This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft File: lv9F5t5Iv8A5faytg6hIMdt5UtE.mft (raw, json) Hash identifier: qycxOPO/VcSLug5fCeSSuDXuuXnCl9FxjqZZEJqJdf0= Subject key identifier: C0:C4:33:66:75:C3:5A:96:D9:1C:8C:71:0E:7B:70:D9:21:FB:C7:CF Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Certificate serial: 019B386A29502E5AD809E348EF5A5A323D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft Manifest number: 0ED0 Signing time: Fri 19 Dec 2025 21:00:40 +0000 Manifest this update: Fri 19 Dec 2025 21:00:40 +0000 Manifest next update: Sat 20 Dec 2025 21:00:40 +0000 Files and hashes: 1: GQ5NG7NUJ0mTiMMoguANnU3zhCU.roa (hash: RLZOdnWaQDPusAoiFOrFgYMm/8VCugzHSsyaalfrB2g=) 2: RNaLWw_7VynkakNVv0RB26fPjUY.roa (hash: n49s4ueNWoQ0BCZzERKKYtGr3mJSZHvzJ3B7Ky6mJzA=) 3: _41gquUxogOoHWCKFYbWi_vSDC8.roa (hash: M2zvcs7Z6gkeVy1BDzE0VTUjwyY3RsEd2ac2dCksOEU=) 4: lv9F5t5Iv8A5faytg6hIMdt5UtE.crl (hash: wNcPRo8jlIzf6/RObNQRzvzAZ4JVdeRCxCxgPF+DJGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:29:50:2e:5a:d8:09:e3:48:ef:5a:5a:32:3d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Validity Not Before: Dec 19 21:00:40 2025 GMT Not After : Dec 20 21:00:40 2025 GMT Subject: CN=c0c4336675c35a96d91c8c710e7b70d921fbc7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:e2:49:c8:e6:ec:55:a8:2b:fe:65:d7:69: db:0b:45:7e:a0:a2:3f:b6:18:b7:cd:d5:b0:d2:51: 00:9d:e9:f4:13:d0:2b:bc:45:43:89:9f:eb:7d:dc: 22:6b:83:65:a7:66:b7:01:05:c6:8c:1a:c8:c3:47: af:22:50:bd:88:d4:04:3f:43:31:90:02:ba:a2:b6: 89:09:77:c7:68:4d:67:e1:5d:a0:26:63:0c:fa:1f: 55:e6:3d:4f:17:78:89:63:01:03:f7:ad:21:76:f7: b5:2c:f0:48:b4:2e:e0:f2:57:8e:53:05:fa:fd:63: aa:93:82:10:f5:7d:1c:9b:45:1b:3c:d9:d9:5e:12: d3:30:f9:10:f6:a5:bd:2d:cb:41:7f:26:77:04:88: c7:af:e8:5a:fb:73:7a:5e:7d:30:d0:cb:cf:61:69: 2c:16:f1:83:4d:05:9c:aa:b6:dd:19:bc:a7:4a:fe: 5c:71:53:9a:60:c5:21:ee:30:d5:cd:c8:25:68:f1: ee:57:07:02:32:be:50:e3:8b:07:df:51:aa:a5:e0: c5:8b:5d:29:d3:47:a3:29:5a:28:05:ae:39:81:4b: ea:6a:e4:3f:a5:38:ff:ba:12:37:70:86:0d:f8:23: 96:9a:b9:61:b9:f5:13:ed:c2:27:12:f0:02:16:61: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C4:33:66:75:C3:5A:96:D9:1C:8C:71:0E:7B:70:D9:21:FB:C7:CF X509v3 Authority Key Identifier: keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:9f:73:2c:4b:ee:b1:6f:80:94:ac:68:b0:f6:a7:bd:6a: df:5c:fd:85:f2:99:d2:8f:7e:f5:a8:3b:80:8c:56:09:af:8f: 34:74:28:01:3e:7c:76:72:e5:88:a3:d9:7d:0c:57:29:19:5a: 88:c7:67:5f:3a:1d:3c:fe:f1:bc:0f:71:be:1a:f4:2b:3f:1b: 24:f5:64:68:76:63:fa:4a:3f:6f:66:5b:66:37:b8:0b:73:84: a0:5e:36:65:fb:70:a8:53:e3:46:f0:ad:8e:bb:12:50:53:16: ed:c6:13:dd:a6:8b:f9:00:0f:2d:85:6d:f1:4e:1a:7c:62:46: 82:ff:fc:0f:08:e4:c3:02:c1:18:0c:b6:52:aa:9f:e1:da:86: 22:93:05:02:42:7e:a2:ce:b4:f4:b2:19:be:f5:c9:a6:a4:0a: fa:8a:47:44:44:c2:2e:85:ab:5a:03:97:da:7d:04:c2:e8:03: 26:28:55:f4:05:ea:3b:6d:28:97:aa:21:df:4e:46:5b:4a:17: 26:fb:00:49:35:04:ce:90:1d:b4:32:dc:27:6c:cd:d0:43:fe: 7e:07:c3:56:a2:cd:1f:3e:9f:60:ab:1a:c1:8d:fa:0d:ea:7c: 02:57:b4:ba:84:69:31:2c:85:74:0d:c2:ea:2c:0c:1c:a3:02: 35:7b:4d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ailQLlrYCeNI71paMj1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3 OTUyZDEwHhcNMjUxMjE5MjEwMDQwWhcNMjUxMjIwMjEwMDQwWjAzMTEwLwYDVQQD EyhjMGM0MzM2Njc1YzM1YTk2ZDkxYzhjNzEwZTdiNzBkOTIxZmJjN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT3iScjm7FWoK/5l12nbC0V+oKI/ thi3zdWw0lEAnen0E9ArvEVDiZ/rfdwia4Nlp2a3AQXGjBrIw0evIlC9iNQEP0Mx kAK6oraJCXfHaE1n4V2gJmMM+h9V5j1PF3iJYwED960hdve1LPBItC7g8leOUwX6 /WOqk4IQ9X0cm0UbPNnZXhLTMPkQ9qW9LctBfyZ3BIjHr+ha+3N6Xn0w0MvPYWks FvGDTQWcqrbdGbynSv5ccVOaYMUh7jDVzcglaPHuVwcCMr5Q44sH31GqpeDFi10p 00ejKVooBa45gUvqauQ/pTj/uhI3cIYN+COWmrlhufUT7cInEvACFmHmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDEM2Z1w1qW2RyMcQ57cNkh+8fPMB8GA1UdIwQY MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt MGY1ZDM3OTdhMzI1LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1 LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqqfcyxL 7rFvgJSsaLD2p71q31z9hfKZ0o9+9ag7gIxWCa+PNHQoAT58dnLliKPZfQxXKRla iMdnXzodPP7xvA9xvhr0Kz8bJPVkaHZj+ko/b2ZbZje4C3OEoF42ZftwqFPjRvCt jrsSUFMW7cYT3aaL+QAPLYVt8U4afGJGgv/8DwjkwwLBGAy2Uqqf4dqGIpMFAkJ+ os609LIZvvXJpqQK+opHRETCLoWrWgOX2n0EwugDJihV9AXqO20ol6oh305GW0oX JvsASTUEzpAdtDLcJ2zN0EP+fgfDVqLNHz6fYKsawY36Dep8Ale0uoRpMSyFdA3C 6iwMHKMCNXtNOA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:21:26 2025 by rpki-client