This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json) Hash identifier: PKb3ZMtUjSI7BHsx0S3cDNOXpcuUbAoI+CjlVOT1wps= Subject key identifier: 8C:13:57:EE:66:D2:2F:47:8E:02:25:15:14:33:F5:D5:06:EC:B9:6C Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1 Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1 Certificate serial: 019B48B8FC73091D5F2EC1BE53741A57558B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft Manifest number: 1450 Signing time: Tue 23 Dec 2025 01:00:41 +0000 Manifest this update: Tue 23 Dec 2025 01:00:41 +0000 Manifest next update: Wed 24 Dec 2025 01:00:41 +0000 Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=) 2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: wLxYFEBKMFmIR7ZslWEzy9DEqC+8MNWvHmtaeZ6j36Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:fc:73:09:1d:5f:2e:c1:be:53:74:1a:57:55:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1 Validity Not Before: Dec 23 01:00:41 2025 GMT Not After : Dec 24 01:00:41 2025 GMT Subject: CN=8c1357ee66d22f478e0225151433f5d506ecb96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:23:70:f6:e9:0c:85:61:ff:c9:75:b8:cb: 6d:c2:db:6e:0d:a1:9a:2c:a6:dc:97:af:e7:e3:15: 10:d5:7e:82:56:c3:c4:e1:6d:87:d8:2c:29:e4:a9: 8a:cb:1c:79:26:f9:e5:6b:62:2f:9b:9f:fc:3d:7e: 0f:de:1e:8c:ef:80:50:75:64:64:13:5d:81:19:10: 69:38:3c:1b:93:8d:26:f8:d3:40:85:49:61:80:fd: 5b:fb:5b:02:f5:72:aa:95:9b:a6:c9:67:ca:22:95: 8e:19:21:ef:59:67:5a:ee:f6:5f:dc:76:c1:80:e5: b9:62:69:90:ff:a6:e1:89:43:0f:69:4f:24:d1:a1: 8f:e1:9f:ae:a5:5d:76:a5:f5:2b:68:60:45:a4:8e: b9:8c:ca:5b:01:f6:f3:e3:68:17:b4:ff:ad:7c:fe: 70:90:1a:6b:4f:3d:84:62:16:3c:b2:ff:43:e5:dd: 96:67:01:ee:9e:e8:a4:20:c0:97:74:ae:70:b1:06: 0f:02:f6:57:10:65:fe:04:0e:0a:64:58:6d:f4:fb: 87:e0:56:97:ae:6d:0c:b1:29:70:37:21:21:b1:58: f4:eb:86:ed:f6:5e:35:7e:d9:02:54:23:b2:ee:de: cf:80:5a:cf:d0:2d:90:43:f4:3f:e6:d1:9d:84:41: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:57:EE:66:D2:2F:47:8E:02:25:15:14:33:F5:D5:06:EC:B9:6C X509v3 Authority Key Identifier: keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:39:e2:ff:19:9d:89:ec:38:d2:e8:dc:af:c6:9d:dd:a7:d8: 0e:39:14:42:f3:19:aa:a5:ba:5e:e5:0f:b3:69:12:d0:98:39: 72:14:68:6d:c3:a0:73:70:d8:00:b6:b3:e3:57:62:fa:e6:8c: 69:46:e1:69:19:a6:df:a9:14:80:0e:de:ec:e0:e4:98:5e:e5: cb:bf:78:db:9e:36:7a:d1:69:b1:7d:f9:c5:cf:49:05:a5:93: f1:6b:69:da:75:0e:5b:3e:42:a5:8b:23:93:1f:72:7d:ca:2e: 8b:c0:15:d4:6e:6f:ab:c9:48:23:b5:d3:52:4c:62:72:48:44: 68:85:cd:57:02:de:43:db:b9:4e:0c:b3:c6:c5:53:e7:13:90: f8:62:9a:27:e9:30:34:48:ce:24:28:16:cb:02:b2:f4:86:ea: 84:ef:6f:77:6d:32:3c:2c:1f:b8:61:e3:9c:42:dc:a2:ce:6d: 1f:26:1c:4c:17:fa:01:d7:ee:94:35:44:28:40:e9:ad:86:a0: 73:d1:34:d1:2e:9e:30:61:39:46:f5:c3:3a:cc:48:f2:79:aa: bc:83:a0:7b:b9:66:2f:30:ab:f9:c2:87:e7:54:a8:ac:12:0c: 1e:c8:2f:88:7e:fd:d6:b0:f4:1e:80:47:70:6a:7a:d2:17:c4: 82:18:3c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuPxzCR1fLsG+U3QaV1WLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2 MGNkYTEwHhcNMjUxMjIzMDEwMDQxWhcNMjUxMjI0MDEwMDQxWjAzMTEwLwYDVQQD Eyg4YzEzNTdlZTY2ZDIyZjQ3OGUwMjI1MTUxNDMzZjVkNTA2ZWNiOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZsjcPbpDIVh/8l1uMttwttuDaGa LKbcl6/n4xUQ1X6CVsPE4W2H2Cwp5KmKyxx5Jvnla2Ivm5/8PX4P3h6M74BQdWRk E12BGRBpODwbk40m+NNAhUlhgP1b+1sC9XKqlZumyWfKIpWOGSHvWWda7vZf3HbB gOW5YmmQ/6bhiUMPaU8k0aGP4Z+upV12pfUraGBFpI65jMpbAfbz42gXtP+tfP5w kBprTz2EYhY8sv9D5d2WZwHunuikIMCXdK5wsQYPAvZXEGX+BA4KZFht9PuH4FaX rm0MsSlwNyEhsVj064bt9l41ftkCVCOy7t7PgFrP0C2QQ/Q/5tGdhEEduQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwTV+5m0i9HjgIlFRQz9dUG7LlsMB8GA1UdIwQY MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDni/xmd iew40ujcr8ad3afYDjkUQvMZqqW6XuUPs2kS0Jg5chRobcOgc3DYALaz41di+uaM aUbhaRmm36kUgA7e7ODkmF7ly7942542etFpsX35xc9JBaWT8Wtp2nUOWz5CpYsj kx9yfcoui8AV1G5vq8lII7XTUkxickhEaIXNVwLeQ9u5TgyzxsVT5xOQ+GKaJ+kw NEjOJCgWywKy9IbqhO9vd20yPCwfuGHjnELcos5tHyYcTBf6AdfulDVEKEDprYag c9E00S6eMGE5RvXDOsxI8nmqvIOge7lmLzCr+cKH51SorBIMHsgviH791rD0HoBH cGp60hfEghg8DQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:03 2025 by rpki-client