This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json) Hash identifier: rGbfayR80NX+TPdcluifRxLf6+nmQS+CZZGhlyA7r9g= Subject key identifier: E1:56:85:31:AB:9C:FF:B1:4E:8F:EE:7A:12:CB:62:35:40:03:BF:15 Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Certificate serial: 019B5B2D3EF9D53A8F57BF320F71A546183B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft Manifest number: 0EE2 Signing time: Fri 26 Dec 2025 15:00:50 +0000 Manifest this update: Fri 26 Dec 2025 15:00:50 +0000 Manifest next update: Sat 27 Dec 2025 15:00:50 +0000 Files and hashes: 1: GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa (hash: RLZOdnWaQDPusAoiFOrFgYMm/8VCugzHSsyaalfrB2g=) 2: RNaLWw_7VynkakNVv0RB26fPjUY.roa (hash: n49s4ueNWoQ0BCZzERKKYtGr3mJSZHvzJ3B7Ky6mJzA=) 3: _41gquUxogOoHWCKFYbWi_vSDC8.roa (hash: M2zvcs7Z6gkeVy1BDzE0VTUjwyY3RsEd2ac2dCksOEU=) 4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: z63dkBrzXAEKDuL+9J+lNCC1CT3NijdeSwwRY6atkhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:2d:3e:f9:d5:3a:8f:57:bf:32:0f:71:a5:46:18:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Validity Not Before: Dec 26 15:00:50 2025 GMT Not After : Dec 27 15:00:50 2025 GMT Subject: CN=e1568531ab9cffb14e8fee7a12cb62354003bf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:90:fd:d3:cb:2f:d9:1d:9c:29:70:ac:65: 26:0e:16:ce:02:cb:7d:e8:16:64:7e:81:81:93:a7: 07:c2:d5:43:87:9d:3e:95:37:b8:09:e7:c3:90:da: a7:6b:1f:b8:df:88:07:ea:4c:6e:b8:24:4e:bd:66: 20:6c:9e:fa:76:6d:ff:ec:cb:48:50:16:67:95:c2: 10:bf:37:77:99:81:b1:af:80:8e:82:a8:d6:dc:00: 90:f6:7b:eb:a2:c6:ff:47:1e:2b:60:0a:28:b8:90: 24:8d:c6:c6:81:3c:3c:bc:b3:a1:f1:ec:f3:53:ee: 05:1d:70:95:16:45:66:f8:87:01:96:9b:9d:ec:32: fd:5a:19:5b:a2:70:98:a4:a2:61:d1:85:2c:89:03: 75:c0:b4:19:16:54:af:f8:dd:84:b2:78:bb:36:61: 58:87:a3:5e:71:5d:a7:24:a2:8f:68:c9:9a:01:43: a8:9c:72:6b:59:dd:79:cd:bc:55:8d:19:56:46:bf: 6b:dd:60:20:a1:cc:2d:48:c1:5d:6b:a9:84:28:db: 9e:ca:41:91:53:f5:c0:b1:71:01:09:62:5d:d3:f8: 0d:d3:a9:8c:ed:5f:69:66:89:0f:6e:26:0b:2f:f9: 3c:88:42:90:08:ed:7a:4a:f8:95:58:d2:b6:52:d4: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:56:85:31:AB:9C:FF:B1:4E:8F:EE:7A:12:CB:62:35:40:03:BF:15 X509v3 Authority Key Identifier: keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6d:22:26:a1:1b:c3:0b:e5:fc:7c:9c:90:cd:73:2a:89:0a: 38:bb:c7:4f:78:96:a7:3b:7a:80:6c:86:05:49:d2:27:d2:45: a7:dc:b7:12:e1:8b:19:ae:cf:42:a6:90:00:a6:6a:36:81:79: d4:1d:61:77:cc:f4:c4:47:4a:6f:dd:be:5d:0d:4f:a0:1d:84: e1:96:70:99:9e:cf:78:d1:e6:9b:a3:6f:48:80:04:60:3c:41: 61:f1:b7:06:a5:7b:5c:0b:52:c4:03:c3:8a:b5:1c:68:4b:7f: 82:e0:75:3b:e9:bd:f3:22:7c:1a:23:78:c1:fc:2a:00:b4:3d: 85:7f:94:f5:26:4f:9a:4a:42:45:1e:5d:4c:52:c1:af:39:7c: 68:cf:03:a6:67:79:f3:4f:d7:72:6a:11:4c:fa:ce:d2:f3:bc: 43:72:36:a2:a4:d4:74:63:63:db:b1:79:9a:20:44:fe:34:44: 73:62:c3:8a:0f:a4:56:1f:8d:52:01:19:1a:43:74:6c:3a:d0: 4b:32:f9:6e:6f:3e:96:eb:b8:3e:02:e5:f8:f5:ba:09:06:97: e6:e4:95:03:64:4f:d6:dd:6d:24:f1:5e:63:89:0d:c0:28:4f: 8b:cb:d4:7d:92:ba:95:cd:5f:0d:79:3c:73:f5:57:28:9d:06: 4f:c7:47:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbLT751TqPV78yD3GlRhg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3 OTUyZDEwHhcNMjUxMjI2MTUwMDUwWhcNMjUxMjI3MTUwMDUwWjAzMTEwLwYDVQQD EyhlMTU2ODUzMWFiOWNmZmIxNGU4ZmVlN2ExMmNiNjIzNTQwMDNiZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06aQ/dPLL9kdnClwrGUmDhbOAst9 6BZkfoGBk6cHwtVDh50+lTe4CefDkNqnax+434gH6kxuuCROvWYgbJ76dm3/7MtI UBZnlcIQvzd3mYGxr4COgqjW3ACQ9nvrosb/Rx4rYAoouJAkjcbGgTw8vLOh8ezz U+4FHXCVFkVm+IcBlpud7DL9WhlbonCYpKJh0YUsiQN1wLQZFlSv+N2Esni7NmFY h6NecV2nJKKPaMmaAUOonHJrWd15zbxVjRlWRr9r3WAgocwtSMFda6mEKNueykGR U/XAsXEBCWJd0/gN06mM7V9pZokPbiYLL/k8iEKQCO16SviVWNK2UtSpyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFWhTGrnP+xTo/uehLLYjVAA78VMB8GA1UdIwQY MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt MGY1ZDM3OTdhMzI1LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1 LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG0iJqEb wwvl/HyckM1zKokKOLvHT3iWpzt6gGyGBUnSJ9JFp9y3EuGLGa7PQqaQAKZqNoF5 1B1hd8z0xEdKb92+XQ1PoB2E4ZZwmZ7PeNHmm6NvSIAEYDxBYfG3BqV7XAtSxAPD irUcaEt/guB1O+m98yJ8GiN4wfwqALQ9hX+U9SZPmkpCRR5dTFLBrzl8aM8Dpmd5 80/XcmoRTPrO0vO8Q3I2oqTUdGNj27F5miBE/jREc2LDig+kVh+NUgEZGkN0bDrQ SzL5bm8+luu4PgLl+PW6CQaX5uSVA2RP1t1tJPFeY4kNwChPi8vUfZK6lc1fDXk8 c/VXKJ0GT8dHtQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:28:24 2025 by rpki-client