This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json) Hash identifier: mS81Ew5myI/9BO3kx9ipvewZm0TWxuR1hfiV+xGWRfA= Subject key identifier: 15:6C:D5:F6:86:0A:A9:EC:4D:1B:F5:88:EC:9F:CE:A6:E1:54:35:CE Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e Certificate serial: 019B3EDA7E9A8B675551B260A8D81233B331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft Manifest number: 0390 Signing time: Sun 21 Dec 2025 03:01:05 +0000 Manifest this update: Sun 21 Dec 2025 03:01:05 +0000 Manifest next update: Mon 22 Dec 2025 03:01:05 +0000 Files and hashes: 1: F7hFHVt5GnAjfb0AGvjaQBNPnKg.roa (hash: btzZxwXvt98Q7y5uMwpF7P7FoBwM/PNcqw+tRVhi4ns=) 2: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=) 3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: kCegH8IGYw0S9f2mL1hkVx+S+SlodyFieCO8WlvTKBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:7e:9a:8b:67:55:51:b2:60:a8:d8:12:33:b3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e Validity Not Before: Dec 21 03:01:05 2025 GMT Not After : Dec 22 03:01:05 2025 GMT Subject: CN=156cd5f6860aa9ec4d1bf588ec9fcea6e15435ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:c1:17:75:b6:8b:ce:e7:96:c7:c0:ed:ba: 7a:fc:2e:40:e0:e4:3e:22:2f:5f:25:cc:0c:1f:d1: 26:07:9d:3f:0f:70:ee:c1:8b:f0:d6:c4:4f:ba:44: d2:f4:3a:a4:19:4e:03:b0:86:52:18:48:43:f5:98: 93:26:04:d4:58:20:a2:5e:ff:dd:ca:d4:eb:4f:ee: d7:ca:90:ee:04:41:29:8e:b5:8f:78:d5:a0:43:2e: 8f:f1:99:98:e2:38:ae:62:be:a2:e4:5e:85:49:9a: 78:6e:d0:88:9d:d4:d8:c6:36:66:b1:b4:4a:62:0f: 26:1c:e6:5f:53:08:38:49:7d:8f:54:5c:96:52:f8: b6:08:04:2a:5f:81:09:df:f7:56:d7:06:16:1c:df: 80:fe:3f:e6:07:78:00:4a:57:46:41:c1:cb:bb:16: dd:8e:9d:aa:0d:a0:c1:45:19:13:20:96:a7:2b:40: ed:c5:f6:0f:3b:65:68:ca:1a:61:d0:b7:df:e5:88: 0d:90:1d:3f:a5:94:f4:51:d1:f5:fb:91:4e:a6:b2: 66:b5:df:bc:d0:ae:b5:47:38:c9:57:6a:07:5e:d9: 41:ad:71:94:f0:ef:17:80:4f:ed:f7:d3:5d:50:01: 53:72:59:9d:16:68:86:74:58:6a:89:18:22:73:80: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:D5:F6:86:0A:A9:EC:4D:1B:F5:88:EC:9F:CE:A6:E1:54:35:CE X509v3 Authority Key Identifier: keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:70:5d:e1:1e:db:64:84:4f:ee:b9:6b:21:20:4d:3d:f6:4b: 45:72:b9:8a:98:82:6a:60:21:2f:47:9d:ad:4c:b4:6a:16:b9: 92:ef:4b:2b:c7:79:39:55:58:4e:1c:21:69:51:c2:4a:fc:7b: 62:2f:d7:ea:c8:ac:94:a9:fa:09:e0:87:d6:8f:0e:d8:de:dd: fb:ab:24:32:ea:20:96:24:c8:57:98:a8:55:7d:7a:4a:1b:72: 45:9b:bc:a4:14:df:33:5e:10:de:a4:b6:49:fa:1d:5c:31:93: aa:28:83:e0:1f:fa:f0:68:8a:c7:f1:27:14:e5:04:33:6b:87: 05:13:bc:64:8c:35:70:6f:1b:49:7f:25:94:22:2e:66:97:30: 21:fa:4f:cc:c9:bc:06:9d:43:3d:33:54:96:67:59:f5:fd:d1: 78:1b:4b:06:aa:c0:cd:d9:c4:e2:6c:42:32:96:af:9d:4f:ca: 91:fc:00:e4:ec:08:6a:01:13:20:a4:26:19:8b:c6:bc:04:16: 06:2f:5d:da:b4:23:65:74:94:1e:6b:61:25:4b:e8:2e:36:53: d9:40:47:d4:fa:2b:07:69:80:63:17:07:c7:82:d1:b0:41:80: 73:b7:5b:fa:e9:43:68:2f:f3:38:fb:70:da:06:87:35:6c:be: 84:17:40:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2n6ai2dVUbJgqNgSM7MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh ZjdhM2UwHhcNMjUxMjIxMDMwMTA1WhcNMjUxMjIyMDMwMTA1WjAzMTEwLwYDVQQD EygxNTZjZDVmNjg2MGFhOWVjNGQxYmY1ODhlYzlmY2VhNmUxNTQzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPfBF3W2i87nlsfA7bp6/C5A4OQ+ Ii9fJcwMH9EmB50/D3DuwYvw1sRPukTS9DqkGU4DsIZSGEhD9ZiTJgTUWCCiXv/d ytTrT+7XypDuBEEpjrWPeNWgQy6P8ZmY4jiuYr6i5F6FSZp4btCIndTYxjZmsbRK Yg8mHOZfUwg4SX2PVFyWUvi2CAQqX4EJ3/dW1wYWHN+A/j/mB3gASldGQcHLuxbd jp2qDaDBRRkTIJanK0DtxfYPO2Voyhph0Lff5YgNkB0/pZT0UdH1+5FOprJmtd+8 0K61RzjJV2oHXtlBrXGU8O8XgE/t99NdUAFTclmdFmiGdFhqiRgic4DMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVs1faGCqnsTRv1iOyfzqbhVDXOMB8GA1UdIwQY MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3Bd4R7b ZIRP7rlrISBNPfZLRXK5ipiCamAhL0edrUy0aha5ku9LK8d5OVVYThwhaVHCSvx7 Yi/X6sislKn6CeCH1o8O2N7d+6skMuogliTIV5ioVX16ShtyRZu8pBTfM14Q3qS2 SfodXDGTqiiD4B/68GiKx/EnFOUEM2uHBRO8ZIw1cG8bSX8llCIuZpcwIfpPzMm8 Bp1DPTNUlmdZ9f3ReBtLBqrAzdnE4mxCMpavnU/KkfwA5OwIagETIKQmGYvGvAQW Bi9d2rQjZXSUHmthJUvoLjZT2UBH1PorB2mAYxcHx4LRsEGAc7db+ulDaC/zOPtw 2gaHNWy+hBdAQw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:08 2025 by rpki-client