This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json) Hash identifier: uqCVatmldVdYwPIQWLJTYslX+I7kkItXwREhrZcZ3fg= Subject key identifier: 00:4A:2D:47:14:6C:5A:12:4A:00:D6:80:6D:83:0D:54:B1:09:6D:8F Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Certificate serial: 019AF19B2534B602C2382F2F102F7F4566E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: BJt218vyPAIZF_L2ax-fXs78RO0.roa (hash: P3rkYDci/na2QczVHIWVXTso4Bg4G7j/ooyuS4+Wnxw=) 2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: REg2C+n150EM70Hcs+877gbEztZA8csgk6AZmded8TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:34:b6:02:c2:38:2f:2f:10:2f:7f:45:66:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=004a2d47146c5a124a00d6806d830d54b1096d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:66:1f:73:da:b2:89:2c:cb:fb:fc:e2:7b: 34:6d:b3:37:ea:e7:0a:d6:6a:24:99:f0:74:31:bd: 2c:b4:38:03:37:f5:7f:08:9d:a2:76:a5:a9:7e:32: 71:74:a2:f2:53:f1:aa:3e:e4:2e:39:5f:bb:2d:24: 43:7c:a3:78:1b:9a:38:02:54:e5:da:17:24:17:8a: 58:93:14:2d:8a:9c:8c:9d:d9:2c:85:ed:89:0c:4e: 42:ac:17:a7:96:c1:48:7a:d1:67:a8:8b:6f:24:a6: a9:6a:05:eb:0d:8f:6a:5a:cc:c9:8c:c4:c9:49:23: a4:ed:49:68:c9:b7:a5:c1:56:9d:2b:db:19:b4:22: ae:b7:5e:05:38:29:5e:3b:c0:c8:e0:53:ff:b4:bf: 91:3b:98:02:84:66:4e:0f:5e:16:91:18:b1:98:41: 71:47:da:1d:13:2e:a5:4f:8e:00:bb:c0:f7:bd:4c: 9a:8a:6b:62:a7:a3:e8:4c:0f:03:91:fe:9e:15:3b: 2a:ad:a2:25:95:99:4d:51:a9:34:94:d7:f4:99:25: 5b:8e:cc:1b:6a:66:f5:b9:67:75:01:70:43:41:97: 6a:79:e9:ce:48:50:c1:99:b0:06:eb:f2:51:17:0c: 70:98:ef:64:be:ff:71:93:61:33:5f:80:d4:5d:29: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:2D:47:14:6C:5A:12:4A:00:D6:80:6D:83:0D:54:B1:09:6D:8F X509v3 Authority Key Identifier: keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:dc:99:4c:11:0a:53:af:dd:b6:14:c7:a5:5f:13:42:3c:40: 97:47:59:6d:a7:73:fe:5e:0f:91:da:05:a5:68:65:ea:4d:30: 84:58:f6:6a:70:17:29:07:da:b7:3e:ef:9d:fc:b4:8b:34:59: 89:d4:68:85:b2:0c:0f:9e:ab:86:16:04:54:17:08:96:d7:1c: 37:c4:46:f1:c4:c4:7b:75:ff:b5:3c:5e:0c:4e:75:3a:97:19: e9:00:08:ae:46:b3:1a:c2:e5:47:cb:4d:41:83:6c:82:70:b0: a3:d6:31:0d:d5:38:c3:6e:60:dd:85:ca:1f:79:72:22:cc:bb: 33:49:ea:ec:1f:f9:73:7f:a9:f9:58:a3:12:cb:77:94:38:ec: fd:8b:4f:6c:4e:9d:ad:b2:c8:4f:0b:30:45:12:73:73:f7:73: fa:2b:01:48:22:b8:ed:45:b7:b0:19:9d:1e:8f:1d:8b:af:78: c2:c5:00:8f:18:a1:a2:c8:df:81:3c:83:4e:42:63:c4:17:a7: 93:7c:af:a1:6c:09:ba:53:31:f2:13:eb:4f:51:9b:9b:3e:dc: fe:1f:11:5c:b1:af:86:19:05:5f:63:40:00:f3:e2:7c:4a:d0: 08:f8:93:31:d7:00:2b:19:86:6d:42:c8:c8:c6:b5:77:50:6f: 25:e0:b3:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyU0tgLCOC8vEC9/RWboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk ZDRkMGUwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygwMDRhMmQ0NzE0NmM1YTEyNGEwMGQ2ODA2ZDgzMGQ1NGIxMDk2ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxNmH3Pasoksy/v84ns0bbM36ucK 1mokmfB0Mb0stDgDN/V/CJ2idqWpfjJxdKLyU/GqPuQuOV+7LSRDfKN4G5o4AlTl 2hckF4pYkxQtipyMndkshe2JDE5CrBenlsFIetFnqItvJKapagXrDY9qWszJjMTJ SSOk7UloybelwVadK9sZtCKut14FOCleO8DI4FP/tL+RO5gChGZOD14WkRixmEFx R9odEy6lT44Au8D3vUyaimtip6PoTA8Dkf6eFTsqraIllZlNUak0lNf0mSVbjswb amb1uWd1AXBDQZdqeenOSFDBmbAG6/JRFwxwmO9kvv9xk2EzX4DUXSmNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABKLUcUbFoSSgDWgG2DDVSxCW2PMB8GA1UdIwQY MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdyZTBEK U6/dthTHpV8TQjxAl0dZbadz/l4PkdoFpWhl6k0whFj2anAXKQfatz7vnfy0izRZ idRohbIMD56rhhYEVBcIltccN8RG8cTEe3X/tTxeDE51OpcZ6QAIrkazGsLlR8tN QYNsgnCwo9YxDdU4w25g3YXKH3lyIsy7M0nq7B/5c3+p+VijEst3lDjs/YtPbE6d rbLITwswRRJzc/dz+isBSCK47UW3sBmdHo8di694wsUAjxihosjfgTyDTkJjxBen k3yvoWwJulMx8hPrT1Gbmz7c/h8RXLGvhhkFX2NAAPPifErQCPiTMdcAKxmGbULI yMa1d1BvJeCz3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:48 2025 by rpki-client