This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json) Hash identifier: v29P/Oum3QHvfb3U6tiYaB6F8nAiSACyOKFSLxAQNrU= Subject key identifier: 1E:1F:5E:D5:52:C5:7F:85:9E:40:50:EF:8D:EB:41:A3:14:05:A7:5D Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Certificate serial: 019AF2095002285A6280202935954984B30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft Manifest number: 150F Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: 0fWaImNVP+kdiNTwEMtdtlV6+FGMrcuq8GZnLecCUss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:50:02:28:5a:62:80:20:29:35:95:49:84:b3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=1e1f5ed552c57f859e4050ef8deb41a31405a75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:6f:dd:25:69:50:b3:0e:77:90:9c:e8:31: 76:fd:7f:cb:68:4b:4e:bd:db:24:26:d0:c3:8e:e9: 55:da:68:36:ef:ed:45:9a:e6:05:01:d1:44:eb:65: 69:ed:0e:ec:92:a1:58:5f:d6:ac:a3:35:08:c0:f5: 29:8b:5f:a5:9a:95:18:6e:5c:4b:c4:93:ef:0a:d5: c7:1d:a8:80:3b:bb:7b:b7:a8:03:e5:44:26:84:02: 83:64:ae:55:eb:35:36:83:2a:93:58:c7:fc:6a:9e: 82:54:de:fa:64:c3:41:eb:89:c0:39:60:91:e5:8d: 5d:24:9c:2c:f0:21:f2:fb:27:00:91:d3:c7:26:a3: 3f:96:8e:64:67:0a:37:64:04:87:37:2c:85:71:9f: e1:45:81:7e:49:01:db:d6:39:1d:aa:91:1d:99:15: 21:73:5f:11:44:8c:06:4b:86:8c:5d:61:14:ac:4d: d1:7c:e5:7b:07:6a:d6:35:01:36:e1:ff:0a:3c:ad: 24:e6:29:1f:6f:be:d8:6c:37:61:40:33:fc:9b:47: 35:f8:18:1a:b6:6f:d7:19:5e:ba:ed:a5:f2:ee:b6: e6:ee:8f:e0:b1:d3:94:6a:61:d4:0c:2b:9b:a7:52: 89:cd:ce:c4:35:07:0e:dc:b1:84:58:55:4b:2e:e3: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:5E:D5:52:C5:7F:85:9E:40:50:EF:8D:EB:41:A3:14:05:A7:5D X509v3 Authority Key Identifier: keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:3a:ff:09:4c:1c:e5:80:32:5a:a6:6b:38:e2:cb:9b:db: 7b:3c:c9:ac:b6:2d:5c:e0:19:53:d4:85:a9:e1:f7:60:81:60: 32:f8:12:74:49:4e:18:f1:d4:98:82:c4:36:61:89:59:1d:c0: b4:80:77:83:aa:b0:bf:d6:2a:cc:aa:25:48:16:97:e4:cb:e7: 71:c5:70:9e:90:d0:d3:81:77:ad:71:ff:36:11:92:dd:08:5e: b7:62:63:a3:87:76:55:91:c1:df:32:3a:9a:4c:8b:ad:17:66: 7b:05:ee:ee:23:c5:2a:62:40:67:cb:67:27:57:b1:ca:09:17: 81:c6:0c:b1:04:d3:f1:15:60:a0:5d:3b:f6:77:5d:d3:14:90: 7f:21:a9:e6:8f:ab:fd:d7:a1:ab:30:f5:56:f9:50:82:f0:67: 36:b0:d8:3c:23:b6:d3:49:be:50:de:c1:04:e8:32:fa:36:dc: ba:3f:c0:1b:fb:37:9b:5f:d1:a2:63:e8:21:45:f4:8d:59:01: a8:e8:2d:6e:b9:71:c2:e3:79:6f:25:b9:8a:3a:2b:38:91:d1: 40:b8:fc:a2:72:4f:45:88:a6:ae:2a:f4:19:29:da:b2:64:67: 32:99:21:41:fc:79:15:83:04:64:d7:bb:73:ce:72:44:1b:b3: 8c:70:9c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVACKFpigCApNZVJhLMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm NTYwNmQwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EygxZTFmNWVkNTUyYzU3Zjg1OWU0MDUwZWY4ZGViNDFhMzE0MDVhNzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXBv3SVpULMOd5Cc6DF2/X/LaEtO vdskJtDDjulV2mg27+1FmuYFAdFE62Vp7Q7skqFYX9asozUIwPUpi1+lmpUYblxL xJPvCtXHHaiAO7t7t6gD5UQmhAKDZK5V6zU2gyqTWMf8ap6CVN76ZMNB64nAOWCR 5Y1dJJws8CHy+ycAkdPHJqM/lo5kZwo3ZASHNyyFcZ/hRYF+SQHb1jkdqpEdmRUh c18RRIwGS4aMXWEUrE3RfOV7B2rWNQE24f8KPK0k5ikfb77YbDdhQDP8m0c1+Bga tm/XGV667aXy7rbm7o/gsdOUamHUDCubp1KJzc7ENQcO3LGEWFVLLuMO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4fXtVSxX+FnkBQ743rQaMUBaddMB8GA1UdIwQY MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeM6/wlM HOWAMlqmazjiy5vbezzJrLYtXOAZU9SFqeH3YIFgMvgSdElOGPHUmILENmGJWR3A tIB3g6qwv9YqzKolSBaX5MvnccVwnpDQ04F3rXH/NhGS3Qhet2Jjo4d2VZHB3zI6 mkyLrRdmewXu7iPFKmJAZ8tnJ1exygkXgcYMsQTT8RVgoF079ndd0xSQfyGp5o+r /dehqzD1VvlQgvBnNrDYPCO200m+UN7BBOgy+jbcuj/AG/s3m1/RomPoIUX0jVkB qOgtbrlxwuN5byW5ijorOJHRQLj8onJPRYimrir0GSnasmRnMpkhQfx5FYMEZNe7 c85yRBuzjHCcGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:30 2025 by rpki-client