:1D:6D:4E:4C:88:75 Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2 Certificate serial: 019B255198F8966A1B34809F6B90E730E30C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 04:01:03 +0000 Manifest this update: Tue 16 Dec 2025 04:01:03 +0000 Manifest next update: Wed 17 Dec 2025 04:01:03 +0000 Files and hashes: 1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: cWCChtgFSHPR9WdY3/AI5GohwDQzsv7+8fn3bqX57X0=) 2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:98:f8:96:6a:1b:34:80:9f:6b:90:e7:30:e3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2 Validity Not Before: Dec 16 04:01:03 2025 GMT Not After : Dec 17 04:01:03 2025 GMT Subject: CN=ad4e59d49298dca8be4a402616271d6d4e4c8875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:8c:27:75:ec:67:88:95:04:0e:0f:39:01: c7:25:ab:63:2b:01:b2:de:9a:94:ec:79:3d:09:1d: 14:83:21:07:e4:7f:69:1a:d1:86:eb:69:f7:df:c2: ed:41:6e:41:fd:df:25:85:09:91:d6:9a:52:c2:42: 2a:09:eb:56:0c:dd:75:7f:96:1e:b6:0e:29:77:9f: b3:34:d0:1e:3d:ce:7b:68:05:d5:26:a3:16:e8:a3: 18:ad:2a:d4:03:d3:4e:6e:a3:f2:12:5a:e2:ec:7b: b3:b1:1b:54:5e:60:a7:28:df:07:8b:a1:eb:66:46: 38:a0:a2:ac:07:6f:71:6c:77:45:d1:f4:c3:72:b8: 6f:c1:40:34:fe:cb:d9:b8:48:a5:0a:de:26:01:5e: f6:98:46:05:78:28:e2:1f:2a:c0:7e:d0:35:be:31: 76:90:99:37:ae:d2:c8:82:c1:d7:95:9b:21:5b:1b: f1:23:82:21:ac:1c:da:5f:2a:06:3a:f5:ce:63:43: b3:55:93:84:a3:b8:a0:de:90:12:7e:a1:aa:01:50: 9a:3a:06:f2:ce:83:47:92:1c:bd:fc:f3:e2:1b:39: 2b:5f:7f:1c:03:cb:26:f4:2b:a3:b1:a8:b1:b6:2a: eb:c1:29:5c:50:6c:d0:4b:62:da:07:6c:00:e8:12: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4E:59:D4:92:98:DC:A8:BE:4A:40:26:16:27:1D:6D:4E:4C:88:75 X509v3 Authority Key Identifier: keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:5e:79:f9:64:d8:47:90:2a:8d:29:47:03:bf:e7:35:f3: b6:b4:f1:8f:77:b4:9a:3a:b0:f3:cc:c6:d0:33:73:00:76:e7: 25:4b:f0:63:07:fe:a6:b5:99:e7:29:e8:2d:a5:ff:72:1b:8a: 51:27:e5:0f:d7:3c:ae:2b:de:95:e0:45:89:67:fd:5d:2d:38: 38:c9:35:b8:36:2a:19:38:93:f6:5c:8c:09:cf:ea:f7:e6:25: 07:19:af:30:bb:6f:fe:3e:78:be:99:16:3a:83:22:20:75:bd: 98:4b:8a:99:85:62:ef:57:93:7f:30:59:53:9f:4b:64:0e:95: 60:e0:c8:ac:af:ff:14:44:13:d7:1a:e0:30:69:be:b3:69:78: 7b:26:43:38:16:0a:91:45:9b:67:6b:26:f5:fa:cd:90:d2:8f: 72:06:81:88:02:d3:96:69:73:1f:cb:d6:2c:f8:55:89:93:bd: 1d:36:d0:93:2e:68:e3:b3:34:2f:9a:61:93:86:e2:4e:c7:a5: d1:41:41:52:af:9a:53:4c:75:6f:2e:55:50:0a:be:3e:9d:2f: 8f:21:2c:01:b6:42:d5:d8:4f:30:14:90:61:a1:69:c7:03:04: 1e:a3:ae:bc:07:67:2a:b2:34:52:4f:eb:e6:45:07:b1:61:91: e8:bd:bd:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUZj4lmobNICfa5DnMOMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZmI5ZTZkNzU2NmRmZWY5ZDVjYjk4ZDkyOWNiNzAzMjNk Mzg5ZjIwHhcNMjUxMjE2MDQwMTAzWhcNMjUxMjE3MDQwMTAzWjAzMTEwLwYDVQQD EyhhZDRlNTlkNDkyOThkY2E4YmU0YTQwMjYxNjI3MWQ2ZDRlNGM4ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbCMJ3XsZ4iVBA4POQHHJatjKwGy 3pqU7Hk9CR0UgyEH5H9pGtGG62n338LtQW5B/d8lhQmR1ppSwkIqCetWDN11f5Ye tg4pd5+zNNAePc57aAXVJqMW6KMYrSrUA9NObqPyElri7HuzsRtUXmCnKN8Hi6Hr ZkY4oKKsB29xbHdF0fTDcrhvwUA0/svZuEilCt4mAV72mEYFeCjiHyrAftA1vjF2 kJk3rtLIgsHXlZshWxvxI4IhrBzaXyoGOvXOY0OzVZOEo7ig3pASfqGqAVCaOgby zoNHkhy9/PPiGzkrX38cA8sm9CujsaixtirrwSlcUGzQS2LaB2wA6BIhKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1OWdSSmNyovkpAJhYnHW1OTIh1MB8GA1UdIwQY MBaAFC77nm11Zt/vnVy5jZKctwMj04nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZ1ZWJYVm0zLS1kWExtTmtweTNBeVBUaWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZmM2MjctYTM3My00NzRkLWJjN2Ut ZTJkODQ2ODQ5NDgyLzEvTHZ1ZWJYVm0zLS1kWExtTmtweTNBeVBUaWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xZmM2MjctYTM3My00NzRkLWJjN2UtZTJkODQ2ODQ5NDgy LzEvTHZ1ZWJYVm0zLS1kWExtTmtweTNBeVBUaWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDleeflk 2EeQKo0pRwO/5zXztrTxj3e0mjqw88zG0DNzAHbnJUvwYwf+prWZ5ynoLaX/chuK USflD9c8riveleBFiWf9XS04OMk1uDYqGTiT9lyMCc/q9+YlBxmvMLtv/j54vpkW OoMiIHW9mEuKmYVi71eTfzBZU59LZA6VYODIrK//FEQT1xrgMGm+s2l4eyZDOBYK kUWbZ2sm9frNkNKPcgaBiALTlmlzH8vWLPhViZO9HTbQky5o47M0L5phk4biTsel 0UFBUq+aU0x1by5VUAq+Pp0vjyEsAbZC1dhPMBSQYaFpxwMEHqOuvAdnKrI0Uk/r 5kUHsWGR6L29Ow== -----END CERTIFICATE-----Generated at Tue Dec 16 06:35:31 2025 by rpki-client