This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json) Hash identifier: YRIWQ9aqYvvcL1Med+0b0EmOy6evPyeDqU/S0DFIRfY= Subject key identifier: F4:E8:DB:E5:71:33:FE:74:EA:18:1B:3C:3F:44:F4:F6:D8:CD:61:90 Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Certificate serial: 019AF3F7EB4C78D74541BC713A9BD8761B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft Manifest number: 0BF9 Signing time: Sat 06 Dec 2025 14:01:42 +0000 Manifest this update: Sat 06 Dec 2025 14:01:42 +0000 Manifest next update: Sun 07 Dec 2025 14:01:42 +0000 Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=) 2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: CTZC5mJBx/YEtkE+9T1cFBCGqYId9a5pLpGPET0yCuo=) 3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=) 4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:eb:4c:78:d7:45:41:bc:71:3a:9b:d8:76:1b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Validity Not Before: Dec 6 14:01:42 2025 GMT Not After : Dec 7 14:01:42 2025 GMT Subject: CN=f4e8dbe57133fe74ea181b3c3f44f4f6d8cd6190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:94:bd:fd:18:f8:ab:2b:19:d3:a0:9c:4f: 7a:57:1b:78:40:cc:e5:f0:a0:91:ed:4d:c8:88:d1: 0c:c2:91:c8:44:68:c8:68:41:73:57:86:eb:db:c6: 0a:ce:f6:f1:1e:c6:5c:7c:07:fa:e3:29:4f:82:e1: 0c:d7:eb:19:bf:1d:94:19:c8:9f:64:ad:95:e9:87: 31:bc:57:a6:ec:64:1b:26:09:f2:d9:62:fb:a4:f5: 8e:4e:2c:e0:df:47:b5:d2:a4:0b:0a:5c:2a:30:c3: b8:ec:e2:72:e7:3b:51:57:48:9b:e5:00:b5:73:03: 9d:c9:fa:f8:67:0a:8a:19:8c:0e:31:1e:55:f8:e7: e8:46:04:6b:16:17:fb:1e:51:1d:12:62:ba:00:a9: 0d:79:72:a1:2d:cb:29:b7:1c:95:21:16:d8:ad:8f: 12:2b:15:22:c1:e9:ed:72:0e:53:a0:d7:46:23:d2: 18:86:90:29:11:36:2f:0d:87:66:91:82:af:16:55: 13:af:ce:98:21:8c:88:6b:48:82:a5:b7:67:41:b0: 5e:ea:3c:db:7d:29:7f:e1:f4:c1:72:75:cd:00:7a: 99:ca:7a:1b:7d:54:e7:7f:4f:f1:d6:b3:f6:2d:a1: 1e:07:a1:3e:b8:e6:4a:35:eb:f4:4a:a3:e4:9d:b5: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:DB:E5:71:33:FE:74:EA:18:1B:3C:3F:44:F4:F6:D8:CD:61:90 X509v3 Authority Key Identifier: keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:65:48:6b:2f:78:40:d8:0e:e2:91:48:1b:fe:0e:d0:fa:14: 82:01:cf:d5:44:6c:9b:97:ca:9f:68:54:b5:13:5f:3c:19:e7: f5:3a:0e:7b:64:cd:de:6d:6b:8e:09:3e:1a:42:ea:f9:b3:cf: a7:6e:41:3b:88:d8:17:32:6e:f7:8b:68:6e:c7:6e:97:89:c4: 16:44:5d:3e:eb:d5:1a:a6:33:63:08:97:98:36:54:2e:d2:b4: af:67:3f:21:62:a8:40:b0:bc:85:8e:af:d0:fb:f4:46:84:d1: 7e:ca:bd:dd:c2:8c:2d:bc:09:02:d0:0c:28:0b:6f:e0:41:5e: c7:d9:e8:6b:74:a2:75:bb:93:cc:ab:f7:95:d7:18:5c:ff:a3: cd:66:04:5d:89:76:80:2b:44:c8:27:45:51:3f:de:35:96:65: 06:58:b4:d6:72:37:1b:e2:e8:9d:97:1a:19:41:0c:b8:6c:86: f7:0a:61:ae:9b:98:e3:2f:45:39:1b:b2:f4:96:a7:79:89:f4: 65:b1:a7:13:55:d4:97:2f:2e:37:f3:2f:d2:b6:e2:67:ff:d6: e8:e6:f3:fc:35:5f:58:8f:4a:77:e4:c6:d6:b0:a2:6f:cf:43: 2f:08:e4:c4:63:54:b6:b5:f8:78:74:c2:6c:e9:11:25:b9:ae: 43:0c:18:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+tMeNdFQbxxOpvYdhsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy NGYwMDMwHhcNMjUxMjA2MTQwMTQyWhcNMjUxMjA3MTQwMTQyWjAzMTEwLwYDVQQD EyhmNGU4ZGJlNTcxMzNmZTc0ZWExODFiM2MzZjQ0ZjRmNmQ4Y2Q2MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqUvf0Y+KsrGdOgnE96Vxt4QMzl 8KCR7U3IiNEMwpHIRGjIaEFzV4br28YKzvbxHsZcfAf64ylPguEM1+sZvx2UGcif ZK2V6YcxvFem7GQbJgny2WL7pPWOTizg30e10qQLClwqMMO47OJy5ztRV0ib5QC1 cwOdyfr4ZwqKGYwOMR5V+OfoRgRrFhf7HlEdEmK6AKkNeXKhLcsptxyVIRbYrY8S KxUiwentcg5ToNdGI9IYhpApETYvDYdmkYKvFlUTr86YIYyIa0iCpbdnQbBe6jzb fSl/4fTBcnXNAHqZynobfVTnf0/x1rP2LaEeB6E+uOZKNev0SqPknbW0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTo2+VxM/506hgbPD9E9PbYzWGQMB8GA1UdIwQY MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmVIay94 QNgO4pFIG/4O0PoUggHP1URsm5fKn2hUtRNfPBnn9ToOe2TN3m1rjgk+GkLq+bPP p25BO4jYFzJu94tobsdul4nEFkRdPuvVGqYzYwiXmDZULtK0r2c/IWKoQLC8hY6v 0Pv0RoTRfsq93cKMLbwJAtAMKAtv4EFex9noa3SidbuTzKv3ldcYXP+jzWYEXYl2 gCtEyCdFUT/eNZZlBli01nI3G+LonZcaGUEMuGyG9wphrpuY4y9FORuy9JaneYn0 ZbGnE1XUly8uN/Mv0rbiZ//W6Obz/DVfWI9Kd+TG1rCib89DLwjkxGNUtrX4eHTC bOkRJbmuQwwY6g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:25 2025 by rpki-client