This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json) Hash identifier: SqugElbh5Rg13qOf2WN5WnJ/2CIM2r+9CSNC/WbLglc= Subject key identifier: DC:40:71:A1:FD:41:0D:CF:41:07:52:28:39:0F:F1:B3:AC:DA:FE:3E Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e Certificate serial: 019B21E276E860629C2B72D2AE9FC1CDADAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft Manifest number: 0381 Signing time: Mon 15 Dec 2025 12:00:48 +0000 Manifest this update: Mon 15 Dec 2025 12:00:48 +0000 Manifest next update: Tue 16 Dec 2025 12:00:48 +0000 Files and hashes: 1: F7hFHVt5GnAjfb0AGvjaQBNPnKg.roa (hash: btzZxwXvt98Q7y5uMwpF7P7FoBwM/PNcqw+tRVhi4ns=) 2: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=) 3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: MiWzLeO2sL6/8z4YyrN2/TkNOKysdxsuwvbihE1ZO1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:76:e8:60:62:9c:2b:72:d2:ae:9f:c1:cd:ad:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e Validity Not Before: Dec 15 12:00:48 2025 GMT Not After : Dec 16 12:00:48 2025 GMT Subject: CN=dc4071a1fd410dcf41075228390ff1b3acdafe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:8e:79:03:0e:98:66:b0:fd:fb:e9:16:ae: 30:03:f6:ed:0f:94:26:06:2c:b9:ff:1c:ff:6c:bb: 59:97:1a:03:fb:1c:a3:87:83:a9:35:ff:bb:0a:58: 9b:ab:2c:3b:35:ef:64:4d:b0:52:83:25:1f:28:d0: 17:2d:eb:b1:ba:a6:2b:c7:60:ba:b0:f0:26:bc:f4: 43:95:d9:30:d4:4f:58:8b:aa:7d:63:d4:bd:a1:8b: 4b:52:bb:62:ac:b8:ce:ae:9f:f3:5c:41:2a:df:e5: 0d:40:07:c8:66:c6:f4:2c:64:21:9d:c8:74:fa:73: ff:a9:79:e7:8c:ce:5c:cc:53:7d:3f:aa:fd:e1:6c: e3:7e:ac:96:09:8c:35:33:f2:09:1d:54:1d:78:01: 7f:8c:27:6d:62:d0:f4:a3:92:9a:04:64:da:fa:59: 54:f1:58:1b:4b:bb:46:50:42:50:0f:f8:ba:d4:d1: 4e:8a:37:c4:09:ab:bd:83:c9:03:de:fc:d8:3b:26: c5:f1:0c:47:0a:70:e8:5a:e0:36:de:a8:7b:70:cc: e1:3e:39:60:89:2e:dc:2d:2e:bc:35:7f:70:25:51: 1e:13:75:81:68:42:fa:45:b1:ef:78:1d:76:01:af: e8:53:39:69:63:e7:04:11:8d:ff:90:74:31:2d:1f: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:71:A1:FD:41:0D:CF:41:07:52:28:39:0F:F1:B3:AC:DA:FE:3E X509v3 Authority Key Identifier: keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:aa:79:8c:a2:b3:84:a4:f3:85:a6:39:88:c7:1a:f4:34: ab:17:3d:91:55:6d:59:01:fa:c5:e1:98:14:d8:27:d8:60:d8: d0:7c:81:f9:58:81:40:21:a6:08:dd:c7:21:bc:2a:87:2c:55: 94:3c:21:fb:7e:ee:e6:5c:cf:59:23:20:0f:58:3e:89:b3:a7: ea:05:3b:11:fd:71:7e:97:30:3b:d2:a4:7c:8f:06:da:20:f1: 8b:fe:f7:fb:d4:d8:5e:90:c4:91:a9:3a:e1:9b:74:74:47:74: 63:d0:0d:44:d8:35:3e:44:93:37:31:e5:e1:07:52:bf:e8:e7: 50:40:d0:ec:b6:da:82:7f:b1:b6:c0:d5:e1:cb:af:dc:45:37: a4:dc:74:24:53:ee:9f:f3:d6:f5:71:30:db:76:c8:5d:2c:bb: 98:00:81:d8:d3:be:96:4c:a7:43:96:c7:b6:a1:ef:fe:d3:03: b2:8c:76:82:e5:cf:74:87:18:57:ee:ef:68:b3:e0:08:11:d9: 6d:2d:f2:fa:77:a5:c4:ec:57:11:5c:c7:87:7e:70:68:d9:6f: 27:5a:67:aa:82:15:05:23:dc:41:26:bf:ba:bb:d0:1e:2e:cd: fb:4c:d3:ce:4f:05:1a:0b:eb:1e:80:47:74:7f:8c:8d:92:48: 47:7c:1a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4nboYGKcK3LSrp/Bza2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh ZjdhM2UwHhcNMjUxMjE1MTIwMDQ4WhcNMjUxMjE2MTIwMDQ4WjAzMTEwLwYDVQQD EyhkYzQwNzFhMWZkNDEwZGNmNDEwNzUyMjgzOTBmZjFiM2FjZGFmZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyaOeQMOmGaw/fvpFq4wA/btD5Qm Biy5/xz/bLtZlxoD+xyjh4OpNf+7Clibqyw7Ne9kTbBSgyUfKNAXLeuxuqYrx2C6 sPAmvPRDldkw1E9Yi6p9Y9S9oYtLUrtirLjOrp/zXEEq3+UNQAfIZsb0LGQhnch0 +nP/qXnnjM5czFN9P6r94WzjfqyWCYw1M/IJHVQdeAF/jCdtYtD0o5KaBGTa+llU 8VgbS7tGUEJQD/i61NFOijfECau9g8kD3vzYOybF8QxHCnDoWuA23qh7cMzhPjlg iS7cLS68NX9wJVEeE3WBaEL6RbHveB12Aa/oUzlpY+cEEY3/kHQxLR+k8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxAcaH9QQ3PQQdSKDkP8bOs2v4+MB8GA1UdIwQY MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG+qeYyi s4Sk84WmOYjHGvQ0qxc9kVVtWQH6xeGYFNgn2GDY0HyB+ViBQCGmCN3HIbwqhyxV lDwh+37u5lzPWSMgD1g+ibOn6gU7Ef1xfpcwO9KkfI8G2iDxi/73+9TYXpDEkak6 4Zt0dEd0Y9ANRNg1PkSTNzHl4QdSv+jnUEDQ7Lbagn+xtsDV4cuv3EU3pNx0JFPu n/PW9XEw23bIXSy7mACB2NO+lkynQ5bHtqHv/tMDsox2guXPdIcYV+7vaLPgCBHZ bS3y+nelxOxXEVzHh35waNlvJ1pnqoIVBSPcQSa/urvQHi7N+0zTzk8FGgvrHoBH dH+MjZJIR3waog== -----END CERTIFICATE-----Generated at Mon Dec 15 17:06:20 2025 by rpki-client