This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json) Hash identifier: YK4Y3k6JDK6Vt6oERuk1+sU/ZLVWyMgPp+J3vgFuO9o= Subject key identifier: D3:61:AF:33:6E:10:32:A2:8B:1C:D5:8D:9B:44:4E:82:F8:A2:3F:12 Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Certificate serial: 019B514EABC6AE589680238159619DE9565E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft Manifest number: 0433 Signing time: Wed 24 Dec 2025 17:01:08 +0000 Manifest this update: Wed 24 Dec 2025 17:01:08 +0000 Manifest next update: Thu 25 Dec 2025 17:01:08 +0000 Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=) 2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=) 3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: 6W7TA9rdOd/mDtTeJR3XhcmUiFFD9FOz3m9qI0rxc3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:ab:c6:ae:58:96:80:23:81:59:61:9d:e9:56:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Validity Not Before: Dec 24 17:01:08 2025 GMT Not After : Dec 25 17:01:08 2025 GMT Subject: CN=d361af336e1032a28b1cd58d9b444e82f8a23f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:29:fd:02:69:e4:f2:5f:16:b5:5a:17:15:64: 07:5d:4a:a0:c2:aa:a8:67:94:4d:d2:30:54:d5:2f: 79:43:b4:f2:f2:67:c9:66:42:06:3c:e1:bd:fd:64: 78:49:c7:b0:f7:b2:f4:2f:7c:58:22:1d:b6:0c:c3: f7:4e:e0:5d:bb:8f:7e:a4:61:6a:3d:87:9b:2b:6b: 36:2b:13:ad:b5:3a:85:b9:b5:da:9a:f4:a3:1f:ce: 09:ca:b3:ee:b9:ea:af:3b:ac:7f:1f:4a:51:a3:74: 32:fc:41:f9:5d:b1:2a:83:64:1e:1b:cf:7b:e3:c0: fe:ab:d5:f8:b6:46:43:da:1c:78:a6:50:16:39:0a: 87:fc:13:3b:34:58:70:2f:e8:d3:da:0a:27:c7:89: ba:96:8f:ff:87:e4:48:a6:4a:b2:db:df:3e:54:5d: f1:10:32:dc:13:b3:f4:85:93:0a:d0:64:f1:bd:27: 54:bb:c9:0f:0e:2d:1b:19:e5:bc:78:9d:80:7e:fb: 69:94:07:02:a2:52:74:62:75:57:9c:de:55:6b:4f: 55:5a:77:e9:4f:34:fb:07:89:b4:aa:57:59:2c:09: a9:51:69:9e:83:8a:01:b8:ca:19:ee:bb:dc:88:72: 4b:70:a0:f1:98:1c:b4:12:ed:fa:5f:a6:a2:60:23: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:61:AF:33:6E:10:32:A2:8B:1C:D5:8D:9B:44:4E:82:F8:A2:3F:12 X509v3 Authority Key Identifier: keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fd:20:bb:a6:7a:60:f9:f6:57:e3:39:3c:54:ea:de:dc:13: 6c:23:82:a5:db:3d:15:ea:e8:00:3b:b8:d8:ef:eb:8f:ac:15: c7:25:2f:c5:f2:c9:5f:cb:87:5f:77:2f:5a:50:f3:27:ef:12: 97:12:8b:5b:d5:19:5b:6c:5c:21:0f:5e:e0:1f:00:a8:30:a5: e7:36:90:f9:b4:86:97:e2:f5:f4:6e:a9:af:76:78:8a:94:46: 0f:71:f7:76:f2:29:1e:f5:46:66:5b:4d:5f:1f:91:70:8e:f2: 51:1c:14:53:d6:a2:87:42:ba:ba:d7:40:03:32:9d:ef:5d:89: 48:6f:04:4c:1a:77:ed:e0:08:7c:08:7f:c3:f6:84:4f:a3:dd: 1f:57:8a:cd:51:4a:68:d3:55:82:0f:3c:1d:9d:4b:ad:94:d5: 7b:96:e9:17:80:85:b5:84:f9:4e:62:b5:46:62:1f:99:3b:26: 7f:bf:ac:b2:ab:72:cc:2b:17:b5:b4:7b:10:8e:d3:5c:3b:ce: c0:b3:a6:c1:89:00:62:25:34:81:c8:18:15:5c:56:89:c5:b8: 3c:c9:bc:2a:f7:b1:0f:b2:6e:f9:ef:5a:22:e9:24:f6:cc:5b: da:6c:8e:ea:e1:5f:fc:72:4d:53:52:02:f7:b9:4c:1d:d2:7d: 26:e2:12:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTqvGrliWgCOBWWGd6VZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm NzBmMzYwHhcNMjUxMjI0MTcwMTA4WhcNMjUxMjI1MTcwMTA4WjAzMTEwLwYDVQQD EyhkMzYxYWYzMzZlMTAzMmEyOGIxY2Q1OGQ5YjQ0NGU4MmY4YTIzZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmin9Amnk8l8WtVoXFWQHXUqgwqqo Z5RN0jBU1S95Q7Ty8mfJZkIGPOG9/WR4Scew97L0L3xYIh22DMP3TuBdu49+pGFq PYebK2s2KxOttTqFubXamvSjH84JyrPuueqvO6x/H0pRo3Qy/EH5XbEqg2QeG897 48D+q9X4tkZD2hx4plAWOQqH/BM7NFhwL+jT2gonx4m6lo//h+RIpkqy298+VF3x EDLcE7P0hZMK0GTxvSdUu8kPDi0bGeW8eJ2AfvtplAcColJ0YnVXnN5Va09VWnfp TzT7B4m0qldZLAmpUWmeg4oBuMoZ7rvciHJLcKDxmBy0Eu36X6aiYCNlpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNhrzNuEDKiixzVjZtEToL4oj8SMB8GA1UdIwQY MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/0gu6Z6 YPn2V+M5PFTq3twTbCOCpds9FeroADu42O/rj6wVxyUvxfLJX8uHX3cvWlDzJ+8S lxKLW9UZW2xcIQ9e4B8AqDCl5zaQ+bSGl+L19G6pr3Z4ipRGD3H3dvIpHvVGZltN Xx+RcI7yURwUU9aih0K6utdAAzKd712JSG8ETBp37eAIfAh/w/aET6PdH1eKzVFK aNNVgg88HZ1LrZTVe5bpF4CFtYT5TmK1RmIfmTsmf7+ssqtyzCsXtbR7EI7TXDvO wLOmwYkAYiU0gcgYFVxWicW4PMm8KvexD7Ju+e9aIukk9sxb2myO6uFf/HJNU1IC 97lMHdJ9JuISnQ== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:43 2025 by rpki-client