This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json) Hash identifier: jwlqLTfzIKkpJw/h54R48FvmDd8Q648chBvt2OAsQP0= Subject key identifier: B6:13:1E:C7:1D:A2:AC:40:AB:BC:1A:A8:99:F8:2C:27:08:40:A4:1B Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e Certificate serial: 019AF19AD71E1B45FB26A59220C317A24777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft Manifest number: 0368 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: F7hFHVt5GnAjfb0AGvjaQBNPnKg.roa (hash: btzZxwXvt98Q7y5uMwpF7P7FoBwM/PNcqw+tRVhi4ns=) 2: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=) 3: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: MDAsgFr3XIeDyjakkRD2D4W/UT8H54CxtrcDrdaf/M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:1e:1b:45:fb:26:a5:92:20:c3:17:a2:47:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=b6131ec71da2ac40abbc1aa899f82c270840a41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:18:97:e5:e7:e4:32:d8:41:30:b5:78:f5: 0a:4e:19:e3:a8:d5:e8:a6:ea:88:4a:1b:ae:2e:2c: 47:9a:46:82:5b:33:a5:7f:01:da:a4:81:76:65:73: be:a6:bf:56:da:8e:80:70:39:b3:c9:37:64:9d:ef: 3d:07:88:9f:86:33:a7:3c:36:b0:cf:91:6c:46:74: 96:8e:9d:40:91:e9:33:80:56:9a:1b:d2:c1:ec:bf: 53:e1:f0:a4:25:f8:06:bd:83:2a:15:74:83:1c:3c: 63:f3:4a:99:be:e3:be:71:b2:e9:a6:84:27:8b:d9: 49:c7:e0:5b:58:59:c3:a2:c5:9f:1e:71:69:06:9e: 54:97:65:13:70:f8:37:05:61:9d:2c:d1:e2:ae:16: 26:03:a8:f8:e2:35:6c:23:41:47:25:60:03:48:cc: e1:02:a6:b9:ae:ca:69:7b:96:1e:bb:06:67:8d:6f: ff:c1:7f:8d:cc:fc:c2:53:b2:80:02:48:9a:51:be: d0:0d:4a:23:a3:a2:97:6c:f8:23:9e:09:5a:ef:cb: fa:54:0a:6c:e8:ed:da:62:0a:35:41:de:df:81:14: 85:39:b2:94:6d:2f:5c:fa:92:5b:44:6f:78:2b:c3: 0c:fa:45:72:11:45:32:51:9e:4a:de:64:45:24:9d: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:1E:C7:1D:A2:AC:40:AB:BC:1A:A8:99:F8:2C:27:08:40:A4:1B X509v3 Authority Key Identifier: keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1b:4a:69:86:37:56:f4:5f:bf:3c:4b:52:4f:6a:45:4d:42: e0:b6:88:43:2e:11:53:3a:91:db:e7:8c:f2:0a:88:60:ee:01: 38:54:65:26:24:8c:71:3b:09:11:83:2e:fe:11:c5:f7:da:74: 78:e4:0a:d7:d4:4d:36:56:74:0f:00:62:14:b8:c8:9a:3c:88: 34:5e:ca:41:7c:ab:10:7a:6d:c4:e3:02:38:8d:18:fb:f7:4e: 09:75:54:4a:9e:ef:66:34:b9:ca:79:2c:b7:d6:a5:b0:4d:e4: 73:92:fb:07:3c:6a:63:b9:33:45:3a:d6:35:2c:9d:b7:34:9e: 4c:d7:50:9d:1f:ba:31:14:76:ba:1e:98:95:78:5a:92:be:57: e6:07:d8:03:b9:36:05:86:df:e6:4b:3d:28:09:f4:f4:03:f3: 1d:a9:bb:76:68:07:f5:44:0e:68:22:bb:24:a6:a5:72:b0:7b: af:da:e6:46:87:2e:90:31:79:e7:ad:32:51:f5:0d:df:5a:1e: 94:55:4d:d2:60:8a:b7:68:82:c0:89:90:27:4c:47:21:1a:8c: 17:2d:18:6c:9f:50:f1:62:06:39:aa:86:f1:b1:2f:b1:a7:42: bd:99:e3:ba:27:7d:45:35:f2:af:30:6c:35:5c:62:77:1a:b9: 7f:32:c9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtceG0X7JqWSIMMXokd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTIzNDIwY2NmZWUwMzhjZGNhZWI0MzkyMzEwYTA1OThh ZjdhM2UwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhiNjEzMWVjNzFkYTJhYzQwYWJiYzFhYTg5OWY4MmMyNzA4NDBhNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBsYl+Xn5DLYQTC1ePUKThnjqNXo puqIShuuLixHmkaCWzOlfwHapIF2ZXO+pr9W2o6AcDmzyTdkne89B4ifhjOnPDaw z5FsRnSWjp1AkekzgFaaG9LB7L9T4fCkJfgGvYMqFXSDHDxj80qZvuO+cbLppoQn i9lJx+BbWFnDosWfHnFpBp5Ul2UTcPg3BWGdLNHirhYmA6j44jVsI0FHJWADSMzh Aqa5rsppe5YeuwZnjW//wX+NzPzCU7KAAkiaUb7QDUojo6KXbPgjngla78v6VAps 6O3aYgo1Qd7fgRSFObKUbS9c+pJbRG94K8MM+kVyEUUyUZ5K3mRFJJ2KtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYTHscdoqxAq7waqJn4LCcIQKQbMB8GA1UdIwQY MBaAFJWSNCDM/uA4zcrrQ5IxCgWYr3o+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzct NTIwMGZjMTZmZjhjLzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iODA0MDUtZDE5Yi00ZTBmLWFjMzctNTIwMGZjMTZmZjhj LzEvbFpJMElNei00RGpOeXV0RGtqRUtCWml2ZWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohtKaYY3 VvRfvzxLUk9qRU1C4LaIQy4RUzqR2+eM8gqIYO4BOFRlJiSMcTsJEYMu/hHF99p0 eOQK19RNNlZ0DwBiFLjImjyINF7KQXyrEHptxOMCOI0Y+/dOCXVUSp7vZjS5ynks t9alsE3kc5L7BzxqY7kzRTrWNSydtzSeTNdQnR+6MRR2uh6YlXhakr5X5gfYA7k2 BYbf5ks9KAn09APzHam7dmgH9UQOaCK7JKalcrB7r9rmRocukDF5560yUfUN31oe lFVN0mCKt2iCwImQJ0xHIRqMFy0YbJ9Q8WIGOaqG8bEvsadCvZnjuid9RTXyrzBs NVxidxq5fzLJ1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:53 2025 by rpki-client