This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json) Hash identifier: LQKQ5r8RqqCTxJtjXc3JvLitrNTq/NH0937rP3DZ3Us= Subject key identifier: 84:94:2E:A2:9C:44:A2:48:ED:80:7B:96:10:F9:F5:F0:5F:CB:77:15 Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca Certificate serial: 019B3C7EF4FB9C451875A47908E9A10F6613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft Manifest number: 05A3 Signing time: Sat 20 Dec 2025 16:01:51 +0000 Manifest this update: Sat 20 Dec 2025 16:01:51 +0000 Manifest next update: Sun 21 Dec 2025 16:01:51 +0000 Files and hashes: 1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: QriC8zRqt6MXARekAddf/0RV79bVAveCHBYojCk6DeQ=) 2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f4:fb:9c:45:18:75:a4:79:08:e9:a1:0f:66:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca Validity Not Before: Dec 20 16:01:51 2025 GMT Not After : Dec 21 16:01:51 2025 GMT Subject: CN=84942ea29c44a248ed807b9610f9f5f05fcb7715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:bb:9e:09:dd:04:f0:34:0b:59:5a:ba:5a: 90:9f:06:e3:67:89:88:51:88:3f:c6:38:cf:3f:cc: 6d:b4:02:e7:80:1d:4a:13:85:c1:82:3f:ec:5a:0d: 15:42:dd:06:61:1d:81:87:73:9e:e3:2e:7f:67:8b: 13:f3:6b:a0:19:54:06:d9:1c:c4:bc:0e:e2:0e:9b: 33:f3:72:ab:d2:bd:23:0e:08:4f:58:fb:a8:ce:44: de:50:54:e3:74:0d:dc:55:b9:73:df:46:62:47:8e: 08:71:ba:88:10:e3:be:ce:61:89:cf:f3:35:80:65: 30:64:42:13:28:ab:04:97:82:77:b9:c2:6a:82:ef: 3c:8f:c9:59:35:11:72:59:38:98:2c:f2:76:ee:e3: 57:7f:63:25:8c:42:40:2d:1a:4d:b1:96:e9:1c:b6: c4:59:1b:bb:f2:17:34:1c:14:e6:95:76:02:d1:7c: 9b:e8:b9:fd:5f:76:49:55:69:79:aa:97:88:52:44: c8:f7:80:ce:b4:cd:9e:6f:03:b6:82:8c:58:b4:69: d8:46:ac:be:55:00:8b:13:b3:10:51:62:fd:f7:65: 1d:ea:34:cc:55:6a:89:97:9b:8a:db:29:87:38:10: 80:4f:e9:0b:d9:4b:74:4f:a3:7e:bf:f1:df:6f:a8: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:2E:A2:9C:44:A2:48:ED:80:7B:96:10:F9:F5:F0:5F:CB:77:15 X509v3 Authority Key Identifier: keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:4c:90:1e:a9:6f:e2:f1:b7:c3:8a:ee:25:6e:a5:fb:8d: 0f:42:8b:15:f5:47:a7:85:16:47:5f:33:77:f9:5c:f0:17:fb: df:b1:65:76:69:da:0d:a9:41:94:35:5f:a2:1c:14:5d:68:73: db:3d:5e:7c:d5:08:13:3d:0f:a6:bf:a2:82:6a:9b:09:ed:5f: dc:c2:ce:6f:09:15:34:d3:a2:8a:3f:12:68:cf:b7:44:2a:bf: 1d:4c:13:f1:02:35:5f:1b:ae:4f:82:33:06:72:e2:01:20:d5: 45:1a:17:37:ba:76:ed:24:99:e5:fc:e8:02:8b:53:bd:b8:fa: c8:d0:90:60:b3:58:49:96:9a:72:ef:f9:bf:99:c0:00:86:4e: 70:af:96:aa:ce:f0:8a:ab:74:89:09:9a:17:7d:4b:08:fd:a9: 18:31:02:27:23:14:b2:20:64:0d:fb:76:8e:78:44:67:27:99: 0f:d1:6d:79:a1:75:33:ee:9f:2a:95:cd:1d:54:08:fa:70:4d: 4a:99:3d:92:a5:32:c7:1d:2e:56:0b:15:ea:55:bb:b5:9c:76: 30:e2:30:77:fa:41:ea:c0:3f:a5:10:de:20:e4:6c:5a:d1:4a: e9:86:ee:2e:28:7a:c2:c4:f0:d3:1c:8a:c3:4c:66:aa:61:45: f3:b8:9e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvT7nEUYdaR5COmhD2YTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj NGUxY2EwHhcNMjUxMjIwMTYwMTUxWhcNMjUxMjIxMTYwMTUxWjAzMTEwLwYDVQQD Eyg4NDk0MmVhMjljNDRhMjQ4ZWQ4MDdiOTYxMGY5ZjVmMDVmY2I3NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+m7ngndBPA0C1laulqQnwbjZ4mI UYg/xjjPP8xttALngB1KE4XBgj/sWg0VQt0GYR2Bh3Oe4y5/Z4sT82ugGVQG2RzE vA7iDpsz83Kr0r0jDghPWPuozkTeUFTjdA3cVblz30ZiR44IcbqIEOO+zmGJz/M1 gGUwZEITKKsEl4J3ucJqgu88j8lZNRFyWTiYLPJ27uNXf2MljEJALRpNsZbpHLbE WRu78hc0HBTmlXYC0Xyb6Ln9X3ZJVWl5qpeIUkTI94DOtM2ebwO2goxYtGnYRqy+ VQCLE7MQUWL992Ud6jTMVWqJl5uK2ymHOBCAT+kL2Ut0T6N+v/Hfb6j0qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISULqKcRKJI7YB7lhD59fBfy3cVMB8GA1UdIwQY MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBdMkB6p b+Lxt8OK7iVupfuND0KLFfVHp4UWR18zd/lc8Bf737FldmnaDalBlDVfohwUXWhz 2z1efNUIEz0Ppr+igmqbCe1f3MLObwkVNNOiij8SaM+3RCq/HUwT8QI1XxuuT4Iz BnLiASDVRRoXN7p27SSZ5fzoAotTvbj6yNCQYLNYSZaacu/5v5nAAIZOcK+Wqs7w iqt0iQmaF31LCP2pGDECJyMUsiBkDft2jnhEZyeZD9FteaF1M+6fKpXNHVQI+nBN Spk9kqUyxx0uVgsV6lW7tZx2MOIwd/pB6sA/pRDeIORsWtFK6YbuLih6wsTw0xyK w0xmqmFF87iepQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:52:42 2025 by rpki-client