This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json) Hash identifier: 35vgOaZtvvoAiOqdS3u5jDM89u08HHrbwMbc/87jFZo= Subject key identifier: C5:B3:8E:97:3A:BF:E7:5E:B6:41:B5:96:77:C7:13:B1:38:54:85:E4 Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Certificate serial: 019B3EA3998A44F267DF1CE9F95836E1F4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 02:01:07 +0000 Manifest this update: Sun 21 Dec 2025 02:01:07 +0000 Manifest next update: Mon 22 Dec 2025 02:01:07 +0000 Files and hashes: 1: O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa (hash: XfsGt0J7O4EdBwVu7o4CD1xoooiqwOChTXXKbThpML4=) 2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: siLsHphMC+mXAeP8aOIyVhBAhEkOuNehjzEMiJl0QgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:99:8a:44:f2:67:df:1c:e9:f9:58:36:e1:f4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8 Validity Not Before: Dec 21 02:01:07 2025 GMT Not After : Dec 22 02:01:07 2025 GMT Subject: CN=c5b38e973abfe75eb641b59677c713b1385485e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:ce:79:ee:a5:27:46:97:dd:57:29:b0:9c: 79:85:e5:ca:85:68:44:3f:89:0b:7f:76:90:2c:42: ee:2a:ed:9a:df:54:4f:a3:a5:ef:85:2f:b0:32:94: ca:1f:9b:ba:9e:41:25:a9:80:cd:4b:f6:c8:8e:f5: 06:71:d0:b8:b9:6b:49:d5:a0:2f:73:b6:11:4c:cb: b7:3e:23:eb:79:4b:0a:a7:d6:6a:40:eb:c5:ba:6c: 22:d7:10:20:71:44:0f:b1:b5:6a:24:46:1e:d9:7d: 00:37:27:cc:6f:32:d9:43:94:1f:57:e6:cb:c1:f9: a5:92:48:3e:79:f2:06:48:03:c1:3e:55:6c:13:15: f5:58:2b:ba:6b:54:e3:9a:79:c3:08:b4:12:78:25: dd:b1:ee:21:76:ce:49:3d:5b:c3:52:a0:11:e0:68: 05:f7:9c:ae:36:06:64:78:f4:9a:3f:e4:b2:d6:00: 25:5c:ab:cb:72:cd:aa:64:c1:da:d7:79:af:51:e1: a5:8f:8c:3d:36:0c:33:4c:05:b6:5b:6b:6e:ea:86: f6:ed:7c:45:25:6a:7a:44:83:73:da:cc:e0:d2:8f: 20:d5:29:84:64:09:1e:16:10:de:a9:f9:2b:06:80: b7:79:a5:38:d3:92:64:e6:80:82:1e:ab:22:3a:2e: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B3:8E:97:3A:BF:E7:5E:B6:41:B5:96:77:C7:13:B1:38:54:85:E4 X509v3 Authority Key Identifier: keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8b:03:87:43:e1:7a:5d:d2:60:13:1d:1d:7b:6f:35:78:fc: 61:eb:04:db:ce:bd:0c:9c:0d:01:5a:06:c4:51:9e:c4:64:d8: 73:d5:9f:df:2f:a9:ae:fb:a8:66:fe:ed:0b:40:9c:7f:d2:be: d0:cd:65:5e:89:8c:ee:1c:08:2d:16:e2:a6:dc:f3:e0:5d:e7: 06:17:47:03:6b:41:19:e4:64:5a:80:88:30:15:ef:d7:c2:a1: 7f:d0:cf:ec:69:fa:e3:8c:a6:69:4d:e8:e6:e8:eb:73:37:51: dd:ac:62:4c:dd:ff:8a:79:7a:d4:d1:78:db:7a:c1:d7:4e:77: cd:1d:b9:e5:ee:95:56:46:5d:46:32:5c:bf:b8:80:de:13:7b: 8f:d2:36:06:b0:5a:76:b0:25:4b:15:92:d6:cc:df:e1:c4:b7: d6:81:38:6c:0a:d3:ee:4f:f6:f2:0b:07:84:20:27:9c:9c:53: 11:bb:4c:34:b0:87:6e:16:7e:3f:13:af:a8:5d:f2:51:dc:12: 01:b8:7d:72:13:2b:b5:22:f9:8c:e5:ca:21:8b:17:dc:4d:1e: aa:3f:b2:a9:3f:56:99:84:ec:8f:4e:d4:50:11:b7:95:7c:4d: a2:ad:87:ab:6e:b0:b2:7a:4f:2c:18:86:59:6b:57:04:de:ca: 52:b0:c2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5mKRPJn3xzp+Vg24fSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw MzA0ZjgwHhcNMjUxMjIxMDIwMTA3WhcNMjUxMjIyMDIwMTA3WjAzMTEwLwYDVQQD EyhjNWIzOGU5NzNhYmZlNzVlYjY0MWI1OTY3N2M3MTNiMTM4NTQ4NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHzOee6lJ0aX3VcpsJx5heXKhWhE P4kLf3aQLELuKu2a31RPo6XvhS+wMpTKH5u6nkElqYDNS/bIjvUGcdC4uWtJ1aAv c7YRTMu3PiPreUsKp9ZqQOvFumwi1xAgcUQPsbVqJEYe2X0ANyfMbzLZQ5QfV+bL wfmlkkg+efIGSAPBPlVsExX1WCu6a1TjmnnDCLQSeCXdse4hds5JPVvDUqAR4GgF 95yuNgZkePSaP+Sy1gAlXKvLcs2qZMHa13mvUeGlj4w9NgwzTAW2W2tu6ob27XxF JWp6RINz2szg0o8g1SmEZAkeFhDeqfkrBoC3eaU405Jk5oCCHqsiOi4Z5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWzjpc6v+detkG1lnfHE7E4VIXkMB8GA1UdIwQY MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt YmRhYTZmYmQ0MzQ3LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3 LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYsDh0Ph el3SYBMdHXtvNXj8YesE2869DJwNAVoGxFGexGTYc9Wf3y+prvuoZv7tC0Ccf9K+ 0M1lXomM7hwILRbiptzz4F3nBhdHA2tBGeRkWoCIMBXv18Khf9DP7Gn644ymaU3o 5ujrczdR3axiTN3/inl61NF423rB1053zR255e6VVkZdRjJcv7iA3hN7j9I2BrBa drAlSxWS1szf4cS31oE4bArT7k/28gsHhCAnnJxTEbtMNLCHbhZ+PxOvqF3yUdwS Abh9chMrtSL5jOXKIYsX3E0eqj+yqT9WmYTsj07UUBG3lXxNoq2Hq26wsnpPLBiG WWtXBN7KUrDCTA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:41 2025 by rpki-client