This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json) Hash identifier: XTRlkSV8m7PQyjprCGlNOBA3yRese7Is1FaWB5AY/70= Subject key identifier: 10:94:94:F2:37:02:B0:8C:BE:CF:3F:65:9C:C5:A7:02:9F:C8:08:34 Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814 Certificate serial: 019B3EA3B572504820915979E1B3E82EB7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft Manifest number: 1322 Signing time: Sun 21 Dec 2025 02:01:14 +0000 Manifest this update: Sun 21 Dec 2025 02:01:14 +0000 Manifest next update: Mon 22 Dec 2025 02:01:14 +0000 Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: ypbPtS1amrkDCnn/ZepHS2iJqrM0clYlv2fHzvgZLtQ=) 2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:b5:72:50:48:20:91:59:79:e1:b3:e8:2e:b7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96f809613877deab874a9401d156db14ff4d2814 Validity Not Before: Dec 21 02:01:14 2025 GMT Not After : Dec 22 02:01:14 2025 GMT Subject: CN=109494f23702b08cbecf3f659cc5a7029fc80834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:f0:98:fb:4f:e8:8e:24:eb:31:4d:4d:03: 88:64:d0:80:f2:70:75:7f:f4:f4:d2:a4:50:7b:f1: 61:10:b3:b6:59:28:f2:98:44:6c:b9:05:ac:8e:06: 7d:f4:59:12:84:98:9c:0f:7d:5b:b4:81:95:50:e4: af:97:95:6f:42:e4:72:ce:75:19:c8:cc:2e:0c:e3: 45:c9:b7:b2:99:88:ff:8c:e4:66:d8:fb:70:fb:15: ed:f0:6d:61:a0:22:82:2a:cf:dc:98:38:d3:8e:04: ff:5d:ea:2e:cc:3e:ae:0d:ae:23:82:e6:f1:54:d9: e5:92:11:2d:60:2e:92:97:8d:36:27:4f:e3:e7:bd: 32:6b:e9:3a:6c:0d:0e:5b:29:ea:9b:1a:c9:a8:2a: 86:47:91:8a:6e:61:6b:86:7b:db:92:c5:fc:0f:e8: a1:6d:b3:c2:38:c9:f2:20:ba:7e:6b:24:e9:5e:cf: 95:82:3e:44:cd:e8:3f:bd:33:0c:a2:77:af:bd:1c: 1f:21:64:35:f0:1d:27:e2:a0:74:86:18:e6:2a:1c: 05:3c:a4:02:81:f9:d6:95:b2:a2:31:7d:23:ff:12: c6:50:ac:25:5b:44:c7:f6:af:93:b9:4a:fc:d6:1c: 27:6d:b7:4a:b4:56:45:30:53:6a:87:8f:d6:7d:d9: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:94:F2:37:02:B0:8C:BE:CF:3F:65:9C:C5:A7:02:9F:C8:08:34 X509v3 Authority Key Identifier: keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:21:6b:84:b2:f8:12:0f:b1:57:ef:c3:17:c3:76:2d:c2: 1f:13:cd:b0:53:a1:ed:72:9e:cc:81:a9:e0:cc:96:b4:fa:0b: 73:1a:ef:6c:4f:8d:ff:bc:6e:be:57:41:b8:10:8b:22:a4:4b: 1b:81:7b:23:91:e5:b0:13:2f:35:ed:a1:47:89:1e:d0:20:f6: d7:4d:8a:19:76:97:0e:0c:70:6b:95:0b:84:0f:59:dc:88:d5: 27:7a:a3:12:7b:8b:f5:c8:02:1e:6e:9c:21:cc:cd:88:8b:ff: 90:ef:49:16:0d:db:f0:44:c0:a8:76:58:06:9d:c0:fc:bc:4d: 0f:e1:f4:94:da:38:07:68:fc:c6:57:7c:27:68:da:c6:73:78: 8f:60:ae:5a:db:84:13:0d:c5:8e:92:d4:6c:b3:81:19:91:63: 59:93:22:66:a9:9c:56:16:f0:86:cc:ba:5e:4f:b8:81:71:c8: 21:53:3c:ba:2e:fd:63:ff:ba:12:3d:84:d5:6c:88:30:0d:cb: 64:ec:bc:1e:2c:8e:c8:f0:e7:94:38:76:bc:39:68:71:d8:0c: 48:ed:09:f4:af:e2:06:e2:10:78:6b:d7:7c:f3:db:70:22:55: 40:1b:d3:a2:d3:d4:0b:7e:0f:9d:43:c1:03:76:4e:bb:c9:8d: 3c:21:b1:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o7VyUEggkVl54bPoLre/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0 ZDI4MTQwHhcNMjUxMjIxMDIwMTE0WhcNMjUxMjIyMDIwMTE0WjAzMTEwLwYDVQQD EygxMDk0OTRmMjM3MDJiMDhjYmVjZjNmNjU5Y2M1YTcwMjlmYzgwODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtfwmPtP6I4k6zFNTQOIZNCA8nB1 f/T00qRQe/FhELO2WSjymERsuQWsjgZ99FkShJicD31btIGVUOSvl5VvQuRyznUZ yMwuDONFybeymYj/jORm2Ptw+xXt8G1hoCKCKs/cmDjTjgT/XeouzD6uDa4jgubx VNnlkhEtYC6Sl402J0/j570ya+k6bA0OWynqmxrJqCqGR5GKbmFrhnvbksX8D+ih bbPCOMnyILp+ayTpXs+Vgj5Ezeg/vTMMonevvRwfIWQ18B0n4qB0hhjmKhwFPKQC gfnWlbKiMX0j/xLGUKwlW0TH9q+TuUr81hwnbbdKtFZFMFNqh4/WfdnC4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCUlPI3ArCMvs8/ZZzFpwKfyAg0MB8GA1UdIwQY MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5Aha4Sy +BIPsVfvwxfDdi3CHxPNsFOh7XKezIGp4MyWtPoLcxrvbE+N/7xuvldBuBCLIqRL G4F7I5HlsBMvNe2hR4ke0CD2102KGXaXDgxwa5ULhA9Z3IjVJ3qjEnuL9cgCHm6c IczNiIv/kO9JFg3b8ETAqHZYBp3A/LxND+H0lNo4B2j8xld8J2jaxnN4j2CuWtuE Ew3FjpLUbLOBGZFjWZMiZqmcVhbwhsy6Xk+4gXHIIVM8ui79Y/+6Ej2E1WyIMA3L ZOy8HiyOyPDnlDh2vDlocdgMSO0J9K/iBuIQeGvXfPPbcCJVQBvTotPUC34PnUPB A3ZOu8mNPCGxhg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:34 2025 by rpki-client