This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json) Hash identifier: 01ltX92Hko336wxwZqywYIfeegzQFjm1Y/g7zhizMmc= Subject key identifier: E0:F2:C7:9E:C5:5D:C9:82:E7:46:D7:D1:CB:C7:76:27:D4:C9:D1:F6 Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Certificate serial: 019B0F375456D36A2967C65C3FCE970982AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft Manifest number: 0D5E Signing time: Thu 11 Dec 2025 21:00:42 +0000 Manifest this update: Thu 11 Dec 2025 21:00:42 +0000 Manifest next update: Fri 12 Dec 2025 21:00:42 +0000 Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: YnYVnOL77xpq8ZWDzQGghvP1V9FciZKrKkAC01IPt/Q=) 2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:54:56:d3:6a:29:67:c6:5c:3f:ce:97:09:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca Validity Not Before: Dec 11 21:00:42 2025 GMT Not After : Dec 12 21:00:42 2025 GMT Subject: CN=e0f2c79ec55dc982e746d7d1cbc77627d4c9d1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:12:52:55:e5:60:f9:dd:22:23:0c:01:74: 1b:1c:eb:cc:c5:4f:81:27:1b:50:45:8e:ee:b3:2f: 09:aa:2a:cb:59:db:22:d2:5b:ca:d1:df:0b:85:2d: 96:32:0c:ab:a3:91:bb:da:e8:ee:bf:a6:7d:57:4a: 0b:b9:ce:0b:09:bd:ae:3e:7b:05:4b:b5:05:d2:8c: b1:af:ee:81:39:bb:2f:68:62:1f:10:83:b0:8d:a4: 78:b7:50:e9:fc:b8:da:2a:73:de:b9:63:95:2e:81: c8:14:45:a5:80:34:30:a9:b6:ff:8b:c8:8a:f0:b4: 9b:ab:4a:0d:37:2f:b6:50:58:a2:38:0b:f3:87:c2: 36:54:4a:fb:56:8f:2f:6e:3d:60:ce:3a:2b:88:c2: ec:f5:35:01:8f:fe:20:ab:24:e4:2d:aa:b7:63:64: df:f6:df:00:e3:9b:50:4c:2d:a3:43:df:7d:a5:19: 3c:57:01:cd:93:a1:c6:e0:bc:7a:d6:77:0d:14:f3: cb:77:e5:eb:40:8a:4d:f0:43:63:5c:8a:7d:54:a5: 43:37:52:75:15:ce:5e:52:a3:a1:d0:d1:8b:d1:0e: ae:e1:4b:f9:5e:a1:c2:18:a7:a7:71:6d:cd:7f:cd: f5:21:99:2a:fd:ae:ef:0e:f9:07:72:6c:f0:49:b9: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:C7:9E:C5:5D:C9:82:E7:46:D7:D1:CB:C7:76:27:D4:C9:D1:F6 X509v3 Authority Key Identifier: keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:80:43:3b:35:32:8b:b9:07:8e:90:19:47:b6:5c:4d:31:85: bd:91:c9:40:6a:cd:6b:fb:28:66:a0:bf:c9:69:1c:44:54:11: d8:ed:f4:ef:8d:88:a4:7f:94:ce:48:39:9d:ce:6f:a4:f5:5a: 07:60:83:89:8c:22:b3:89:36:76:e0:ae:a9:5c:d7:21:39:df: 1b:49:01:67:de:fb:d4:d2:5a:c7:f0:26:22:04:2f:3c:38:aa: 50:47:e8:74:c6:42:ca:37:07:d6:1b:3c:91:f5:f6:35:3e:93: 33:06:b2:7b:a2:30:2e:a5:6e:59:44:3f:5a:3b:67:ce:0f:75: d8:96:5c:c3:ce:85:e8:5b:ff:45:5b:a2:3b:44:6c:8d:08:14: 0f:ac:54:15:1d:5e:9e:14:dd:2b:80:20:18:ed:8c:87:f6:4f: 4a:4a:5d:e5:80:0e:21:4b:11:2a:ad:e9:94:80:b7:a1:d0:34: 35:c1:0e:7b:00:af:a3:3a:9d:53:31:03:cf:f7:a4:06:3b:a5: a7:ec:8f:0a:32:ac:ef:e7:4b:a2:b3:7f:d8:57:aa:a1:10:2c: b7:83:82:45:e1:8d:cb:f9:1b:36:7f:b4:80:66:3a:bd:08:67: 6a:7b:e8:7a:b3:8d:f9:de:c5:8f:2d:9c:6c:90:c5:18:d8:21: 0a:30:a6:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1RW02opZ8ZcP86XCYKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkOWFlMTAyZTZjYWRiNDcxYTMwYTBjODU5MzNlMDM5MGJm MmY5Y2EwHhcNMjUxMjExMjEwMDQyWhcNMjUxMjEyMjEwMDQyWjAzMTEwLwYDVQQD EyhlMGYyYzc5ZWM1NWRjOTgyZTc0NmQ3ZDFjYmM3NzYyN2Q0YzlkMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJoSUlXlYPndIiMMAXQbHOvMxU+B JxtQRY7usy8JqirLWdsi0lvK0d8LhS2WMgyro5G72ujuv6Z9V0oLuc4LCb2uPnsF S7UF0oyxr+6BObsvaGIfEIOwjaR4t1Dp/LjaKnPeuWOVLoHIFEWlgDQwqbb/i8iK 8LSbq0oNNy+2UFiiOAvzh8I2VEr7Vo8vbj1gzjoriMLs9TUBj/4gqyTkLaq3Y2Tf 9t8A45tQTC2jQ999pRk8VwHNk6HG4Lx61ncNFPPLd+XrQIpN8ENjXIp9VKVDN1J1 Fc5eUqOh0NGL0Q6u4Uv5XqHCGKencW3Nf831IZkq/a7vDvkHcmzwSbk24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODyx57FXcmC50bX0cvHdifUydH2MB8GA1UdIwQY MBaAFC2a4QLmyttHGjCgyFkz4DkL8vnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYt ZmZjZWUxNTMzNTc3LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83NTE0ZDYtNTlkZS00NjBlLThlMmYtZmZjZWUxNTMzNTc3 LzEvTFpyaEF1YksyMGNhTUtESVdUUGdPUXZ5LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIBDOzUy i7kHjpAZR7ZcTTGFvZHJQGrNa/soZqC/yWkcRFQR2O30742IpH+Uzkg5nc5vpPVa B2CDiYwis4k2duCuqVzXITnfG0kBZ9771NJax/AmIgQvPDiqUEfodMZCyjcH1hs8 kfX2NT6TMwaye6IwLqVuWUQ/Wjtnzg912JZcw86F6Fv/RVuiO0RsjQgUD6xUFR1e nhTdK4AgGO2Mh/ZPSkpd5YAOIUsRKq3plIC3odA0NcEOewCvozqdUzEDz/ekBjul p+yPCjKs7+dLorN/2FeqoRAst4OCReGNy/kbNn+0gGY6vQhnanvoerON+d7Fjy2c bJDFGNghCjCmBQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:39:57 2025 by rpki-client