This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json) Hash identifier: mdI1Dzn6mXVY9rxoVRtN36WptkQt3bAD9ta99CYIyio= Subject key identifier: AB:78:3D:7A:3E:A6:C7:C4:78:07:12:F1:D4:D2:4F:73:87:BE:EC:BF Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Certificate serial: 019AF209270F7EB32C5E4A80D619AC253F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft Manifest number: 0A6A Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=) 2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: 1KaaP2rHkWhZC49EGM+aIa4S/cRdKpcORpsRBq2yO7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:0f:7e:b3:2c:5e:4a:80:d6:19:ac:25:3f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=ab783d7a3ea6c7c4780712f1d4d24f7387beecbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:d9:64:60:1a:77:fe:d3:35:b0:7e:44:9e: 52:8e:ab:1b:cb:7a:cc:bb:96:f4:09:f9:8a:35:db: 7a:8e:5c:13:87:d8:9e:94:e4:8b:df:c1:0c:22:c1: 30:d6:69:30:28:7c:d3:28:d6:cd:dc:bd:7b:70:7d: f7:4b:9e:6a:2f:a1:c7:02:d2:8e:70:a8:9a:c4:10: 83:c6:3b:96:ff:4e:5a:25:47:d1:6c:60:92:34:69: f5:d9:8d:92:0b:32:ed:13:8f:75:e2:4f:ae:5e:86: 5e:ba:2a:50:b4:d1:0a:8b:52:52:52:25:b9:5a:4b: c8:50:94:d6:58:c7:d1:2b:27:49:a9:cf:cd:2d:25: 1c:d5:06:4f:e6:f5:e4:2a:69:ce:9f:3e:32:bd:f1: 3f:1e:fb:69:4a:e0:f0:ab:b8:23:6c:f0:57:86:c4: 44:03:2d:5c:b8:76:a4:b6:56:43:de:d4:63:9d:99: f9:54:31:50:3c:2a:be:bf:c5:08:5e:6e:76:8d:92: a7:ed:fb:5b:8a:9e:56:f4:40:3d:41:27:14:d9:36: 90:e3:b7:8c:e3:60:a4:16:e6:47:1d:c0:e4:ad:00: 6a:0e:9c:5a:55:32:f1:ac:d0:85:85:4f:6a:8e:60: ea:e8:69:46:5a:1d:28:6c:ec:59:b4:5b:28:50:17: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:3D:7A:3E:A6:C7:C4:78:07:12:F1:D4:D2:4F:73:87:BE:EC:BF X509v3 Authority Key Identifier: keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:bc:70:b7:b6:f5:f1:5d:3d:db:d2:ab:63:61:00:44:57: 8c:47:29:90:ad:7c:ba:0f:25:0e:47:b6:a8:c4:3a:d7:12:fd: 66:a4:43:5e:23:97:bf:2f:d7:ba:c3:00:3a:b3:a3:b9:46:c4: ec:50:2d:b3:d2:75:98:ad:8f:dd:59:88:22:22:51:40:00:63: f5:75:d4:44:95:f9:36:ca:da:34:e3:6c:30:f6:70:4a:54:1b: a3:ff:fb:9f:90:08:0a:4e:9d:42:88:90:75:51:6b:d7:97:7c: 5f:16:06:a4:67:00:7e:0c:33:b5:b4:8a:69:b0:bb:22:7b:50: 86:0e:2b:1d:93:0b:41:69:7d:79:34:a1:26:a4:02:ba:3c:f8: a6:d0:14:76:6f:ac:97:01:85:cb:c6:04:5f:3c:5c:70:02:86: 10:6f:91:d9:b9:63:e2:51:fd:b2:45:2b:3a:3a:7e:7f:fb:67: 15:0b:71:3e:ef:3c:f1:a9:9d:89:be:91:14:6f:18:13:c9:84: 79:75:7f:9a:38:52:56:e7:71:ac:6e:84:c9:79:5f:b7:b9:c9: 43:9e:5b:16:dc:d1:9b:38:9b:52:fe:49:fe:8e:8b:67:00:5b: 73:39:d8:bd:fe:fa:29:6a:83:50:35:b9:27:50:a4:d6:39:54: 58:fd:28:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCScPfrMsXkqA1hmsJT+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz YjU2YzAwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EyhhYjc4M2Q3YTNlYTZjN2M0NzgwNzEyZjFkNGQyNGY3Mzg3YmVlY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5DZZGAad/7TNbB+RJ5Sjqsby3rM u5b0CfmKNdt6jlwTh9ielOSL38EMIsEw1mkwKHzTKNbN3L17cH33S55qL6HHAtKO cKiaxBCDxjuW/05aJUfRbGCSNGn12Y2SCzLtE4914k+uXoZeuipQtNEKi1JSUiW5 WkvIUJTWWMfRKydJqc/NLSUc1QZP5vXkKmnOnz4yvfE/HvtpSuDwq7gjbPBXhsRE Ay1cuHaktlZD3tRjnZn5VDFQPCq+v8UIXm52jZKn7ftbip5W9EA9QScU2TaQ47eM 42CkFuZHHcDkrQBqDpxaVTLxrNCFhU9qjmDq6GlGWh0obOxZtFsoUBcXbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt4PXo+psfEeAcS8dTST3OHvuy/MB8GA1UdIwQY MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2 LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJm8cLe2 9fFdPdvSq2NhAERXjEcpkK18ug8lDke2qMQ61xL9ZqRDXiOXvy/XusMAOrOjuUbE 7FAts9J1mK2P3VmIIiJRQABj9XXURJX5NsraNONsMPZwSlQbo//7n5AICk6dQoiQ dVFr15d8XxYGpGcAfgwztbSKabC7IntQhg4rHZMLQWl9eTShJqQCujz4ptAUdm+s lwGFy8YEXzxccAKGEG+R2blj4lH9skUrOjp+f/tnFQtxPu888amdib6RFG8YE8mE eXV/mjhSVudxrG6EyXlft7nJQ55bFtzRmzibUv5J/o6LZwBbcznYvf76KWqDUDW5 J1Ck1jlUWP0o0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:14 2025 by rpki-client