This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json) Hash identifier: 1MZWzO+bibiCM46wc3ooHyQ04wt3fzzn64Tmio0LzgU= Subject key identifier: 46:71:CD:54:72:E7:BF:FD:BE:CB:06:71:92:EE:09:1A:A5:15:D0:C5 Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28 Certificate serial: 019AF19AD42F6FA94A0261AEDC763D460554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=) 2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: M1WAMPyt0gKQum3lMJO0A6iaFHfznaVy9XQg92nSBCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d4:2f:6f:a9:4a:02:61:ae:dc:76:3d:46:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=4671cd5472e7bffdbecb067192ee091aa515d0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:d7:34:ed:0c:a3:c5:68:61:38:c3:39:fa: cc:0b:5d:b5:f4:56:53:84:fa:25:92:95:05:54:a4: 2c:bf:45:79:cb:09:28:4e:23:b4:95:a4:48:a7:f5: 01:6a:be:bb:6b:84:75:1c:52:53:29:61:8a:bf:cd: 72:5e:8f:a3:d5:4b:46:b9:e5:61:24:b4:85:2c:6e: 3a:5d:68:a4:b8:3c:f7:18:2a:ea:59:21:56:39:f3: 71:c7:1d:0d:56:11:38:3e:6f:81:b0:f3:dd:57:53: dc:92:4a:8a:0a:b5:4d:af:37:9a:8a:5a:4d:cb:b9: 2f:c9:1a:85:03:8f:38:5c:3e:12:d4:2c:65:87:29: 92:9c:09:c4:0d:8a:11:7a:9f:56:65:25:0f:ad:4e: 57:5b:25:ab:3b:50:18:87:87:87:8c:59:c3:a4:83: 58:3b:e2:43:a2:61:08:af:c3:14:6b:73:3a:22:f4: 5b:f6:b3:59:e8:c1:47:87:6e:5a:28:a9:19:10:cc: e9:94:07:9c:df:2e:cc:4c:ed:0a:9b:ce:d4:3a:39: dd:be:c9:fa:aa:dd:ac:bb:24:0f:a8:22:a0:ba:eb: df:46:0c:b3:38:15:b9:f1:70:80:f3:1a:6f:c1:2e: 2e:cd:f6:b9:11:d0:13:d4:ea:3a:7c:65:17:47:92: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:CD:54:72:E7:BF:FD:BE:CB:06:71:92:EE:09:1A:A5:15:D0:C5 X509v3 Authority Key Identifier: keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:88:13:22:cb:75:32:50:c1:bc:02:0e:11:91:0a:05:20:0a: 78:78:0d:db:5d:20:62:33:38:57:22:22:1b:57:b6:04:6d:93: 00:30:b3:e6:2c:a3:24:a6:4a:9a:ad:23:31:0f:87:c3:fb:a8: 60:06:9a:4b:75:f5:58:aa:4b:ab:c1:c5:d3:bd:18:6f:7c:34: 83:40:c9:67:aa:bf:d4:9b:41:77:09:a3:d1:3e:eb:b8:9e:f4: cf:7e:37:01:08:6d:ce:37:2f:82:f7:eb:9c:82:61:15:a7:8e: d6:2c:9c:2e:9f:32:f1:82:40:9f:eb:73:fd:36:8d:7d:62:ef: 38:04:c7:f1:0a:cd:6e:cb:f6:48:e8:8c:11:ca:c4:67:f0:05: 3c:33:b7:7d:08:99:76:c9:62:d7:81:4e:49:88:b1:aa:dc:98: 31:c9:30:e4:c0:df:d4:3d:37:bb:ae:24:fa:2d:2d:52:a7:d1: 1e:3f:28:b4:04:8b:5d:86:6c:4b:39:a5:0b:0a:08:2a:aa:7e: c2:40:d1:13:ba:43:48:0e:e6:87:f9:f7:b9:17:f2:85:4d:fa: 5b:55:a6:d2:22:14:a0:ea:14:6f:f2:a0:91:9f:78:6c:cc:d1: ec:c8:a9:0a:e2:92:49:f5:74:4e:06:5a:b4:a4:8d:01:ff:da: a9:98:10:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtQvb6lKAmGu3HY9RgVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTY2NDUyMWQ1MDM5NTkyMTJmNTViMmE1OWFlYzZkMjA3 YjBhMjgwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD Eyg0NjcxY2Q1NDcyZTdiZmZkYmVjYjA2NzE5MmVlMDkxYWE1MTVkMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/XXNO0Mo8VoYTjDOfrMC1219FZT hPolkpUFVKQsv0V5ywkoTiO0laRIp/UBar67a4R1HFJTKWGKv81yXo+j1UtGueVh JLSFLG46XWikuDz3GCrqWSFWOfNxxx0NVhE4Pm+BsPPdV1PckkqKCrVNrzeailpN y7kvyRqFA484XD4S1CxlhymSnAnEDYoRep9WZSUPrU5XWyWrO1AYh4eHjFnDpINY O+JDomEIr8MUa3M6IvRb9rNZ6MFHh25aKKkZEMzplAec3y7MTO0Km87UOjndvsn6 qt2suyQPqCKguuvfRgyzOBW58XCA8xpvwS4uzfa5EdAT1Oo6fGUXR5L+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZxzVRy57/9vssGcZLuCRqlFdDFMB8GA1UdIwQY MBaAFJUWZFIdUDlZIS9VsqWa7G0gewooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUt ZWY3NDUzYWQwOTlmLzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUtZWY3NDUzYWQwOTlm LzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaogTIst1 MlDBvAIOEZEKBSAKeHgN210gYjM4VyIiG1e2BG2TADCz5iyjJKZKmq0jMQ+Hw/uo YAaaS3X1WKpLq8HF070Yb3w0g0DJZ6q/1JtBdwmj0T7ruJ70z343AQhtzjcvgvfr nIJhFaeO1iycLp8y8YJAn+tz/TaNfWLvOATH8QrNbsv2SOiMEcrEZ/AFPDO3fQiZ dsli14FOSYixqtyYMckw5MDf1D03u64k+i0tUqfRHj8otASLXYZsSzmlCwoIKqp+ wkDRE7pDSA7mh/n3uRfyhU36W1Wm0iIUoOoUb/KgkZ94bMzR7MipCuKSSfV0TgZa tKSNAf/aqZgQBw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:27 2025 by rpki-client