This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json) Hash identifier: Eslc02JfRtHqYblsb5vpYca/Uxm9r7y4PBtF8meMNF0= Subject key identifier: 96:1D:B1:90:04:AE:D3:0E:23:FC:AC:A3:A5:EC:FC:0E:99:EF:60:4B Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Certificate serial: 019B2FD4F26696CA76A3D381E18A54B43143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft Manifest number: 09F7 Signing time: Thu 18 Dec 2025 05:00:43 +0000 Manifest this update: Thu 18 Dec 2025 05:00:43 +0000 Manifest next update: Fri 19 Dec 2025 05:00:43 +0000 Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: jFnacorkd6yK5RR+Kgf091cKZ8ZUy5OyrSMNabKXDSM=) 2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:f2:66:96:ca:76:a3:d3:81:e1:8a:54:b4:31:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433 Validity Not Before: Dec 18 05:00:43 2025 GMT Not After : Dec 19 05:00:43 2025 GMT Subject: CN=961db19004aed30e23fcaca3a5ecfc0e99ef604b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:22:ab:e0:32:e7:98:91:57:a5:9f:0a:07: 02:8f:6d:a3:8d:01:66:18:da:7d:c4:e9:6b:f5:c0: d2:ff:e8:b6:8c:68:b6:c0:29:df:85:dc:39:23:45: 30:b5:76:43:13:ea:f8:13:0c:dc:1a:fd:01:47:38: 53:30:76:98:9a:1b:71:25:08:45:d2:1e:dd:06:1d: 82:82:d5:67:74:38:4d:5f:80:81:48:44:d1:24:e0: 08:99:28:dc:e4:8e:d5:16:62:4d:12:b3:80:33:33: 3e:98:e4:6b:b2:39:e4:ce:f6:9b:1c:eb:34:19:3f: 62:0d:27:9a:1b:7e:0c:ee:c6:0a:29:70:cf:85:28: 51:a5:c2:26:ff:4d:3d:04:83:cc:cf:ff:ab:5a:ed: 43:40:cf:4d:dd:90:34:62:9e:1b:c2:73:1a:e9:53: d6:7a:12:42:f8:ca:61:2a:d4:a8:a4:fc:15:ee:78: 18:d6:8a:ef:96:ff:df:81:d2:70:e3:92:6f:01:70: 45:94:85:16:e3:88:72:63:1a:dc:c4:da:38:9c:64: c9:10:06:80:f0:56:09:9e:9e:22:07:d9:83:ad:36: 55:2d:c8:af:01:81:ce:07:47:bc:c2:e1:a1:db:fe: 4c:eb:5e:9c:ee:8e:b2:3a:fc:98:d3:3c:54:9e:2e: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:B1:90:04:AE:D3:0E:23:FC:AC:A3:A5:EC:FC:0E:99:EF:60:4B X509v3 Authority Key Identifier: keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:97:4b:8d:e0:e2:70:73:8a:f5:29:72:60:cc:f0:20:9d:f3: 43:37:18:7a:b1:1b:de:1f:f1:7c:00:cf:1e:43:af:33:bc:32: 98:29:75:85:ba:f0:77:d8:55:25:4d:d6:ff:c3:a7:8a:12:b8: b6:03:6a:32:60:82:04:4b:ee:d0:97:5c:1e:d3:c1:1f:bb:d3: a3:7f:ef:37:2d:03:2e:53:97:35:23:03:a3:20:10:1b:84:f8: 52:87:fe:55:93:1e:b8:8b:b3:09:61:bb:aa:96:ca:05:91:06: 92:69:ce:f0:40:f0:c0:67:e7:f9:b5:c3:3a:33:80:00:05:58: d1:c5:d0:67:4c:f3:c2:f1:7e:d5:24:3f:cd:43:2b:6f:ff:a2: f0:15:7d:da:50:02:fa:1e:90:90:e8:a8:86:e3:7b:fa:c3:5f: 6a:ab:cb:71:25:07:97:4d:0f:2a:fb:b1:0b:8d:44:d0:a6:f2: 63:b9:7f:5e:d3:66:61:a4:8e:7c:53:7e:f2:f2:1b:e2:df:eb: 8b:b3:df:9b:6a:6e:41:4a:86:62:f3:07:ad:b0:06:df:94:5c: 87:f2:ca:de:25:57:1c:d9:87:89:b3:cb:b6:67:dd:31:64:a5: f3:fb:c7:2d:fe:4e:75:eb:57:3a:0b:e5:ec:ab:03:c6:58:2e: 38:49:a4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1PJmlsp2o9OB4YpUtDFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjE5NzdjZjE3ZmU0ZTFkZTJmMTYyOTNjNjY5ZjQ0ZDVi ZDc0MzMwHhcNMjUxMjE4MDUwMDQzWhcNMjUxMjE5MDUwMDQzWjAzMTEwLwYDVQQD Eyg5NjFkYjE5MDA0YWVkMzBlMjNmY2FjYTNhNWVjZmMwZTk5ZWY2MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsAiq+Ay55iRV6WfCgcCj22jjQFm GNp9xOlr9cDS/+i2jGi2wCnfhdw5I0UwtXZDE+r4EwzcGv0BRzhTMHaYmhtxJQhF 0h7dBh2CgtVndDhNX4CBSETRJOAImSjc5I7VFmJNErOAMzM+mORrsjnkzvabHOs0 GT9iDSeaG34M7sYKKXDPhShRpcIm/009BIPMz/+rWu1DQM9N3ZA0Yp4bwnMa6VPW ehJC+MphKtSopPwV7ngY1orvlv/fgdJw45JvAXBFlIUW44hyYxrcxNo4nGTJEAaA 8FYJnp4iB9mDrTZVLcivAYHOB0e8wuGh2/5M616c7o6yOvyY0zxUni6D7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYdsZAErtMOI/yso6Xs/A6Z72BLMB8GA1UdIwQY MBaAFJbxl3zxf+Th3i8WKTxmn0TVvXQzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgt Nzc0MGIzZDY5MDVlLzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNGE0N2QtNmE0ZC00ZTE1LWEyMzgtNzc0MGIzZDY5MDVl LzEvbHZHWGZQRl81T0hlTHhZcFBHYWZSTlc5ZERNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJdLjeDi cHOK9SlyYMzwIJ3zQzcYerEb3h/xfADPHkOvM7wymCl1hbrwd9hVJU3W/8OnihK4 tgNqMmCCBEvu0JdcHtPBH7vTo3/vNy0DLlOXNSMDoyAQG4T4Uof+VZMeuIuzCWG7 qpbKBZEGkmnO8EDwwGfn+bXDOjOAAAVY0cXQZ0zzwvF+1SQ/zUMrb/+i8BV92lAC +h6QkOiohuN7+sNfaqvLcSUHl00PKvuxC41E0KbyY7l/XtNmYaSOfFN+8vIb4t/r i7Pfm2puQUqGYvMHrbAG35Rch/LK3iVXHNmHibPLtmfdMWSl8/vHLf5OdetXOgvl 7KsDxlguOEmkrw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:16 2025 by rpki-client