This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json) Hash identifier: UUbZ4rbbKHlioQyhDQtqaoehFjXw7vY39IU9FGgjPgM= Subject key identifier: F7:B8:7E:1D:2F:B4:1A:59:C2:61:7D:76:E4:74:C1:F7:88:34:5E:AF Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019B3EDB2231EF654366E613D1E89ECB989D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft Manifest number: 0E7F Signing time: Sun 21 Dec 2025 03:01:47 +0000 Manifest this update: Sun 21 Dec 2025 03:01:47 +0000 Manifest next update: Mon 22 Dec 2025 03:01:47 +0000 Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: TkY18QdQ4a2qCfNymwLF3FXT709vzCgzNR/MDXQ830k=) 2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:22:31:ef:65:43:66:e6:13:d1:e8:9e:cb:98:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Dec 21 03:01:47 2025 GMT Not After : Dec 22 03:01:47 2025 GMT Subject: CN=f7b87e1d2fb41a59c2617d76e474c1f788345eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:75:49:b3:1a:59:83:01:13:4c:59:14:58: 78:69:14:0f:cb:f1:2a:a4:b5:81:52:ee:fa:29:3e: 64:8a:85:4e:81:21:ca:a1:1e:7d:33:9c:71:83:a4: b8:df:8b:17:53:ab:63:d3:b4:65:2b:88:7a:ba:e1: 69:0c:63:bb:29:b9:7f:7a:7c:1a:8c:0b:41:84:b2: 42:f8:24:3b:14:46:a7:3d:e0:38:48:fa:5d:98:b1: e0:34:9c:6f:15:90:5a:81:da:88:fb:c8:79:ac:d3: aa:67:0e:1e:35:7f:73:da:fc:3e:4f:ad:d0:13:24: 23:5c:b1:e6:b9:52:a0:4b:3b:5a:d8:3e:e4:5c:31: 87:9a:1a:fe:5d:d1:ab:cf:2d:48:ac:4e:f0:0e:19: de:ed:64:65:37:12:83:32:02:41:be:13:2f:3b:b0: 76:6f:38:bb:21:c2:7a:13:a8:69:69:37:1d:25:f7: c9:d2:57:be:83:70:ca:09:33:34:bb:52:9a:5b:c5: 7e:0b:d5:5a:6d:c7:c1:b7:4e:68:21:fe:3a:d5:eb: ea:82:f4:77:2f:27:8f:93:49:99:f7:40:2e:a3:4f: c1:41:25:75:9c:83:97:e7:49:99:90:ca:78:3a:a2: 53:02:d2:6a:09:b0:9a:8c:07:78:ac:02:1a:29:ae: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B8:7E:1D:2F:B4:1A:59:C2:61:7D:76:E4:74:C1:F7:88:34:5E:AF X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a6:29:05:af:47:81:c6:a4:d9:7a:97:0b:21:6f:0b:73:98: d1:72:a5:5c:8b:5d:13:b5:45:25:17:8e:b3:66:8a:51:42:26: 57:52:1f:22:e7:4d:3d:b0:da:eb:0d:5d:c5:ed:2d:5e:6a:de: 95:52:c6:94:ac:85:d2:bc:ae:00:73:31:f4:8e:f8:34:f3:a1: d6:fa:ae:8c:c8:ff:4d:cf:a4:50:6c:f4:64:31:e8:d5:58:2e: 41:5a:b6:75:73:90:a8:5b:4e:e0:59:ea:5b:0a:4f:25:58:6b: 98:b8:08:32:d0:ab:4d:3a:72:2f:97:35:98:fe:a9:8e:d3:9d: 27:f4:3e:22:36:ae:10:8d:e1:49:b4:b6:31:03:cd:49:4c:cd: 12:f0:91:39:d2:bb:c9:a5:9d:de:00:37:89:8d:8b:82:21:4c: 2e:7a:73:7d:b2:5a:96:a8:c8:03:02:6b:b8:a3:95:d5:f6:49: b3:52:42:ac:25:7b:85:58:5b:13:11:e1:ae:5a:84:8b:99:07: bd:e6:73:ca:ab:a4:e9:a9:52:8a:24:66:26:6d:8c:18:82:0c: 96:d3:31:fb:56:53:0b:ae:53:4b:d3:9f:91:7f:88:63:00:e1: 53:75:22:a9:c7:1c:0d:e4:b2:0a:d0:98:11:ee:06:8b:60:4d: 2d:83:6e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2yIx72VDZuYT0eiey5idMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjUxMjIxMDMwMTQ3WhcNMjUxMjIyMDMwMTQ3WjAzMTEwLwYDVQQD EyhmN2I4N2UxZDJmYjQxYTU5YzI2MTdkNzZlNDc0YzFmNzg4MzQ1ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKV1SbMaWYMBE0xZFFh4aRQPy/Eq pLWBUu76KT5kioVOgSHKoR59M5xxg6S434sXU6tj07RlK4h6uuFpDGO7Kbl/enwa jAtBhLJC+CQ7FEanPeA4SPpdmLHgNJxvFZBagdqI+8h5rNOqZw4eNX9z2vw+T63Q EyQjXLHmuVKgSzta2D7kXDGHmhr+XdGrzy1IrE7wDhne7WRlNxKDMgJBvhMvO7B2 bzi7IcJ6E6hpaTcdJffJ0le+g3DKCTM0u1KaW8V+C9VabcfBt05oIf461evqgvR3 LyePk0mZ90Auo0/BQSV1nIOX50mZkMp4OqJTAtJqCbCajAd4rAIaKa4jwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPe4fh0vtBpZwmF9duR0wfeINF6vMB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6YpBa9H gcak2XqXCyFvC3OY0XKlXItdE7VFJReOs2aKUUImV1IfIudNPbDa6w1dxe0tXmre lVLGlKyF0ryuAHMx9I74NPOh1vqujMj/Tc+kUGz0ZDHo1VguQVq2dXOQqFtO4Fnq WwpPJVhrmLgIMtCrTTpyL5c1mP6pjtOdJ/Q+IjauEI3hSbS2MQPNSUzNEvCROdK7 yaWd3gA3iY2LgiFMLnpzfbJalqjIAwJruKOV1fZJs1JCrCV7hVhbExHhrlqEi5kH veZzyquk6alSiiRmJm2MGIIMltMx+1ZTC65TS9OfkX+IYwDhU3UiqcccDeSyCtCY Ee4Gi2BNLYNucg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:13 2025 by rpki-client