This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json) Hash identifier: ESbauhiQNeV9NHm5YMOvdYBfpOGKeinUtMlQjr0729k= Subject key identifier: 50:B4:75:F5:05:FB:49:EA:77:B7:2C:0D:6D:26:D4:EA:F1:82:36:11 Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Certificate serial: 019B4091FB4F8177B029F907639AC02D4098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 11:01:07 +0000 Manifest this update: Sun 21 Dec 2025 11:01:07 +0000 Manifest next update: Mon 22 Dec 2025 11:01:07 +0000 Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=) 2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: kgq7RoPJBZze7TPOpocE2IY6tTJVbe1chiBHvzECWQ8=) 3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=) 4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:fb:4f:81:77:b0:29:f9:07:63:9a:c0:2d:40:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Validity Not Before: Dec 21 11:01:07 2025 GMT Not After : Dec 22 11:01:07 2025 GMT Subject: CN=50b475f505fb49ea77b72c0d6d26d4eaf1823611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:28:5a:86:31:bf:5e:f8:7e:af:4c:98:6b: c3:35:95:02:e9:fe:ae:45:e9:78:af:ed:b2:91:98: ee:79:90:96:a7:4c:78:f0:78:0d:49:07:06:d1:b9: bd:30:8e:5d:e1:f9:a1:4a:37:fa:19:68:9b:47:b7: c7:a5:62:d1:93:94:16:c5:a7:be:f5:24:51:8e:79: 75:b0:0d:d1:1b:38:4e:c9:9a:3f:ed:0b:d7:32:e8: 61:41:0d:c4:6c:b9:b3:d1:c9:d8:67:61:54:51:11: 94:ae:57:7e:ca:88:17:22:9a:5e:ac:1a:46:7e:54: 56:f1:32:80:0e:2f:df:35:4b:dc:1f:d6:bb:37:46: ca:13:a4:82:f6:37:85:ec:c5:81:d0:5a:3a:08:2f: 98:af:18:0c:51:5c:d8:ff:c9:6d:ad:77:2e:2e:9e: 48:99:77:85:48:da:85:42:9d:24:71:0e:73:51:a2: 87:f1:48:51:83:5b:4f:15:aa:ac:53:25:45:9f:11: be:c3:ca:af:57:f8:9a:39:2d:96:85:0b:42:f3:ad: ab:2d:43:0d:46:c2:22:13:20:fc:d6:ef:03:ab:d9: dd:08:9b:e2:b0:d2:ad:d1:ad:3a:a1:bc:d9:69:fd: 91:a7:61:53:fe:75:2c:3d:35:fa:0a:8d:b0:3b:62: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B4:75:F5:05:FB:49:EA:77:B7:2C:0D:6D:26:D4:EA:F1:82:36:11 X509v3 Authority Key Identifier: keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8c:c2:11:df:bd:4d:78:23:28:97:57:64:42:6c:07:0a:12: 0e:6e:a9:c5:fc:f5:84:33:6c:17:e3:26:94:3f:49:88:db:fa: 1a:f0:4c:b1:fc:d7:52:e5:a8:b7:66:d8:2d:44:61:20:bc:fa: 9f:38:1a:cd:51:cf:a3:7a:28:00:6b:64:1c:63:0d:0d:ea:d7: 80:11:f7:1a:28:1e:a6:ed:ac:d2:49:90:0e:06:4b:86:b9:c9: 97:75:4a:30:14:fd:ea:cf:39:37:af:87:0b:82:e4:da:85:66: 16:79:2d:b1:bd:31:ba:31:a4:0c:f1:3c:e5:e1:d6:43:b9:3c: b8:f1:ac:34:10:63:d9:0b:ec:78:61:c1:df:ce:5a:75:e5:d7: 57:fb:11:ec:0e:7c:d1:ef:d7:27:fd:b7:61:c9:ae:53:a3:d9: 3d:98:43:96:6e:06:a5:0e:a9:19:fb:57:cb:25:eb:f4:c0:1d: c0:90:f6:79:ff:67:34:0e:1d:64:f5:2f:24:42:06:a2:37:78: 3b:f0:1d:60:8e:5c:bc:f5:f6:d9:a3:d1:42:6e:48:19:b3:28: 4a:53:e3:10:30:60:8a:b8:10:db:db:5c:59:ca:51:50:bb:e1: 3e:c7:71:aa:e7:63:87:4e:c5:dc:64:f2:28:29:07:82:49:dd: c7:db:eb:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkftPgXewKfkHY5rALUCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj ZmRlZWUwHhcNMjUxMjIxMTEwMTA3WhcNMjUxMjIyMTEwMTA3WjAzMTEwLwYDVQQD Eyg1MGI0NzVmNTA1ZmI0OWVhNzdiNzJjMGQ2ZDI2ZDRlYWYxODIzNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UkoWoYxv174fq9MmGvDNZUC6f6u Rel4r+2ykZjueZCWp0x48HgNSQcG0bm9MI5d4fmhSjf6GWibR7fHpWLRk5QWxae+ 9SRRjnl1sA3RGzhOyZo/7QvXMuhhQQ3EbLmz0cnYZ2FUURGUrld+yogXIpperBpG flRW8TKADi/fNUvcH9a7N0bKE6SC9jeF7MWB0Fo6CC+YrxgMUVzY/8ltrXcuLp5I mXeFSNqFQp0kcQ5zUaKH8UhRg1tPFaqsUyVFnxG+w8qvV/iaOS2WhQtC862rLUMN RsIiEyD81u8Dq9ndCJvisNKt0a06obzZaf2Rp2FT/nUsPTX6Co2wO2J+rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC0dfUF+0nqd7csDW0m1OrxgjYRMB8GA1UdIwQY MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3 LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYzCEd+9 TXgjKJdXZEJsBwoSDm6pxfz1hDNsF+MmlD9JiNv6GvBMsfzXUuWot2bYLURhILz6 nzgazVHPo3ooAGtkHGMNDerXgBH3Gigepu2s0kmQDgZLhrnJl3VKMBT96s85N6+H C4Lk2oVmFnktsb0xujGkDPE85eHWQ7k8uPGsNBBj2QvseGHB385adeXXV/sR7A58 0e/XJ/23YcmuU6PZPZhDlm4GpQ6pGftXyyXr9MAdwJD2ef9nNA4dZPUvJEIGojd4 O/AdYI5cvPX22aPRQm5IGbMoSlPjEDBgirgQ29tcWcpRULvhPsdxqudjh07F3GTy KCkHgkndx9vrDg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:04:51 2025 by rpki-client