This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json) Hash identifier: wG0wolm3GOFhT01Bt85ga3T1n53Th9AP1Xabt1C+eiM= Subject key identifier: D1:3B:90:93:1F:F0:F7:AC:1A:59:14:AF:52:D0:69:E7:38:52:5D:DB Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Certificate serial: 019B1BA987EDE927F6751E6418786E06AB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft Manifest number: 0FF9 Signing time: Sun 14 Dec 2025 07:00:53 +0000 Manifest this update: Sun 14 Dec 2025 07:00:53 +0000 Manifest next update: Mon 15 Dec 2025 07:00:53 +0000 Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=) 2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: Po0N8B9Nd5jN9b9jHoxhRXUTpiwyd+93JdQBNHeolbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:87:ed:e9:27:f6:75:1e:64:18:78:6e:06:ab:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Validity Not Before: Dec 14 07:00:53 2025 GMT Not After : Dec 15 07:00:53 2025 GMT Subject: CN=d13b90931ff0f7ac1a5914af52d069e738525ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:4d:f6:a6:28:9c:ec:ce:79:e6:b4:79:f9: bc:61:73:f1:63:c7:4b:03:19:8c:b2:63:a1:35:fb: 75:40:db:02:f1:42:1c:aa:f9:7a:05:c2:49:ba:f8: 56:88:d8:bc:0c:0e:12:77:9e:47:1f:22:f3:5f:f2: f9:40:16:70:be:23:ce:a2:f8:43:1c:fc:9e:02:b6: bb:5a:fc:ff:10:a0:f8:0d:ef:b1:19:3a:94:52:d6: 48:2a:4e:a5:56:77:c1:d6:a0:50:c9:e1:1b:f7:71: c7:7d:bf:2a:14:22:5c:74:58:7f:73:1e:2d:30:43: da:3f:43:7b:14:68:0b:6a:78:32:02:a5:6f:40:aa: ec:03:94:03:14:45:c5:02:26:68:a0:40:43:f2:47: 2e:ea:38:77:d6:2b:c4:26:de:a2:26:e0:bc:d9:41: 83:db:6a:5c:34:0a:f7:50:9c:b3:9f:5c:20:5f:db: 59:47:b5:48:b0:a1:d6:a8:2b:18:3a:e7:44:7a:0c: e9:d9:2d:15:72:c2:68:6e:00:1a:34:01:cb:d1:e6: ac:06:18:e0:b7:34:ee:8f:02:12:01:1c:f8:fe:e7: a7:21:da:5a:18:87:65:e9:64:ea:32:4e:cb:5d:44: 30:b1:b4:93:ed:d6:35:bc:45:12:4b:63:8c:30:c7: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:90:93:1F:F0:F7:AC:1A:59:14:AF:52:D0:69:E7:38:52:5D:DB X509v3 Authority Key Identifier: keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0d:09:26:ea:c9:43:a2:92:1f:9f:76:bc:92:de:35:a1:bf: 17:5e:99:c3:ca:3e:6b:35:ed:5b:87:0e:6f:77:9f:89:43:f1: f2:c3:df:83:8b:67:4a:ea:07:be:26:02:f0:9e:53:ad:06:dd: 6e:39:f9:5d:de:94:25:a1:65:a3:75:67:57:c1:ad:fa:07:8d: 1c:04:34:26:e1:41:30:69:64:73:e8:98:aa:fb:d3:5c:61:56: 62:11:c3:e7:84:ed:fe:2b:a1:68:d1:4f:03:79:11:49:67:1d: d1:63:8f:97:e5:6f:72:0f:43:c8:65:a5:89:93:e3:0d:1d:22: 9d:5d:b8:e5:d9:bb:2a:20:38:c7:4f:2a:1f:cb:5a:02:89:1f: e5:82:91:de:ca:56:b7:a4:02:2f:85:bb:84:99:ba:02:48:30: ab:10:ba:41:26:66:b6:4a:14:ca:d3:7c:fc:46:18:ad:ed:99: 3b:8d:c4:e0:ce:4c:07:0c:ad:d8:80:27:fe:f6:51:75:95:39: 68:0f:4d:5e:55:ac:79:21:79:8b:de:20:3b:e1:2b:74:e7:a7: 8f:9e:46:68:88:1b:cf:99:ce:30:ac:d0:ff:93:47:5d:f8:12: f9:aa:96:98:15:02:b7:bf:e2:4d:31:b5:d0:ae:4a:2f:33:6e: 82:7d:df:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqYft6Sf2dR5kGHhuBqtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj Y2ZlNzUwHhcNMjUxMjE0MDcwMDUzWhcNMjUxMjE1MDcwMDUzWjAzMTEwLwYDVQQD EyhkMTNiOTA5MzFmZjBmN2FjMWE1OTE0YWY1MmQwNjllNzM4NTI1ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNNN9qYonOzOeea0efm8YXPxY8dL AxmMsmOhNft1QNsC8UIcqvl6BcJJuvhWiNi8DA4Sd55HHyLzX/L5QBZwviPOovhD HPyeAra7Wvz/EKD4De+xGTqUUtZIKk6lVnfB1qBQyeEb93HHfb8qFCJcdFh/cx4t MEPaP0N7FGgLangyAqVvQKrsA5QDFEXFAiZooEBD8kcu6jh31ivEJt6iJuC82UGD 22pcNAr3UJyzn1wgX9tZR7VIsKHWqCsYOudEegzp2S0VcsJobgAaNAHL0easBhjg tzTujwISARz4/uenIdpaGIdl6WTqMk7LXUQwsbST7dY1vEUSS2OMMMdkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE7kJMf8PesGlkUr1LQaec4Ul3bMB8GA1UdIwQY MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA0JJurJ Q6KSH592vJLeNaG/F16Zw8o+azXtW4cOb3efiUPx8sPfg4tnSuoHviYC8J5TrQbd bjn5Xd6UJaFlo3VnV8Gt+geNHAQ0JuFBMGlkc+iYqvvTXGFWYhHD54Tt/iuhaNFP A3kRSWcd0WOPl+Vvcg9DyGWliZPjDR0inV245dm7KiA4x08qH8taAokf5YKR3spW t6QCL4W7hJm6AkgwqxC6QSZmtkoUytN8/EYYre2ZO43E4M5MBwyt2IAn/vZRdZU5 aA9NXlWseSF5i94gO+ErdOenj55GaIgbz5nOMKzQ/5NHXfgS+aqWmBUCt7/iTTG1 0K5KLzNugn3fpA== -----END CERTIFICATE-----Generated at Sun Dec 14 10:57:20 2025 by rpki-client