This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json) Hash identifier: 9amSslH1oCMc+fSL90xe+nlDHKkCW3yyug9cUJpcRCo= Subject key identifier: 40:05:F2:8A:E2:F1:FA:4C:21:85:A1:21:23:E8:4B:BC:32:F8:28:92 Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c Certificate serial: 019B3E6CF75F7D7495410B426C46C8200399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 01:01:27 +0000 Manifest this update: Sun 21 Dec 2025 01:01:27 +0000 Manifest next update: Mon 22 Dec 2025 01:01:27 +0000 Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=) 2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: R4tXtdG55CdaoKU8qNBBcpNyd+wt/+tqXPuF9zy5TEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f7:5f:7d:74:95:41:0b:42:6c:46:c8:20:03:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c Validity Not Before: Dec 21 01:01:27 2025 GMT Not After : Dec 22 01:01:27 2025 GMT Subject: CN=4005f28ae2f1fa4c2185a12123e84bbc32f82892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:59:2c:0b:f3:11:8f:8e:84:47:0f:14:2f: 86:3a:b1:15:71:19:be:a2:5d:8d:be:84:86:93:13: 46:52:95:99:28:52:8f:7a:86:fa:4e:0b:aa:6b:a7: f5:3c:40:db:0f:5e:2b:a6:cc:80:9e:3c:64:12:48: 46:6a:96:0b:28:57:ab:65:83:c3:25:eb:94:94:63: 6b:0a:df:72:35:0c:99:40:6b:d9:55:0b:5c:ec:3e: 48:f6:63:17:35:a8:4a:c6:3f:cf:44:91:8d:d3:c1: 17:16:c9:ad:8a:33:50:49:a9:99:4c:fe:46:e3:53: b4:43:eb:45:05:db:a0:f7:7d:30:09:65:20:21:b6: b8:41:66:51:3c:1f:9f:16:65:41:23:52:44:5b:5d: d7:91:06:36:b8:fa:e5:de:00:91:88:dd:0f:ef:be: 42:c9:0d:76:a3:1b:6a:e0:23:1c:5b:de:6a:e1:2f: d8:8a:09:00:68:8d:10:c8:9b:c2:f9:b6:fa:92:be: c5:a3:19:2b:6e:8b:af:98:48:da:40:85:7d:a3:34: ba:36:2b:84:0c:4f:15:f9:21:d6:61:14:dd:95:4b: 08:a8:ff:60:f3:38:d2:04:f2:0b:f3:61:7d:a7:33: ba:4c:a7:dc:3e:bb:ed:d1:e3:51:c6:83:78:eb:55: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:F2:8A:E2:F1:FA:4C:21:85:A1:21:23:E8:4B:BC:32:F8:28:92 X509v3 Authority Key Identifier: keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d0:62:dd:0d:fa:ca:69:bd:d1:bb:2f:0a:47:c2:30:c6:1f: fa:47:48:88:18:1c:e9:eb:4c:ed:49:b2:5d:c4:f3:db:39:5e: 89:4a:ab:b2:31:10:ef:17:1c:e0:eb:93:da:e9:a2:a8:b6:52: 2d:2c:98:cd:e6:b7:17:71:52:f7:be:a5:82:3b:a9:0d:87:2d: 0e:8e:97:00:12:7d:47:f4:d7:6f:ab:d1:94:41:56:bf:39:95: db:89:78:9d:dc:49:39:d7:2e:ff:a3:8c:ac:83:4e:ec:8a:35: 0b:2e:28:f4:11:7a:f1:81:eb:f8:44:f7:8f:8f:77:d1:8b:d2: f7:bb:53:50:93:24:ca:87:78:b1:44:ea:d5:23:3c:6e:9f:7b: f9:0f:ef:bd:82:fe:12:e7:f0:a0:00:c1:ed:f2:aa:2a:a6:2f: 70:8f:aa:8f:d7:e8:1d:d4:1f:06:da:f1:68:1e:a3:92:87:39: 23:08:12:82:91:05:55:76:bd:14:ee:09:ad:65:b5:03:5f:6f: 55:cf:a3:24:5d:ee:35:e1:96:4c:d4:d9:ab:5b:94:66:a9:cd: e7:e2:93:32:bd:6c:26:d9:05:73:e3:e7:8d:1a:02:45:2f:48: 29:50:2f:f1:96:b3:7f:60:66:0b:29:6b:6b:9c:31:45:83:75: 62:cb:6b:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPdffXSVQQtCbEbIIAOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1 NzFmMWMwHhcNMjUxMjIxMDEwMTI3WhcNMjUxMjIyMDEwMTI3WjAzMTEwLwYDVQQD Eyg0MDA1ZjI4YWUyZjFmYTRjMjE4NWExMjEyM2U4NGJiYzMyZjgyODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPhZLAvzEY+OhEcPFC+GOrEVcRm+ ol2NvoSGkxNGUpWZKFKPeob6Tguqa6f1PEDbD14rpsyAnjxkEkhGapYLKFerZYPD JeuUlGNrCt9yNQyZQGvZVQtc7D5I9mMXNahKxj/PRJGN08EXFsmtijNQSamZTP5G 41O0Q+tFBdug930wCWUgIba4QWZRPB+fFmVBI1JEW13XkQY2uPrl3gCRiN0P775C yQ12oxtq4CMcW95q4S/YigkAaI0QyJvC+bb6kr7FoxkrbouvmEjaQIV9ozS6NiuE DE8V+SHWYRTdlUsIqP9g8zjSBPIL82F9pzO6TKfcPrvt0eNRxoN461X1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAF8ori8fpMIYWhISPoS7wy+CiSMB8GA1UdIwQY MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNBi3Q36 ymm90bsvCkfCMMYf+kdIiBgc6etM7UmyXcTz2zleiUqrsjEQ7xcc4OuT2umiqLZS LSyYzea3F3FS976lgjupDYctDo6XABJ9R/TXb6vRlEFWvzmV24l4ndxJOdcu/6OM rINO7Io1Cy4o9BF68YHr+ET3j4930YvS97tTUJMkyod4sUTq1SM8bp97+Q/vvYL+ EufwoADB7fKqKqYvcI+qj9foHdQfBtrxaB6jkoc5IwgSgpEFVXa9FO4JrWW1A19v Vc+jJF3uNeGWTNTZq1uUZqnN5+KTMr1sJtkFc+PnjRoCRS9IKVAv8Zazf2BmCylr a5wxRYN1Ystr6g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:24 2025 by rpki-client