This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json) Hash identifier: mHV2U7IkZCc6zFvOD0XVZQ0hwg3sX0Tm89yLpG43oMo= Subject key identifier: E3:9E:55:4E:8A:E8:20:ED:7C:6E:0A:34:50:4D:06:69:0A:3E:8B:A3 Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Certificate serial: 019AF23F8516A7450F4AE4F03BAA709C0689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft Manifest number: 0D4F Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: CAQfeov+rwuHrDXUKlwHa70nwqHPbN/MMXDnkPGOcg8=) 2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:85:16:a7:45:0f:4a:e4:f0:3b:aa:70:9c:06:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=e39e554e8ae820ed7c6e0a34504d06690a3e8ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:02:a7:8e:80:24:0e:7f:23:53:b2:1c:00: bb:8d:e7:96:20:16:0e:6b:f8:d1:90:72:f0:bc:c0: 47:20:e1:16:21:5c:80:e8:c1:46:0b:a8:40:89:97: 27:39:d3:a1:87:0f:5e:8a:0b:57:b3:02:d4:03:0d: 10:33:97:e3:a8:e7:29:7c:8b:77:e9:00:81:fe:56: 00:c8:a8:0e:f9:e8:d1:49:04:5d:73:6d:23:91:8e: 1b:d4:b8:22:a0:40:d7:92:c8:8c:a2:7f:29:f5:86: 1f:c5:73:31:6a:e9:e3:6d:59:17:55:c3:fb:6c:24: bc:6c:e0:98:a5:1b:ed:70:3e:65:fe:ca:8a:54:3b: 19:cf:95:ce:4d:3b:6b:8b:47:ab:41:32:22:cb:1d: 12:ed:2a:e3:22:01:6e:54:7a:72:f9:d3:3f:8a:d5: 10:2d:37:03:ea:c0:b0:cf:24:d5:21:e9:8a:98:cd: 3a:03:06:65:4c:11:57:b3:78:10:f1:bb:ea:30:bc: c7:01:fc:e3:c4:c4:14:83:93:4b:d3:a2:46:53:63: bd:7e:d9:f6:36:c5:46:84:90:d3:d4:d4:95:df:72: 6c:af:f0:00:f5:74:62:1b:18:8a:24:2a:70:9f:ba: de:57:e4:6b:c1:d2:08:55:33:f0:6d:19:53:63:26: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9E:55:4E:8A:E8:20:ED:7C:6E:0A:34:50:4D:06:69:0A:3E:8B:A3 X509v3 Authority Key Identifier: keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c2:09:f7:51:df:66:cb:bd:ff:ff:c5:80:e4:18:d1:1c:c6: b8:30:5f:3f:40:f3:20:6e:00:50:78:b0:26:56:f4:68:35:db: 2d:3e:cc:c3:50:aa:21:4a:e4:c1:36:6c:55:1b:fa:dd:b2:67: 91:85:05:ea:8d:f3:8b:06:09:3a:a6:5b:df:85:87:37:89:64: 38:a1:94:45:4e:45:14:1c:85:6c:8f:55:e4:88:5c:1b:b4:f0: 15:81:1f:30:a9:14:e6:83:95:be:3e:99:88:61:d8:38:75:be: 73:39:9f:90:0a:95:a1:53:35:a7:9a:41:43:8b:c8:36:27:06: 64:fa:24:99:1f:6c:0a:9d:d7:5b:1d:d3:a1:e6:2c:d3:10:08: a2:4a:94:02:33:a8:5a:8a:32:93:03:78:fd:84:83:a6:32:b2: 9f:57:c5:6a:99:3d:b1:44:ae:d7:22:e4:c3:e1:e3:c5:40:fb: 46:e5:bd:d6:d5:08:d0:68:95:ed:17:21:9e:40:5e:6f:cc:22: ad:da:d3:00:65:e0:e4:79:6a:3c:47:96:0f:80:3f:00:26:80: 49:56:4a:66:27:fb:11:0d:62:eb:5a:e7:03:0f:90:f8:11:c3: 02:58:b3:c2:a7:04:cf:36:40:5d:07:79:a4:0c:d6:c8:d5:80: 36:6b:a2:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4UWp0UPSuTwO6pwnAaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWFlMTAyZTZjYWRiNDcxYTMwYTBjODU5MzNlMDM5MGJm MmY5Y2EwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD EyhlMzllNTU0ZThhZTgyMGVkN2M2ZTBhMzQ1MDRkMDY2OTBhM2U4YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEUCp46AJA5/I1OyHAC7jeeWIBYO a/jRkHLwvMBHIOEWIVyA6MFGC6hAiZcnOdOhhw9eigtXswLUAw0QM5fjqOcpfIt3 6QCB/lYAyKgO+ejRSQRdc20jkY4b1LgioEDXksiMon8p9YYfxXMxaunjbVkXVcP7 bCS8bOCYpRvtcD5l/sqKVDsZz5XOTTtri0erQTIiyx0S7SrjIgFuVHpy+dM/itUQ LTcD6sCwzyTVIemKmM06AwZlTBFXs3gQ8bvqMLzHAfzjxMQUg5NL06JGU2O9ftn2 NsVGhJDT1NSV33Jsr/AA9XRiGxiKJCpwn7reV+RrwdIIVTPwbRlTYyZMnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOeVU6K6CDtfG4KNFBNBmkKPoujMB8GA1UdIwQY MBaAFC2a4QLmyttHGjCgyFkz4DkL8vnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYt ZmZjZWUxNTMzNTc3LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYtZmZjZWUxNTMzNTc3 LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsIJ91Hf Zsu9///FgOQY0RzGuDBfP0DzIG4AUHiwJlb0aDXbLT7Mw1CqIUrkwTZsVRv63bJn kYUF6o3ziwYJOqZb34WHN4lkOKGURU5FFByFbI9V5IhcG7TwFYEfMKkU5oOVvj6Z iGHYOHW+czmfkAqVoVM1p5pBQ4vINicGZPokmR9sCp3XWx3ToeYs0xAIokqUAjOo WooykwN4/YSDpjKyn1fFapk9sUSu1yLkw+HjxUD7RuW91tUI0GiV7RchnkBeb8wi rdrTAGXg5HlqPEeWD4A/ACaASVZKZif7EQ1i61rnAw+Q+BHDAlizwqcEzzZAXQd5 pAzWyNWANmuilA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:42 2025 by rpki-client