This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json) Hash identifier: V57eOnDsXXZ1s0Y2zJuXNIUzqAwCk7qidCkShWZftZo= Subject key identifier: 2D:79:FC:F8:3C:7D:FC:CD:71:E4:BA:04:34:9B:56:91:02:D9:63:59 Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Certificate serial: 019B2E8BC616850CF1E33BA68A235CFA03AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft Manifest number: 0421 Signing time: Wed 17 Dec 2025 23:01:10 +0000 Manifest this update: Wed 17 Dec 2025 23:01:10 +0000 Manifest next update: Thu 18 Dec 2025 23:01:10 +0000 Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=) 2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=) 3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: nkGCidia8lGx3cNrYP1h5Y2IoWU7260zyFMBD3CfrTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:c6:16:85:0c:f1:e3:3b:a6:8a:23:5c:fa:03:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36 Validity Not Before: Dec 17 23:01:10 2025 GMT Not After : Dec 18 23:01:10 2025 GMT Subject: CN=2d79fcf83c7dfccd71e4ba04349b569102d96359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:bc:76:62:c6:f6:bb:0d:da:e7:b8:00:0e: 76:5a:45:37:3e:0c:2a:74:b9:94:66:f5:0f:7c:a2: a8:4e:ac:84:bf:7f:4f:9f:fe:2a:3d:4b:1b:e8:83: c5:04:b4:3e:35:e0:a5:b0:ef:ae:cf:01:30:e0:90: 23:be:dc:1a:dc:f5:7a:e7:8b:1f:64:3b:ea:61:e5: fc:e0:21:9e:5f:a0:a2:bd:3a:b4:8a:a3:7f:6a:f8: 9d:2a:d8:26:18:f6:90:fc:af:c5:7a:e0:ce:0b:3e: 0d:9b:8a:70:04:f5:66:4a:9c:b9:29:1d:24:0a:38: b9:e8:35:c8:c9:32:82:cc:f8:0c:41:0f:69:d1:9b: 79:6b:39:08:e9:a4:27:19:ab:17:02:f7:90:59:be: 72:0d:0a:1e:d6:9f:6a:e7:3e:31:1f:3b:40:c6:33: 31:aa:0b:24:c9:0e:41:ae:2d:65:ab:c0:7c:c6:8b: a9:5c:c2:d7:11:39:a5:bb:ac:0f:12:cf:bb:a7:2e: a9:55:6f:c1:90:98:5f:83:17:bc:bb:60:79:a0:3b: 98:8c:fc:e6:62:3f:86:1b:6b:e0:15:a8:b8:76:51: ee:57:b7:b4:66:33:ec:b4:cc:82:1e:06:e1:dc:02: d3:20:ef:ef:81:4e:df:c3:39:4a:c7:98:da:d1:8f: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:FC:F8:3C:7D:FC:CD:71:E4:BA:04:34:9B:56:91:02:D9:63:59 X509v3 Authority Key Identifier: keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:ac:8b:a0:de:e3:24:0d:2f:c5:db:31:81:bf:c9:ef:9e: 96:9f:ac:87:bc:f0:15:9a:42:98:9a:a6:75:dd:42:7c:c2:bd: 8a:5a:fd:8c:93:ae:0e:f8:06:70:e2:ee:d0:23:a4:02:52:e2: a7:40:f9:fe:ae:ed:28:25:d7:6f:db:6a:75:21:e8:3f:96:df: 0e:58:49:e5:0e:33:27:d6:5b:dc:71:a4:2b:57:d4:4c:30:b3: 02:b4:09:3e:a6:24:5f:a5:ea:91:f3:68:d6:60:09:dd:d0:dd: c1:22:33:04:83:d4:bc:86:33:a9:10:a3:cc:e7:d5:d0:e3:f9: ad:a4:98:b4:00:e7:dd:73:70:d6:9d:5a:0e:17:92:91:81:53: 4f:f7:32:41:67:f1:2d:57:8c:ef:11:65:b8:c0:68:dc:85:7f: ac:8a:28:85:94:cd:b6:5c:65:b1:b7:65:e2:3f:d4:48:8f:81: 93:b0:19:9d:78:b8:43:82:71:41:97:51:3a:62:f4:e0:90:e4: 90:f9:b9:a6:cf:e3:0c:7a:95:49:ac:55:45:d2:1f:e6:30:85: b0:99:8e:eb:ae:9b:79:17:0f:3b:97:29:4a:f4:c9:12:2b:27: 91:32:a5:57:6b:01:e8:29:e8:2d:2f:c1:6b:09:1d:e6:be:1e: 97:3d:b1:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui8YWhQzx4zumiiNc+gOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm NzBmMzYwHhcNMjUxMjE3MjMwMTEwWhcNMjUxMjE4MjMwMTEwWjAzMTEwLwYDVQQD EygyZDc5ZmNmODNjN2RmY2NkNzFlNGJhMDQzNDliNTY5MTAyZDk2MzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyy8dmLG9rsN2ue4AA52WkU3Pgwq dLmUZvUPfKKoTqyEv39Pn/4qPUsb6IPFBLQ+NeClsO+uzwEw4JAjvtwa3PV654sf ZDvqYeX84CGeX6CivTq0iqN/avidKtgmGPaQ/K/FeuDOCz4Nm4pwBPVmSpy5KR0k Cji56DXIyTKCzPgMQQ9p0Zt5azkI6aQnGasXAveQWb5yDQoe1p9q5z4xHztAxjMx qgskyQ5Bri1lq8B8xoupXMLXETmlu6wPEs+7py6pVW/BkJhfgxe8u2B5oDuYjPzm Yj+GG2vgFai4dlHuV7e0ZjPstMyCHgbh3ALTIO/vgU7fwzlKx5ja0Y+Z3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC15/Pg8ffzNceS6BDSbVpEC2WNZMB8GA1UdIwQY MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ2si6De 4yQNL8XbMYG/ye+elp+sh7zwFZpCmJqmdd1CfMK9ilr9jJOuDvgGcOLu0COkAlLi p0D5/q7tKCXXb9tqdSHoP5bfDlhJ5Q4zJ9Zb3HGkK1fUTDCzArQJPqYkX6XqkfNo 1mAJ3dDdwSIzBIPUvIYzqRCjzOfV0OP5raSYtADn3XNw1p1aDheSkYFTT/cyQWfx LVeM7xFluMBo3IV/rIoohZTNtlxlsbdl4j/USI+Bk7AZnXi4Q4JxQZdROmL04JDk kPm5ps/jDHqVSaxVRdIf5jCFsJmO666beRcPO5cpSvTJEisnkTKlV2sB6CnoLS/B awkd5r4elz2xLw== -----END CERTIFICATE-----Generated at Thu Dec 18 01:14:26 2025 by rpki-client