This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json) Hash identifier: PgTyyFiOrBRXdFo5WcSNxDkaZMiEV6ncETcfQhtzqrY= Subject key identifier: D0:97:03:DB:31:58:D4:45:6E:6E:1F:36:E3:CC:C5:2A:54:6B:CB:F9 Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3 Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3 Certificate serial: 019B4E8487A9BF26EEA5CDE8CA49442E8E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft Manifest number: 04A6 Signing time: Wed 24 Dec 2025 04:01:06 +0000 Manifest this update: Wed 24 Dec 2025 04:01:06 +0000 Manifest next update: Thu 25 Dec 2025 04:01:06 +0000 Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: 91QQD5tulKBUnZBulB4nK2sP7rGr7HsxjFcy3fsPQaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:87:a9:bf:26:ee:a5:cd:e8:ca:49:44:2e:8e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3 Validity Not Before: Dec 24 04:01:06 2025 GMT Not After : Dec 25 04:01:06 2025 GMT Subject: CN=d09703db3158d4456e6e1f36e3ccc52a546bcbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:c5:64:47:aa:00:cf:ee:c0:18:d5:11:88: fd:60:e1:45:17:bd:1e:17:a3:9a:f8:0e:03:f0:7b: 04:32:e3:54:35:e9:8a:aa:e2:61:b7:68:20:b9:f3: 54:55:b7:10:42:1c:88:e7:3a:40:2b:8d:7e:ea:41: 21:7e:b1:8f:f4:a7:f1:47:fd:44:f8:75:eb:4c:cf: 5c:fa:39:9f:e2:9c:ea:b4:55:35:cc:e9:3c:3b:ae: a2:e7:7a:5a:75:67:55:de:b0:c9:12:36:47:88:60: 12:03:8a:9f:cb:44:e0:e1:99:24:91:68:b5:29:67: cd:db:0c:f6:92:d4:46:10:fd:3b:b8:70:3e:12:9c: fc:b0:d0:8f:47:b0:bb:46:83:0f:b4:fa:7a:c9:82: 12:5f:a2:49:cb:d4:de:64:f7:4d:04:fa:23:de:31: b3:37:50:56:f2:26:b2:4b:b8:28:95:bc:62:ae:80: 78:51:c6:8e:6e:a6:ef:13:db:bd:03:04:e4:3a:43: dd:46:8e:06:4e:d0:49:c1:de:41:59:3d:dd:94:d7: 73:5a:58:c6:7f:93:29:c3:26:c0:a3:30:df:34:41: bd:9c:9a:40:c9:8c:18:d5:6b:9b:e1:e6:ad:fe:f9: 7c:02:bf:13:e9:ba:39:33:fe:44:64:30:f1:10:32: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:03:DB:31:58:D4:45:6E:6E:1F:36:E3:CC:C5:2A:54:6B:CB:F9 X509v3 Authority Key Identifier: keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c0:13:01:3e:34:18:be:bd:08:ba:a6:04:f6:19:2b:2c:40: fb:1e:b0:04:c2:07:6a:cd:d1:31:8a:1b:e0:6a:26:88:be:0c: 2d:e7:84:21:b9:94:9e:6d:41:0c:70:ab:3b:59:6e:cb:7e:8a: dc:8d:12:66:da:ac:60:e5:e0:d3:29:1c:7d:e0:2c:ef:fa:4c: f6:12:ea:ba:23:69:f0:3f:12:ab:a2:9a:69:5e:71:d5:61:b3: 9f:23:99:33:47:35:47:09:43:bf:3c:f0:d2:3c:29:cc:92:66: 75:70:be:61:83:e5:82:b0:fb:81:02:32:88:70:8d:de:1a:41: 15:c9:bf:a3:eb:21:cf:40:5f:33:83:f2:6d:1f:62:ec:e8:11: 88:18:d9:8b:53:23:89:bb:cd:56:25:fe:9e:81:68:3a:73:21: 76:eb:64:90:c4:47:e5:a4:8f:fc:5c:92:6b:07:89:8c:ba:72: 5c:5e:4c:48:30:c7:de:59:39:86:12:eb:e3:1a:a3:46:49:1c: f9:75:03:13:90:f8:c6:1d:f3:a0:ca:cf:cd:0f:03:75:a7:b9: 3b:54:9a:9a:1c:7a:84:1a:87:57:59:3a:6d:8c:69:b0:fc:52: 19:7a:85:cc:66:c7:2c:b6:bb:27:0e:32:44:61:81:8a:f0:cf: 04:90:3c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhIepvybupc3oyklELo4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOTI4MGEyNmY4MzE1NjYxNThiMjYxN2M5NWQxOWQzMzhl ZTE1ZDMwHhcNMjUxMjI0MDQwMTA2WhcNMjUxMjI1MDQwMTA2WjAzMTEwLwYDVQQD EyhkMDk3MDNkYjMxNThkNDQ1NmU2ZTFmMzZlM2NjYzUyYTU0NmJjYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwrFZEeqAM/uwBjVEYj9YOFFF70e F6Oa+A4D8HsEMuNUNemKquJht2ggufNUVbcQQhyI5zpAK41+6kEhfrGP9KfxR/1E +HXrTM9c+jmf4pzqtFU1zOk8O66i53padWdV3rDJEjZHiGASA4qfy0Tg4ZkkkWi1 KWfN2wz2ktRGEP07uHA+Epz8sNCPR7C7RoMPtPp6yYISX6JJy9TeZPdNBPoj3jGz N1BW8iayS7golbxiroB4UcaObqbvE9u9AwTkOkPdRo4GTtBJwd5BWT3dlNdzWljG f5MpwybAozDfNEG9nJpAyYwY1Wub4eat/vl8Ar8T6bo5M/5EZDDxEDISDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCXA9sxWNRFbm4fNuPMxSpUa8v5MB8GA1UdIwQY MBaAFC2SgKJvgxVmFYsmF8ldGdM47hXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUt Y2FlNDAzODRjNmJmLzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUtY2FlNDAzODRjNmJm LzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8ATAT40 GL69CLqmBPYZKyxA+x6wBMIHas3RMYob4GomiL4MLeeEIbmUnm1BDHCrO1luy36K 3I0SZtqsYOXg0ykcfeAs7/pM9hLquiNp8D8Sq6KaaV5x1WGznyOZM0c1RwlDvzzw 0jwpzJJmdXC+YYPlgrD7gQIyiHCN3hpBFcm/o+shz0BfM4PybR9i7OgRiBjZi1Mj ibvNViX+noFoOnMhdutkkMRH5aSP/FySaweJjLpyXF5MSDDH3lk5hhLr4xqjRkkc +XUDE5D4xh3zoMrPzQ8Ddae5O1Samhx6hBqHV1k6bYxpsPxSGXqFzGbHLLa7Jw4y RGGBivDPBJA8mw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:03 2025 by rpki-client