This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json) Hash identifier: xkhWF6uOwa6VLXZHdH8UODIQkmi9s06oMVp+B943E30= Subject key identifier: 37:F0:64:9F:39:4C:9D:76:BD:FE:F0:72:8A:89:76:DB:27:71:2E:B6 Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Certificate serial: 019B3644EB28154C51C47E2371165AEDEB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft Manifest number: 071C Signing time: Fri 19 Dec 2025 11:00:44 +0000 Manifest this update: Fri 19 Dec 2025 11:00:44 +0000 Manifest next update: Sat 20 Dec 2025 11:00:44 +0000 Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: HDFlkUuN/B1RiRhH/IotkIQTa1C6isL4ChO7cFOJvyY=) 2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:eb:28:15:4c:51:c4:7e:23:71:16:5a:ed:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65 Validity Not Before: Dec 19 11:00:44 2025 GMT Not After : Dec 20 11:00:44 2025 GMT Subject: CN=37f0649f394c9d76bdfef0728a8976db27712eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:f7:e6:5d:24:8f:5f:44:b8:01:d8:78:33: 4d:32:a9:87:1b:7f:52:e2:93:10:fa:9a:d4:fe:a1: 26:fc:ba:b8:4c:9d:d9:69:f5:fe:5b:64:f1:26:1c: 17:c2:34:9b:53:b0:2a:88:18:3e:91:41:07:8b:4a: 5a:16:df:59:75:dc:85:c8:59:9b:32:e5:25:2f:9a: fe:7c:03:64:6d:cf:f7:2c:05:42:a6:aa:e6:7b:96: ae:27:1c:bb:a1:46:fb:f1:08:0c:7b:f1:f4:96:72: f8:b5:95:40:1f:81:fc:b4:6a:e6:e7:c8:94:78:1a: d2:11:16:ef:d1:28:3e:43:24:ca:fe:da:0c:c6:73: 83:2f:17:73:e2:6c:39:9b:70:70:d7:d6:19:05:63: df:62:3f:4a:36:af:e8:05:d8:e7:70:4b:0a:c7:88: 0b:69:b0:63:18:92:94:90:64:1f:6c:3d:a7:c6:20: a0:58:4d:bb:50:70:91:83:17:e4:e6:0a:e2:bd:e8: cc:4e:5d:d3:a8:10:82:d3:4f:f6:a9:2d:65:fa:25: 68:74:55:2a:f6:37:94:a7:5d:a3:9d:b5:1c:c0:e1: 9a:87:e4:85:c3:b6:3c:32:b1:e8:89:5c:c0:a1:db: c6:a3:e8:b4:1b:a8:57:9e:07:cf:84:6a:15:13:01: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F0:64:9F:39:4C:9D:76:BD:FE:F0:72:8A:89:76:DB:27:71:2E:B6 X509v3 Authority Key Identifier: keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4b:f0:bd:cc:ab:a0:1c:70:ca:80:d5:ba:e6:dc:83:3f:e6: d9:78:22:b3:38:79:3c:8f:e5:44:8a:2d:44:5c:86:c7:36:53: 80:54:29:fc:15:90:12:ec:58:cb:dd:0e:78:8a:29:9f:c4:51: ec:2c:3e:a6:a9:81:95:52:5b:93:e5:93:82:bb:6b:aa:5b:d5: 51:07:fd:84:6e:02:e6:c0:b1:a6:54:bd:69:82:4a:09:b2:cf: 4b:46:59:4f:52:9f:68:d6:20:c1:e3:09:4c:4f:2c:7f:2d:f4: 96:79:d9:22:e7:42:de:5c:a2:f9:08:ac:f8:11:43:49:81:8e: 01:35:fd:9b:b2:3c:ac:f7:7f:8e:91:f8:75:d9:03:85:10:02: 4d:be:37:e0:5d:7a:30:84:53:77:02:44:1d:3f:ac:98:ca:fa: 1b:07:9a:82:b6:92:c4:ba:a8:2d:cb:a6:f1:e3:7e:62:26:7a: 64:65:53:3d:72:1c:c5:89:ff:14:75:1c:cf:49:7c:da:de:94: 75:11:0b:20:ec:cc:d8:b5:d5:01:82:7b:d3:80:41:4c:07:57: 86:e1:4c:1a:2e:88:b2:13:fa:c3:2a:ef:b9:6e:e0:b6:60:7e: e3:22:7c:25:67:67:4c:74:7a:45:1b:3a:21:45:26:c9:63:cc: bc:49:b0:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2ROsoFUxRxH4jcRZa7esDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YmJkMWJmY2EyZjhhMTU3OGZhYWI1YjEwYzBmYzM1NTU2 MWNjNjUwHhcNMjUxMjE5MTEwMDQ0WhcNMjUxMjIwMTEwMDQ0WjAzMTEwLwYDVQQD EygzN2YwNjQ5ZjM5NGM5ZDc2YmRmZWYwNzI4YTg5NzZkYjI3NzEyZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuj35l0kj19EuAHYeDNNMqmHG39S 4pMQ+prU/qEm/Lq4TJ3ZafX+W2TxJhwXwjSbU7AqiBg+kUEHi0paFt9ZddyFyFmb MuUlL5r+fANkbc/3LAVCpqrme5auJxy7oUb78QgMe/H0lnL4tZVAH4H8tGrm58iU eBrSERbv0Sg+QyTK/toMxnODLxdz4mw5m3Bw19YZBWPfYj9KNq/oBdjncEsKx4gL abBjGJKUkGQfbD2nxiCgWE27UHCRgxfk5grivejMTl3TqBCC00/2qS1l+iVodFUq 9jeUp12jnbUcwOGah+SFw7Y8MrHoiVzAodvGo+i0G6hXngfPhGoVEwGZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfwZJ85TJ12vf7wcoqJdtsncS62MB8GA1UdIwQY MBaAFJa70b/KL4oVePqrWxDA/DVVYcxlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMt YTg3ZTI4NzJhZDhhLzEvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83M2Y1YjUtMjkzZC00MDM1LTkyYWMtYTg3ZTI4NzJhZDhh LzEvbHJ2UnY4b3ZpaFY0LXF0YkVNRDhOVlZoekdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkvwvcyr oBxwyoDVuubcgz/m2Xgiszh5PI/lRIotRFyGxzZTgFQp/BWQEuxYy90OeIopn8RR 7Cw+pqmBlVJbk+WTgrtrqlvVUQf9hG4C5sCxplS9aYJKCbLPS0ZZT1KfaNYgweMJ TE8sfy30lnnZIudC3lyi+Qis+BFDSYGOATX9m7I8rPd/jpH4ddkDhRACTb434F16 MIRTdwJEHT+smMr6GweagraSxLqoLcum8eN+YiZ6ZGVTPXIcxYn/FHUcz0l82t6U dRELIOzM2LXVAYJ704BBTAdXhuFMGi6IshP6wyrvuW7gtmB+4yJ8JWdnTHR6RRs6 IUUmyWPMvEmwVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:36:59 2025 by rpki-client