This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json) Hash identifier: rrFpAncC0uWT2D95wMiYixNzo1LfABkJeM86CASFeco= Subject key identifier: 75:6D:4B:B6:BA:B5:33:CF:71:91:A1:BF:2B:11:07:AC:79:D0:70:8B Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Certificate serial: 019B31561522B066D460FED5E943A394FD86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft Manifest number: 064C Signing time: Thu 18 Dec 2025 12:01:23 +0000 Manifest this update: Thu 18 Dec 2025 12:01:23 +0000 Manifest next update: Fri 19 Dec 2025 12:01:23 +0000 Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: pGUayUosR3GuMQ4OHvc3ZjLyhigCOZ/kZAdUyf8bx9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:15:22:b0:66:d4:60:fe:d5:e9:43:a3:94:fd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6 Validity Not Before: Dec 18 12:01:23 2025 GMT Not After : Dec 19 12:01:23 2025 GMT Subject: CN=756d4bb6bab533cf7191a1bf2b1107ac79d0708b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:67:72:75:44:bb:8a:ae:79:d4:90:f1:6a: c2:9d:a1:04:88:8e:f5:f9:89:90:16:37:e7:6f:aa: 43:14:08:be:99:a0:5f:a6:37:e9:60:18:e9:ee:73: 06:64:29:83:4a:98:78:2e:d4:6a:f5:35:ce:67:1f: 20:7d:b4:bb:51:b6:ae:f3:7e:ac:cd:6d:14:d7:fd: b8:b4:31:a9:76:50:ae:6c:e4:ec:88:4c:dd:c6:84: 98:d1:36:87:b3:9f:59:a2:ca:d2:43:1f:e9:f9:79: 04:70:d7:95:37:e5:3b:8f:b9:36:3c:10:74:b9:10: a0:f5:e6:71:c6:ba:31:20:78:43:06:d9:16:7b:f7: 46:da:e7:dd:d9:f1:c9:2f:d4:ed:b6:e5:24:12:2f: bb:62:83:29:3d:21:8f:91:08:1f:af:23:0e:ea:84: c6:4e:26:08:c2:55:e8:28:1f:f3:2b:18:b1:36:89: 4e:4c:54:f4:2f:57:7d:90:26:6e:80:74:54:03:44: 4b:ee:76:02:1e:70:ca:43:49:d5:b0:a1:50:07:50: b4:9c:a4:b6:51:73:94:d4:aa:03:24:a0:bf:43:ec: 65:ec:d2:1b:b3:0b:98:cb:d8:eb:84:0b:94:f7:c2: 29:73:e8:52:c2:c1:e4:47:46:58:46:33:1e:db:40: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:4B:B6:BA:B5:33:CF:71:91:A1:BF:2B:11:07:AC:79:D0:70:8B X509v3 Authority Key Identifier: keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:92:07:d2:06:40:67:3c:e9:00:fb:82:00:e0:c3:a7:69:ea: b9:5c:68:f0:3d:da:a3:7c:49:cf:94:b5:a2:f1:3e:8e:c2:4a: 24:21:4a:fb:c7:92:0f:fc:12:7c:5f:1c:f8:2a:c6:24:62:51: 82:94:18:0f:26:66:f7:ac:55:5e:04:97:ac:45:54:99:ae:75: 53:33:70:c1:d4:a3:d3:ea:19:d7:ca:8a:94:0b:41:ae:8b:53: ec:df:b5:f6:36:1d:84:5f:44:7d:ba:53:2d:49:43:b2:c7:19: 5f:52:2d:44:c6:18:d4:2b:6b:cb:5f:aa:63:9e:e4:04:c0:59: 3c:ff:9f:fc:d1:6f:a2:08:9c:d0:ff:dc:28:46:2d:87:54:17: a8:0f:b7:ef:ad:b6:df:82:e6:f1:6d:a1:35:9e:ba:5e:70:fd: 90:f4:10:b0:f8:7a:b1:a1:7b:31:99:ca:3c:6c:2c:2c:83:6d: 0b:cf:f2:9a:11:55:df:33:af:c7:bf:29:38:2c:81:44:5e:46: b3:e2:77:e7:48:7e:19:86:61:b8:d2:b3:66:74:8a:df:bc:7c: f5:d5:a5:c3:d8:58:81:28:ad:7c:06:52:74:83:bb:0b:78:d0: b0:42:99:83:be:46:ae:b7:7c:a6:2e:f4:71:46:44:09:ff:11: 9d:1f:a2:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhUisGbUYP7V6UOjlP2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2Zjc1MjNhN2IzMzJlYmRmMTE0YTVjMDhkYzFkNWYzMmNi ZDczYzYwHhcNMjUxMjE4MTIwMTIzWhcNMjUxMjE5MTIwMTIzWjAzMTEwLwYDVQQD Eyg3NTZkNGJiNmJhYjUzM2NmNzE5MWExYmYyYjExMDdhYzc5ZDA3MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpZncnVEu4quedSQ8WrCnaEEiI71 +YmQFjfnb6pDFAi+maBfpjfpYBjp7nMGZCmDSph4LtRq9TXOZx8gfbS7Ubau836s zW0U1/24tDGpdlCubOTsiEzdxoSY0TaHs59ZosrSQx/p+XkEcNeVN+U7j7k2PBB0 uRCg9eZxxroxIHhDBtkWe/dG2ufd2fHJL9TttuUkEi+7YoMpPSGPkQgfryMO6oTG TiYIwlXoKB/zKxixNolOTFT0L1d9kCZugHRUA0RL7nYCHnDKQ0nVsKFQB1C0nKS2 UXOU1KoDJKC/Q+xl7NIbswuYy9jrhAuU98Ipc+hSwsHkR0ZYRjMe20Ck+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVtS7a6tTPPcZGhvysRB6x50HCLMB8GA1UdIwQY MBaAFJb3Ujp7My698RSlwI3B1fMsvXPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUt MzYwNTdlMzU0ODc2LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUtMzYwNTdlMzU0ODc2 LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZIH0gZA ZzzpAPuCAODDp2nquVxo8D3ao3xJz5S1ovE+jsJKJCFK+8eSD/wSfF8c+CrGJGJR gpQYDyZm96xVXgSXrEVUma51UzNwwdSj0+oZ18qKlAtBrotT7N+19jYdhF9EfbpT LUlDsscZX1ItRMYY1Ctry1+qY57kBMBZPP+f/NFvogic0P/cKEYth1QXqA+37622 34Lm8W2hNZ66XnD9kPQQsPh6saF7MZnKPGwsLINtC8/ymhFV3zOvx78pOCyBRF5G s+J350h+GYZhuNKzZnSK37x89dWlw9hYgSitfAZSdIO7C3jQsEKZg75Grrd8pi70 cUZECf8RnR+i8Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:06 2025 by rpki-client