This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json) Hash identifier: jIkOlDWl0OlE9wiXzqI9qwfQ3OeNgWN/Q1urBv6SIA4= Subject key identifier: 2B:59:2B:16:EC:C1:A0:37:F0:4C:0A:F2:20:6B:E2:51:AA:A8:A5:B4 Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c Certificate serial: 019AF12D99974F4EC7EBF9FF32EA0FC4C194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=) 2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: lOsQykDIMeZ0i0DfNeFNIsO60SNDumv/XPuGCGVNeEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:97:4f:4e:c7:eb:f9:ff:32:ea:0f:c4:c1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=2b592b16ecc1a037f04c0af2206be251aaa8a5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:6f:bd:9e:d1:e3:ed:13:ff:19:b4:80:9a: d3:8b:b9:8e:90:3b:ac:79:de:0e:d4:21:f1:67:b1: 98:04:5a:7a:90:7b:ed:7c:59:8a:b2:b7:64:73:f5: 75:c6:18:2a:91:0b:68:38:f6:ff:12:d1:1b:b8:75: d4:53:53:f3:73:7a:b1:81:c5:d0:d5:ad:57:ad:37: ff:75:00:a0:31:35:4e:df:12:ad:8d:96:45:52:d0: 32:4d:cd:39:93:da:17:9d:5f:45:2f:28:8a:63:36: 80:c4:48:1e:3c:08:28:3f:eb:1b:6a:cc:07:bd:cb: 22:74:7e:96:4b:47:58:19:1f:12:9d:9d:a8:cb:1e: 49:cc:68:82:bd:9d:52:99:f9:89:59:58:e9:24:aa: 94:3c:30:cd:f5:32:ac:ca:d5:e8:9c:3f:24:0c:65: 77:47:7d:c2:af:89:d0:87:78:1a:87:d9:d5:3b:46: ab:76:86:a5:fc:3c:f1:69:6b:77:5b:54:00:13:ec: d1:bd:4b:86:da:bb:be:d9:30:87:ae:1a:f7:9c:0a: 83:ee:48:50:79:14:30:80:55:8c:56:af:16:6f:d1: 7f:6c:b7:a1:0d:ba:8d:ff:80:e8:6c:b6:24:7b:a2: 8d:43:ab:49:fe:a5:be:26:4b:68:36:ba:31:fa:b8: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:2B:16:EC:C1:A0:37:F0:4C:0A:F2:20:6B:E2:51:AA:A8:A5:B4 X509v3 Authority Key Identifier: keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a9:bb:ba:c9:08:02:e7:86:ea:e1:1f:51:8f:e9:95:71:a0: 59:4d:95:f4:88:fa:49:8f:36:ab:43:32:44:7d:49:b3:75:d1: ec:93:24:7a:57:f9:1f:76:ce:26:67:51:c1:b6:ed:f4:13:e0: 54:b9:34:f4:e7:c0:0d:47:ee:e4:91:79:69:cc:47:9f:b9:ae: b0:92:df:29:76:92:51:b6:65:0b:b6:0a:70:15:df:15:3b:27: 63:ef:2f:f1:0e:1b:3d:18:5d:56:60:d9:5d:8d:0a:14:55:fd: 82:e1:60:31:66:8e:95:2e:30:ec:c3:63:65:90:ad:c5:a0:3b: 4f:23:67:e6:8e:d4:b1:d3:61:3e:70:86:57:35:c4:c1:dc:d5: 7d:80:ab:62:02:71:95:ef:4a:54:f6:8b:66:16:13:8e:5d:c6: e8:0a:09:4e:42:82:b7:86:5b:b0:17:f0:58:91:d7:96:cd:50: 7d:f7:83:fa:b3:a5:3d:f1:ad:e7:f8:01:19:f1:f2:9f:0c:37: cf:73:b0:b8:76:6d:e9:25:c0:4b:de:0f:e9:ab:8f:58:fb:1c: 19:62:c9:e6:da:44:64:f3:26:30:ee:6b:4e:ed:8c:0b:d0:09: d3:fe:6f:b1:83:52:e9:94:2c:81:75:99:f4:8f:cd:6d:5b:d7: d3:5e:60:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZmXT07H6/n/MuoPxMGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1 NzFmMWMwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EygyYjU5MmIxNmVjYzFhMDM3ZjA0YzBhZjIyMDZiZTI1MWFhYThhNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xNvvZ7R4+0T/xm0gJrTi7mOkDus ed4O1CHxZ7GYBFp6kHvtfFmKsrdkc/V1xhgqkQtoOPb/EtEbuHXUU1Pzc3qxgcXQ 1a1XrTf/dQCgMTVO3xKtjZZFUtAyTc05k9oXnV9FLyiKYzaAxEgePAgoP+sbaswH vcsidH6WS0dYGR8SnZ2oyx5JzGiCvZ1SmfmJWVjpJKqUPDDN9TKsytXonD8kDGV3 R33Cr4nQh3gah9nVO0ardoal/DzxaWt3W1QAE+zRvUuG2ru+2TCHrhr3nAqD7khQ eRQwgFWMVq8Wb9F/bLehDbqN/4DobLYke6KNQ6tJ/qW+JktoNrox+riZ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtZKxbswaA38EwK8iBr4lGqqKW0MB8GA1UdIwQY MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6m7uskI AueG6uEfUY/plXGgWU2V9Ij6SY82q0MyRH1Js3XR7JMkelf5H3bOJmdRwbbt9BPg VLk09OfADUfu5JF5acxHn7musJLfKXaSUbZlC7YKcBXfFTsnY+8v8Q4bPRhdVmDZ XY0KFFX9guFgMWaOlS4w7MNjZZCtxaA7TyNn5o7UsdNhPnCGVzXEwdzVfYCrYgJx le9KVPaLZhYTjl3G6AoJTkKCt4ZbsBfwWJHXls1QffeD+rOlPfGt5/gBGfHynww3 z3OwuHZt6SXAS94P6auPWPscGWLJ5tpEZPMmMO5rTu2MC9AJ0/5vsYNS6ZQsgXWZ 9I/NbVvX015gjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:35 2025 by rpki-client