This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json) Hash identifier: 6y2n53kFXZhkV58UKtzOmVEZTrnmei+i3Lh2UAJ7wzI= Subject key identifier: 91:9F:1F:70:3C:20:6C:5B:5A:41:C6:61:41:94:C0:12:45:34:CF:79 Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Certificate serial: 019B3EDAA42C6ABDB498087021882A5A7B4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft Manifest number: 171A Signing time: Sun 21 Dec 2025 03:01:14 +0000 Manifest this update: Sun 21 Dec 2025 03:01:14 +0000 Manifest next update: Mon 22 Dec 2025 03:01:14 +0000 Files and hashes: 1: BJt218vyPAIZF_L2ax-fXs78RO0.roa (hash: P3rkYDci/na2QczVHIWVXTso4Bg4G7j/ooyuS4+Wnxw=) 2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: kQTFa6SzK563n95m/qAx+0ad9D8hLmelKhdt7fnJmCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a4:2c:6a:bd:b4:98:08:70:21:88:2a:5a:7b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Validity Not Before: Dec 21 03:01:14 2025 GMT Not After : Dec 22 03:01:14 2025 GMT Subject: CN=919f1f703c206c5b5a41c6614194c0124534cf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:cd:b8:1b:08:f0:6f:28:d3:b2:ed:03:57: f6:43:8b:82:44:14:ce:d0:87:82:b7:07:b0:2f:8c: ae:58:05:19:78:db:1f:69:5b:74:c0:2a:a2:f8:52: 4a:85:74:fc:20:d0:7f:e5:f4:81:38:b0:e7:72:18: a3:40:22:22:9b:c2:c7:60:c2:66:ac:bf:ce:83:c7: a7:7f:46:ca:2b:01:2b:aa:da:0e:66:0f:9f:ed:b7: 22:c3:2e:69:7c:7f:56:fb:48:a1:da:53:be:10:d7: 83:43:be:28:4f:ef:ca:39:39:35:08:b4:1d:28:4e: 12:76:b8:f1:fd:ff:d7:43:89:ec:62:2c:33:1d:ca: 42:af:a4:de:d9:d3:06:ee:af:12:b0:b6:a7:b9:ef: 21:66:fe:f7:55:9e:3f:c2:a3:9f:e8:aa:a0:3b:44: 21:0e:bb:82:35:12:18:bd:31:51:0a:3b:30:0e:6d: 2f:a5:04:0e:64:cf:9b:80:82:c0:27:d1:a8:46:79: c4:7f:27:a5:92:df:c1:9d:75:86:02:d1:b1:34:95: ea:07:2a:aa:4c:de:a0:7b:e2:af:11:fa:3f:55:ca: 6a:47:52:b0:c8:1a:5b:1a:75:96:e3:95:8f:d1:35: 71:88:d8:8e:79:cc:e5:17:6c:b7:0f:c3:85:e4:bd: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9F:1F:70:3C:20:6C:5B:5A:41:C6:61:41:94:C0:12:45:34:CF:79 X509v3 Authority Key Identifier: keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4c:98:7e:7e:58:4b:ef:15:05:18:c9:7f:33:f8:03:5b:e6: b4:6d:d1:29:e8:f4:14:99:ae:34:63:92:9a:ce:8c:4b:40:8f: 9c:0e:d2:22:12:2d:fc:06:63:d9:c8:bd:6b:85:d7:e9:7c:10: ac:87:e7:5c:10:15:61:fa:9f:96:da:db:e6:e8:aa:3c:12:ee: 48:84:c2:23:49:92:4a:8f:a8:c8:8e:5b:9c:44:19:a9:d1:6b: 02:13:ef:c1:30:41:ed:c1:f2:f4:21:7a:71:49:f9:4b:29:60: 75:fa:fa:eb:43:83:da:50:45:1f:dc:17:63:9c:04:bc:f3:62: 08:7f:27:34:20:92:64:76:6d:22:98:18:70:2e:8a:1b:4b:39: 8e:82:d5:39:3a:7f:94:30:af:14:b6:20:40:6b:84:13:67:f6: 83:47:ca:c0:87:13:72:70:41:03:cd:f9:6b:5f:f7:24:cb:b0: 0e:71:22:81:ac:30:bc:c5:cc:cb:ec:bc:d6:9c:d5:41:af:3a: 71:39:6e:83:ac:eb:6e:61:56:75:fd:31:9b:7b:d9:a1:25:e3: 62:07:ab:f5:99:8f:35:5c:f4:1b:90:05:fb:e6:0a:3d:ff:1c: f7:ab:b5:98:f5:1b:26:56:ed:8c:4d:24:65:5f:cb:a8:08:76: 02:8f:4d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qQsar20mAhwIYgqWntKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk ZDRkMGUwHhcNMjUxMjIxMDMwMTE0WhcNMjUxMjIyMDMwMTE0WjAzMTEwLwYDVQQD Eyg5MTlmMWY3MDNjMjA2YzViNWE0MWM2NjE0MTk0YzAxMjQ1MzRjZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuvNuBsI8G8o07LtA1f2Q4uCRBTO 0IeCtwewL4yuWAUZeNsfaVt0wCqi+FJKhXT8INB/5fSBOLDnchijQCIim8LHYMJm rL/Og8enf0bKKwErqtoOZg+f7bciwy5pfH9W+0ih2lO+ENeDQ74oT+/KOTk1CLQd KE4Sdrjx/f/XQ4nsYiwzHcpCr6Te2dMG7q8SsLanue8hZv73VZ4/wqOf6KqgO0Qh DruCNRIYvTFRCjswDm0vpQQOZM+bgILAJ9GoRnnEfyelkt/BnXWGAtGxNJXqByqq TN6ge+KvEfo/VcpqR1KwyBpbGnWW45WP0TVxiNiOeczlF2y3D8OF5L056wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGfH3A8IGxbWkHGYUGUwBJFNM95MB8GA1UdIwQY MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0yYfn5Y S+8VBRjJfzP4A1vmtG3RKej0FJmuNGOSms6MS0CPnA7SIhIt/AZj2ci9a4XX6XwQ rIfnXBAVYfqfltrb5uiqPBLuSITCI0mSSo+oyI5bnEQZqdFrAhPvwTBB7cHy9CF6 cUn5Sylgdfr660OD2lBFH9wXY5wEvPNiCH8nNCCSZHZtIpgYcC6KG0s5joLVOTp/ lDCvFLYgQGuEE2f2g0fKwIcTcnBBA835a1/3JMuwDnEigawwvMXMy+y81pzVQa86 cTlug6zrbmFWdf0xm3vZoSXjYger9ZmPNVz0G5AF++YKPf8c96u1mPUbJlbtjE0k ZV/LqAh2Ao9NIg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:43 2025 by rpki-client