This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json) Hash identifier: dYI4pfo+LSCgPQb7eYmNajceWvWeWNPl6LYHhbUO+Lw= Subject key identifier: 74:F3:A7:99:9E:9F:26:E9:4B:34:3B:D0:3B:FF:1E:F6:14:99:C3:51 Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Certificate serial: 019B3343C6B9E2551450D53177E990C708EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft Manifest number: 10EA Signing time: Thu 18 Dec 2025 21:00:38 +0000 Manifest this update: Thu 18 Dec 2025 21:00:38 +0000 Manifest next update: Fri 19 Dec 2025 21:00:38 +0000 Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=) 2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: AAt8JMrjboroGyj4v8x9byXrR979hqW9ov68qu1plR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:c6:b9:e2:55:14:50:d5:31:77:e9:90:c7:08:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Validity Not Before: Dec 18 21:00:38 2025 GMT Not After : Dec 19 21:00:38 2025 GMT Subject: CN=74f3a7999e9f26e94b343bd03bff1ef61499c351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:dd:aa:b6:8f:7f:ec:56:e0:6e:b6:e1:5e: ae:93:d4:79:d6:13:b3:99:9d:73:7b:07:1b:71:47: bc:44:fa:b4:5a:6a:7b:54:04:1a:1a:13:a4:21:eb: 73:11:be:04:1a:e1:08:42:52:d6:3b:12:9a:40:a2: a6:4e:fd:90:97:ef:ab:d4:77:60:85:4e:a9:7d:20: c2:ba:52:55:14:67:5c:7b:c3:c2:3f:2d:48:23:15: 77:03:bc:ec:3e:94:42:10:43:4b:93:18:08:a9:c2: 40:93:e5:b8:6a:e0:92:1f:90:99:c1:c2:66:af:29: 56:c7:7a:76:13:77:f3:60:e6:53:2b:c1:86:11:b0: 18:00:fd:8b:7f:ec:89:51:d9:f3:9a:49:dc:f7:c0: 6f:bf:0f:37:02:45:38:7c:f7:0c:1d:72:88:fe:76: 61:fa:a7:d8:21:0b:70:55:83:84:74:01:63:05:4f: b1:3b:33:d4:b4:d9:8e:99:4f:fa:27:6a:4c:cb:13: 7f:58:65:82:cc:36:f4:3b:ac:95:ce:4f:88:28:72: 95:a8:0c:e2:f2:63:cb:11:6b:79:c2:12:1e:2b:3a: 14:64:99:bf:c2:7b:53:45:36:46:1d:8b:ff:fe:ce: a6:e3:8f:d1:43:39:d3:4a:19:14:20:00:55:7b:ad: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:A7:99:9E:9F:26:E9:4B:34:3B:D0:3B:FF:1E:F6:14:99:C3:51 X509v3 Authority Key Identifier: keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:76:7c:c7:55:b0:36:ff:34:e2:47:b7:ea:18:a8:8d:ab:f3: d0:17:29:c5:d2:a7:e6:b9:88:16:19:07:75:40:8a:d8:cb:d0: e0:35:5e:64:19:ea:41:9e:03:5b:76:3b:d6:79:2d:26:f0:68: ae:62:e5:69:3b:7d:66:3b:85:7e:7c:28:95:10:9b:b7:8a:34: 51:7b:8c:f7:81:58:f7:dc:65:91:6f:13:a9:8c:03:53:5a:de: 08:f2:28:cd:3f:8b:21:64:23:f5:d9:33:69:b5:1e:09:2d:57: fc:8d:f9:ac:9b:61:1f:01:42:60:dc:47:9a:a6:2f:2b:00:0c: 76:68:d6:0c:35:99:83:db:35:66:33:17:5f:e3:0b:dd:2a:8a: 9a:4c:53:b1:0b:32:3d:60:f4:90:95:a6:47:3c:59:24:e6:93: 40:bf:d1:4d:b6:63:ae:68:44:6b:bf:76:28:d5:f2:95:47:08: b7:e5:cd:07:38:0d:ea:57:49:fe:e5:ad:cc:65:32:b8:00:02: 96:33:54:64:46:49:e0:68:67:43:19:9a:a6:b8:74:76:9b:d9: 45:33:f3:ad:16:45:da:c7:f5:f4:ac:70:b4:fe:00:33:7f:f6: 38:b1:46:d5:0e:67:e9:76:d3:7f:71:9b:3b:48:78:ff:9e:a5: 55:d5:4f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ8a54lUUUNUxd+mQxwjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3 YWUxMDgwHhcNMjUxMjE4MjEwMDM4WhcNMjUxMjE5MjEwMDM4WjAzMTEwLwYDVQQD Eyg3NGYzYTc5OTllOWYyNmU5NGIzNDNiZDAzYmZmMWVmNjE0OTljMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cvdqraPf+xW4G624V6uk9R51hOz mZ1zewcbcUe8RPq0Wmp7VAQaGhOkIetzEb4EGuEIQlLWOxKaQKKmTv2Ql++r1Hdg hU6pfSDCulJVFGdce8PCPy1IIxV3A7zsPpRCEENLkxgIqcJAk+W4auCSH5CZwcJm rylWx3p2E3fzYOZTK8GGEbAYAP2Lf+yJUdnzmknc98Bvvw83AkU4fPcMHXKI/nZh +qfYIQtwVYOEdAFjBU+xOzPUtNmOmU/6J2pMyxN/WGWCzDb0O6yVzk+IKHKVqAzi 8mPLEWt5whIeKzoUZJm/wntTRTZGHYv//s6m44/RQznTShkUIABVe60WuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTzp5menybpSzQ70Dv/HvYUmcNRMB8GA1UdIwQY MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3Z8x1Ww Nv804ke36hiojavz0BcpxdKn5rmIFhkHdUCK2MvQ4DVeZBnqQZ4DW3Y71nktJvBo rmLlaTt9ZjuFfnwolRCbt4o0UXuM94FY99xlkW8TqYwDU1reCPIozT+LIWQj9dkz abUeCS1X/I35rJthHwFCYNxHmqYvKwAMdmjWDDWZg9s1ZjMXX+ML3SqKmkxTsQsy PWD0kJWmRzxZJOaTQL/RTbZjrmhEa792KNXylUcIt+XNBzgN6ldJ/uWtzGUyuAAC ljNUZEZJ4GhnQxmaprh0dpvZRTPzrRZF2sf19KxwtP4AM3/2OLFG1Q5n6XbTf3Gb O0h4/56lVdVPzA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:41 2025 by rpki-client