This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json) Hash identifier: QNU9Zonyrr5AdH7hafztToRtAc9qHdxmfp8PiE4DDDU= Subject key identifier: D7:80:0A:F8:E9:87:26:95:B7:2B:AD:79:58:09:16:8B:05:C2:E2:F9 Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Certificate serial: 019B194D289A3FD83478DAFB78440E12FD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft Manifest number: 11A8 Signing time: Sat 13 Dec 2025 20:00:45 +0000 Manifest this update: Sat 13 Dec 2025 20:00:45 +0000 Manifest next update: Sun 14 Dec 2025 20:00:45 +0000 Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=) 2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=) 3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: NbyuPEF5opb5hNnXPbvrxxz+xDs+abNEPi+N600gWPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:28:9a:3f:d8:34:78:da:fb:78:44:0e:12:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Validity Not Before: Dec 13 20:00:45 2025 GMT Not After : Dec 14 20:00:45 2025 GMT Subject: CN=d7800af8e9872695b72bad795809168b05c2e2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:2f:c4:94:3b:08:42:21:ca:72:39:19:3c: b7:0b:4e:ec:b6:4d:bf:99:ce:5f:5d:e7:e1:1c:18: c0:1b:0a:3c:1c:13:16:2c:60:b2:d8:78:05:42:17: c3:42:19:d7:07:e1:45:99:97:01:a2:52:5e:4c:5e: 1f:d6:2b:4c:10:d4:64:3b:21:72:1a:da:71:c1:5e: 64:76:d3:23:2b:f0:94:0e:f3:cc:d8:c9:35:4f:2a: df:0a:bd:10:4f:19:f3:95:a5:a1:e6:6b:c1:5a:63: 51:7e:03:4a:fc:3c:e2:4b:31:39:9f:da:80:23:82: a0:29:6e:c3:86:84:24:7a:ef:56:93:e0:f4:aa:36: 58:fb:4c:73:ee:45:73:e1:6b:f6:ed:76:b6:d1:1f: ef:95:08:c8:d6:0b:78:ca:66:a5:d8:33:e3:c6:51: 5a:29:da:84:72:8a:d8:75:22:5d:e9:04:1f:97:7a: 72:56:9c:a0:28:ab:19:f9:97:cb:64:72:3b:3c:95: d3:cf:51:b7:91:c1:97:04:8e:8e:75:c1:95:a1:a7: af:9b:47:41:f6:e5:8a:02:ee:80:d1:71:42:3e:8b: ec:70:ce:29:15:d6:9e:a3:9b:b6:8f:45:a8:7b:e2: 22:f4:9a:db:a7:3c:c8:48:4c:9e:98:38:47:db:f5: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:80:0A:F8:E9:87:26:95:B7:2B:AD:79:58:09:16:8B:05:C2:E2:F9 X509v3 Authority Key Identifier: keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:61:59:9c:b8:e7:ea:69:f3:2b:af:30:90:c2:e1:95:02:23: 6b:91:39:30:4f:f1:7d:71:b3:44:00:de:df:30:38:aa:c4:1b: 0f:ca:9d:70:ee:c0:a8:94:36:b0:c8:5f:fb:9c:3a:fb:89:0a: 75:e8:71:07:92:ae:da:9c:38:1f:23:2c:1e:cb:3f:48:67:4a: 21:75:48:cf:75:6a:2e:4b:98:01:9f:33:12:22:7c:90:1a:72: 70:f7:ad:85:81:f1:02:a5:8f:11:b4:01:6f:d5:6e:77:31:86: 6f:ab:d7:7f:a5:30:74:de:e4:36:42:53:51:be:2c:83:fc:7f: f8:c9:3c:77:be:68:54:17:44:3c:7b:f1:f0:02:94:c8:a2:26: 2a:f5:2b:a3:7d:8d:18:c9:b1:03:d8:a9:79:52:8e:8e:1d:ff: 86:35:23:81:23:3e:bf:bc:5f:fd:33:3e:a7:22:8c:82:c5:6a: d5:eb:ad:76:3d:79:bc:82:1a:56:b5:0d:cb:f7:74:60:73:ae: 9d:ae:e9:50:af:46:0d:51:d1:5e:db:e5:de:cd:bb:03:a7:86: b3:d9:e8:6b:21:48:09:e1:3c:56:90:34:bb:cc:83:d3:af:ac: 08:d5:a8:31:51:bc:93:27:50:f2:f4:49:c0:a1:67:90:ef:00: fe:36:d2:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTSiaP9g0eNr7eEQOEv0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3 ZWYxNjYwHhcNMjUxMjEzMjAwMDQ1WhcNMjUxMjE0MjAwMDQ1WjAzMTEwLwYDVQQD EyhkNzgwMGFmOGU5ODcyNjk1YjcyYmFkNzk1ODA5MTY4YjA1YzJlMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7svxJQ7CEIhynI5GTy3C07stk2/ mc5fXefhHBjAGwo8HBMWLGCy2HgFQhfDQhnXB+FFmZcBolJeTF4f1itMENRkOyFy GtpxwV5kdtMjK/CUDvPM2Mk1TyrfCr0QTxnzlaWh5mvBWmNRfgNK/DziSzE5n9qA I4KgKW7DhoQkeu9Wk+D0qjZY+0xz7kVz4Wv27Xa20R/vlQjI1gt4ymal2DPjxlFa KdqEcorYdSJd6QQfl3pyVpygKKsZ+ZfLZHI7PJXTz1G3kcGXBI6OdcGVoaevm0dB 9uWKAu6A0XFCPovscM4pFdaeo5u2j0Woe+Ii9JrbpzzISEyemDhH2/XrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeACvjphyaVtyuteVgJFosFwuL5MB8GA1UdIwQY MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWFZnLjn 6mnzK68wkMLhlQIja5E5ME/xfXGzRADe3zA4qsQbD8qdcO7AqJQ2sMhf+5w6+4kK dehxB5Ku2pw4HyMsHss/SGdKIXVIz3VqLkuYAZ8zEiJ8kBpycPethYHxAqWPEbQB b9VudzGGb6vXf6UwdN7kNkJTUb4sg/x/+Mk8d75oVBdEPHvx8AKUyKImKvUro32N GMmxA9ipeVKOjh3/hjUjgSM+v7xf/TM+pyKMgsVq1eutdj15vIIaVrUNy/d0YHOu na7pUK9GDVHRXtvl3s27A6eGs9noayFICeE8VpA0u8yD06+sCNWoMVG8kydQ8vRJ wKFnkO8A/jbStg== -----END CERTIFICATE-----Generated at Sun Dec 14 05:06:04 2025 by rpki-client