This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json) Hash identifier: wxiLdIquBzC4N8fKe7P7eWyua2l9znE3yYBPICOw3fQ= Subject key identifier: 9F:F6:42:B0:4B:52:B5:7C:46:EE:FC:EC:90:64:C3:EA:01:C1:3B:ED Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019AEE9A11CD4C97474CAB499BB6D019F597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft Manifest number: 0E07 Signing time: Fri 05 Dec 2025 13:01:05 +0000 Manifest this update: Fri 05 Dec 2025 13:01:05 +0000 Manifest next update: Sat 06 Dec 2025 13:01:05 +0000 Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=) 2: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: XHdQjpsdvJ2h1lJw86nPyIlY1rLk3jrCe+sCqdgd4i4=) 3: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:11:cd:4c:97:47:4c:ab:49:9b:b6:d0:19:f5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Dec 5 13:01:05 2025 GMT Not After : Dec 6 13:01:05 2025 GMT Subject: CN=9ff642b04b52b57c46eefcec9064c3ea01c13bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:49:63:c8:a9:a1:d6:c5:3c:be:7b:9f:df: 4f:32:f2:57:cd:4e:50:fc:44:19:2a:55:4b:39:29: 01:b8:b6:3e:d6:eb:53:3e:51:0b:5d:f8:93:0e:62: 0c:56:af:ff:3d:24:39:48:b9:c5:e8:2b:da:bc:b6: 83:62:c0:a3:05:86:c8:63:4c:f0:43:18:70:ce:8d: ee:d0:96:0d:87:20:4b:39:45:b7:6d:7e:da:52:da: 06:bf:9c:42:57:f0:78:21:9c:3c:1f:94:af:c8:31: 50:41:7e:9e:80:79:c6:a2:87:5e:0c:61:4b:f1:ca: 2e:84:23:d1:eb:04:4e:d5:f5:d6:3b:e8:a2:bf:20: 7a:f9:05:36:3c:62:4b:d3:ba:f5:80:2c:51:93:9d: b8:db:e8:95:f4:55:66:e8:1c:80:e5:06:87:39:a2: c7:3e:e1:03:de:05:dd:c6:82:61:cd:5f:31:2f:0d: 85:0e:8c:41:0a:35:2d:e3:70:ee:5b:20:d3:2b:35: 7b:03:f1:93:1b:0a:2a:80:5d:ab:5d:c6:0d:ef:c7: 69:32:fe:d6:ac:82:fb:10:50:d2:47:47:49:72:3f: cf:2c:a5:d9:87:73:6c:f6:0a:0a:69:01:6f:de:ca: ff:f4:f5:e6:c8:64:2f:10:22:9d:75:d3:2e:e8:e9: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:42:B0:4B:52:B5:7C:46:EE:FC:EC:90:64:C3:EA:01:C1:3B:ED X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d1:a8:dc:fe:bd:5d:23:ea:e6:dd:fd:d9:e8:86:a4:9f:e2: 7b:43:c9:b0:f8:c3:7a:00:f8:ee:84:34:80:a3:d3:b5:ae:5c: 8b:ec:ff:c5:d4:43:d2:ec:17:42:00:46:5d:3c:c2:4c:ae:79: 0e:29:44:05:7a:0f:57:8a:4e:83:52:f3:9e:1d:0c:87:27:0a: 87:d7:92:25:06:ef:79:6b:7c:50:e5:6e:a9:4e:be:71:ee:13: b2:0b:61:73:97:47:9f:7e:eb:53:79:09:da:9f:ec:26:1a:11: 19:8c:75:da:8c:21:31:c2:d2:54:4a:3a:20:23:21:00:9f:26: 7e:40:2e:a4:77:8a:a6:b9:60:b7:b8:b6:85:91:45:cf:bf:e0: 00:fc:7f:60:52:53:68:b9:ff:0e:1c:1e:10:60:8e:8e:b0:eb: 92:bc:1f:44:ea:45:b4:1a:b7:4b:7b:a4:b7:a7:87:c5:4b:75: e5:d8:2d:ae:01:3b:08:ef:a2:7c:8f:38:2d:7d:21:90:9c:f5: f1:95:68:65:69:6b:05:f5:b0:49:16:f2:1f:35:75:cb:81:bd: a2:da:d5:33:04:38:9b:cb:cd:02:80:4e:a6:77:5a:d3:e1:4d: e2:66:84:f2:f9:38:84:7d:32:a0:bc:f1:60:3f:1d:6e:e1:ef: ff:c8:15:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumhHNTJdHTKtJm7bQGfWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjUxMjA1MTMwMTA1WhcNMjUxMjA2MTMwMTA1WjAzMTEwLwYDVQQD Eyg5ZmY2NDJiMDRiNTJiNTdjNDZlZWZjZWM5MDY0YzNlYTAxYzEzYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1JY8ipodbFPL57n99PMvJXzU5Q /EQZKlVLOSkBuLY+1utTPlELXfiTDmIMVq//PSQ5SLnF6CvavLaDYsCjBYbIY0zw Qxhwzo3u0JYNhyBLOUW3bX7aUtoGv5xCV/B4IZw8H5SvyDFQQX6egHnGoodeDGFL 8couhCPR6wRO1fXWO+iivyB6+QU2PGJL07r1gCxRk5242+iV9FVm6ByA5QaHOaLH PuED3gXdxoJhzV8xLw2FDoxBCjUt43DuWyDTKzV7A/GTGwoqgF2rXcYN78dpMv7W rIL7EFDSR0dJcj/PLKXZh3Ns9goKaQFv3sr/9PXmyGQvECKdddMu6OlSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/2QrBLUrV8Ru787JBkw+oBwTvtMB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNGo3P69 XSPq5t392eiGpJ/ie0PJsPjDegD47oQ0gKPTta5ci+z/xdRD0uwXQgBGXTzCTK55 DilEBXoPV4pOg1Lznh0MhycKh9eSJQbveWt8UOVuqU6+ce4Tsgthc5dHn37rU3kJ 2p/sJhoRGYx12owhMcLSVEo6ICMhAJ8mfkAupHeKprlgt7i2hZFFz7/gAPx/YFJT aLn/DhweEGCOjrDrkrwfROpFtBq3S3ukt6eHxUt15dgtrgE7CO+ifI84LX0hkJz1 8ZVoZWlrBfWwSRbyHzV1y4G9otrVMwQ4m8vNAoBOpnda0+FN4maE8vk4hH0yoLzx YD8dbuHv/8gV4Q== -----END CERTIFICATE-----Generated at Fri Dec 5 15:52:39 2025 by rpki-client