This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json) Hash identifier: iSpX/5i7sPHwr7O1u/jz/y0vLBSh4BzbHlQ3W2zVP9c= Subject key identifier: C2:73:4B:BF:F6:A2:3A:4A:63:7D:5D:C3:26:49:84:E5:90:32:26:13 Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d Certificate serial: 019B341F908CDEB61F7CC6E2E28C8B4102AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft Manifest number: 11DC Signing time: Fri 19 Dec 2025 01:00:42 +0000 Manifest this update: Fri 19 Dec 2025 01:00:42 +0000 Manifest next update: Sat 20 Dec 2025 01:00:42 +0000 Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=) 2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: +AnHSlIoZzDtymtcXWtN1E67JgXvb9O/GXCweIZV1Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:90:8c:de:b6:1f:7c:c6:e2:e2:8c:8b:41:02:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d Validity Not Before: Dec 19 01:00:42 2025 GMT Not After : Dec 20 01:00:42 2025 GMT Subject: CN=c2734bbff6a23a4a637d5dc3264984e590322613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:f3:9f:a7:75:71:4e:23:d7:7d:2f:c4:98: 81:d0:37:4a:05:e3:1e:b5:04:c8:45:32:b9:e2:d2: 47:e1:3c:b9:48:9f:b5:3b:70:a2:96:1f:c4:c7:31: b9:aa:81:9a:88:e5:ca:29:eb:56:8d:04:d5:8c:bb: 7a:bc:d6:6c:c3:aa:af:a3:d1:56:cb:97:a9:49:b0: f0:fa:11:0b:6d:0e:90:2a:d1:3f:12:ff:cc:b4:9b: 18:2d:01:1a:96:87:4c:9c:20:6f:a2:c8:3d:49:b4: a5:b5:d6:6e:06:38:58:78:e8:7f:a9:06:62:d0:78: 97:c1:62:77:ba:91:9e:d8:da:8a:7c:26:7a:a2:c0: 51:e3:da:d3:57:9b:79:3d:b8:83:81:47:67:95:4f: 27:f5:41:ec:3c:06:c6:12:7a:ac:80:fb:93:f6:8b: 98:84:17:f0:b9:e0:ce:73:dd:7b:bf:08:b6:8f:1e: a8:d9:77:bc:0c:e5:2c:66:5e:de:ba:55:d2:2d:d5: 65:df:7f:2d:5a:1e:47:cb:61:ff:8f:9c:15:d5:e9: 87:07:7e:72:32:31:f4:5a:27:df:c4:04:e0:4f:10: 8e:90:8e:d3:2b:c4:9b:d3:54:a1:3c:3b:74:b1:e8: 17:fd:65:fa:d9:e5:34:ee:7d:4e:9e:51:7a:3f:68: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:4B:BF:F6:A2:3A:4A:63:7D:5D:C3:26:49:84:E5:90:32:26:13 X509v3 Authority Key Identifier: keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ca:9e:27:ed:dd:07:35:f9:c2:dd:6f:cd:bb:5d:57:d0:c9: 1a:f0:7d:69:20:c2:06:19:28:78:40:d4:43:fa:51:e2:5d:ee: bf:7a:ea:93:52:4c:f2:c8:51:ae:18:c9:ae:82:16:8b:ba:34: be:20:50:e1:68:08:36:71:b3:08:21:22:2f:5d:80:a6:30:bb: 96:b8:d0:31:7c:c4:ee:7a:ee:55:51:54:65:10:0a:a7:97:a5: 48:5c:b6:1d:9a:f0:51:d2:0d:e4:fe:df:bc:29:a3:1a:ba:80: 19:bb:1b:25:6c:bf:59:da:8f:1f:e2:cd:10:77:a1:40:0d:50: e4:63:c6:a4:d4:ad:0d:8e:a9:15:76:e5:c4:20:27:77:3f:f1: bb:29:76:ff:3e:4b:33:e0:e2:56:27:d5:69:68:3f:db:ef:bf: ab:05:e5:ad:44:70:2d:78:e2:0e:6d:3e:3b:ef:92:7d:f1:fe: ba:bf:14:2c:a8:83:6a:21:6a:98:db:e1:1e:03:de:d8:a4:b6: ed:95:02:2e:7a:d3:da:ff:01:ff:64:e1:40:98:6f:f6:ea:00: 44:f7:07:47:56:99:89:e0:a2:96:5f:fe:9e:9a:d9:9c:d0:7e: 64:b3:93:23:12:27:9e:46:75:98:dd:00:1e:04:b0:a5:ad:2e: 82:d7:06:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5CM3rYffMbi4oyLQQKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTVjNGRkN2YyMTJmYzQ4OTZiZDBjOTcxODYwYzA1YjMw ZWViOGQwHhcNMjUxMjE5MDEwMDQyWhcNMjUxMjIwMDEwMDQyWjAzMTEwLwYDVQQD EyhjMjczNGJiZmY2YTIzYTRhNjM3ZDVkYzMyNjQ5ODRlNTkwMzIyNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/fzn6d1cU4j130vxJiB0DdKBeMe tQTIRTK54tJH4Ty5SJ+1O3Cilh/ExzG5qoGaiOXKKetWjQTVjLt6vNZsw6qvo9FW y5epSbDw+hELbQ6QKtE/Ev/MtJsYLQEalodMnCBvosg9SbSltdZuBjhYeOh/qQZi 0HiXwWJ3upGe2NqKfCZ6osBR49rTV5t5PbiDgUdnlU8n9UHsPAbGEnqsgPuT9ouY hBfwueDOc917vwi2jx6o2Xe8DOUsZl7eulXSLdVl338tWh5Hy2H/j5wV1emHB35y MjH0WiffxATgTxCOkI7TK8Sb01ShPDt0segX/WX62eU07n1OnlF6P2hY0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJzS7/2ojpKY31dwyZJhOWQMiYTMB8GA1UdIwQY MBaAFC1VxN1/IS/EiWvQyXGGDAWzDuuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2Qt ODBkMzVlOWQzOWVhLzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjgxNDUtZjZkOC00MmMzLWE5N2QtODBkMzVlOWQzOWVh LzEvTFZYRTNYOGhMOFNKYTlESmNZWU1CYk1PNjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcqeJ+3d BzX5wt1vzbtdV9DJGvB9aSDCBhkoeEDUQ/pR4l3uv3rqk1JM8shRrhjJroIWi7o0 viBQ4WgINnGzCCEiL12ApjC7lrjQMXzE7nruVVFUZRAKp5elSFy2HZrwUdIN5P7f vCmjGrqAGbsbJWy/WdqPH+LNEHehQA1Q5GPGpNStDY6pFXblxCAndz/xuyl2/z5L M+DiVifVaWg/2++/qwXlrURwLXjiDm0+O++SffH+ur8ULKiDaiFqmNvhHgPe2KS2 7ZUCLnrT2v8B/2ThQJhv9uoARPcHR1aZieCill/+nprZnNB+ZLOTIxInnkZ1mN0A HgSwpa0ugtcGLg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:42:02 2025 by rpki-client