This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json) Hash identifier: SfTSAhRL/93WUdUv3G1emzptN1B2xOZPIy8nlw5n4C8= Subject key identifier: 4C:F9:51:EF:4E:DF:83:D6:E5:5A:C4:6D:FB:21:DF:5C:BE:F2:64:19 Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Certificate serial: 019B1BE0ABB92309785441F4D34F6ABA05BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 08:01:07 +0000 Manifest this update: Sun 14 Dec 2025 08:01:07 +0000 Manifest next update: Mon 15 Dec 2025 08:01:07 +0000 Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=) 2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: Cffl4xL2A5o5KhVV0jRDFt5XHwE1rd1gZXPPG+y4bOk=) 3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=) 4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:ab:b9:23:09:78:54:41:f4:d3:4f:6a:ba:05:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee Validity Not Before: Dec 14 08:01:07 2025 GMT Not After : Dec 15 08:01:07 2025 GMT Subject: CN=4cf951ef4edf83d6e55ac46dfb21df5cbef26419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:e1:fd:d7:c1:71:7a:60:8b:ba:ed:4f:25: 83:71:9c:04:ec:84:3b:11:a4:e8:62:8f:6b:5a:5d: 1c:c5:b1:3a:b0:e5:2f:00:e5:14:79:24:69:9e:34: c1:33:ef:68:5a:31:42:11:d9:26:fa:7c:70:15:c4: 99:f5:3b:39:dc:96:04:e1:08:7f:45:92:a3:8f:7b: 8f:36:ff:08:25:6f:b1:00:db:09:99:34:30:c8:47: ae:52:87:c4:de:bf:31:99:96:34:7e:c7:bd:80:94: 6f:a8:50:45:2f:db:be:24:95:52:74:ef:2b:c9:0f: 1c:a1:23:2c:59:9c:90:18:06:21:8b:16:cc:1d:db: 7e:0e:14:81:c4:37:7f:68:d3:71:0c:8d:48:f6:fc: 91:6d:df:0d:ac:4a:94:39:ba:32:01:65:4e:fd:8b: 06:e2:84:fb:82:c9:23:29:01:3b:9e:e6:58:2a:be: 3a:06:7b:d6:fb:e0:d9:c9:bd:37:a5:0d:3b:56:7e: 1c:84:9a:cf:ac:8b:b0:8e:6c:41:dc:25:82:31:3b: f4:5c:ff:4f:ea:da:c2:fb:57:66:3b:31:d6:6f:93: 8b:b5:58:69:5b:c5:63:ee:aa:52:81:55:32:20:b2: e8:99:6c:16:fc:b2:57:29:37:5a:62:24:4c:cb:d9: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:51:EF:4E:DF:83:D6:E5:5A:C4:6D:FB:21:DF:5C:BE:F2:64:19 X509v3 Authority Key Identifier: keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:69:37:4e:b8:ff:ff:8d:84:22:71:25:90:c8:6f:c7:91: 57:8f:76:e5:be:72:59:fe:7d:75:72:42:fc:f1:5a:c5:58:b1: ce:5f:c0:10:81:22:5f:0e:b5:24:39:1c:84:dc:72:51:3e:8a: 76:85:23:e7:5d:8b:77:78:3b:2a:fb:ca:34:95:fe:83:3e:16: 9f:db:cd:28:5a:3a:cc:38:b0:3c:42:ca:07:65:67:b0:14:cb: f5:62:de:ee:c6:61:6e:88:59:15:65:29:da:3d:b3:94:55:08: 7b:08:19:4a:ef:4f:10:8d:7b:31:48:38:c2:26:4c:a6:08:a3: 04:a2:e1:a1:61:d0:1f:8c:69:3c:37:1a:68:ad:e5:d3:93:0b: 83:9d:bc:ae:02:b4:61:a5:61:23:8e:09:a0:b4:59:f3:ae:2b: df:46:26:a9:c5:ae:2a:00:70:b5:c9:4a:b8:ce:15:33:a4:94: d4:23:07:2f:51:f5:02:ff:07:3c:7e:fb:ee:6d:fc:ec:c0:06: 0b:c6:3a:33:f1:0f:dd:d5:73:1f:e0:c5:6c:45:4c:b8:ea:41: dd:bb:e2:8c:d7:ed:f2:d1:b4:f9:4b:fb:21:cd:8c:47:82:09: f4:ac:aa:a4:cf:a4:0a:67:e8:cf:be:5c:5f:68:79:ee:cf:15: 84:6c:bf:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4Ku5Iwl4VEH0009qugW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj ZmRlZWUwHhcNMjUxMjE0MDgwMTA3WhcNMjUxMjE1MDgwMTA3WjAzMTEwLwYDVQQD Eyg0Y2Y5NTFlZjRlZGY4M2Q2ZTU1YWM0NmRmYjIxZGY1Y2JlZjI2NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDHh/dfBcXpgi7rtTyWDcZwE7IQ7 EaToYo9rWl0cxbE6sOUvAOUUeSRpnjTBM+9oWjFCEdkm+nxwFcSZ9Ts53JYE4Qh/ RZKjj3uPNv8IJW+xANsJmTQwyEeuUofE3r8xmZY0fse9gJRvqFBFL9u+JJVSdO8r yQ8coSMsWZyQGAYhixbMHdt+DhSBxDd/aNNxDI1I9vyRbd8NrEqUOboyAWVO/YsG 4oT7gskjKQE7nuZYKr46BnvW++DZyb03pQ07Vn4chJrPrIuwjmxB3CWCMTv0XP9P 6trC+1dmOzHWb5OLtVhpW8Vj7qpSgVUyILLomWwW/LJXKTdaYiRMy9kCbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz5Ue9O34PW5VrEbfsh31y+8mQZMB8GA1UdIwQY MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3 LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYVpN064 //+NhCJxJZDIb8eRV4925b5yWf59dXJC/PFaxVixzl/AEIEiXw61JDkchNxyUT6K doUj512Ld3g7KvvKNJX+gz4Wn9vNKFo6zDiwPELKB2VnsBTL9WLe7sZhbohZFWUp 2j2zlFUIewgZSu9PEI17MUg4wiZMpgijBKLhoWHQH4xpPDcaaK3l05MLg528rgK0 YaVhI44JoLRZ864r30YmqcWuKgBwtclKuM4VM6SU1CMHL1H1Av8HPH777m387MAG C8Y6M/EP3dVzH+DFbEVMuOpB3bvijNft8tG0+Uv7Ic2MR4IJ9KyqpM+kCmfoz75c X2h57s8VhGy/1w== -----END CERTIFICATE-----Generated at Sun Dec 14 10:24:15 2025 by rpki-client