This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json) Hash identifier: RyW6E66etIlGecTWIUm5nR7p0TT70ZQCmM0U4H+2PyE= Subject key identifier: 11:87:27:7D:25:5D:D2:77:E5:01:28:42:A8:C5:67:52:B7:65:8E:3C Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Certificate serial: 019B3FECCBF390AF1BC6FAE6EFC9914EB349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft Manifest number: 11BC Signing time: Sun 21 Dec 2025 08:00:41 +0000 Manifest this update: Sun 21 Dec 2025 08:00:41 +0000 Manifest next update: Mon 22 Dec 2025 08:00:41 +0000 Files and hashes: 1: Glr6u_s5CXtQU33JFdKRNodC1Uw.roa (hash: xJAriWKl+PmbnYJ4BpPrX2q/YRb7AyfnBhDH2V2YYdU=) 2: UpeD63AhvaLPHL7cT3GFojz3Ckk.roa (hash: mEkJtV27z/pufpdRebXs4QzlDSFPeuvtLb6yKnLyJS8=) 3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: lq7pw+lDrn5gRUeKYV2z2vdZjaGteqJ2GbIKUlEKQXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:cb:f3:90:af:1b:c6:fa:e6:ef:c9:91:4e:b3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166 Validity Not Before: Dec 21 08:00:41 2025 GMT Not After : Dec 22 08:00:41 2025 GMT Subject: CN=1187277d255dd277e5012842a8c56752b7658e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:6a:ca:99:a9:08:03:42:bb:0c:76:5d:88: 34:0f:16:5a:db:78:2c:d2:16:b8:5c:6c:53:56:49: 40:ab:97:e8:27:d7:1f:2f:8d:06:a9:cb:95:8b:48: 10:58:71:cd:57:9b:01:04:dd:5c:af:13:e6:a3:67: 35:78:54:29:b0:88:33:1d:01:93:e0:7e:d2:8e:87: 20:29:76:2d:6e:e5:9e:16:2f:31:59:63:96:1c:60: 9a:b4:44:d7:65:95:06:e2:17:ba:f2:5d:65:26:ce: 29:e5:5b:77:68:f5:a1:11:c2:53:e6:93:30:cc:7f: 43:84:a6:a7:22:de:eb:81:01:00:8e:ce:d4:7f:70: 17:47:92:14:9e:f0:4a:a2:9f:89:3f:8c:bd:cc:23: e9:c7:03:5a:67:79:39:5d:8f:84:b2:13:0e:ca:4b: 21:65:57:ab:bc:f9:6c:e0:c4:65:b2:d5:e4:15:ad: af:9a:89:c5:6f:a0:3f:80:63:b2:2c:84:5b:de:ea: 7d:4d:7b:24:b3:ac:9b:76:10:03:29:aa:8e:04:79: 70:31:6b:cf:15:d3:e9:05:f0:0b:f3:fc:41:fb:6c: d8:55:25:57:54:ca:13:2d:e7:fe:22:6c:ac:2f:d4: 3e:df:4e:3e:15:0a:16:96:fb:16:a1:e7:9f:6f:05: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:27:7D:25:5D:D2:77:E5:01:28:42:A8:C5:67:52:B7:65:8E:3C X509v3 Authority Key Identifier: keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:ed:7d:33:8f:86:40:d5:5f:e2:ce:00:26:1b:eb:68:27: 30:b2:09:08:0e:42:4f:7f:8c:0c:4e:e2:b9:a9:81:d1:e3:f2: 67:f1:b9:5f:60:73:b2:33:41:59:2e:61:08:c4:02:82:01:56: 9c:e5:2a:c1:69:3c:4b:ad:4e:07:80:8c:92:9d:d1:46:86:50: be:83:0d:3b:bb:67:bb:a9:80:51:c9:b8:f9:7d:f6:85:05:25: 1a:21:19:a0:3a:9d:6c:ae:50:c4:70:96:90:1e:3f:3d:97:a3: 63:32:ee:46:e9:34:ea:c2:53:b6:9e:0f:4b:56:4c:55:57:43: de:9e:d1:49:37:8b:04:bb:22:e8:a6:b2:15:30:01:5d:ac:2a: 3d:9a:8f:d2:a2:d3:40:aa:04:b2:af:60:60:05:16:6f:8a:dd: 3a:94:3f:df:15:45:3c:83:c5:d1:2c:76:14:19:2d:72:5d:46: 9d:ba:0e:3c:31:83:82:c6:8c:d9:e8:56:0f:8d:4c:18:77:4b: 42:e9:ba:58:f4:8d:cb:78:7c:a8:3f:90:85:d5:e9:40:60:9d: 52:0f:9b:c6:39:76:8e:39:4e:31:b1:54:43:1f:e2:1a:6a:dc: 80:07:6f:2b:6b:ea:cf:34:08:35:1b:03:41:bb:75:d1:70:ab: 87:c7:d5:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7MvzkK8bxvrm78mRTrNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3 ZWYxNjYwHhcNMjUxMjIxMDgwMDQxWhcNMjUxMjIyMDgwMDQxWjAzMTEwLwYDVQQD EygxMTg3Mjc3ZDI1NWRkMjc3ZTUwMTI4NDJhOGM1Njc1MmI3NjU4ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeRqypmpCANCuwx2XYg0DxZa23gs 0ha4XGxTVklAq5foJ9cfL40GqcuVi0gQWHHNV5sBBN1crxPmo2c1eFQpsIgzHQGT 4H7SjocgKXYtbuWeFi8xWWOWHGCatETXZZUG4he68l1lJs4p5Vt3aPWhEcJT5pMw zH9DhKanIt7rgQEAjs7Uf3AXR5IUnvBKop+JP4y9zCPpxwNaZ3k5XY+EshMOyksh ZVervPls4MRlstXkFa2vmonFb6A/gGOyLIRb3up9TXsks6ybdhADKaqOBHlwMWvP FdPpBfAL8/xB+2zYVSVXVMoTLef+ImysL9Q+304+FQoWlvsWoeefbwXTZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGHJ30lXdJ35QEoQqjFZ1K3ZY48MB8GA1UdIwQY MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0/tfTOP hkDVX+LOACYb62gnMLIJCA5CT3+MDE7iuamB0ePyZ/G5X2BzsjNBWS5hCMQCggFW nOUqwWk8S61OB4CMkp3RRoZQvoMNO7tnu6mAUcm4+X32hQUlGiEZoDqdbK5QxHCW kB4/PZejYzLuRuk06sJTtp4PS1ZMVVdD3p7RSTeLBLsi6KayFTABXawqPZqP0qLT QKoEsq9gYAUWb4rdOpQ/3xVFPIPF0Sx2FBktcl1GnboOPDGDgsaM2ehWD41MGHdL Qum6WPSNy3h8qD+QhdXpQGCdUg+bxjl2jjlOMbFUQx/iGmrcgAdvK2vqzzQINRsD Qbt10XCrh8fVrA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:15:26 2025 by rpki-client