This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json) Hash identifier: XnJqoIgL18ZYKJsiKzydYHw4OIO+CkAUvtGnyyjgRUU= Subject key identifier: 57:D0:1C:41:9F:DF:8F:5C:39:76:4B:09:90:8F:6F:9B:55:38:D4:D3 Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Certificate serial: 019B3C1032FDCC469602571AB9B409A206A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft Manifest number: 0C1F Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 14:00:53 +0000 Manifest next update: Sun 21 Dec 2025 14:00:53 +0000 Files and hashes: 1: 6tTZOzXyTeDXB_klkmMcFeZ4r8g.roa (hash: EKQcIXykUtqcd7MJfpEJjzKrbmD41B7/DhQ5mymcDU8=) 2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: Us/5Jp9AFfWMo3b9UTsnmlYAZ5Bl7oT4d0K2b2p8eXo=) 3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=) 4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:32:fd:cc:46:96:02:57:1a:b9:b4:09:a2:06:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Validity Not Before: Dec 20 14:00:53 2025 GMT Not After : Dec 21 14:00:53 2025 GMT Subject: CN=57d01c419fdf8f5c39764b09908f6f9b5538d4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:b6:0f:1a:63:69:8e:65:7f:c3:47:84:51: a2:e4:98:3e:f4:d8:7e:bb:84:5e:58:1e:f3:43:c7: 7e:63:0a:16:c8:9a:f0:93:78:50:03:9e:a4:79:b3: 90:3c:03:48:83:63:5a:6e:77:00:95:6a:14:40:8b: e0:7b:e7:d5:7f:b0:3b:60:e0:53:f3:50:f8:a4:bf: ea:24:51:40:20:79:67:bf:51:d6:a2:2f:43:fb:0e: b6:29:23:7b:c0:e0:c7:43:a4:dd:49:2b:69:ad:05: 55:a9:cd:29:62:5a:2b:d7:b5:ff:96:1e:6e:d8:2c: a8:15:7f:ce:51:d8:78:95:f5:6c:a3:23:33:6b:6e: 7e:17:31:94:1d:b4:46:a7:43:31:83:48:f9:5a:cb: c1:32:06:e9:e7:c1:f5:5f:3e:4f:27:8c:61:4a:2c: a0:a2:7e:d7:86:2c:16:3e:6c:1a:b5:50:b7:d3:48: a4:db:54:f7:6d:b7:d7:cd:43:02:90:19:ea:65:9b: 4c:5b:1c:48:d9:b9:01:13:00:cb:b8:7a:f4:db:83: 89:67:d9:3d:8a:d6:83:cd:77:4a:e1:25:28:e5:31: e0:1c:70:65:a9:57:a3:40:2a:a8:f5:d1:e4:1b:e6: 61:6a:62:14:79:ad:98:27:7e:fb:88:f2:3f:aa:3c: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:1C:41:9F:DF:8F:5C:39:76:4B:09:90:8F:6F:9B:55:38:D4:D3 X509v3 Authority Key Identifier: keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1c:0b:cd:f4:22:58:c8:5c:09:fe:9e:06:2a:78:f7:de:6e: 26:6f:d9:d7:76:b2:0c:56:43:e3:7b:3d:76:b8:3f:bd:08:89: bb:4f:e5:7b:fd:6a:45:dd:12:3f:45:29:7c:88:a4:29:4f:cf: 3d:a4:71:47:ac:05:73:26:52:84:1d:77:ed:fc:c7:fe:99:eb: 9a:14:e4:c2:b9:9e:58:75:4a:24:1b:9d:30:33:ca:0e:84:87: 08:c2:b7:67:19:57:d6:dc:e8:16:4b:4e:45:88:16:14:d9:3a: 0c:fe:35:47:f7:2f:31:37:9a:7d:ec:5c:0e:85:ad:e0:3e:31: de:f6:f6:e8:19:5a:b4:39:85:16:fe:a0:39:14:7a:65:6c:21: f7:b0:cf:4e:88:10:17:7f:fe:1a:4d:b2:7b:ec:aa:9a:8a:28: f1:62:d1:3e:62:ce:f0:2f:da:5e:fc:e6:60:5f:2a:fc:b0:f7: 83:01:e9:af:b5:82:ef:3b:b3:4c:99:5b:49:7e:4f:00:ed:8b: 2c:a9:fb:d9:5f:64:37:ec:0a:8b:4f:e0:43:ff:9d:0f:66:c7: 2b:d1:eb:b5:fc:bc:25:18:5f:9b:ee:5c:34:c0:44:f7:d4:21: dc:3c:9c:1f:03:1c:ce:e2:ed:e2:d1:ee:af:7c:99:bc:e8:a1: 23:62:93:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDL9zEaWAlcaubQJogamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy NGYwMDMwHhcNMjUxMjIwMTQwMDUzWhcNMjUxMjIxMTQwMDUzWjAzMTEwLwYDVQQD Eyg1N2QwMWM0MTlmZGY4ZjVjMzk3NjRiMDk5MDhmNmY5YjU1MzhkNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE22DxpjaY5lf8NHhFGi5Jg+9Nh+ u4ReWB7zQ8d+YwoWyJrwk3hQA56kebOQPANIg2NabncAlWoUQIvge+fVf7A7YOBT 81D4pL/qJFFAIHlnv1HWoi9D+w62KSN7wODHQ6TdSStprQVVqc0pYlor17X/lh5u 2CyoFX/OUdh4lfVsoyMza25+FzGUHbRGp0Mxg0j5WsvBMgbp58H1Xz5PJ4xhSiyg on7XhiwWPmwatVC300ik21T3bbfXzUMCkBnqZZtMWxxI2bkBEwDLuHr024OJZ9k9 itaDzXdK4SUo5THgHHBlqVejQCqo9dHkG+ZhamIUea2YJ377iPI/qjzVNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfQHEGf349cOXZLCZCPb5tVONTTMB8GA1UdIwQY MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhwLzfQi WMhcCf6eBip4995uJm/Z13ayDFZD43s9drg/vQiJu0/le/1qRd0SP0UpfIikKU/P PaRxR6wFcyZShB137fzH/pnrmhTkwrmeWHVKJBudMDPKDoSHCMK3ZxlX1tzoFktO RYgWFNk6DP41R/cvMTeafexcDoWt4D4x3vb26BlatDmFFv6gORR6ZWwh97DPTogQ F3/+Gk2ye+yqmooo8WLRPmLO8C/aXvzmYF8q/LD3gwHpr7WC7zuzTJlbSX5PAO2L LKn72V9kN+wKi0/gQ/+dD2bHK9Hrtfy8JRhfm+5cNMBE99Qh3DycHwMczuLt4tHu r3yZvOihI2KTZw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:36:53 2025 by rpki-client