This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json) Hash identifier: 3a1UnDf4tB4BZhF2ceqeH3x3F6OnhOyJV6hQ2sX4h0g= Subject key identifier: 01:85:18:BC:B8:69:2E:47:D3:97:D5:B2:1D:C9:04:0E:20:5A:79:E6 Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Certificate serial: 019AF2097556F42D612C85178F47C7528825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft Manifest number: 0C06 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: BlSKEWV8a0Pu0DQWSBEZ8E6j6Ig.roa (hash: E+fl2IDftOEsy56bvfa1HOBzyBMqnDbK6GEdF9F9KeI=) 2: amBacDdU6Mjk1rJegCvOmhPZCuI.roa (hash: QFuN87Ca0aIv1BOf1cf5zbuSpQPxJlnZXFNDEW5Ik9U=) 3: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: qvr+llAVoL1ai4Fo8D4QS/3TadwDYMCMTtyEncbqbuo=) 4: oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa (hash: QXtVeIAnBIaJbBWzjL0HKxzProdKFi/c2re+3CNcveM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:75:56:f4:2d:61:2c:85:17:8f:47:c7:52:88:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=018518bcb8692e47d397d5b21dc9040e205a79e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:63:e0:c3:1b:e8:13:d2:26:95:4d:83:86: 21:9d:5f:57:3c:ad:e0:be:b1:94:de:bb:77:e0:fa: 99:5a:7f:89:a6:fc:79:56:2b:ca:9f:ec:5e:ec:c9: a1:0c:b2:de:76:cb:00:f4:26:93:a4:1b:3c:62:41: bd:dc:b7:8f:a5:ee:0c:20:2b:68:29:ac:db:c0:aa: 14:4c:2c:78:9c:f5:e4:14:81:fe:da:f0:bd:4e:f3: d2:13:cf:10:77:89:6d:36:04:c4:9b:4b:63:c3:f4: f8:bc:0b:2a:80:24:6f:57:9b:15:a6:e2:e8:1d:72: d4:98:e1:f1:c9:28:f8:72:63:2a:2f:e4:4f:71:46: d0:d3:4b:72:f4:32:c3:af:87:95:ac:ee:ff:26:65: cb:22:4f:c9:f8:9b:80:a1:96:d9:3d:6a:c3:69:85: 99:f6:e0:b0:75:f9:9b:e0:64:37:60:a6:c5:35:ee: 73:7b:e1:f3:1f:a0:12:e6:e7:a4:97:a4:db:c0:7b: d4:73:2c:59:06:1a:91:f9:3a:65:32:fb:ee:0a:cf: 08:84:54:94:79:4a:fa:a2:c3:48:14:4d:53:1b:87: f0:d4:38:5a:d2:c2:5f:8c:4f:b9:c4:cb:2a:89:cc: 08:90:29:ac:f0:89:5a:e7:91:68:f2:73:3d:1a:d1: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:18:BC:B8:69:2E:47:D3:97:D5:B2:1D:C9:04:0E:20:5A:79:E6 X509v3 Authority Key Identifier: keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:13:32:7a:6f:50:e6:83:be:fc:37:85:70:0b:43:2e:0d:f4: b0:eb:05:e9:65:7b:d7:fe:65:b5:c7:f9:5a:31:bd:a6:7e:0e: 5c:c7:02:38:78:35:b1:0c:cc:d6:d8:b0:df:46:b6:12:dd:9f: 1a:a7:71:22:a8:8d:e3:3c:b5:0a:20:61:bf:bb:e7:98:f0:68: af:02:9d:de:5b:3b:af:8e:9d:a2:74:68:d0:22:20:11:f6:1c: d5:50:6f:45:d4:09:83:55:5b:80:57:f1:ec:a0:7e:59:88:66: c0:60:75:9e:1f:9c:f3:1b:ce:1a:84:71:4f:08:66:7f:ae:a6: 5e:15:d9:8b:50:34:de:81:16:7c:cf:23:68:c3:9a:84:7a:65: 7d:e2:c6:86:bf:68:a3:e1:96:eb:db:8b:53:f2:f0:b1:d5:0d: 6c:70:cd:e3:78:b1:fc:8e:97:56:c6:b7:80:26:fc:9b:e9:66: 50:83:ef:fd:cc:fb:c5:e3:6b:e4:9b:1c:d9:86:8c:4a:2f:c8: 97:b9:18:00:3d:e4:ae:4f:ee:65:1b:10:21:5d:f7:c1:e3:26: 4c:24:4d:f0:84:7f:6e:bc:39:5f:fe:2a:9b:09:09:c3:ce:fc: de:a6:2d:2d:1b:a6:e4:d6:50:71:7e:64:c1:92:95:6f:e3:86: af:bc:ae:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXVW9C1hLIUXj0fHUoglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWNlZGE1YmYzNzkwMWZlOWU0NGY3M2I1YmY4MmI2ODdi MzQ1NzIwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EygwMTg1MThiY2I4NjkyZTQ3ZDM5N2Q1YjIxZGM5MDQwZTIwNWE3OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ytj4MMb6BPSJpVNg4YhnV9XPK3g vrGU3rt34PqZWn+Jpvx5VivKn+xe7MmhDLLedssA9CaTpBs8YkG93LePpe4MICto KazbwKoUTCx4nPXkFIH+2vC9TvPSE88Qd4ltNgTEm0tjw/T4vAsqgCRvV5sVpuLo HXLUmOHxySj4cmMqL+RPcUbQ00ty9DLDr4eVrO7/JmXLIk/J+JuAoZbZPWrDaYWZ 9uCwdfmb4GQ3YKbFNe5ze+HzH6AS5uekl6TbwHvUcyxZBhqR+TplMvvuCs8IhFSU eUr6osNIFE1TG4fw1Dha0sJfjE+5xMsqicwIkCms8Ila55Fo8nM9GtFJbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGFGLy4aS5H05fVsh3JBA4gWnnmMB8GA1UdIwQY MBaAFJac7aW/N5Af6eRPc7W/graHs0VyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQt MjFmYzlhZmM4YWMxLzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQtMjFmYzlhZmM4YWMx LzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhMyem9Q 5oO+/DeFcAtDLg30sOsF6WV71/5ltcf5WjG9pn4OXMcCOHg1sQzM1tiw30a2Et2f GqdxIqiN4zy1CiBhv7vnmPBorwKd3ls7r46donRo0CIgEfYc1VBvRdQJg1VbgFfx 7KB+WYhmwGB1nh+c8xvOGoRxTwhmf66mXhXZi1A03oEWfM8jaMOahHplfeLGhr9o o+GW69uLU/LwsdUNbHDN43ix/I6XVsa3gCb8m+lmUIPv/cz7xeNr5Jsc2YaMSi/I l7kYAD3krk/uZRsQIV33weMmTCRN8IR/brw5X/4qmwkJw8783qYtLRum5NZQcX5k wZKVb+OGr7yuRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:06 2025 by rpki-client