This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json) Hash identifier: mpPdOWL/u7rmbVS1QMaOtD/S2h5jgc6Vx0uHA9UY97k= Subject key identifier: F7:36:E2:11:B7:EB:83:74:A1:E3:86:BC:7A:E8:8D:78:11:E3:46:F6 Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Certificate serial: 019B2BF8757C897FAB6EAB3D66334BDAF46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft Manifest number: 0A88 Signing time: Wed 17 Dec 2025 11:01:01 +0000 Manifest this update: Wed 17 Dec 2025 11:01:01 +0000 Manifest next update: Thu 18 Dec 2025 11:01:01 +0000 Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=) 2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: nDDP11BG8ELA6Dfep+H/1hr8BwOfeSQwUobUpc94DWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:75:7c:89:7f:ab:6e:ab:3d:66:33:4b:da:f4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Validity Not Before: Dec 17 11:01:01 2025 GMT Not After : Dec 18 11:01:01 2025 GMT Subject: CN=f736e211b7eb8374a1e386bc7ae88d7811e346f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:87:f1:d4:23:ae:d7:8f:1d:4b:02:84:f2: a7:41:d9:03:46:60:ce:68:84:c3:4d:af:ea:9c:4b: 57:ba:94:f9:cc:39:03:10:8e:c9:64:8d:a7:6d:59: e2:c5:61:fb:17:8f:33:4f:32:60:3e:2b:e8:74:6d: 5e:95:d5:cb:b2:67:29:97:0a:51:1e:6f:50:1a:9a: 67:93:41:29:0c:34:73:fc:f2:57:76:e3:61:67:c5: 4c:a7:df:30:d5:60:6c:33:e7:59:c6:6d:c8:18:c9: f0:f1:4b:1c:7a:f8:13:9e:c1:97:60:57:6f:51:f3: 33:d2:36:0c:70:4c:3f:a6:b1:ea:52:87:96:c2:66: 17:42:2c:a5:ff:c9:c6:b2:95:7e:2a:db:22:0e:dc: 1a:7e:5e:63:80:8c:4f:7f:69:96:25:0a:96:9c:db: 72:ac:f8:2a:21:64:c9:b7:10:6f:13:91:29:4f:75: 64:c6:c3:89:77:18:c1:27:86:50:3e:28:bf:86:0f: 8e:b1:45:39:51:1a:c1:e4:25:63:50:ee:19:bc:e9: 66:5f:c9:b3:85:f0:41:87:51:3c:d4:7e:40:9e:c0: cf:3e:d3:fc:01:d7:f9:d8:5b:4c:12:a8:42:40:30: 6a:c2:28:c4:f3:c0:90:a0:1c:80:f0:b8:11:c3:cc: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:E2:11:B7:EB:83:74:A1:E3:86:BC:7A:E8:8D:78:11:E3:46:F6 X509v3 Authority Key Identifier: keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:69:cb:90:4a:12:fa:3a:c1:cb:61:22:9d:87:a2:5c:e9:67: f8:8e:41:bf:17:8f:e4:4b:cd:98:1e:5e:36:ab:cf:a8:37:40: 37:3f:bd:d6:e8:d6:d8:de:66:16:0f:e4:aa:ad:ee:99:78:1c: 80:b7:e5:bc:f6:77:38:99:37:a8:42:74:b8:a3:6e:4e:53:52: aa:d6:37:4f:ab:38:a4:f3:1f:1e:71:15:0f:8f:24:f0:0a:1e: ac:f9:11:36:f7:ca:1e:b3:eb:39:ed:e5:54:16:2d:c5:db:8d: 15:db:02:7f:29:7a:17:00:89:65:13:c7:f6:6f:11:71:9f:59: f4:d5:9f:d1:c4:92:ba:5b:cf:98:5c:ef:b6:d0:5c:51:a7:3f: b8:e1:53:a8:6c:92:e6:b7:d9:26:32:87:0e:c8:36:e7:1e:fb: 3e:5e:e5:21:66:0b:cf:8f:88:37:c5:b2:96:8f:f7:54:3d:7d: 7f:4e:f8:01:b0:f4:0d:3c:60:3b:f8:de:b8:76:c8:db:72:32: 99:5d:da:26:4f:e6:a8:dc:8b:50:05:02:69:13:56:dc:3f:0a: 46:36:28:0b:84:f9:0f:5f:b8:67:28:2e:40:f6:7d:2e:ad:d6: ce:7d:62:23:07:37:fe:97:4e:72:5a:79:55:ae:16:bb:65:19: 21:b6:1e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HV8iX+rbqs9ZjNL2vRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz YjU2YzAwHhcNMjUxMjE3MTEwMTAxWhcNMjUxMjE4MTEwMTAxWjAzMTEwLwYDVQQD EyhmNzM2ZTIxMWI3ZWI4Mzc0YTFlMzg2YmM3YWU4OGQ3ODExZTM0NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP6H8dQjrtePHUsChPKnQdkDRmDO aITDTa/qnEtXupT5zDkDEI7JZI2nbVnixWH7F48zTzJgPivodG1eldXLsmcplwpR Hm9QGppnk0EpDDRz/PJXduNhZ8VMp98w1WBsM+dZxm3IGMnw8UscevgTnsGXYFdv UfMz0jYMcEw/prHqUoeWwmYXQiyl/8nGspV+KtsiDtwafl5jgIxPf2mWJQqWnNty rPgqIWTJtxBvE5EpT3VkxsOJdxjBJ4ZQPii/hg+OsUU5URrB5CVjUO4ZvOlmX8mz hfBBh1E81H5AnsDPPtP8Adf52FtMEqhCQDBqwijE88CQoByA8LgRw8wZ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc24hG364N0oeOGvHrojXgR40b2MB8GA1UdIwQY MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2 LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2nLkEoS +jrBy2EinYeiXOln+I5BvxeP5EvNmB5eNqvPqDdANz+91ujW2N5mFg/kqq3umXgc gLflvPZ3OJk3qEJ0uKNuTlNSqtY3T6s4pPMfHnEVD48k8AoerPkRNvfKHrPrOe3l VBYtxduNFdsCfyl6FwCJZRPH9m8RcZ9Z9NWf0cSSulvPmFzvttBcUac/uOFTqGyS 5rfZJjKHDsg25x77Pl7lIWYLz4+IN8Wylo/3VD19f074AbD0DTxgO/jeuHbI23Iy mV3aJk/mqNyLUAUCaRNW3D8KRjYoC4T5D1+4ZyguQPZ9Lq3Wzn1iIwc3/pdOclp5 Va4Wu2UZIbYe5g== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:42 2025 by rpki-client