This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json) Hash identifier: GFWr4wKGsE9B9nFjY8XAvo3aEURROP5vzjJIVHT84GA= Subject key identifier: D0:56:78:AC:A1:E0:8D:1F:E9:4E:8A:35:08:15:48:A9:9C:2A:49:6B Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Certificate serial: 019B47A6F5B59172703FD7EE0904220C4E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 20:01:22 +0000 Manifest this update: Mon 22 Dec 2025 20:01:22 +0000 Manifest next update: Tue 23 Dec 2025 20:01:22 +0000 Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: 1QFho+9trborzKveyxj6/wQthOuRLCS/MmkHIsryscQ=) 2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:f5:b5:91:72:70:3f:d7:ee:09:04:22:0c:4e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Validity Not Before: Dec 22 20:01:22 2025 GMT Not After : Dec 23 20:01:22 2025 GMT Subject: CN=d05678aca1e08d1fe94e8a35081548a99c2a496b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:8c:5a:6f:10:d1:fb:5f:bc:5c:f9:b0:75: b4:0f:78:dc:2d:4e:73:19:f1:4c:8a:01:65:44:17: 23:eb:5d:43:8e:46:e4:07:81:91:28:32:73:4c:d4: 34:c5:3f:43:53:cc:bf:1d:3a:3a:78:3f:74:c7:91: 31:d3:6c:00:58:5b:1c:fc:04:32:48:5b:8d:62:92: ce:52:cf:31:de:99:01:ef:89:d7:63:8e:cf:17:03: f1:c5:c4:26:c6:e1:f3:bc:5c:78:b0:2c:74:11:47: f0:31:58:b5:71:44:4c:66:f6:20:ba:86:33:c6:77: 19:fd:26:cc:a3:9c:f0:c5:ea:3b:85:4c:30:07:28: 7f:1e:4f:3f:f0:0b:5c:99:f7:a5:8b:71:37:27:27: cf:49:60:34:2b:fe:92:76:02:f8:96:77:8d:74:35: 85:7a:46:b4:76:ba:fc:f7:59:9b:c9:b4:62:be:db: f0:c8:93:fa:5c:45:92:ab:ce:be:4b:4e:bb:d1:99: c4:bd:3a:0d:e6:88:29:10:33:c1:8d:76:69:86:dd: 7c:bf:21:11:8e:55:3d:1f:87:84:07:de:f8:50:79: 1d:e2:66:e0:c3:59:19:01:65:0e:88:77:1f:a3:b4: 6e:06:be:d3:27:d2:2e:eb:ee:ff:06:57:06:c0:58: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:78:AC:A1:E0:8D:1F:E9:4E:8A:35:08:15:48:A9:9C:2A:49:6B X509v3 Authority Key Identifier: keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1b:3c:ca:9a:e7:86:dc:24:86:2d:49:aa:9f:9a:2c:11:84: 7b:7c:12:64:e6:dc:bb:8b:98:89:27:d0:c4:61:7f:9c:12:eb: 3d:e4:41:f1:7c:2c:09:77:9a:07:9d:a5:e8:c8:47:3f:ff:9c: 48:41:11:36:db:44:bb:06:b9:f3:a7:a5:bf:96:19:c0:fa:a1: 62:46:5a:78:42:a9:69:20:00:bc:a6:6b:af:56:9b:5a:a2:a3: 16:fb:a7:8b:7f:8b:37:df:ff:9f:c9:be:89:1e:72:c1:7f:c4: 2c:59:2e:6c:09:71:56:7d:38:d9:bc:d2:16:a8:c9:5b:8f:82: f2:13:21:b3:a8:b6:29:c1:51:f7:db:57:4e:b6:f6:e8:96:68: c0:43:2f:fa:c8:ea:64:86:e8:62:c9:ed:4f:c2:44:2e:14:ea: b0:f2:29:28:97:14:92:92:7b:67:ee:1c:5c:1b:a2:2d:0c:19: 9c:34:e0:00:04:80:b7:96:85:63:58:cc:f9:ca:0b:f2:71:81: f5:2f:5e:2b:21:66:3d:d1:89:62:40:7a:2c:34:70:04:41:7f: 87:c8:0f:21:94:e9:4a:bf:29:76:b5:21:cc:37:e0:21:9d:50: f6:70:f0:79:10:9c:f3:43:14:bf:af:2d:c5:58:d5:b7:46:93: a3:5f:60:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpvW1kXJwP9fuCQQiDE5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGNlYmFhOGNkMzJkYzRiZjFkNjZkMDg3M2ExYjZmM2Q3 MzQ5OGYwHhcNMjUxMjIyMjAwMTIyWhcNMjUxMjIzMjAwMTIyWjAzMTEwLwYDVQQD EyhkMDU2NzhhY2ExZTA4ZDFmZTk0ZThhMzUwODE1NDhhOTljMmE0OTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTeMWm8Q0ftfvFz5sHW0D3jcLU5z GfFMigFlRBcj611DjkbkB4GRKDJzTNQ0xT9DU8y/HTo6eD90x5Ex02wAWFsc/AQy SFuNYpLOUs8x3pkB74nXY47PFwPxxcQmxuHzvFx4sCx0EUfwMVi1cURMZvYguoYz xncZ/SbMo5zwxeo7hUwwByh/Hk8/8Atcmfeli3E3JyfPSWA0K/6SdgL4lneNdDWF eka0drr891mbybRivtvwyJP6XEWSq86+S0670ZnEvToN5ogpEDPBjXZpht18vyER jlU9H4eEB974UHkd4mbgw1kZAWUOiHcfo7RuBr7TJ9Iu6+7/BlcGwFhAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBWeKyh4I0f6U6KNQgVSKmcKklrMB8GA1UdIwQY MBaAFJbc66qM0y3Evx1m0Ic6G289c0mPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWIt YjYxNWM1YzYwNjUyLzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWItYjYxNWM1YzYwNjUy LzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRs8yprn htwkhi1Jqp+aLBGEe3wSZObcu4uYiSfQxGF/nBLrPeRB8XwsCXeaB52l6MhHP/+c SEERNttEuwa586elv5YZwPqhYkZaeEKpaSAAvKZrr1abWqKjFvuni3+LN9//n8m+ iR5ywX/ELFkubAlxVn042bzSFqjJW4+C8hMhs6i2KcFR99tXTrb26JZowEMv+sjq ZIboYsntT8JELhTqsPIpKJcUkpJ7Z+4cXBuiLQwZnDTgAASAt5aFY1jM+coL8nGB 9S9eKyFmPdGJYkB6LDRwBEF/h8gPIZTpSr8pdrUhzDfgIZ1Q9nDweRCc80MUv68t xVjVt0aTo19gxw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:20 2025 by rpki-client