This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json) Hash identifier: Jcw960yRi70kH6VPjjFOJxseGrtlJhThaOXZGDZd8WI= Subject key identifier: 0E:3A:63:75:46:3E:D3:D3:30:4C:49:83:B7:9E:24:0D:64:9A:7A:12 Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f Certificate serial: 019B40C89BCB048AAA98C4F0DCC5984C9003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:00:47 +0000 Manifest this update: Sun 21 Dec 2025 12:00:47 +0000 Manifest next update: Mon 22 Dec 2025 12:00:47 +0000 Files and hashes: 1: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: RmouJfJVZrWASJsMidi/rQzWJkIwc9slPkw6gt75gRs=) 2: _eRNvbcACjLb9zEN3lnrbv0mjjE.roa (hash: Ry+XCwkTsLP6ueqUWQ1SIxu219L75tL3GOyhLkzc9RI=) 3: ufpRI9yuEp7tjzAxssHQURYt3B4.roa (hash: 7g6vsYsyIBAU9MzilTSjquNoGwZYrdhjnklJiiSJri8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:9b:cb:04:8a:aa:98:c4:f0:dc:c5:98:4c:90:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d5894923bb002a434128810607dfb526722004f Validity Not Before: Dec 21 12:00:47 2025 GMT Not After : Dec 22 12:00:47 2025 GMT Subject: CN=0e3a6375463ed3d3304c4983b79e240d649a7a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:97:70:7a:82:64:cd:5c:2a:e1:78:df:10: 54:b4:00:00:36:14:d2:eb:02:a3:a7:c3:be:e5:75: d6:93:c6:f8:60:35:85:58:9c:1c:ab:09:ce:20:09: 3d:9e:29:c7:cb:4d:8a:fe:fa:20:9d:12:f1:87:48: 61:7c:55:42:89:50:0f:da:d7:7b:8b:de:18:92:42: cd:5e:98:57:4c:c9:5c:45:82:84:ee:8d:ce:55:39: 1e:30:c7:11:46:01:eb:a0:e5:91:8a:46:be:c3:76: 40:e1:53:70:38:df:4e:8d:25:4f:ae:ee:f4:65:40: 1e:0f:19:88:72:4a:81:bf:33:82:ea:9a:94:f9:c0: 22:79:08:15:3f:be:b6:67:8d:59:d7:24:13:cd:63: 6e:1d:8d:f2:54:90:85:cf:d8:0b:93:85:3a:27:33: ca:9b:50:aa:e8:45:16:1d:d0:f5:7f:fe:d7:62:d1: 76:3e:c0:de:b3:be:a5:e6:3a:b5:ac:ef:47:b6:f9: dc:ea:31:a3:ac:ff:2f:23:bc:24:38:8a:0e:13:28: 12:dd:d2:3c:9f:7d:67:ad:5f:07:7c:a0:ba:a8:7b: c5:11:41:d6:18:de:ff:1b:dc:d2:1a:ad:e5:22:9c: a9:bc:7b:3b:d2:41:48:15:81:d6:2e:2b:da:d2:aa: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:63:75:46:3E:D3:D3:30:4C:49:83:B7:9E:24:0D:64:9A:7A:12 X509v3 Authority Key Identifier: keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:02:13:70:13:43:1d:3f:72:60:b2:d8:8e:c4:c9:1b:59: 68:7c:15:04:49:71:23:3d:73:57:62:59:db:f1:7b:71:5b:f2: 28:e0:66:de:a1:50:ac:70:d7:49:6f:7c:cd:8c:cf:96:b3:53: ec:e3:ef:84:71:fc:82:4a:23:22:0a:d9:da:89:85:44:0a:c3: b2:cd:93:80:31:0d:58:0c:2f:76:2a:c3:4c:2a:1f:de:67:c3: 83:01:bb:08:e1:d3:26:74:2d:59:c7:d8:79:a8:cb:59:12:f5: 7e:a5:89:de:36:8f:10:69:fd:71:21:b9:ee:cc:ad:02:32:12: f9:78:57:83:0b:e4:10:88:bd:e9:ad:98:89:04:76:c8:55:0f: 35:c6:cf:d1:00:27:ba:b2:04:4d:cb:6e:a1:53:89:ae:24:d4: 51:1c:df:f3:ad:8f:1c:7a:7e:fc:38:f5:4f:68:44:9e:05:3f: f8:d3:40:4d:7f:e7:e1:22:3d:4f:98:98:32:62:dd:9e:32:62: 65:33:38:74:79:c1:03:f0:9a:88:d8:3c:c7:90:0f:38:b9:5f: 10:3d:43:05:d6:10:10:97:cf:3d:ce:61:19:be:29:e9:6f:06: 11:d5:02:c7:47:68:64:91:27:92:e0:57:e9:01:97:4a:03:43: 6f:78:11:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyJvLBIqqmMTw3MWYTJADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy MjAwNGYwHhcNMjUxMjIxMTIwMDQ3WhcNMjUxMjIyMTIwMDQ3WjAzMTEwLwYDVQQD EygwZTNhNjM3NTQ2M2VkM2QzMzA0YzQ5ODNiNzllMjQwZDY0OWE3YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA+XcHqCZM1cKuF43xBUtAAANhTS 6wKjp8O+5XXWk8b4YDWFWJwcqwnOIAk9ninHy02K/vognRLxh0hhfFVCiVAP2td7 i94YkkLNXphXTMlcRYKE7o3OVTkeMMcRRgHroOWRika+w3ZA4VNwON9OjSVPru70 ZUAeDxmIckqBvzOC6pqU+cAieQgVP762Z41Z1yQTzWNuHY3yVJCFz9gLk4U6JzPK m1Cq6EUWHdD1f/7XYtF2PsDes76l5jq1rO9Htvnc6jGjrP8vI7wkOIoOEygS3dI8 n31nrV8HfKC6qHvFEUHWGN7/G9zSGq3lIpypvHs70kFIFYHWLiva0qoZ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA46Y3VGPtPTMExJg7eeJA1kmnoSMB8GA1UdIwQY MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaECE3AT Qx0/cmCy2I7EyRtZaHwVBElxIz1zV2JZ2/F7cVvyKOBm3qFQrHDXSW98zYzPlrNT 7OPvhHH8gkojIgrZ2omFRArDss2TgDENWAwvdirDTCof3mfDgwG7COHTJnQtWcfY eajLWRL1fqWJ3jaPEGn9cSG57sytAjIS+XhXgwvkEIi96a2YiQR2yFUPNcbP0QAn urIETctuoVOJriTUURzf862PHHp+/Dj1T2hEngU/+NNATX/n4SI9T5iYMmLdnjJi ZTM4dHnBA/CaiNg8x5APOLlfED1DBdYQEJfPPc5hGb4p6W8GEdUCx0doZJEnkuBX 6QGXSgNDb3gRVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:50:09 2025 by rpki-client