This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json) Hash identifier: Xyh3sePu9ouJJoFrbqFhNnZuEznDKmKoc3YtZ6449EA= Subject key identifier: 3E:5C:99:2D:6B:5B:CC:FC:CF:70:B0:99:B9:58:A8:02:DB:8E:06:AD Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Certificate serial: 019B0F0103E1184231193456A9A0F0469036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft Manifest number: 0C07 Signing time: Thu 11 Dec 2025 20:01:23 +0000 Manifest this update: Thu 11 Dec 2025 20:01:23 +0000 Manifest next update: Fri 12 Dec 2025 20:01:23 +0000 Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=) 2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: 3niin89lCsRUP9tLYWvCl383RTbNSz5KiCbZaTFkRnQ=) 3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=) 4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:03:e1:18:42:31:19:34:56:a9:a0:f0:46:90:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003 Validity Not Before: Dec 11 20:01:23 2025 GMT Not After : Dec 12 20:01:23 2025 GMT Subject: CN=3e5c992d6b5bccfccf70b099b958a802db8e06ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:66:d3:48:4d:e3:49:27:ef:39:37:75:29: 3b:e7:c0:4d:80:d9:b4:70:a2:59:80:03:e9:73:91: 53:5d:47:48:e6:46:25:16:ac:d8:36:cc:37:03:bf: 0b:6e:21:7c:2e:b4:40:ed:2d:fc:b0:1b:a8:12:47: 62:5b:8a:85:6a:c8:e8:80:4b:66:ad:36:0e:7e:47: 89:c7:20:e8:51:b3:09:f1:bb:2c:af:05:01:b2:d8: 4c:34:a3:96:cb:aa:e4:d3:0f:f7:85:00:f6:26:2d: 7d:68:3b:d4:32:00:46:a1:ac:04:7d:2a:f5:6d:de: 04:38:47:6f:ae:a7:69:72:3b:98:da:75:9c:22:6a: 60:0f:08:44:09:62:05:9c:a8:8b:bd:34:e0:85:a4: 24:7f:a1:73:b4:f5:c7:b4:30:e1:35:4e:41:0f:d8: 99:37:9a:a2:bc:13:bb:41:c8:30:ab:45:85:c8:13: c9:01:1c:59:1d:8f:60:c9:e6:6a:89:9a:46:10:1a: 24:a0:98:33:80:ed:d2:03:e9:04:85:ff:8a:d5:a4: 4d:b1:4f:de:de:bf:59:9d:07:77:fa:81:bc:9e:ca: 49:63:a8:12:1e:30:7a:31:79:7f:ac:42:ed:11:87: cc:a0:8c:76:97:60:1d:0a:c3:3e:1e:85:86:1d:7b: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:99:2D:6B:5B:CC:FC:CF:70:B0:99:B9:58:A8:02:DB:8E:06:AD X509v3 Authority Key Identifier: keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a6:0d:fc:66:25:c6:78:72:79:87:fd:e4:a3:40:72:77:c5: ea:e0:0f:57:73:64:8c:1c:fc:ee:cd:27:1e:16:bb:a6:35:04: b4:3c:36:a4:9d:8e:a2:8f:a0:2a:0a:4d:53:ff:fe:e3:ae:6d: f5:14:ed:72:35:31:f3:fa:a0:a9:f4:78:5b:92:ba:98:64:20: 2f:94:87:57:44:7a:b9:66:50:d0:d9:29:2f:46:5d:38:80:16: 32:57:34:13:cf:bf:f1:21:87:2b:d7:0d:14:0a:88:fd:b7:fa: 94:fd:a6:c4:6f:64:3f:99:ad:2d:97:33:04:3e:87:b0:55:93: 3f:83:e3:40:bc:bb:30:39:58:65:c9:12:4c:84:67:ec:50:ee: 33:e1:74:42:6d:8a:7a:0f:c7:8f:6a:47:1a:47:4b:ad:22:b0: 2d:aa:54:64:52:7d:e3:8e:f4:85:63:e9:9b:3e:8d:e5:5e:6d: 8c:75:79:1c:a7:ea:a4:37:8c:f9:70:74:c0:57:28:9d:c9:eb: fa:83:d4:cd:7f:7d:72:b3:37:50:86:08:53:6e:1a:92:26:45: e4:62:7d:93:6b:6e:50:48:10:72:8e:86:24:60:e8:b2:33:f8: 12:22:62:c8:85:2e:cf:ed:11:0e:e5:15:bb:ee:78:12:fe:3d: a4:b7:af:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQPhGEIxGTRWqaDwRpA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOTJkOTZkZmI2NmNiMTgwNjlkOGJkMTVjOWU5MGNkOTEy NGYwMDMwHhcNMjUxMjExMjAwMTIzWhcNMjUxMjEyMjAwMTIzWjAzMTEwLwYDVQQD EygzZTVjOTkyZDZiNWJjY2ZjY2Y3MGIwOTliOTU4YTgwMmRiOGUwNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kZm00hN40kn7zk3dSk758BNgNm0 cKJZgAPpc5FTXUdI5kYlFqzYNsw3A78LbiF8LrRA7S38sBuoEkdiW4qFasjogEtm rTYOfkeJxyDoUbMJ8bssrwUBsthMNKOWy6rk0w/3hQD2Ji19aDvUMgBGoawEfSr1 bd4EOEdvrqdpcjuY2nWcImpgDwhECWIFnKiLvTTghaQkf6FztPXHtDDhNU5BD9iZ N5qivBO7Qcgwq0WFyBPJARxZHY9gyeZqiZpGEBokoJgzgO3SA+kEhf+K1aRNsU/e 3r9ZnQd3+oG8nspJY6gSHjB6MXl/rELtEYfMoIx2l2AdCsM+HoWGHXsc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5cmS1rW8z8z3CwmblYqALbjgatMB8GA1UdIwQY MBaAFCKS2W37ZssYBp2L0VyekM2RJPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEt OTllZTYxNmNhODViLzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lNzc0MTItYjBkNy00MTA0LTkyNmEtOTllZTYxNmNhODVi LzEvSXBMWmJmdG15eGdHbll2UlhKNlF6WkVrOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqYN/GYl xnhyeYf95KNAcnfF6uAPV3NkjBz87s0nHha7pjUEtDw2pJ2Ooo+gKgpNU//+465t 9RTtcjUx8/qgqfR4W5K6mGQgL5SHV0R6uWZQ0NkpL0ZdOIAWMlc0E8+/8SGHK9cN FAqI/bf6lP2mxG9kP5mtLZczBD6HsFWTP4PjQLy7MDlYZckSTIRn7FDuM+F0Qm2K eg/Hj2pHGkdLrSKwLapUZFJ94470hWPpmz6N5V5tjHV5HKfqpDeM+XB0wFconcnr +oPUzX99crM3UIYIU24akiZF5GJ9k2tuUEgQco6GJGDosjP4EiJiyIUuz+0RDuUV u+54Ev49pLev3g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:55 2025 by rpki-client