This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json) Hash identifier: vQ9nLv9as/KqVPx/y4JA0DJC3ux2fzzCTfJKMs3+xbg= Subject key identifier: 9A:C6:9A:35:82:10:61:6D:A2:6A:8A:B4:B9:BC:7D:2C:73:44:70:42 Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Certificate serial: 019AF540988E48BE1465D94B2D69185C9B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 20:00:42 +0000 Manifest this update: Sat 06 Dec 2025 20:00:42 +0000 Manifest next update: Sun 07 Dec 2025 20:00:42 +0000 Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: AW8r8GshjIM5duDIDRarkwHiEbaIDX/HgHPAhWuMMsw=) 2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:98:8e:48:be:14:65:d9:4b:2d:69:18:5c:9b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Validity Not Before: Dec 6 20:00:42 2025 GMT Not After : Dec 7 20:00:42 2025 GMT Subject: CN=9ac69a358210616da26a8ab4b9bc7d2c73447042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:e7:23:9b:10:ee:4c:ea:55:46:9e:5d:00: 8d:f6:46:40:3f:21:4c:fb:55:8e:e2:08:17:f9:30: b4:97:36:42:b0:17:9f:a8:da:38:fc:e3:fe:27:3b: da:68:c7:f2:80:10:b8:be:2e:50:32:2c:fb:4a:ac: 7b:06:ec:17:9d:9d:d3:32:85:a7:bf:5c:ad:8a:84: 1f:4d:48:1b:d0:38:77:4f:54:dc:b7:9d:3c:6b:32: 79:4b:82:e4:3b:1c:e7:94:31:d8:af:f5:f2:1d:71: 9e:b5:cc:a3:73:fb:01:c4:7e:68:06:88:22:34:90: 2c:7b:ad:19:00:41:e9:34:c7:c1:3e:58:4d:53:e0: 20:21:58:b3:44:90:51:97:ab:42:13:2a:c8:1c:c9: 38:2c:ba:bd:a9:f2:82:d7:f6:ec:5c:16:5a:be:d8: 45:47:0f:83:53:ae:fa:63:f8:d8:0b:1e:ea:ae:b0: 77:03:57:98:c7:74:5a:40:00:22:9c:01:46:a3:b1: c5:36:2b:69:0f:92:60:ee:2f:39:a7:1e:6b:cf:61: c7:2f:65:ae:25:a4:6f:2a:8f:3c:33:f9:6b:40:74: 32:68:11:a9:5c:5c:48:d2:9b:aa:df:e2:84:ca:e3: 38:12:7e:db:6d:54:8a:e8:16:81:de:3e:9e:d5:54: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:9A:35:82:10:61:6D:A2:6A:8A:B4:B9:BC:7D:2C:73:44:70:42 X509v3 Authority Key Identifier: keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:13:5e:b4:4a:3b:c9:02:8c:44:bb:c2:92:c6:1b:a4:07: 5f:d7:c4:3a:f1:b7:eb:dd:9e:9c:56:46:d2:b8:3a:fd:c5:1c: f0:09:f2:4c:27:6e:e5:de:14:73:94:18:b4:74:0f:48:fc:08: d6:17:5b:97:09:8b:89:ff:7f:53:59:2c:68:4a:67:c8:fc:24: cf:9e:25:4f:2d:b7:86:f4:a1:12:e1:f8:c1:75:31:c2:9e:9f: 7d:e4:0a:71:95:4b:a8:c1:2e:11:d0:0d:5f:2e:02:92:ab:c4: a3:cb:28:52:85:81:55:f3:ff:45:4c:f1:31:07:1c:80:60:ba: cf:3d:74:da:79:9e:e7:b6:ba:5b:cc:72:8d:21:38:28:54:c7: 28:a5:d4:b8:44:61:40:af:1d:b0:ca:84:f8:d5:ee:99:82:27: 58:15:21:1e:95:9e:9b:1b:ff:58:4a:4a:d5:76:a2:b4:0f:83: 2c:ca:08:f1:4d:c6:39:4a:5d:35:66:c1:e8:bc:c1:e9:42:3a: 79:19:43:14:b8:a3:e0:88:8e:12:8a:21:b3:5b:90:8a:6a:09: fc:52:1b:fb:33:38:01:a1:98:e9:31:61:84:9e:b8:a9:9f:1d: 41:0c:13:07:1f:a7:51:fb:c4:e0:22:b1:1a:24:a2:74:7f:3a: fd:63:d1:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJiOSL4UZdlLLWkYXJsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx MTUyZGIwHhcNMjUxMjA2MjAwMDQyWhcNMjUxMjA3MjAwMDQyWjAzMTEwLwYDVQQD Eyg5YWM2OWEzNTgyMTA2MTZkYTI2YThhYjRiOWJjN2QyYzczNDQ3MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDfnI5sQ7kzqVUaeXQCN9kZAPyFM +1WO4ggX+TC0lzZCsBefqNo4/OP+JzvaaMfygBC4vi5QMiz7Sqx7BuwXnZ3TMoWn v1ytioQfTUgb0Dh3T1Tct508azJ5S4LkOxznlDHYr/XyHXGetcyjc/sBxH5oBogi NJAse60ZAEHpNMfBPlhNU+AgIVizRJBRl6tCEyrIHMk4LLq9qfKC1/bsXBZavthF Rw+DU676Y/jYCx7qrrB3A1eYx3RaQAAinAFGo7HFNitpD5Jg7i85px5rz2HHL2Wu JaRvKo88M/lrQHQyaBGpXFxI0puq3+KEyuM4En7bbVSK6BaB3j6e1VSRkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrGmjWCEGFtomqKtLm8fSxzRHBCMB8GA1UdIwQY MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt NmU4YjM0ZjE5NzZiLzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamwTXrRK O8kCjES7wpLGG6QHX9fEOvG3692enFZG0rg6/cUc8AnyTCdu5d4Uc5QYtHQPSPwI 1hdblwmLif9/U1ksaEpnyPwkz54lTy23hvShEuH4wXUxwp6ffeQKcZVLqMEuEdAN Xy4CkqvEo8soUoWBVfP/RUzxMQccgGC6zz102nme57a6W8xyjSE4KFTHKKXUuERh QK8dsMqE+NXumYInWBUhHpWemxv/WEpK1XaitA+DLMoI8U3GOUpdNWbB6LzB6UI6 eRlDFLij4IiOEoohs1uQimoJ/FIb+zM4AaGY6TFhhJ64qZ8dQQwTBx+nUfvE4CKx GiSidH86/WPR/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:05:41 2025 by rpki-client