This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json) Hash identifier: kAUmdlIvrG4oeFXidi48Gsb2UHyFAAsItllU4rBmoXc= Subject key identifier: 10:44:73:87:D5:83:63:28:C3:34:24:4D:2C:C8:81:18:3E:D2:78:18 Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Certificate serial: 019B3C7F0D1CF89D636B457007F7FAB03901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft Manifest number: 1407 Signing time: Sat 20 Dec 2025 16:01:57 +0000 Manifest this update: Sat 20 Dec 2025 16:01:57 +0000 Manifest next update: Sun 21 Dec 2025 16:01:57 +0000 Files and hashes: 1: 4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa (hash: gHv/lKe2wiiXicxKTk0LqrVMj7gKuLxC/r7kKNYFngU=) 2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: vUCaiPcO8n1xe0wRIUIt2YcwLRqi2Sd5NHGFk4wN+lw=) 3: Mn5g5ih6bs_B2RQzmUEJOvkm4ew.roa (hash: CH+7cl5p2ran+BeHG+ah/11mRCglP15iWd2fsZ2nGWk=) 4: VupnGTTOfrBpe5_ufe4-GMR0Hao.roa (hash: RJZvVW8Owbg4R5MLF9yvr42vDFcG2psZgHSUWvn3eSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:0d:1c:f8:9d:63:6b:45:70:07:f7:fa:b0:39:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Validity Not Before: Dec 20 16:01:57 2025 GMT Not After : Dec 21 16:01:57 2025 GMT Subject: CN=10447387d5836328c334244d2cc881183ed27818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:1e:e7:e7:03:12:91:33:26:31:66:00:49: 9f:ff:c5:08:1b:70:69:81:a2:ef:b4:06:e9:ee:bf: d7:e5:72:65:f8:12:5c:4b:75:8a:f5:88:4e:54:ff: 53:ea:ad:60:ca:d5:08:23:ad:7f:d7:a6:79:43:29: 04:a9:f8:4e:47:84:6b:8a:99:fd:7c:60:a9:bb:14: 1d:ba:e2:cf:70:b6:c7:9f:ad:6e:9d:e5:56:d8:db: f3:08:8f:37:8c:ea:ae:ba:28:08:24:4e:ce:b5:d7: bf:32:33:49:ba:56:df:b4:d3:b9:58:76:69:2c:f7: 59:e3:64:0b:3a:09:7f:a6:1c:8d:0c:29:26:7f:5a: 06:d8:35:8f:2d:5f:97:7f:3d:49:20:ba:76:bc:8b: 22:6d:51:96:fa:29:de:dd:b4:52:4d:65:fc:15:50: 9c:bb:85:7e:e6:24:c2:29:a7:14:24:33:25:04:82: be:5e:cd:50:05:a7:0c:77:96:ab:2e:08:97:cd:49: dc:41:e2:75:57:6d:58:9b:36:13:fc:2e:78:c0:55: 42:24:60:eb:8a:52:21:2f:c1:cc:93:e1:74:3f:c3: 5d:d9:ba:cb:02:81:eb:b1:ba:09:f9:57:e0:ee:73: fc:f4:28:b2:77:16:17:46:2f:d5:f6:1d:8a:be:16: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:73:87:D5:83:63:28:C3:34:24:4D:2C:C8:81:18:3E:D2:78:18 X509v3 Authority Key Identifier: keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1f:8a:c2:ad:1b:6e:19:51:c7:2d:50:e2:3a:c9:c2:04:6e: 20:6b:be:83:b9:ae:dc:f5:5c:5a:e1:27:e8:a0:f7:ee:62:b2: 2c:99:b1:22:94:2a:68:d5:8c:de:87:b8:1e:ac:3b:b1:2e:13: 72:ce:06:3b:86:b3:00:30:5a:fd:ac:54:52:25:8d:ae:70:35: 09:cd:6f:8d:aa:ef:ee:3e:2d:e9:20:59:63:f6:ce:88:da:3f: 25:e2:e3:e9:46:88:11:40:6d:78:59:aa:83:3c:84:b7:96:01: 19:ba:46:ae:24:30:03:04:c8:bf:ae:0b:9c:e1:e4:36:76:19: e5:12:e8:66:71:52:25:70:17:c3:b8:a1:6f:96:ed:e9:b2:9f: f9:51:bb:6a:28:06:d2:64:9f:54:13:89:be:df:13:41:c2:c7: a3:d2:41:e3:7b:fb:e9:77:9c:2d:fb:80:fe:69:da:55:6a:48: 41:4d:3e:1f:83:72:09:1b:12:3d:52:f2:71:5f:d7:96:3c:c2: 03:fa:7b:88:85:53:c1:a5:59:18:44:72:0d:47:28:a6:5c:fb: 43:a2:d8:3a:6a:83:08:1f:d8:af:59:05:69:b7:17:84:22:78: 57:6d:2c:df:7e:eb:eb:9b:b7:ff:31:1c:62:e8:a9:96:0c:c3: 0f:72:f8:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fw0c+J1ja0VwB/f6sDkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2VhZjRlYzc1NGY0YTBlM2Q4NGNhMjUzYWQ0MDZlZTlj N2RlMTUwHhcNMjUxMjIwMTYwMTU3WhcNMjUxMjIxMTYwMTU3WjAzMTEwLwYDVQQD EygxMDQ0NzM4N2Q1ODM2MzI4YzMzNDI0NGQyY2M4ODExODNlZDI3ODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2swe5+cDEpEzJjFmAEmf/8UIG3Bp gaLvtAbp7r/X5XJl+BJcS3WK9YhOVP9T6q1gytUII61/16Z5QykEqfhOR4Rripn9 fGCpuxQduuLPcLbHn61uneVW2NvzCI83jOquuigIJE7Otde/MjNJulbftNO5WHZp LPdZ42QLOgl/phyNDCkmf1oG2DWPLV+Xfz1JILp2vIsibVGW+ine3bRSTWX8FVCc u4V+5iTCKacUJDMlBIK+Xs1QBacMd5arLgiXzUncQeJ1V21YmzYT/C54wFVCJGDr ilIhL8HMk+F0P8Nd2brLAoHrsboJ+Vfg7nP89CiydxYXRi/V9h2KvhYYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBEc4fVg2MowzQkTSzIgRg+0ngYMB8GA1UdIwQY MBaAFC8+r07HVPSg49hMolOtQG7px94VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAt OTBjM2NjZTU2OWYwLzEvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAtOTBjM2NjZTU2OWYw LzEvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMx+Kwq0b bhlRxy1Q4jrJwgRuIGu+g7mu3PVcWuEn6KD37mKyLJmxIpQqaNWM3oe4Hqw7sS4T cs4GO4azADBa/axUUiWNrnA1Cc1vjarv7j4t6SBZY/bOiNo/JeLj6UaIEUBteFmq gzyEt5YBGbpGriQwAwTIv64LnOHkNnYZ5RLoZnFSJXAXw7ihb5bt6bKf+VG7aigG 0mSfVBOJvt8TQcLHo9JB43v76XecLfuA/mnaVWpIQU0+H4NyCRsSPVLycV/XljzC A/p7iIVTwaVZGERyDUcoplz7Q6LYOmqDCB/Yr1kFabcXhCJ4V20s337r65u3/zEc YuiplgzDD3L4MA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:11 2025 by rpki-client