This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json) Hash identifier: yyRWaRw+A3UgJ4szML+AbQX6Y3EmVqBUIvW6PHgVX9o= Subject key identifier: 24:27:AE:E5:0B:0C:5E:CA:86:64:5A:F2:8E:0C:90:80:93:BE:AC:F5 Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Certificate serial: 019B465D46E1150678BA2882F4DB8BB5907F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft Manifest number: 05E5 Signing time: Mon 22 Dec 2025 14:01:16 +0000 Manifest this update: Mon 22 Dec 2025 14:01:16 +0000 Manifest next update: Tue 23 Dec 2025 14:01:16 +0000 Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=) 2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: hgyxIq5lj3oLhaOMP8/hqY7zfJzp7yRZvJIxVSY/7Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:46:e1:15:06:78:ba:28:82:f4:db:8b:b5:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4 Validity Not Before: Dec 22 14:01:16 2025 GMT Not After : Dec 23 14:01:16 2025 GMT Subject: CN=2427aee50b0c5eca86645af28e0c908093beacf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:cd:9b:4c:4a:c2:1f:e2:46:01:64:f2:d6: 78:ac:35:54:53:12:22:4a:dc:43:5f:3b:69:f6:03: db:68:e1:2d:76:31:bf:cf:b0:fa:9f:fb:cd:a7:1d: 01:cd:65:25:f9:b6:0e:82:14:f2:5a:de:b9:57:67: ed:fc:69:a0:01:f6:df:f7:a9:f0:ec:46:3b:f1:81: 22:00:07:e3:a5:a8:39:6f:48:e4:b3:a8:cb:cf:e0: d8:0c:20:d2:63:8d:e8:c1:5d:f8:ea:c2:47:39:b0: b7:97:42:18:88:5c:a5:b6:fe:f5:7c:c1:04:a7:04: 5e:8c:4e:f7:33:4f:91:e6:66:6f:7b:d9:c8:0f:c0: a0:7f:d1:a3:20:ff:52:61:f2:bf:63:ab:6a:08:9d: d1:5e:58:25:cc:a2:48:76:8f:80:0d:1d:c2:98:b0: 28:ca:44:33:24:3d:30:05:54:2d:e0:86:b9:4b:9c: aa:37:2d:e4:29:51:ae:4a:a3:3d:9d:0d:0a:9a:ed: b6:de:e1:37:27:e5:86:4e:67:0e:8e:75:9e:f4:9f: f4:e2:4d:16:ec:38:ae:54:46:d5:78:0d:3d:5b:23: 9e:f7:4c:02:c6:bc:81:fc:91:84:db:5b:02:55:f1: f8:57:b2:8e:e1:70:8e:d3:fe:a6:47:7b:aa:65:a2: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:AE:E5:0B:0C:5E:CA:86:64:5A:F2:8E:0C:90:80:93:BE:AC:F5 X509v3 Authority Key Identifier: keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:fb:4c:60:a0:6d:92:50:ca:80:db:6d:3f:d6:fb:58:cf: 39:1f:48:a8:92:17:31:18:c5:bb:20:5a:e6:3b:8c:22:dc:a8: 95:4d:c5:12:87:f0:f6:ba:b6:a7:4e:f5:fa:b5:17:73:0a:74: a5:31:51:da:d9:27:23:c5:f0:40:a6:32:15:d9:bb:21:9d:a6: 1e:2f:44:37:3b:9f:88:98:a4:72:a6:36:66:c5:0c:6e:ad:33: cc:8d:b2:2d:81:9d:89:dc:3c:d3:84:fd:e3:de:32:74:01:88: e8:da:da:32:3e:88:de:48:91:b2:df:46:d3:27:25:c7:f8:e8: 9b:c7:5c:f1:1e:47:49:b6:60:8c:17:c0:14:3d:7c:7b:5d:a8: 5f:e9:85:e0:26:f8:79:f8:e4:a3:bd:93:ea:b8:78:ab:23:eb: 77:99:3d:fc:37:a4:2b:3f:f9:05:ca:4e:15:02:b5:30:7a:48: 23:18:6c:e4:52:d6:43:59:f7:69:1d:e5:d3:ff:33:6f:96:50: 14:bf:a6:8d:83:8b:d1:58:15:be:15:63:e6:21:1a:f0:a8:1e: be:83:65:94:e7:2f:e1:4d:3f:9b:71:33:de:25:f2:2c:d5:b0: b8:0a:eb:3f:81:17:7e:0c:4f:9a:51:70:2c:5d:e0:81:1d:f2: 3c:2b:4e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXUbhFQZ4uiiC9NuLtZB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1 NTYxZTQwHhcNMjUxMjIyMTQwMTE2WhcNMjUxMjIzMTQwMTE2WjAzMTEwLwYDVQQD EygyNDI3YWVlNTBiMGM1ZWNhODY2NDVhZjI4ZTBjOTA4MDkzYmVhY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdTNm0xKwh/iRgFk8tZ4rDVUUxIi StxDXztp9gPbaOEtdjG/z7D6n/vNpx0BzWUl+bYOghTyWt65V2ft/GmgAfbf96nw 7EY78YEiAAfjpag5b0jks6jLz+DYDCDSY43owV346sJHObC3l0IYiFyltv71fMEE pwRejE73M0+R5mZve9nID8Cgf9GjIP9SYfK/Y6tqCJ3RXlglzKJIdo+ADR3CmLAo ykQzJD0wBVQt4Ia5S5yqNy3kKVGuSqM9nQ0Kmu223uE3J+WGTmcOjnWe9J/04k0W 7DiuVEbVeA09WyOe90wCxryB/JGE21sCVfH4V7KO4XCO0/6mR3uqZaLf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQnruULDF7KhmRa8o4MkICTvqz1MB8GA1UdIwQY MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0 LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD37TGCg bZJQyoDbbT/W+1jPOR9IqJIXMRjFuyBa5juMItyolU3FEofw9rq2p071+rUXcwp0 pTFR2tknI8XwQKYyFdm7IZ2mHi9ENzufiJikcqY2ZsUMbq0zzI2yLYGdidw804T9 494ydAGI6NraMj6I3kiRst9G0yclx/jom8dc8R5HSbZgjBfAFD18e12oX+mF4Cb4 efjko72T6rh4qyPrd5k9/DekKz/5BcpOFQK1MHpIIxhs5FLWQ1n3aR3l0/8zb5ZQ FL+mjYOL0VgVvhVj5iEa8KgevoNllOcv4U0/m3Ez3iXyLNWwuArrP4EXfgxPmlFw LF3ggR3yPCtOnA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:56:40 2025 by rpki-client