This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json) Hash identifier: NLvESPpOdKKGtoXmapXb/jLUA9CeiEUnIYFOwx2PyrI= Subject key identifier: 93:A2:5F:B8:58:02:A6:EC:2B:92:05:72:C1:4E:CB:E2:97:FE:E0:A4 Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345 Certificate serial: 019AF1645E2773B475642E2B3E1CDAE3A5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: WQPLWSYm7uxLPiLXzsFqb2owR5JaLdPRZICSa3kh5B0=) 2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5e:27:73:b4:75:64:2e:2b:3e:1c:da:e3:a5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345 Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=93a25fb85802a6ec2b920572c14ecbe297fee0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:e4:3c:b1:79:c3:0b:91:15:9b:d9:2e:2a: 39:d9:86:9e:d5:da:6f:f1:2e:3a:8d:00:9e:c4:5d: 31:99:32:01:f8:61:88:7d:48:7a:49:fd:7a:3d:c3: 69:87:8a:36:16:88:6f:33:83:09:56:c2:6a:5b:fd: 30:34:60:5d:9a:71:1d:0e:c7:cf:79:de:96:54:27: 6b:25:df:6f:7c:10:0c:67:e9:65:ee:65:0a:c2:d0: fe:0e:a2:9c:9a:6d:e7:3f:33:0d:e3:4a:97:fa:43: c0:23:22:67:3a:e2:86:fc:7d:72:30:b5:36:4e:88: 81:01:96:22:f8:e8:64:2b:e6:95:70:f4:0e:cc:91: 6e:33:02:aa:16:07:80:9a:a8:97:74:35:3c:e5:7d: e5:04:4c:34:88:ab:35:ba:ef:49:3d:b3:ed:49:7e: 57:8b:7a:6e:0c:0b:aa:42:47:7b:9f:1e:a7:51:2c: 44:01:78:fd:9f:64:48:4a:2c:7c:33:74:cb:cf:24: 41:7b:63:32:8e:87:83:b3:59:37:9e:a9:d5:55:86: 17:97:9d:4d:5e:cc:92:10:2b:d9:fb:19:1a:d5:c8: 95:cc:29:43:1a:22:17:f4:04:30:91:4a:26:4b:37: 80:99:5a:79:7b:a6:e0:8f:f9:2f:26:5d:54:33:7b: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:5F:B8:58:02:A6:EC:2B:92:05:72:C1:4E:CB:E2:97:FE:E0:A4 X509v3 Authority Key Identifier: keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:f3:17:0c:9e:5d:d3:58:0d:b1:f8:15:e3:a1:08:dc:b9: 37:67:fe:f2:57:44:33:f3:a1:c3:07:58:e9:9c:0d:6e:7e:a4: 5f:5a:73:e0:af:3c:a5:00:d8:d4:44:89:85:51:80:ed:fb:53: 97:51:e6:68:62:54:88:5f:87:27:66:6e:4e:7a:de:7d:ac:d8: 1a:5b:af:25:ab:78:09:45:79:c3:d1:80:28:86:1b:c0:b1:52: 7f:cd:1e:2c:55:ce:42:6d:6c:ea:09:7b:a9:b3:c1:19:f0:29: ff:44:8c:1b:9f:53:a5:c1:d1:48:32:c8:ff:cc:b7:83:93:43: e2:1e:5d:97:7a:d6:b3:3a:8e:a1:af:1d:4b:be:8d:22:95:0d: e9:90:10:ce:22:fe:99:ec:36:c2:8b:fe:a0:55:68:33:de:8a: 24:1a:2c:09:fa:2a:1a:d5:bc:a2:2a:c4:a3:6c:c9:25:62:69: 2f:d3:1c:f3:13:9c:89:3f:a1:a1:a1:54:97:f4:7b:4a:3e:8f: 16:8a:39:e9:f2:93:99:02:73:63:40:84:ff:95:56:ee:c5:c0: a4:2e:35:cb:6b:93:fc:7e:35:b6:20:60:f0:1f:ca:3c:08:ec: 2f:72:15:b9:d8:56:6a:5c:d3:2d:92:a3:04:e8:d8:8c:12:87: c1:aa:ee:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF4nc7R1ZC4rPhza46XEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3 Y2MzNDUwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD Eyg5M2EyNWZiODU4MDJhNmVjMmI5MjA1NzJjMTRlY2JlMjk3ZmVlMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrnkPLF5wwuRFZvZLio52Yae1dpv 8S46jQCexF0xmTIB+GGIfUh6Sf16PcNph4o2FohvM4MJVsJqW/0wNGBdmnEdDsfP ed6WVCdrJd9vfBAMZ+ll7mUKwtD+DqKcmm3nPzMN40qX+kPAIyJnOuKG/H1yMLU2 ToiBAZYi+OhkK+aVcPQOzJFuMwKqFgeAmqiXdDU85X3lBEw0iKs1uu9JPbPtSX5X i3puDAuqQkd7nx6nUSxEAXj9n2RISix8M3TLzyRBe2MyjoeDs1k3nqnVVYYXl51N XsySECvZ+xka1ciVzClDGiIX9AQwkUomSzeAmVp5e6bgj/kvJl1UM3tj1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOiX7hYAqbsK5IFcsFOy+KX/uCkMB8GA1UdIwQY MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt MzY4MGFlYjYzMmRhLzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnnzFwye XdNYDbH4FeOhCNy5N2f+8ldEM/OhwwdY6ZwNbn6kX1pz4K88pQDY1ESJhVGA7ftT l1HmaGJUiF+HJ2ZuTnrefazYGluvJat4CUV5w9GAKIYbwLFSf80eLFXOQm1s6gl7 qbPBGfAp/0SMG59TpcHRSDLI/8y3g5ND4h5dl3rWszqOoa8dS76NIpUN6ZAQziL+ mew2wov+oFVoM96KJBosCfoqGtW8oirEo2zJJWJpL9Mc8xOciT+hoaFUl/R7Sj6P Foo56fKTmQJzY0CE/5VW7sXApC41y2uT/H41tiBg8B/KPAjsL3IVudhWalzTLZKj BOjYjBKHwaruQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:52 2025 by rpki-client