This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json) Hash identifier: 3o9RysZEEq9fZ+3n7wE2PaD2SqwUnQDgN5RVPHbdzLY= Subject key identifier: 64:C1:3D:25:3F:A9:C2:AF:09:4C:E3:2B:06:55:26:27:85:7C:F5:54 Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599 Certificate serial: 019B10EEC94D511BBCAA85C73FD1CBC0B032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft Manifest number: 11C5 Signing time: Fri 12 Dec 2025 05:00:43 +0000 Manifest this update: Fri 12 Dec 2025 05:00:43 +0000 Manifest next update: Sat 13 Dec 2025 05:00:43 +0000 Files and hashes: 1: 3Q4-nm9Afpxwl-rsuAE0uraA2Ho.roa (hash: w0/s8wW3wnSLtMZE2Dd4d4ibLqmaSIOhu54oA3SxPvE=) 2: HDL5ZJqNUyVr9DbXIHa7pOPbkPY.roa (hash: iNFv7uh4fJNYsidDC1mbFWGoIExhoy9Ks/MOwn2QcMo=) 3: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: 8IbkBNRMuyez2L5zi++UKs5HB1Bzf5Pxpw50wZohRwE=) 4: dHr3S3MtNvYw9zPAytJUJf5Polg.roa (hash: 6ik71U5mDCDLej/D58qufytoq9ZgmhfMCzyzKL+xxNA=) 5: xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa (hash: W3AHQ2GuMJRuqPrOv5nSrVbrayQVkMMCq5xQ40+kvG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:c9:4d:51:1b:bc:aa:85:c7:3f:d1:cb:c0:b0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599 Validity Not Before: Dec 12 05:00:43 2025 GMT Not After : Dec 13 05:00:43 2025 GMT Subject: CN=64c13d253fa9c2af094ce32b06552627857cf554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:12:1f:84:f3:6f:47:c6:36:a1:29:8e:ce: 7d:ee:7a:c5:21:97:ce:7e:6f:00:98:75:2c:e3:5e: 74:89:9d:bd:a1:3d:15:eb:ee:fa:16:46:fa:4d:40: 4f:00:9a:cf:e3:5b:0b:b0:ea:69:8c:a8:b0:cd:66: d4:6e:c4:e6:a3:22:05:c0:f9:bf:da:3d:9f:8f:cc: fd:7f:c1:50:90:a4:8b:17:5f:aa:b1:38:f6:04:64: c9:0d:55:eb:ad:62:93:da:e1:19:08:c8:2d:e5:f0: 3c:ff:ac:03:d5:df:74:b9:d5:a2:65:40:4f:46:6d: 4b:2d:d0:18:e8:12:54:3b:66:f6:8b:87:74:f2:4d: 57:81:cd:92:80:c1:26:23:40:8e:ce:ec:13:d3:b5: e0:0c:eb:02:8a:72:00:01:08:8d:34:d1:ba:c6:33: 9f:de:2a:1b:9c:c1:dc:49:a9:36:11:5a:a2:05:8f: e1:1b:04:9f:62:22:51:22:75:d7:55:b3:5f:5d:ff: 32:a6:31:c2:aa:2b:e8:5c:31:c1:ca:f2:6b:2a:aa: d9:6d:78:15:6a:a4:8f:79:49:c3:03:bd:45:85:d6: dd:8e:19:49:41:de:f1:8e:3f:3c:a8:4f:fc:11:1c: 17:1b:a5:37:3b:cd:07:19:f8:c3:0e:7e:80:a8:e4: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C1:3D:25:3F:A9:C2:AF:09:4C:E3:2B:06:55:26:27:85:7C:F5:54 X509v3 Authority Key Identifier: keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b7:8b:98:25:cc:a7:ef:d8:01:2e:f6:af:e1:1f:ec:6c:8c: 41:b9:ed:2d:0c:bd:78:36:6c:84:df:d2:08:f0:f8:44:df:39: 7b:a8:b8:ce:78:79:51:7d:65:66:8c:e1:7a:84:f9:cd:c0:c0: 36:5d:4e:11:a6:83:89:bf:ed:1d:41:54:a3:69:7a:6b:04:22: fc:5b:cc:3a:61:9f:7a:58:a7:c0:df:c1:bd:91:1e:d2:e6:ba: dd:5a:8b:eb:95:8c:96:db:5f:b3:14:9a:13:f1:b5:6a:ef:79: 61:6b:fe:02:90:4d:49:ba:6c:e2:74:1e:c3:34:60:79:5d:08: 50:ac:4b:f2:0e:e6:4c:ce:30:bd:69:04:d6:0f:ae:a1:f3:bd: 56:7d:b8:1b:b4:02:18:c8:cc:28:65:ed:61:79:7b:d0:c2:5a: 64:9d:67:8e:99:2e:cd:e7:82:aa:6e:83:cb:b0:20:e3:7e:fd: b8:c1:66:91:5c:2e:5c:e6:92:a3:f5:0e:a1:08:bb:4a:ee:81: ba:cd:1d:32:7c:e7:c1:1b:b7:ca:d2:20:e3:1e:b6:7c:4f:f2: 30:b9:d2:4a:ef:59:02:28:47:62:4a:27:76:92:e9:18:b7:20: 7b:2a:84:1b:ef:87:55:4b:a9:a8:75:c6:d2:93:02:6d:9b:4d: 71:3f:a8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7slNURu8qoXHP9HLwLAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh NjY1OTkwHhcNMjUxMjEyMDUwMDQzWhcNMjUxMjEzMDUwMDQzWjAzMTEwLwYDVQQD Eyg2NGMxM2QyNTNmYTljMmFmMDk0Y2UzMmIwNjU1MjYyNzg1N2NmNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjESH4Tzb0fGNqEpjs597nrFIZfO fm8AmHUs4150iZ29oT0V6+76Fkb6TUBPAJrP41sLsOppjKiwzWbUbsTmoyIFwPm/ 2j2fj8z9f8FQkKSLF1+qsTj2BGTJDVXrrWKT2uEZCMgt5fA8/6wD1d90udWiZUBP Rm1LLdAY6BJUO2b2i4d08k1Xgc2SgMEmI0COzuwT07XgDOsCinIAAQiNNNG6xjOf 3iobnMHcSak2EVqiBY/hGwSfYiJRInXXVbNfXf8ypjHCqivoXDHByvJrKqrZbXgV aqSPeUnDA71FhdbdjhlJQd7xjj88qE/8ERwXG6U3O80HGfjDDn6AqORmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTBPSU/qcKvCUzjKwZVJieFfPVUMB8GA1UdIwQY MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt OTI5ZjEwNjYzMGYxLzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLeLmCXM p+/YAS72r+Ef7GyMQbntLQy9eDZshN/SCPD4RN85e6i4znh5UX1lZozheoT5zcDA Nl1OEaaDib/tHUFUo2l6awQi/FvMOmGfelinwN/BvZEe0ua63VqL65WMlttfsxSa E/G1au95YWv+ApBNSbps4nQewzRgeV0IUKxL8g7mTM4wvWkE1g+uofO9Vn24G7QC GMjMKGXtYXl70MJaZJ1njpkuzeeCqm6Dy7Ag4379uMFmkVwuXOaSo/UOoQi7Su6B us0dMnznwRu3ytIg4x62fE/yMLnSSu9ZAihHYkondpLpGLcgeyqEG++HVUupqHXG 0pMCbZtNcT+omw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:01:44 2025 by rpki-client