This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json) Hash identifier: MnK7EdGrypcgvtFJ0hKbar/M9ClJ39OJn37DQjtsvqg= Subject key identifier: D6:E9:79:4F:FA:39:81:58:90:FF:70:8D:E7:F3:DD:1D:8B:10:99:DA Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Certificate serial: 019B405AF35F1168E1C2E923767207B2A7A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft Manifest number: 100C Signing time: Sun 21 Dec 2025 10:01:00 +0000 Manifest this update: Sun 21 Dec 2025 10:01:00 +0000 Manifest next update: Mon 22 Dec 2025 10:01:00 +0000 Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=) 2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: jSXfGZC3yX3Fv4RyYPNdNxlGIZvJFX1tDrYgX3kxswc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:f3:5f:11:68:e1:c2:e9:23:76:72:07:b2:a7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Validity Not Before: Dec 21 10:01:00 2025 GMT Not After : Dec 22 10:01:00 2025 GMT Subject: CN=d6e9794ffa39815890ff708de7f3dd1d8b1099da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:3f:69:fd:ce:5c:13:c9:9d:e5:95:a1:6c: bd:98:7a:ac:f3:ba:e1:3a:9b:11:d0:ee:8f:94:e8: 28:27:fc:c5:22:fc:6d:05:bd:af:ab:5f:24:a0:7d: 15:fa:aa:d9:43:62:d1:31:43:5a:be:c4:e8:2e:e5: 5d:5e:66:4b:8f:08:d8:2e:4c:6f:87:93:9b:04:8f: 82:b1:55:77:23:1f:9d:00:ae:a5:57:27:2d:1a:cd: 4a:a4:10:b3:91:29:b6:79:c5:6b:6e:14:21:aa:74: 80:9c:01:38:bf:72:11:92:5f:85:01:ca:bb:62:c9: c8:e6:7a:5d:cd:cb:0c:2c:f6:08:c0:39:5e:85:fe: e4:4a:cf:e1:d3:8c:2d:fa:70:73:46:65:73:5a:ab: 92:33:93:08:4d:94:f6:b3:b2:cf:e3:08:95:f6:07: a7:41:5d:a1:66:cc:b2:05:bc:d4:5e:c2:3c:dd:99: ab:99:ad:33:47:70:c7:fd:0d:a8:df:b3:9d:60:90: 59:b5:71:e8:c0:d6:14:6a:bf:fa:a2:92:42:cb:db: ac:f5:94:ac:ec:62:d7:43:3d:f3:85:59:11:65:f9: b2:10:dc:88:a3:8b:5d:f1:b4:b1:61:5f:37:f1:0e: f7:e4:2a:fc:03:4d:b5:90:14:10:fb:e7:a6:25:ae: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:79:4F:FA:39:81:58:90:FF:70:8D:E7:F3:DD:1D:8B:10:99:DA X509v3 Authority Key Identifier: keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ea:cf:f4:74:ae:c2:95:7b:4c:5c:16:70:b1:55:5b:84:81: fe:30:d2:d0:56:d5:4c:64:1c:0f:15:00:cb:4c:51:a1:d9:0f: df:c7:09:c6:fb:65:27:b8:f5:47:23:41:ae:bd:c6:a3:5c:bf: 6f:c3:e0:b5:45:69:bd:7a:c0:04:56:87:8e:23:82:b3:10:12: bd:5d:01:c8:60:d8:8c:5e:3c:94:3e:a1:3e:02:f5:44:eb:70: 9a:4d:ca:2e:7c:7f:c8:25:20:10:07:73:8e:eb:8d:d4:46:8b: 23:0e:02:2f:93:28:ae:53:66:73:91:37:e0:9a:b3:37:6e:17: 43:d8:a0:12:88:7c:90:b2:19:cd:da:83:1c:e1:7a:a5:84:bd: 99:00:77:3d:2b:28:44:e1:85:d7:2e:d4:95:e3:0d:28:56:0f: 78:fd:64:22:51:14:22:9e:d5:ba:9f:40:c3:1a:0e:9d:a9:4b: b6:5e:3b:10:31:fa:b6:a6:a1:c3:00:55:a8:cb:20:6f:9c:8e: a1:71:e2:e0:d6:b1:78:00:96:b8:f3:e9:58:be:ce:d4:f4:89: ab:ac:36:8d:83:64:7d:71:42:65:be:79:84:93:5b:1d:d2:dc: 47:72:2a:22:04:dd:35:cf:6e:ff:30:0d:2d:0d:1b:cc:31:d6: f8:77:bd:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWvNfEWjhwukjdnIHsqehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj Y2ZlNzUwHhcNMjUxMjIxMTAwMTAwWhcNMjUxMjIyMTAwMTAwWjAzMTEwLwYDVQQD EyhkNmU5Nzk0ZmZhMzk4MTU4OTBmZjcwOGRlN2YzZGQxZDhiMTA5OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFk/af3OXBPJneWVoWy9mHqs87rh OpsR0O6PlOgoJ/zFIvxtBb2vq18koH0V+qrZQ2LRMUNavsToLuVdXmZLjwjYLkxv h5ObBI+CsVV3Ix+dAK6lVyctGs1KpBCzkSm2ecVrbhQhqnSAnAE4v3IRkl+FAcq7 YsnI5npdzcsMLPYIwDlehf7kSs/h04wt+nBzRmVzWquSM5MITZT2s7LP4wiV9gen QV2hZsyyBbzUXsI83Zmrma0zR3DH/Q2o37OdYJBZtXHowNYUar/6opJCy9us9ZSs 7GLXQz3zhVkRZfmyENyIo4td8bSxYV838Q735Cr8A021kBQQ++emJa54LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbpeU/6OYFYkP9wjefz3R2LEJnaMB8GA1UdIwQY MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+rP9HSu wpV7TFwWcLFVW4SB/jDS0FbVTGQcDxUAy0xRodkP38cJxvtlJ7j1RyNBrr3Go1y/ b8PgtUVpvXrABFaHjiOCsxASvV0ByGDYjF48lD6hPgL1ROtwmk3KLnx/yCUgEAdz juuN1EaLIw4CL5MorlNmc5E34JqzN24XQ9igEoh8kLIZzdqDHOF6pYS9mQB3PSso ROGF1y7UleMNKFYPeP1kIlEUIp7Vup9AwxoOnalLtl47EDH6tqahwwBVqMsgb5yO oXHi4NaxeACWuPPpWL7O1PSJq6w2jYNkfXFCZb55hJNbHdLcR3IqIgTdNc9u/zAN LQ0bzDHW+He9RA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:32:08 2025 by rpki-client