This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json) Hash identifier: JcEx50VbAlWAY44rs2npKJ1ggtifs97qhizxTpMvjCo= Subject key identifier: 84:C3:4C:76:D8:AC:BA:BD:45:7A:C9:72:29:1B:8B:8B:0F:9C:5C:FB Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784 Certificate serial: 019B3B6B4E2A674A2ADC7DA39E367815E16D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft Manifest number: 14AC Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: 2FExtIvzWlKZsXH+gtFWeQZGzqIVQKw7Tioj2+59xgo=) 2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4e:2a:67:4a:2a:dc:7d:a3:9e:36:78:15:e1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784 Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=84c34c76d8acbabd457ac972291b8b8b0f9c5cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:6b:ff:93:15:c1:d1:e1:2a:76:10:3b:11: 4e:03:a1:bb:6d:f3:ec:1c:48:b0:3b:df:02:a9:6c: f0:14:bb:95:75:6e:ee:83:a8:07:aa:84:2a:77:87: ff:a5:38:0d:b9:21:10:f7:98:05:94:c4:59:be:2b: 0f:01:d5:b8:1b:ed:9b:21:5e:bd:14:dd:8d:cb:a0: 52:dd:a3:ae:db:47:65:e6:4e:cb:e2:46:ad:d3:b0: 28:3a:ee:9e:d3:5e:31:3c:52:0b:06:a5:64:9b:46: a5:4f:7c:31:f0:d5:dc:8a:bd:5c:05:9b:a0:1e:23: 07:b8:6c:27:1e:08:6d:6d:c0:92:f3:7c:fc:b0:fd: d3:42:af:cf:2e:1f:d4:9f:28:74:34:da:87:9c:9e: 5b:58:56:82:20:c5:80:78:88:af:76:ac:a8:18:6b: 0b:44:11:05:e5:d2:02:89:fa:39:f3:b5:36:9f:d9: e9:5d:2d:99:2e:2a:fb:95:09:95:82:0a:dc:f9:02: 26:fc:ba:ff:a8:ca:11:b6:71:c5:8e:84:02:ef:e9: 70:97:7b:82:4f:11:e7:47:fe:e6:5a:f6:da:b5:66: be:0e:81:a0:3a:c7:7d:0d:52:54:c7:20:af:10:63: 57:fe:9f:5b:78:08:fd:27:92:e5:4b:53:d0:88:01: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C3:4C:76:D8:AC:BA:BD:45:7A:C9:72:29:1B:8B:8B:0F:9C:5C:FB X509v3 Authority Key Identifier: keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e1:64:14:e4:76:c6:bd:bd:f8:88:19:0a:db:70:df:b8:b9: d6:07:00:2f:28:9b:61:ff:9a:4b:32:4e:12:6f:6d:8f:b1:b7: 27:a3:70:09:70:dc:00:f9:fe:de:ea:60:4e:51:36:62:78:93: 34:be:e3:5d:71:67:5e:29:c7:ed:81:14:2c:be:53:4d:53:7b: 29:22:56:63:28:54:c4:0a:a6:fe:78:3c:3c:85:bc:7c:e5:a5: 80:11:06:49:62:60:2d:49:5b:d4:ac:94:97:08:d3:49:a2:8a: 1f:81:03:fe:87:4c:ae:d3:14:81:97:96:78:2b:37:df:d5:fd: 88:43:e4:1a:64:1e:d9:cb:db:fc:d1:e8:f7:3e:36:fc:b2:45: 2f:c5:b7:c7:a9:f2:7c:29:06:51:84:1c:d9:80:23:4b:ef:79: 31:d4:10:66:2c:94:5e:ba:cd:13:71:dd:f8:9f:dc:f9:da:65: 27:dc:02:76:fe:6f:2d:66:c8:e9:a2:1e:23:4a:74:fb:04:a2: e6:8b:37:56:8d:81:b7:b7:c3:e6:35:ab:32:85:dc:ce:d9:4e: 6b:d1:4a:82:6b:83:90:39:d0:97:c1:66:fe:45:38:74:29:19: dc:58:7c:bc:b2:85:77:44:aa:3b:74:51:da:cd:ee:1c:82:74: 02:99:1d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a04qZ0oq3H2jnjZ4FeFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2 NDE3ODQwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD Eyg4NGMzNGM3NmQ4YWNiYWJkNDU3YWM5NzIyOTFiOGI4YjBmOWM1Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P5r/5MVwdHhKnYQOxFOA6G7bfPs HEiwO98CqWzwFLuVdW7ug6gHqoQqd4f/pTgNuSEQ95gFlMRZvisPAdW4G+2bIV69 FN2Ny6BS3aOu20dl5k7L4kat07AoOu6e014xPFILBqVkm0alT3wx8NXcir1cBZug HiMHuGwnHghtbcCS83z8sP3TQq/PLh/Unyh0NNqHnJ5bWFaCIMWAeIivdqyoGGsL RBEF5dICifo587U2n9npXS2ZLir7lQmVggrc+QIm/Lr/qMoRtnHFjoQC7+lwl3uC TxHnR/7mWvbatWa+DoGgOsd9DVJUxyCvEGNX/p9beAj9J5LlS1PQiAH45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITDTHbYrLq9RXrJcikbi4sPnFz7MB8GA1UdIwQY MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt NDkwNjFmZmZkMDJhLzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOFkFOR2 xr29+IgZCttw37i51gcALyibYf+aSzJOEm9tj7G3J6NwCXDcAPn+3upgTlE2YniT NL7jXXFnXinH7YEULL5TTVN7KSJWYyhUxAqm/ng8PIW8fOWlgBEGSWJgLUlb1KyU lwjTSaKKH4ED/odMrtMUgZeWeCs339X9iEPkGmQe2cvb/NHo9z42/LJFL8W3x6ny fCkGUYQc2YAjS+95MdQQZiyUXrrNE3Hd+J/c+dplJ9wCdv5vLWbI6aIeI0p0+wSi 5os3Vo2Bt7fD5jWrMoXcztlOa9FKgmuDkDnQl8Fm/kU4dCkZ3Fh8vLKFd0SqO3RR 2s3uHIJ0ApkdIw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:59:02 2025 by rpki-client