This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft File: LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json) Hash identifier: VP6vkCsUyc2duIs+d3ltypTmZXcGTrcVQj8Caf83wZA= Subject key identifier: F5:0A:B2:D8:C8:B9:AC:1F:7D:6C:DB:A8:85:0E:44:49:69:45:12:22 Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7 Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7 Certificate serial: 019B3A22217AF7E8C5E91520C27E36863E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft Manifest number: 022A Signing time: Sat 20 Dec 2025 05:01:13 +0000 Manifest this update: Sat 20 Dec 2025 05:01:13 +0000 Manifest next update: Sun 21 Dec 2025 05:01:13 +0000 Files and hashes: 1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=) 2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: 5znU4OyBCQAT686tLVt+d8PBeyXrmXt10ivnLSRITpQ=) 3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=) 4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=) 5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:21:7a:f7:e8:c5:e9:15:20:c2:7e:36:86:3e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7 Validity Not Before: Dec 20 05:01:13 2025 GMT Not After : Dec 21 05:01:13 2025 GMT Subject: CN=f50ab2d8c8b9ac1f7d6cdba8850e444969451222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:5f:12:33:74:8c:78:e6:c4:32:db:9f:75: 66:79:a5:0d:94:4b:8b:8f:60:b2:60:1c:3d:91:cf: d5:06:e9:d7:9f:0f:c9:67:b3:c5:e0:dd:47:04:f2: 9d:e8:f1:8f:79:f2:5e:2c:a4:1c:4a:8b:b1:a6:2f: bf:00:0a:9f:03:a4:06:eb:e2:6a:12:24:32:25:fc: 45:5b:4a:c0:bc:a1:c2:71:ea:d1:19:47:2b:bd:3b: 30:37:88:5a:63:0e:3e:31:e7:cc:7f:c9:e8:54:0a: 51:c6:4e:0f:fb:21:cd:68:3f:af:e3:08:a1:d5:44: 57:27:61:bd:42:bf:41:b1:42:e1:24:68:1a:c2:e2: f0:d9:51:90:ae:3e:f5:ad:ea:bf:8d:ca:1d:78:5c: 23:7a:68:44:af:e8:41:e3:cd:d4:dd:d7:fb:4b:c8: 41:30:6d:70:49:2b:42:3e:24:e7:58:c1:ec:a2:89: d2:82:62:7d:dc:a3:ec:9c:9d:57:0b:49:76:e9:ae: 97:d2:f4:6d:a8:f3:9b:c3:f4:6e:23:98:f8:57:63: af:ea:0c:6d:44:06:07:f5:7e:10:ef:74:f7:ac:a3: 96:dd:82:d1:59:d4:e6:eb:5e:6f:f9:9d:66:a4:a3: 9f:ed:d0:9a:0f:b1:b2:bc:f8:63:4a:6d:18:f8:65: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:B2:D8:C8:B9:AC:1F:7D:6C:DB:A8:85:0E:44:49:69:45:12:22 X509v3 Authority Key Identifier: keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:04:f6:72:27:97:e5:8b:14:9c:34:9d:bd:c7:f8:87:82: e9:b6:4a:69:cb:46:6c:a0:cc:32:1b:51:44:7e:71:9b:26:cc: 79:1d:ba:ca:7b:df:be:0f:eb:65:8f:ff:5f:4d:7c:86:ee:82: 91:7d:22:24:c4:7e:10:c3:fe:fc:66:08:17:d7:fb:6e:fd:43: ba:31:14:a4:e0:b9:be:a6:9c:be:21:0d:2b:99:10:d9:ca:25: 64:dd:41:71:ac:2b:47:1d:ee:cc:0c:9f:b3:2f:3e:7a:49:05: 5e:71:93:a2:54:17:39:f2:5a:5c:df:bc:c8:04:08:a0:fa:6c: 65:a1:a4:ab:e8:38:f6:41:06:8b:27:5c:a1:6c:92:f5:9e:a4: 5a:93:b1:3c:b8:a6:c2:c4:ac:1e:17:f7:60:eb:0e:15:7c:f8: 7f:70:66:e5:05:c4:af:ed:cb:0c:42:51:79:1c:04:33:22:b5: 92:f2:e6:fe:bb:34:8a:a5:e6:f8:b1:03:4d:ee:d6:07:4b:9e: b2:70:2f:9a:94:ae:95:6e:aa:0e:8f:62:42:8c:76:db:8e:4e: f6:a1:34:88:74:65:dc:d9:dd:26:6e:c2:f3:d5:0a:8a:7a:62: 42:51:95:cd:e8:25:bf:82:75:f2:cc:26:26:5f:0b:70:21:e7: 86:2a:ec:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IiF69+jF6RUgwn42hj4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm YThiZjcwHhcNMjUxMjIwMDUwMTEzWhcNMjUxMjIxMDUwMTEzWjAzMTEwLwYDVQQD EyhmNTBhYjJkOGM4YjlhYzFmN2Q2Y2RiYTg4NTBlNDQ0OTY5NDUxMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtahfEjN0jHjmxDLbn3VmeaUNlEuL j2CyYBw9kc/VBunXnw/JZ7PF4N1HBPKd6PGPefJeLKQcSouxpi+/AAqfA6QG6+Jq EiQyJfxFW0rAvKHCcerRGUcrvTswN4haYw4+MefMf8noVApRxk4P+yHNaD+v4wih 1URXJ2G9Qr9BsULhJGgawuLw2VGQrj71req/jcodeFwjemhEr+hB483U3df7S8hB MG1wSStCPiTnWMHsoonSgmJ93KPsnJ1XC0l26a6X0vRtqPObw/RuI5j4V2Ov6gxt RAYH9X4Q73T3rKOW3YLRWdTm615v+Z1mpKOf7dCaD7GyvPhjSm0Y+GVPTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUKstjIuawffWzbqIUORElpRRIiMB8GA1UdIwQY MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt MjE2NGQ5OTk1MTk4LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4 LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbME9nIn l+WLFJw0nb3H+IeC6bZKactGbKDMMhtRRH5xmybMeR26ynvfvg/rZY//X018hu6C kX0iJMR+EMP+/GYIF9f7bv1DujEUpOC5vqacviENK5kQ2colZN1BcawrRx3uzAyf sy8+ekkFXnGTolQXOfJaXN+8yAQIoPpsZaGkq+g49kEGiydcoWyS9Z6kWpOxPLim wsSsHhf3YOsOFXz4f3Bm5QXEr+3LDEJReRwEMyK1kvLm/rs0iqXm+LEDTe7WB0ue snAvmpSulW6qDo9iQox2245O9qE0iHRl3NndJm7C89UKinpiQlGVzeglv4J18swm Jl8LcCHnhirsOA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:57 2025 by rpki-client