This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json) Hash identifier: bmIu5HqLqZL/gPXPyHwMmjuoU+LykHurnw7SUTLDXD8= Subject key identifier: 0A:67:A1:A9:5F:2A:A7:06:9A:BC:87:A0:8D:6E:11:58:D4:2C:F4:DD Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019AF57781482305F9B5EA3ABDBC82286D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft Manifest number: 0E59 Signing time: Sat 06 Dec 2025 21:00:40 +0000 Manifest this update: Sat 06 Dec 2025 21:00:40 +0000 Manifest next update: Sun 07 Dec 2025 21:00:40 +0000 Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: i5vjqdCiwXHEGbLO1GvtGFVdKgu5Dy9ilq33Jwnni1E=) 2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:81:48:23:05:f9:b5:ea:3a:bd:bc:82:28:6d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Dec 6 21:00:40 2025 GMT Not After : Dec 7 21:00:40 2025 GMT Subject: CN=0a67a1a95f2aa7069abc87a08d6e1158d42cf4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:84:5f:9d:0d:bb:0b:96:20:14:9a:12:97: d3:ee:93:35:f5:5d:8f:ea:9d:03:3c:c6:a1:12:86: 6a:38:7f:3c:19:45:73:b9:8b:6a:6f:f4:15:87:43: 06:3d:bc:72:1d:9a:d0:0f:96:04:89:21:e9:a0:83: ae:d1:44:6a:19:31:e5:80:bb:db:c4:b5:e9:3f:e3: 49:7e:07:4b:bb:dd:aa:f2:a2:4d:c5:86:06:60:22: ca:ce:a3:75:55:f9:4d:dc:2b:1f:ad:3a:43:e9:45: 68:e5:2a:9c:f4:90:84:4c:48:b8:d8:c3:bd:a3:75: fe:02:ad:6c:8d:b5:63:07:2e:e6:43:54:7d:67:d3: 05:f9:1a:37:95:5d:d8:0c:5b:ce:4d:db:49:e0:48: bd:95:47:01:19:ce:07:61:37:7d:b9:56:1c:c2:7a: cd:ce:4e:ba:a1:ad:42:2d:aa:c2:06:8f:31:23:3a: 28:34:6c:45:c4:9f:1d:29:f5:63:db:8b:9b:b8:6e: d6:c5:36:d3:64:52:96:b6:27:5f:9d:7c:3b:11:65: f5:56:c0:23:ce:74:e9:d8:97:80:88:e8:6f:01:fb: 86:e6:93:1f:b1:ec:0c:a9:1b:79:e5:06:5d:0d:a7: 9c:87:da:77:f1:31:c1:e3:12:08:6b:64:5a:fa:c9: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:67:A1:A9:5F:2A:A7:06:9A:BC:87:A0:8D:6E:11:58:D4:2C:F4:DD X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:cd:92:fa:1a:4b:c0:f7:92:1e:46:71:9d:48:e6:6f:cd: 8c:b8:4e:89:17:d8:f6:17:91:23:7e:da:93:27:fa:13:75:00: 67:59:7f:b4:ed:fe:8b:0b:db:b0:fa:ed:be:3a:d9:75:4a:cd: 43:3c:7a:bc:bd:e0:bb:6a:1e:9c:cf:6a:ce:9d:91:74:4f:80: 96:3f:7d:3a:e6:80:bd:3a:3a:81:4c:de:6b:2c:67:66:3d:8c: db:9c:e1:be:c7:03:f4:54:4b:de:55:99:e0:e2:c5:02:1d:eb: b0:5b:56:ed:53:43:7a:03:f8:f1:ac:a0:4c:aa:4b:a3:c8:94: 80:ec:5e:57:26:87:f9:30:ff:83:83:1b:fe:f9:e6:2b:b1:fd: 17:21:f7:35:23:56:9c:87:4b:b1:64:44:6c:d5:50:39:aa:34: 98:1f:bc:f0:0e:3a:4a:4f:a4:df:4b:d3:b7:85:04:5c:c2:46: 95:07:a6:a2:3c:53:8f:de:ea:50:19:5f:57:8d:40:9a:d0:8c: 2a:eb:2f:7b:32:0b:63:44:ad:e7:95:43:c9:f4:3b:22:f5:35: 0b:46:0b:51:ef:6b:16:aa:cd:8d:63:67:fa:67:77:26:09:26: e6:4e:af:fa:71:9f:7a:c9:ea:c4:7c:47:96:2c:63:b2:e5:79: c3:ef:a1:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4FIIwX5teo6vbyCKG1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjUxMjA2MjEwMDQwWhcNMjUxMjA3MjEwMDQwWjAzMTEwLwYDVQQD EygwYTY3YTFhOTVmMmFhNzA2OWFiYzg3YTA4ZDZlMTE1OGQ0MmNmNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJKEX50NuwuWIBSaEpfT7pM19V2P 6p0DPMahEoZqOH88GUVzuYtqb/QVh0MGPbxyHZrQD5YEiSHpoIOu0URqGTHlgLvb xLXpP+NJfgdLu92q8qJNxYYGYCLKzqN1VflN3CsfrTpD6UVo5Sqc9JCETEi42MO9 o3X+Aq1sjbVjBy7mQ1R9Z9MF+Ro3lV3YDFvOTdtJ4Ei9lUcBGc4HYTd9uVYcwnrN zk66oa1CLarCBo8xIzooNGxFxJ8dKfVj24ubuG7WxTbTZFKWtidfnXw7EWX1VsAj znTp2JeAiOhvAfuG5pMfsewMqRt55QZdDaech9p38THB4xIIa2Ra+sl+UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApnoalfKqcGmryHoI1uEVjULPTdMB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRrNkvoa S8D3kh5GcZ1I5m/NjLhOiRfY9heRI37akyf6E3UAZ1l/tO3+iwvbsPrtvjrZdUrN Qzx6vL3gu2oenM9qzp2RdE+Alj99OuaAvTo6gUzeayxnZj2M25zhvscD9FRL3lWZ 4OLFAh3rsFtW7VNDegP48aygTKpLo8iUgOxeVyaH+TD/g4Mb/vnmK7H9FyH3NSNW nIdLsWREbNVQOao0mB+88A46Sk+k30vTt4UEXMJGlQemojxTj97qUBlfV41AmtCM KusvezILY0St55VDyfQ7IvU1C0YLUe9rFqrNjWNn+md3Jgkm5k6v+nGfesnqxHxH lixjsuV5w++h/A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:59 2025 by rpki-client