This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json) Hash identifier: hWphsdEMJY7pGPfB9sjapWoMaj7gM1u7GRe0zIcd7Vg= Subject key identifier: 67:CB:57:08:BD:9B:19:F5:A9:3F:70:7F:72:5B:2D:0D:7F:16:E0:92 Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Certificate serial: 019B2FD4F6D45C1F3334254A4E78C6359397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft Manifest number: 152F Signing time: Thu 18 Dec 2025 05:00:44 +0000 Manifest this update: Thu 18 Dec 2025 05:00:44 +0000 Manifest next update: Fri 19 Dec 2025 05:00:44 +0000 Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: p/mSdeptU0JRACDsZVq2ySbpzWg/LgTxrGBWw47dHQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:f6:d4:5c:1f:33:34:25:4a:4e:78:c6:35:93:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Validity Not Before: Dec 18 05:00:44 2025 GMT Not After : Dec 19 05:00:44 2025 GMT Subject: CN=67cb5708bd9b19f5a93f707f725b2d0d7f16e092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:ec:c4:88:59:ac:8a:db:04:5d:fc:3e:3f: 35:00:b8:8e:35:cd:ff:8b:12:2e:ad:cc:7c:d9:fb: 24:ee:18:56:80:1e:83:a5:6c:33:5d:ce:74:07:9f: 14:24:59:98:03:f2:03:9a:0e:2a:d1:59:4b:11:8c: b5:44:2a:32:ea:93:58:38:7e:6b:97:80:22:14:af: 13:a1:c8:09:12:c2:76:6e:50:4c:cf:05:10:3e:3b: 5f:0e:ab:f4:a2:ea:f4:74:25:96:e7:6b:3f:5e:73: 93:7b:5d:01:14:ba:b9:05:d5:3b:11:dc:da:c7:e0: 77:f7:fb:e7:a9:e5:09:32:18:b2:ba:c5:1d:11:31: 21:e0:79:52:f6:86:9f:12:e5:8d:11:78:0b:a3:0c: 8f:8b:b3:3f:a5:68:c7:e0:25:ad:a3:f4:e6:f6:e8: d3:96:0d:56:9b:c8:77:09:8d:31:85:f5:44:1c:00: be:83:94:40:bd:de:06:7d:85:a1:e5:5f:61:53:56: 08:52:5a:9b:0d:8a:0b:12:ca:c3:af:83:34:86:b6: 15:6f:50:4c:0e:45:67:6b:20:80:47:4f:e6:1c:c9: 64:2b:cb:d3:ba:6c:47:a9:05:88:83:43:0a:60:c7: 61:f0:3c:1d:07:0f:d9:30:f2:2e:e4:b6:17:1b:de: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CB:57:08:BD:9B:19:F5:A9:3F:70:7F:72:5B:2D:0D:7F:16:E0:92 X509v3 Authority Key Identifier: keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:d1:0c:31:d7:70:9c:ea:55:93:85:b3:7b:0a:09:25:3b:94: 97:95:bb:40:b7:09:30:07:00:9e:88:7a:2a:7c:6e:52:11:6c: 8a:ef:4a:37:97:5d:48:7e:e9:ca:09:21:23:33:e3:67:a6:c3: 4f:fb:31:69:df:2a:2c:d8:0d:4e:f1:37:ee:71:d1:4c:7a:7e: a5:1d:84:cb:04:97:fd:78:a2:58:aa:ad:ac:5d:e1:47:e4:e2: d4:ef:cb:e7:b6:62:e7:8d:58:1f:7d:29:ac:0b:9c:25:f5:fe: af:11:09:d5:03:89:13:ac:62:fa:2d:09:eb:d8:08:76:84:66: 55:86:e2:bc:d9:ec:d5:f9:e8:1f:aa:d3:3a:45:f7:4a:81:18: 90:1d:ec:27:1b:99:87:f2:46:ca:c6:0a:ff:65:1e:f3:4f:97: ec:81:47:12:83:3c:d8:09:c0:1f:1b:62:52:93:ec:47:49:5e: ea:b8:03:7a:4b:e6:35:b7:10:a4:96:2c:eb:86:be:0e:51:6f: af:b1:9a:c3:5d:de:5e:2f:87:ee:81:a1:1a:f2:f1:a3:7c:e0: 35:d0:dc:c6:f3:8e:34:f6:e8:b9:94:ec:d7:be:f7:c1:f7:3f: ec:3f:8c:b6:6a:09:74:b7:33:d0:d9:78:cf:a3:06:5f:77:c0: 81:fc:e8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1PbUXB8zNCVKTnjGNZOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm NTYwNmQwHhcNMjUxMjE4MDUwMDQ0WhcNMjUxMjE5MDUwMDQ0WjAzMTEwLwYDVQQD Eyg2N2NiNTcwOGJkOWIxOWY1YTkzZjcwN2Y3MjViMmQwZDdmMTZlMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWjsxIhZrIrbBF38Pj81ALiONc3/ ixIurcx82fsk7hhWgB6DpWwzXc50B58UJFmYA/IDmg4q0VlLEYy1RCoy6pNYOH5r l4AiFK8TocgJEsJ2blBMzwUQPjtfDqv0our0dCWW52s/XnOTe10BFLq5BdU7Edza x+B39/vnqeUJMhiyusUdETEh4HlS9oafEuWNEXgLowyPi7M/pWjH4CWto/Tm9ujT lg1Wm8h3CY0xhfVEHAC+g5RAvd4GfYWh5V9hU1YIUlqbDYoLEsrDr4M0hrYVb1BM DkVnayCAR0/mHMlkK8vTumxHqQWIg0MKYMdh8DwdBw/ZMPIu5LYXG965ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfLVwi9mxn1qT9wf3JbLQ1/FuCSMB8GA1UdIwQY MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9EMMddw nOpVk4WzewoJJTuUl5W7QLcJMAcAnoh6KnxuUhFsiu9KN5ddSH7pygkhIzPjZ6bD T/sxad8qLNgNTvE37nHRTHp+pR2EywSX/XiiWKqtrF3hR+Ti1O/L57Zi541YH30p rAucJfX+rxEJ1QOJE6xi+i0J69gIdoRmVYbivNns1fnoH6rTOkX3SoEYkB3sJxuZ h/JGysYK/2Ue80+X7IFHEoM82AnAHxtiUpPsR0le6rgDekvmNbcQpJYs64a+DlFv r7Gaw13eXi+H7oGhGvLxo3zgNdDcxvOONPbouZTs1773wfc/7D+MtmoJdLcz0Nl4 z6MGX3fAgfzomw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:56:43 2025 by rpki-client