This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json) Hash identifier: 9649X1XaxmA+ri7F5uqMoZhQgs7L6723UG7ms7bw4nE= Subject key identifier: 09:A0:EE:9B:66:D9:6E:40:85:EF:4F:81:90:DE:31:D4:FF:85:18:C9 Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Certificate serial: 019B33B1A6EE5797F751F4B6F2E966B56D80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft Manifest number: 1531 Signing time: Thu 18 Dec 2025 23:00:39 +0000 Manifest this update: Thu 18 Dec 2025 23:00:39 +0000 Manifest next update: Fri 19 Dec 2025 23:00:39 +0000 Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: tjKfB1kSzXtmkZj4KLYJtR713v/LLixXNH/x9QAKzXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:a6:ee:57:97:f7:51:f4:b6:f2:e9:66:b5:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Validity Not Before: Dec 18 23:00:39 2025 GMT Not After : Dec 19 23:00:39 2025 GMT Subject: CN=09a0ee9b66d96e4085ef4f8190de31d4ff8518c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:c0:f8:ed:4e:3b:33:0d:c2:97:a1:5f:d1: 8a:53:e2:c8:80:5e:00:60:e7:42:d3:bc:c9:6c:15: c1:55:35:20:68:0c:1e:29:c0:e0:04:17:3f:a5:41: 66:e5:5b:a3:a1:24:b2:53:48:f7:10:4f:d4:f7:ac: 24:09:76:fe:af:85:5c:e0:c5:07:c3:ce:e4:8a:b7: 65:d1:e9:02:00:55:d1:e3:46:8a:55:0f:c3:84:7e: 6f:0b:11:72:09:90:78:02:b2:47:6c:1f:3e:3c:15: 5c:49:e8:36:c9:7b:c1:8a:e6:21:43:f3:4a:ee:fd: 5e:a7:0a:fb:60:fd:57:10:31:05:7a:37:ae:f8:24: e7:05:70:9c:69:21:4c:1a:aa:97:d0:72:9a:70:ca: 15:81:56:78:01:e7:de:9b:cc:78:86:30:f3:41:b9: 55:d9:49:03:3f:49:07:eb:c6:ac:bc:5f:a2:ee:a5: f0:21:0e:f6:8f:ce:c8:1e:d5:45:44:9a:49:34:02: 4d:9b:ee:32:fd:be:da:3c:3e:43:7e:50:d7:9c:c1: f2:d7:5a:17:6e:57:f9:e4:73:09:69:c4:a6:f8:46: de:b9:c4:ee:7a:ab:77:69:46:4a:16:c7:70:4d:ea: 4f:48:4d:7d:b0:b8:57:7a:e3:24:01:2f:25:9e:ac: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:EE:9B:66:D9:6E:40:85:EF:4F:81:90:DE:31:D4:FF:85:18:C9 X509v3 Authority Key Identifier: keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:c3:5d:f7:82:25:b6:7a:3b:7f:4a:a5:bd:14:b7:19:0c: c1:c4:7c:51:8c:b2:85:06:6f:c6:36:3b:23:c3:a3:5d:36:9b: 43:20:41:7b:4f:d5:a8:1a:29:8f:1f:21:65:b3:c7:20:5c:70: 10:9c:49:72:95:8b:3d:d8:96:0d:9c:02:8f:60:2b:7e:d1:a6: a8:01:33:2c:2d:10:db:ba:38:b6:54:28:72:47:05:90:45:89: e0:5b:c9:be:a7:4f:cd:a0:1d:b7:cb:c5:dc:a3:86:bc:f8:6b: aa:14:a5:7d:5e:27:bb:e1:d4:37:60:33:0f:fb:a5:8b:15:e8: 31:54:63:73:9a:54:47:5e:ae:c7:b9:60:f5:3a:2f:ac:f6:20: 45:61:a9:85:2f:04:e6:25:ff:21:2d:7d:42:75:b6:bf:00:11: 4c:fe:56:c4:21:d9:47:9f:c2:b5:b8:9b:af:de:84:b0:74:4c: f0:3e:d6:e3:69:d7:f7:b6:e1:4b:72:90:a2:44:eb:86:79:0c: 70:6e:dc:ab:2d:9b:bc:a6:0f:25:d5:cd:82:a8:b3:57:8b:24: a0:a1:03:f1:2b:ef:dd:97:03:ea:88:57:25:31:f4:d5:9f:dc: 79:a4:88:8c:0f:b8:a8:b2:a4:8b:7a:3c:c8:ed:3e:14:27:e4: 33:80:1b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsabuV5f3UfS28ulmtW2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm NTYwNmQwHhcNMjUxMjE4MjMwMDM5WhcNMjUxMjE5MjMwMDM5WjAzMTEwLwYDVQQD EygwOWEwZWU5YjY2ZDk2ZTQwODVlZjRmODE5MGRlMzFkNGZmODUxOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPDA+O1OOzMNwpehX9GKU+LIgF4A YOdC07zJbBXBVTUgaAweKcDgBBc/pUFm5VujoSSyU0j3EE/U96wkCXb+r4Vc4MUH w87kirdl0ekCAFXR40aKVQ/DhH5vCxFyCZB4ArJHbB8+PBVcSeg2yXvBiuYhQ/NK 7v1epwr7YP1XEDEFejeu+CTnBXCcaSFMGqqX0HKacMoVgVZ4Aefem8x4hjDzQblV 2UkDP0kH68asvF+i7qXwIQ72j87IHtVFRJpJNAJNm+4y/b7aPD5DflDXnMHy11oX blf55HMJacSm+EbeucTueqt3aUZKFsdwTepPSE19sLhXeuMkAS8lnqz+gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmg7ptm2W5Ahe9PgZDeMdT/hRjJMB8GA1UdIwQY MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKDDXfeC JbZ6O39Kpb0UtxkMwcR8UYyyhQZvxjY7I8OjXTabQyBBe0/VqBopjx8hZbPHIFxw EJxJcpWLPdiWDZwCj2ArftGmqAEzLC0Q27o4tlQockcFkEWJ4FvJvqdPzaAdt8vF 3KOGvPhrqhSlfV4nu+HUN2AzD/ulixXoMVRjc5pUR16ux7lg9TovrPYgRWGphS8E 5iX/IS19QnW2vwARTP5WxCHZR5/Ctbibr96EsHRM8D7W42nX97bhS3KQokTrhnkM cG7cqy2bvKYPJdXNgqizV4skoKED8Svv3ZcD6ohXJTH01Z/ceaSIjA+4qLKki3o8 yO0+FCfkM4AbRA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:21:14 2025 by rpki-client