This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json) Hash identifier: sm0MHJv82B6N9ebgWCKBuDjtWtNsgJZbC6LGhswA2ko= Subject key identifier: 1B:A7:87:20:DB:6E:13:0E:2F:03:69:48:ED:8C:B6:52:75:16:7E:D4 Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019B3043302AA2A3E805C4565336A2552616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft Manifest number: 0E29 Signing time: Thu 18 Dec 2025 07:01:08 +0000 Manifest this update: Thu 18 Dec 2025 07:01:08 +0000 Manifest next update: Fri 19 Dec 2025 07:01:08 +0000 Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=) 2: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: coZZ2bGST36AMotC6IM//HmTnUo7CboWYfbQSESV6/s=) 3: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:30:2a:a2:a3:e8:05:c4:56:53:36:a2:55:26:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Dec 18 07:01:08 2025 GMT Not After : Dec 19 07:01:08 2025 GMT Subject: CN=1ba78720db6e130e2f036948ed8cb65275167ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:6b:d0:a1:1b:fc:c8:94:63:59:d9:97:a2: 8e:f6:c5:b1:e6:e8:1d:60:87:b0:36:86:06:30:36: 62:7c:e3:1a:1e:63:9e:df:d6:38:5b:fd:7f:ea:ae: fe:22:0c:25:8c:dc:7f:da:73:51:4d:94:11:ba:4d: 8d:9b:d3:96:bb:b1:63:5f:e7:27:fc:68:19:e0:b2: 17:ea:40:d6:df:fc:6b:62:0e:11:41:2e:02:79:65: eb:9d:9b:ea:c2:10:59:b3:2b:e2:51:fd:ab:bc:97: 0e:ed:3e:7f:0a:12:38:d6:81:11:57:ae:24:fb:e1: 92:e7:e6:c3:aa:55:7e:62:b1:4a:7c:f9:4a:30:59: 44:3e:92:96:b4:4f:9e:7b:96:19:e6:b8:32:4f:09: 37:ec:50:5b:d1:07:26:88:4d:e2:98:eb:b7:55:18: 59:ed:b4:f8:0c:93:33:7c:ef:20:17:a0:d2:de:12: a6:de:0b:eb:97:cf:aa:94:75:2e:a8:1c:cb:79:4d: 0d:b5:8b:10:e0:89:e4:64:f8:23:a9:4e:48:b8:42: 1d:bf:a2:52:a2:d6:80:0d:b0:e7:07:09:3c:43:50: ac:e2:75:f8:3a:d6:77:ae:f1:d6:1a:c1:30:51:41: 73:f5:86:ae:34:d4:9f:35:b5:a1:fd:35:46:50:18: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:87:20:DB:6E:13:0E:2F:03:69:48:ED:8C:B6:52:75:16:7E:D4 X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:54:a9:50:34:b8:18:18:db:bd:e1:0b:4b:23:c0:51:5f:b4: d9:71:31:5e:82:70:6a:d1:85:21:81:1c:5a:9d:2c:9b:20:b1: f4:6a:cb:37:45:6c:8e:8c:e0:da:7c:4a:6b:4f:1d:12:8f:fa: 70:b0:39:6b:fc:c2:b2:e0:3b:68:b7:18:dc:9b:82:7e:47:41: 6d:51:34:85:85:52:54:bc:49:30:23:02:a8:cb:a2:09:04:7a: 9d:8b:cb:a9:6b:e1:a9:00:65:11:60:03:9a:78:61:1f:f8:7b: c0:48:7c:a8:a0:b3:bb:d6:fe:ff:7d:6a:f7:62:73:8d:ba:ca: e2:0e:e7:72:ca:af:dd:1a:8f:65:75:a7:90:b2:06:a6:e2:68: 95:cb:2e:aa:b1:86:e6:88:1e:27:1a:1e:ab:9a:80:c2:fc:f8: 91:d2:1d:06:ee:9f:4e:a7:1c:ab:af:42:80:82:78:4b:7b:9e: dd:8d:b1:91:a4:d9:90:5b:eb:ef:fd:f5:f4:89:3d:9f:c1:03: f5:71:17:18:8a:7c:09:bb:8b:41:f3:02:5b:88:1e:1f:39:e1: a1:5c:38:3e:da:0c:78:51:90:00:7f:f6:96:76:39:d5:49:d4: 77:f7:46:0d:a4:3d:1e:2f:c7:9e:74:da:38:95:b4:00:68:d6: dd:11:ed:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQzAqoqPoBcRWUzaiVSYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjUxMjE4MDcwMTA4WhcNMjUxMjE5MDcwMTA4WjAzMTEwLwYDVQQD EygxYmE3ODcyMGRiNmUxMzBlMmYwMzY5NDhlZDhjYjY1Mjc1MTY3ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovhr0KEb/MiUY1nZl6KO9sWx5ugd YIewNoYGMDZifOMaHmOe39Y4W/1/6q7+IgwljNx/2nNRTZQRuk2Nm9OWu7FjX+cn /GgZ4LIX6kDW3/xrYg4RQS4CeWXrnZvqwhBZsyviUf2rvJcO7T5/ChI41oERV64k ++GS5+bDqlV+YrFKfPlKMFlEPpKWtE+ee5YZ5rgyTwk37FBb0QcmiE3imOu3VRhZ 7bT4DJMzfO8gF6DS3hKm3gvrl8+qlHUuqBzLeU0NtYsQ4InkZPgjqU5IuEIdv6JS otaADbDnBwk8Q1Cs4nX4OtZ3rvHWGsEwUUFz9YauNNSfNbWh/TVGUBjWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBunhyDbbhMOLwNpSO2MtlJ1Fn7UMB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlSpUDS4 GBjbveELSyPAUV+02XExXoJwatGFIYEcWp0smyCx9GrLN0Vsjozg2nxKa08dEo/6 cLA5a/zCsuA7aLcY3JuCfkdBbVE0hYVSVLxJMCMCqMuiCQR6nYvLqWvhqQBlEWAD mnhhH/h7wEh8qKCzu9b+/31q92JzjbrK4g7ncsqv3RqPZXWnkLIGpuJolcsuqrGG 5ogeJxoeq5qAwvz4kdIdBu6fTqccq69CgIJ4S3ue3Y2xkaTZkFvr7/319Ik9n8ED 9XEXGIp8CbuLQfMCW4geHznhoVw4PtoMeFGQAH/2lnY51UnUd/dGDaQ9Hi/HnnTa OJW0AGjW3RHtcA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:03 2025 by rpki-client