This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json) Hash identifier: oOgVJbhS3jdwqDsYBZ+YeFhN7PITzhrBy4B9s/jtYgI= Subject key identifier: 67:AD:BB:51:CF:9B:98:E3:35:E3:69:E3:D7:95:DD:F4:83:62:0B:6A Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Certificate serial: 019B0E9273CA75D13806ACA35A42D9D8556D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft Manifest number: 10D7 Signing time: Thu 11 Dec 2025 18:00:37 +0000 Manifest this update: Thu 11 Dec 2025 18:00:37 +0000 Manifest next update: Fri 12 Dec 2025 18:00:37 +0000 Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=) 2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: SjJNMN/hMlD+jTohbJLvE6PyqnVgnJnlIrvwMMDopSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:73:ca:75:d1:38:06:ac:a3:5a:42:d9:d8:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108 Validity Not Before: Dec 11 18:00:37 2025 GMT Not After : Dec 12 18:00:37 2025 GMT Subject: CN=67adbb51cf9b98e335e369e3d795ddf483620b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:3b:10:cb:21:c3:b5:f4:1b:8f:1d:df:5d: 14:31:0e:b2:a1:73:a2:3d:df:f4:e0:da:26:5c:4c: eb:df:3c:a3:55:9c:f0:07:84:a7:26:00:99:96:1b: 28:ab:a0:28:21:b5:87:47:1c:1a:c4:09:ed:33:a2: 0d:6a:47:07:5e:15:ec:c9:d7:a7:5a:30:81:2d:30: e1:be:03:fb:d5:80:b6:34:98:73:a3:ed:fd:2e:0f: 6c:36:9e:62:03:25:7f:bf:6e:c1:14:6c:2c:9d:5e: 35:c0:b8:73:ff:8c:d1:69:31:07:44:24:4c:d0:6a: 0d:89:ec:af:a4:8d:1b:55:4b:3a:d9:9c:8c:3f:e6: 67:f2:c5:e0:89:ac:e4:51:6e:6b:00:be:fb:78:aa: b5:fe:13:b1:96:4b:07:c9:92:a6:04:8d:18:5e:e2: d6:83:fe:1a:3d:73:06:39:46:54:5a:c1:a0:5e:ef: 1b:b7:db:78:14:12:02:36:2a:87:86:b2:ab:d4:1d: 71:9c:e8:c3:5d:1e:fc:fa:e9:cd:41:36:c4:51:ad: ac:cb:c9:57:7f:3b:83:a1:0d:6a:24:ab:75:23:1c: e2:96:78:5f:89:8a:c7:34:9f:77:f6:fd:31:33:58: da:a0:82:f3:b0:0f:52:3b:d9:a1:ec:b7:97:95:f6: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:BB:51:CF:9B:98:E3:35:E3:69:E3:D7:95:DD:F4:83:62:0B:6A X509v3 Authority Key Identifier: keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d5:02:94:fd:35:61:8e:9b:8e:eb:c1:f6:37:0d:de:ad:14: 37:9e:d3:27:6c:6a:04:d0:49:38:11:0d:70:cc:05:d3:1c:3e: 10:d4:80:ac:c0:d5:e4:c7:50:32:26:41:4f:45:47:00:0d:c5: fa:3c:81:d9:fb:c9:bd:ae:76:9a:29:ea:00:b9:13:79:b8:25: 23:07:46:f7:7b:4c:de:2b:c3:6e:94:08:29:d3:a5:a1:df:dd: a2:e3:48:6b:81:13:33:7a:0d:36:a2:b8:4b:a5:c7:c1:35:cc: 65:54:d9:7a:9a:94:45:b7:e1:d0:45:13:36:e0:39:0f:27:37: fc:23:04:c0:85:85:cd:5d:be:d2:95:a5:a6:a6:1e:f4:5b:b1: ac:ba:b5:7d:6e:57:f5:8e:d9:a0:2c:a1:bd:19:55:d3:a8:34: 1e:5e:b9:e3:43:e2:45:17:54:44:a4:e7:de:11:98:bc:42:14: 72:fe:65:03:f8:70:e2:7c:a0:ce:32:81:1d:4c:7a:8c:5e:01: 7e:eb:1b:a2:aa:26:14:07:19:2f:3d:62:7e:4e:3c:35:5e:80: cc:af:3b:10:51:ed:65:48:79:19:29:c9:aa:28:9e:8d:ab:1d: 12:f8:d4:9c:6b:f1:02:78:5a:31:07:50:90:25:51:c7:4a:69: fc:f6:e5:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOknPKddE4BqyjWkLZ2FVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3 YWUxMDgwHhcNMjUxMjExMTgwMDM3WhcNMjUxMjEyMTgwMDM3WjAzMTEwLwYDVQQD Eyg2N2FkYmI1MWNmOWI5OGUzMzVlMzY5ZTNkNzk1ZGRmNDgzNjIwYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZQ7EMshw7X0G48d310UMQ6yoXOi Pd/04NomXEzr3zyjVZzwB4SnJgCZlhsoq6AoIbWHRxwaxAntM6INakcHXhXsyden WjCBLTDhvgP71YC2NJhzo+39Lg9sNp5iAyV/v27BFGwsnV41wLhz/4zRaTEHRCRM 0GoNieyvpI0bVUs62ZyMP+Zn8sXgiazkUW5rAL77eKq1/hOxlksHyZKmBI0YXuLW g/4aPXMGOUZUWsGgXu8bt9t4FBICNiqHhrKr1B1xnOjDXR78+unNQTbEUa2sy8lX fzuDoQ1qJKt1IxzilnhfiYrHNJ939v0xM1jaoILzsA9SO9mh7LeXlfZr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGetu1HPm5jjNeNp49eV3fSDYgtqMB8GA1UdIwQY MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktUClP01 YY6bjuvB9jcN3q0UN57TJ2xqBNBJOBENcMwF0xw+ENSArMDV5MdQMiZBT0VHAA3F +jyB2fvJva52minqALkTebglIwdG93tM3ivDbpQIKdOlod/douNIa4ETM3oNNqK4 S6XHwTXMZVTZepqURbfh0EUTNuA5Dyc3/CMEwIWFzV2+0pWlpqYe9FuxrLq1fW5X 9Y7ZoCyhvRlV06g0Hl6540PiRRdURKTn3hGYvEIUcv5lA/hw4nygzjKBHUx6jF4B fusboqomFAcZLz1ifk48NV6AzK87EFHtZUh5GSnJqiiejasdEvjUnGvxAnhaMQdQ kCVRx0pp/PblwQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:35:12 2025 by rpki-client