This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json) Hash identifier: ROrqJtEx8NEQ+0Mkv/BOzdQ6r6qeguYKfSqGaV3FGyw= Subject key identifier: BE:9D:00:35:16:44:06:35:8C:52:C6:CA:00:CE:A9:63:99:34:F8:DE Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345 Certificate serial: 019B4A39FC1FDA33541C90DBE98D9FC23F9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft Manifest number: 171F Signing time: Tue 23 Dec 2025 08:01:12 +0000 Manifest this update: Tue 23 Dec 2025 08:01:12 +0000 Manifest next update: Wed 24 Dec 2025 08:01:12 +0000 Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: t+HJasRVhSDOHhlLRIKnn+zobq7IeCim2vuwfZOAbx4=) 2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:fc:1f:da:33:54:1c:90:db:e9:8d:9f:c2:3f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345 Validity Not Before: Dec 23 08:01:12 2025 GMT Not After : Dec 24 08:01:12 2025 GMT Subject: CN=be9d0035164406358c52c6ca00cea9639934f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:c3:a8:be:2f:c6:8f:b5:0d:b8:d5:f9:c4: 04:0f:d4:1c:27:06:93:3a:f7:5f:ff:3b:86:ab:86: c8:45:30:4b:58:42:27:78:88:11:d2:2a:1e:3e:9e: d0:05:d8:10:6c:b3:08:54:2f:ee:36:01:a5:07:58: 3f:60:64:aa:a3:76:f9:c0:99:79:6d:9d:45:a1:96: 46:3b:98:5e:4a:50:93:75:c5:f2:72:ac:50:79:d4: 43:d1:00:fc:3d:d9:48:71:77:db:dc:93:21:24:22: 25:c5:61:57:54:65:5d:01:5d:e2:f1:ec:b7:6e:e8: 58:09:df:90:f5:7e:10:f1:7e:9c:44:fb:f4:8c:f6: f7:98:a1:63:07:18:c2:96:63:a2:1b:91:87:59:98: 51:61:fc:38:b0:1d:16:f0:67:db:1f:d8:ea:3f:a2: 61:1d:1b:fe:13:7a:ff:b4:4e:38:30:81:4d:66:a2: 54:1b:d3:7e:41:45:c1:0d:d8:80:9b:1b:62:8e:50: f7:e4:c9:86:91:db:02:65:af:6a:70:39:12:0b:cc: a7:c3:73:fe:6f:30:5b:31:d7:e6:7a:f8:9b:d2:ce: 52:09:bd:19:ee:66:64:92:0f:47:6f:7d:08:26:41: 59:2c:1b:74:a7:ca:18:03:41:9c:f4:96:c9:61:c7: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:00:35:16:44:06:35:8C:52:C6:CA:00:CE:A9:63:99:34:F8:DE X509v3 Authority Key Identifier: keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:bd:f2:29:6a:21:61:3c:af:f1:0d:a2:62:4c:28:16:c1: c0:bf:6a:6a:5b:66:8f:f1:af:2f:73:43:01:05:3b:92:67:89: 1b:6f:95:36:b1:01:d8:49:e4:9d:2f:f5:0b:fd:c5:25:0e:ff: 72:69:2f:ae:b7:58:a0:08:3f:90:ac:3a:87:98:c7:7e:a6:3d: 43:e5:6c:e9:24:af:ed:eb:df:a7:ef:d2:bd:70:7e:e4:ad:1e: cd:54:5a:8c:64:11:14:48:f6:88:ad:6c:b0:47:76:a8:d3:5b: b5:f8:f7:d1:78:47:3c:3a:9c:5a:14:80:96:03:7f:f6:be:65: b1:3a:f6:e9:fb:a3:29:73:0d:ff:56:72:dd:94:71:e7:26:01: 6a:5c:45:95:5f:ad:1f:11:68:88:95:74:65:c3:e6:eb:03:0a: cb:f4:e0:51:1d:fe:06:13:67:21:db:82:d0:1b:3f:55:57:0d: 22:af:9b:25:52:00:32:d3:65:62:b1:6f:64:a9:69:47:9d:02: 49:0b:8a:d8:ec:6a:8f:e6:1b:cb:d4:7c:6e:64:56:61:49:72: 39:3c:b0:5a:96:f3:89:9c:5a:02:db:93:4f:a9:1f:76:87:cc: b8:05:93:6a:3a:e0:86:7b:19:46:ed:d8:12:30:6b:23:d4:10: cf:dc:25:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOfwf2jNUHJDb6Y2fwj+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3 Y2MzNDUwHhcNMjUxMjIzMDgwMTEyWhcNMjUxMjI0MDgwMTEyWjAzMTEwLwYDVQQD EyhiZTlkMDAzNTE2NDQwNjM1OGM1MmM2Y2EwMGNlYTk2Mzk5MzRmOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH3DqL4vxo+1DbjV+cQED9QcJwaT Ovdf/zuGq4bIRTBLWEIneIgR0ioePp7QBdgQbLMIVC/uNgGlB1g/YGSqo3b5wJl5 bZ1FoZZGO5heSlCTdcXycqxQedRD0QD8PdlIcXfb3JMhJCIlxWFXVGVdAV3i8ey3 buhYCd+Q9X4Q8X6cRPv0jPb3mKFjBxjClmOiG5GHWZhRYfw4sB0W8GfbH9jqP6Jh HRv+E3r/tE44MIFNZqJUG9N+QUXBDdiAmxtijlD35MmGkdsCZa9qcDkSC8ynw3P+ bzBbMdfmevib0s5SCb0Z7mZkkg9Hb30IJkFZLBt0p8oYA0Gc9JbJYcdr8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6dADUWRAY1jFLGygDOqWOZNPjeMB8GA1UdIwQY MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt MzY4MGFlYjYzMmRhLzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNq98ilq IWE8r/ENomJMKBbBwL9qaltmj/GvL3NDAQU7kmeJG2+VNrEB2EnknS/1C/3FJQ7/ cmkvrrdYoAg/kKw6h5jHfqY9Q+Vs6SSv7evfp+/SvXB+5K0ezVRajGQRFEj2iK1s sEd2qNNbtfj30XhHPDqcWhSAlgN/9r5lsTr26fujKXMN/1Zy3ZRx5yYBalxFlV+t HxFoiJV0ZcPm6wMKy/TgUR3+BhNnIduC0Bs/VVcNIq+bJVIAMtNlYrFvZKlpR50C SQuK2Oxqj+Yby9R8bmRWYUlyOTywWpbziZxaAtuTT6kfdofMuAWTajrghnsZRu3Y EjBrI9QQz9wl+A== -----END CERTIFICATE-----Generated at Tue Dec 23 11:26:02 2025 by rpki-client