This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json) Hash identifier: xLkcohaCRNW4hRQCiYDDDhEOgUkF1Ay0h+OOomf9L54= Subject key identifier: DE:3C:23:C2:98:83:3D:B7:04:71:F5:46:F6:7C:F5:04:6C:00:AD:D0 Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c Certificate serial: 019B1013B8A369AF55D256E01ED5B7699DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft Manifest number: 1779 Signing time: Fri 12 Dec 2025 01:01:26 +0000 Manifest this update: Fri 12 Dec 2025 01:01:26 +0000 Manifest next update: Sat 13 Dec 2025 01:01:26 +0000 Files and hashes: 1: cbOYcDDp_GHixzoJlNu8TyNQJ-o.roa (hash: //2ULiIGDQdEfg1252SfRrlzjzF9OFFKOmOBFoZU2OE=) 2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: hEzSIc27d7m8yduUvCKIkBFbX89ayBX6rHu/cy7QkFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:b8:a3:69:af:55:d2:56:e0:1e:d5:b7:69:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c Validity Not Before: Dec 12 01:01:26 2025 GMT Not After : Dec 13 01:01:26 2025 GMT Subject: CN=de3c23c298833db70471f546f67cf5046c00add0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:df:a2:2b:f6:e4:8f:19:0c:ed:1f:a2:ce: af:f6:83:52:3d:ef:56:56:f8:c4:b0:06:f1:bf:39: ce:12:c6:7d:50:38:45:c5:fa:8d:12:08:af:fb:fe: eb:6f:7f:52:62:98:bc:a1:aa:37:48:b8:8e:d9:23: f5:95:fc:f4:1c:db:d4:01:e8:a8:5a:42:60:69:02: 29:16:06:34:d0:52:61:0b:97:57:77:5f:e0:27:d1: f8:16:a0:55:38:30:de:6f:40:ab:fa:3b:a3:4f:35: ad:a4:cb:ec:47:f3:00:f6:aa:96:c5:0b:6c:21:08: 12:97:22:6d:76:6b:bd:8d:e3:a4:a8:82:02:22:39: 57:f6:9d:d6:1d:d9:ae:cd:3e:a1:74:9f:b0:fc:13: 00:11:08:65:b5:bb:ba:cc:72:bf:5a:56:ad:45:ed: 6f:e3:b3:18:39:0d:cc:a0:28:d6:8c:de:cd:d1:cf: 6d:c3:54:cf:4c:c2:3b:3b:0e:16:88:57:6e:d2:df: a1:7b:f7:c8:1c:5c:4d:7f:80:94:52:fb:6b:b2:5b: b1:c7:c9:4a:67:13:6b:77:87:92:fc:ea:78:ca:d2: 87:86:77:95:a8:9f:7e:de:2b:a7:6d:af:b4:6b:ef: 57:10:be:e5:1d:af:11:23:61:4b:67:7e:56:ab:3b: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:23:C2:98:83:3D:B7:04:71:F5:46:F6:7C:F5:04:6C:00:AD:D0 X509v3 Authority Key Identifier: keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:18:04:38:49:a6:69:5f:11:43:bc:7f:f4:6f:35:5a:79:9f: 25:2f:65:a1:33:4d:15:e2:02:6f:2c:a7:76:81:dc:f0:ab:b8: 68:60:07:ae:3e:ec:55:80:27:bd:31:1e:b6:f2:76:44:a6:db: 2e:6a:22:1e:04:ae:98:e9:2f:54:20:2e:d4:a0:94:62:b5:f2: 0c:8b:cf:76:5b:e8:4a:a6:a2:22:ca:ab:74:64:4d:e4:11:af: db:6f:7f:c1:c2:b4:b4:c7:93:58:ac:c3:1a:43:eb:72:9b:97: fb:ee:b6:ce:64:8c:a0:f8:d7:c9:6b:10:ac:c3:4f:94:db:ff: ae:02:34:c1:b3:ab:f1:3b:79:c9:68:47:7d:0b:83:62:b3:9b: f5:28:81:e0:5a:9e:e9:c7:51:a2:31:fe:fc:ff:8c:cd:c7:5f: fc:f1:dc:a0:14:f8:31:55:f9:45:2f:09:8a:7b:1e:fa:8e:3b: ed:09:18:69:15:8a:03:28:7e:dd:3e:d8:e9:da:fe:53:90:15: 72:84:a8:f2:9d:97:10:3f:22:66:84:c8:0f:e9:13:a7:92:e8: d1:cf:a8:d7:24:de:6a:8b:11:f4:e9:13:b4:a1:7d:da:1e:76: 5e:53:98:45:e7:cc:be:1a:09:17:42:d9:61:47:4e:44:e8:8c: cd:6c:a9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE7ijaa9V0lbgHtW3aZ3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1 NzFmMWMwHhcNMjUxMjEyMDEwMTI2WhcNMjUxMjEzMDEwMTI2WjAzMTEwLwYDVQQD EyhkZTNjMjNjMjk4ODMzZGI3MDQ3MWY1NDZmNjdjZjUwNDZjMDBhZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tjfoiv25I8ZDO0fos6v9oNSPe9W VvjEsAbxvznOEsZ9UDhFxfqNEgiv+/7rb39SYpi8oao3SLiO2SP1lfz0HNvUAeio WkJgaQIpFgY00FJhC5dXd1/gJ9H4FqBVODDeb0Cr+jujTzWtpMvsR/MA9qqWxQts IQgSlyJtdmu9jeOkqIICIjlX9p3WHdmuzT6hdJ+w/BMAEQhltbu6zHK/WlatRe1v 47MYOQ3MoCjWjN7N0c9tw1TPTMI7Ow4WiFdu0t+he/fIHFxNf4CUUvtrsluxx8lK ZxNrd4eS/Op4ytKHhneVqJ9+3iunba+0a+9XEL7lHa8RI2FLZ35WqzuMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN48I8KYgz23BHH1RvZ89QRsAK3QMB8GA1UdIwQY MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhgEOEmm aV8RQ7x/9G81WnmfJS9loTNNFeICbyyndoHc8Ku4aGAHrj7sVYAnvTEetvJ2RKbb LmoiHgSumOkvVCAu1KCUYrXyDIvPdlvoSqaiIsqrdGRN5BGv229/wcK0tMeTWKzD GkPrcpuX++62zmSMoPjXyWsQrMNPlNv/rgI0wbOr8Tt5yWhHfQuDYrOb9SiB4Fqe 6cdRojH+/P+Mzcdf/PHcoBT4MVX5RS8Jinse+o477QkYaRWKAyh+3T7Y6dr+U5AV coSo8p2XED8iZoTID+kTp5Lo0c+o1yTeaosR9OkTtKF92h52XlOYRefMvhoJF0LZ YUdOROiMzWypbg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:26:08 2025 by rpki-client