This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json) Hash identifier: tOUyyPGrV6EiYv0+3sl8O9mteM4pKsX4gF6wIKoaRcA= Subject key identifier: 05:F6:86:27:13:C5:1C:E3:05:0D:FB:5A:C2:54:CC:E6:74:3E:10:24 Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3 Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3 Certificate serial: 019AF1D1CA75579CA6AF2ADB415BB9852B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft Manifest number: 0476 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: NVP0prVMVotg6OLqt3+0+/0SwdU4OXOQW8PSESYEe6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:75:57:9c:a6:af:2a:db:41:5b:b9:85:2b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=05f6862713c51ce3050dfb5ac254cce6743e1024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:89:f8:2d:b3:9f:4c:9e:8e:f6:10:2d:12: ca:cc:eb:e7:be:d7:52:7a:68:de:08:ba:12:e0:6d: 45:b4:c7:f9:80:7f:8c:ba:5c:f7:f0:42:9f:bc:13: 2c:1e:df:36:5b:95:e5:5f:67:46:6a:b5:48:dc:87: fa:37:89:24:50:3f:b6:ce:13:10:cb:77:23:a1:47: fc:e5:ab:9b:81:21:27:f0:65:52:df:10:aa:f8:ba: 4c:1f:fa:9b:ab:a2:df:33:6f:2d:99:c2:ba:6d:f1: ef:c5:f2:0b:53:a6:a2:ee:fb:cf:f6:bd:ac:c1:99: d4:2e:c2:79:ff:b4:eb:0b:eb:de:37:b0:83:99:fb: cf:80:7a:64:26:09:f5:03:d6:88:da:06:9b:72:12: 0c:5a:d1:3d:23:66:ea:0c:8c:46:8f:0e:a9:90:77: 27:72:7c:d1:f6:1d:60:3b:5a:22:24:1a:22:d0:f6: 81:00:91:8c:bb:5d:4e:ac:e0:a4:a8:5d:58:73:a3: 98:2b:67:81:3f:2d:ee:74:ce:08:8e:a5:76:71:96: 83:37:c3:25:08:1f:33:fa:7a:3f:50:54:3c:8e:6e: da:54:74:ed:32:35:8c:53:13:4e:e4:3f:22:f8:24: db:80:70:9d:db:a3:1c:f8:f9:29:3d:1a:aa:21:ba: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F6:86:27:13:C5:1C:E3:05:0D:FB:5A:C2:54:CC:E6:74:3E:10:24 X509v3 Authority Key Identifier: keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:36:72:84:8a:44:83:18:3a:cd:3c:7e:55:37:19:6f:1d: 6b:3f:73:47:d0:a9:55:8a:63:13:60:7e:69:58:f3:4d:b9:eb: a7:b6:1b:87:4f:a8:d7:4d:a7:93:01:d3:bd:01:f4:0f:e7:5d: 1e:64:3c:8d:e2:df:1f:7c:85:60:6e:27:7c:98:6e:20:6b:b5: 3e:bc:66:59:9e:26:3a:f4:fe:ce:42:08:c2:55:df:9e:4e:d7: 47:33:0a:85:b9:c0:fd:7f:b5:7f:76:c2:84:aa:80:74:ca:6d: 53:f9:43:01:00:5f:a0:2e:2f:86:8a:ef:7c:7f:89:e4:72:bb: 28:99:78:c8:49:c6:9f:26:d7:60:4a:13:b0:c5:29:ca:27:b2: 21:9f:ae:1c:47:00:11:8b:ab:62:8b:b1:f5:56:c5:2f:2b:43: 5a:f0:7a:a8:c0:a3:c3:e0:3f:b7:11:91:58:01:05:ca:a5:de: 60:4e:8f:c2:e6:0d:8d:04:f0:d3:2d:cd:fd:86:5b:2c:7c:6f: 25:ff:04:6f:5a:a7:44:db:44:97:1a:48:d3:d5:6c:6e:76:4e: 4a:1f:80:1c:ab:70:8e:1b:8c:31:96:b4:d8:be:25:1c:a5:e3: 5c:64:bf:83:f7:99:55:04:b8:30:43:47:6d:cf:f8:bd:c7:8e: 46:35:2b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cp1V5ymryrbQVu5hSudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOTI4MGEyNmY4MzE1NjYxNThiMjYxN2M5NWQxOWQzMzhl ZTE1ZDMwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EygwNWY2ODYyNzEzYzUxY2UzMDUwZGZiNWFjMjU0Y2NlNjc0M2UxMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSSJ+C2zn0yejvYQLRLKzOvnvtdS emjeCLoS4G1FtMf5gH+Mulz38EKfvBMsHt82W5XlX2dGarVI3If6N4kkUD+2zhMQ y3cjoUf85aubgSEn8GVS3xCq+LpMH/qbq6LfM28tmcK6bfHvxfILU6ai7vvP9r2s wZnULsJ5/7TrC+veN7CDmfvPgHpkJgn1A9aI2gabchIMWtE9I2bqDIxGjw6pkHcn cnzR9h1gO1oiJBoi0PaBAJGMu11OrOCkqF1Yc6OYK2eBPy3udM4IjqV2cZaDN8Ml CB8z+no/UFQ8jm7aVHTtMjWMUxNO5D8i+CTbgHCd26Mc+PkpPRqqIboRsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX2hicTxRzjBQ37WsJUzOZ0PhAkMB8GA1UdIwQY MBaAFC2SgKJvgxVmFYsmF8ldGdM47hXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUt Y2FlNDAzODRjNmJmLzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iZTczMGEtMjdlNi00MTM2LWIyYzUtY2FlNDAzODRjNmJm LzEvTFpLQW9tLURGV1lWaXlZWHlWMFowemp1RmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTs2coSK RIMYOs08flU3GW8daz9zR9CpVYpjE2B+aVjzTbnrp7Ybh0+o102nkwHTvQH0D+dd HmQ8jeLfH3yFYG4nfJhuIGu1PrxmWZ4mOvT+zkIIwlXfnk7XRzMKhbnA/X+1f3bC hKqAdMptU/lDAQBfoC4vhorvfH+J5HK7KJl4yEnGnybXYEoTsMUpyieyIZ+uHEcA EYurYoux9VbFLytDWvB6qMCjw+A/txGRWAEFyqXeYE6PwuYNjQTw0y3N/YZbLHxv Jf8Eb1qnRNtElxpI09VsbnZOSh+AHKtwjhuMMZa02L4lHKXjXGS/g/eZVQS4MENH bc/4vceORjUrAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:37 2025 by rpki-client