This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json) Hash identifier: qRGMKhmpTRG4CrTH584/2pNMAE+O2JRM7GVc4g8bAPQ= Subject key identifier: 9D:A3:30:EA:B0:94:16:E7:7C:13:42:E6:45:7F:80:F0:1D:B9:DD:13 Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345 Certificate serial: 019B484B6626A8EF73B471F5D6FFDA8F5106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft Manifest number: 171E Signing time: Mon 22 Dec 2025 23:00:59 +0000 Manifest this update: Mon 22 Dec 2025 23:00:59 +0000 Manifest next update: Tue 23 Dec 2025 23:00:59 +0000 Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: qLn4cNqwKkgU91rTCfo3y6Eiwnr0ZaOccp/nZW6U5mk=) 2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:66:26:a8:ef:73:b4:71:f5:d6:ff:da:8f:51:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345 Validity Not Before: Dec 22 23:00:59 2025 GMT Not After : Dec 23 23:00:59 2025 GMT Subject: CN=9da330eab09416e77c1342e6457f80f01db9dd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:1c:d6:8b:0c:e2:41:01:72:31:6d:3c:0a: 20:40:c1:2b:0b:43:26:9c:0d:56:6e:c3:01:12:4a: 27:11:0c:ff:6b:0f:d6:f5:ef:86:61:af:28:fd:af: ce:28:37:a1:b1:48:50:d3:1e:dc:68:94:e3:15:04: 01:89:03:5c:4f:06:55:2b:f1:f4:ee:eb:4f:be:54: 60:f5:ab:86:da:29:a5:a9:9a:42:6b:f0:5e:14:10: 94:3e:df:55:82:c6:17:7b:44:10:8e:43:b3:22:0d: e5:98:b5:d8:a9:8c:e0:9b:59:69:7e:16:ed:eb:11: ae:8b:93:d6:69:93:d9:de:d6:5e:ea:db:29:d3:a9: 63:13:e7:ae:20:a2:40:b8:3f:6e:d0:e0:29:7d:1e: 56:44:a2:80:36:6a:f4:fc:fa:1e:ad:51:e6:4c:ea: 59:2c:b1:85:1d:15:d7:75:3d:ce:a3:68:2b:a1:75: 48:8b:7b:e9:e1:67:e5:a7:d0:19:fe:40:a0:6a:de: 12:9b:e7:3c:8f:c1:d5:97:95:d0:e4:f0:e9:70:59: 6f:2d:cb:c5:90:5e:d3:d0:28:0f:d9:8d:80:8b:29: 8f:f6:57:c8:bd:0a:f9:b6:6e:b0:d0:e1:73:b3:9a: 5b:1b:58:5f:b9:39:26:e5:ee:ac:67:7c:2a:32:d8: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A3:30:EA:B0:94:16:E7:7C:13:42:E6:45:7F:80:F0:1D:B9:DD:13 X509v3 Authority Key Identifier: keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4d:e8:4c:e9:37:78:78:03:68:24:6c:80:46:cd:52:b5:20: dc:d6:58:46:b3:dc:c5:0d:d5:b9:41:27:a1:3f:bf:24:b6:59: ca:3d:a9:40:61:12:69:a0:fd:5c:97:ab:87:9f:57:35:31:31: 2b:db:70:9c:19:50:a3:df:5d:f6:d9:fb:4b:55:3f:d6:46:df: ac:40:b7:25:34:9f:4a:94:b1:35:9a:a9:b9:20:09:16:b9:fe: db:2e:80:95:f3:cd:5e:88:a3:30:e2:65:a6:28:92:1c:25:b6: 4f:d6:8a:48:b2:83:59:6f:4f:ff:fc:35:5d:36:07:05:35:fc: 03:6f:b0:41:18:70:e8:9e:41:b0:78:28:e2:53:c8:fd:47:6a: e8:6c:5e:fe:54:7d:0e:3f:7c:8b:71:2b:b8:d2:e7:02:85:81: a6:d8:c5:6b:cf:b7:82:ee:a1:88:3d:fa:1d:b7:4a:f0:c5:da: 05:56:44:ca:26:14:ba:68:0a:8f:1e:c2:09:b3:35:9b:bf:e1: e1:04:49:0e:1b:4d:d0:2b:c2:d0:9e:db:4c:dd:64:df:a1:6f: 35:0b:6b:ec:9b:b5:89:f9:50:32:a6:e6:ef:dd:1c:a1:c2:3a: db:5f:c8:f9:8d:93:60:a3:3b:6b:d0:eb:68:57:af:18:69:89: d8:3a:7f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2YmqO9ztHH11v/aj1EGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3 Y2MzNDUwHhcNMjUxMjIyMjMwMDU5WhcNMjUxMjIzMjMwMDU5WjAzMTEwLwYDVQQD Eyg5ZGEzMzBlYWIwOTQxNmU3N2MxMzQyZTY0NTdmODBmMDFkYjlkZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Yc1osM4kEBcjFtPAogQMErC0Mm nA1WbsMBEkonEQz/aw/W9e+GYa8o/a/OKDehsUhQ0x7caJTjFQQBiQNcTwZVK/H0 7utPvlRg9auG2imlqZpCa/BeFBCUPt9VgsYXe0QQjkOzIg3lmLXYqYzgm1lpfhbt 6xGui5PWaZPZ3tZe6tsp06ljE+euIKJAuD9u0OApfR5WRKKANmr0/PoerVHmTOpZ LLGFHRXXdT3Oo2groXVIi3vp4Wflp9AZ/kCgat4Sm+c8j8HVl5XQ5PDpcFlvLcvF kF7T0CgP2Y2AiymP9lfIvQr5tm6w0OFzs5pbG1hfuTkm5e6sZ3wqMtjLYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2jMOqwlBbnfBNC5kV/gPAdud0TMB8GA1UdIwQY MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt MzY4MGFlYjYzMmRhLzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg03oTOk3 eHgDaCRsgEbNUrUg3NZYRrPcxQ3VuUEnoT+/JLZZyj2pQGESaaD9XJerh59XNTEx K9twnBlQo99d9tn7S1U/1kbfrEC3JTSfSpSxNZqpuSAJFrn+2y6AlfPNXoijMOJl piiSHCW2T9aKSLKDWW9P//w1XTYHBTX8A2+wQRhw6J5BsHgo4lPI/Udq6Gxe/lR9 Dj98i3EruNLnAoWBptjFa8+3gu6hiD36HbdK8MXaBVZEyiYUumgKjx7CCbM1m7/h 4QRJDhtN0CvC0J7bTN1k36FvNQtr7Ju1iflQMqbm790cocI621/I+Y2TYKM7a9Dr aFevGGmJ2Dp/Ig== -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:31 2025 by rpki-client