This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json) Hash identifier: 4xmMfbc2B4VRWSSF0x3/tSMIJIwkOzkiyt+5PFk4f5Y= Subject key identifier: B4:C1:B3:54:DD:DC:9F:40:6F:81:05:C5:B1:37:7E:C2:54:EE:9B:25 Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Certificate serial: 019B27AE5844E7D0862E344B6A9598BD548D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft Manifest number: 170E Signing time: Tue 16 Dec 2025 15:01:35 +0000 Manifest this update: Tue 16 Dec 2025 15:01:35 +0000 Manifest next update: Wed 17 Dec 2025 15:01:35 +0000 Files and hashes: 1: BJt218vyPAIZF_L2ax-fXs78RO0.roa (hash: P3rkYDci/na2QczVHIWVXTso4Bg4G7j/ooyuS4+Wnxw=) 2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: LBgQD88wHXjsgJSWKeWUQIlwt/yOxPKRA4QX2kpzyms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:58:44:e7:d0:86:2e:34:4b:6a:95:98:bd:54:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Validity Not Before: Dec 16 15:01:35 2025 GMT Not After : Dec 17 15:01:35 2025 GMT Subject: CN=b4c1b354dddc9f406f8105c5b1377ec254ee9b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:7f:03:6b:33:34:2c:8f:8b:eb:05:9b:3e: 7b:6d:2e:af:60:d2:38:d7:eb:a1:07:eb:13:30:c7: 6f:8e:94:b5:ad:18:63:13:56:10:39:4a:06:4c:57: ed:47:9d:98:88:65:1e:1b:ef:0e:28:5c:ca:c8:3b: b1:64:1f:d4:5a:da:91:2f:a6:6a:1a:f2:df:4f:e7: 54:83:0b:d5:c6:bc:4b:cd:05:dc:c7:a9:51:2e:2e: f0:a0:90:3f:b5:4c:c9:2f:7e:0f:c6:71:f1:ea:9c: 12:c7:2f:ce:cd:2b:1c:33:22:07:b4:1b:70:37:bd: e7:76:a8:fa:8f:03:ea:da:83:ea:ca:6f:ef:67:c6: 63:29:93:f7:b4:2e:ce:83:47:eb:48:a9:a4:63:e9: 41:80:a5:18:3e:49:a3:1b:74:a3:db:f8:6e:41:73: 72:58:11:86:92:8c:31:14:d0:fc:ca:c7:00:c8:bd: 35:c1:dc:6f:52:b4:56:e3:62:79:e5:43:65:46:2f: b7:1f:ee:3a:8f:dd:0d:07:98:1b:db:82:a8:82:42: 3f:da:21:1f:52:15:14:a6:0c:31:fa:5c:f8:9d:74: e2:b5:e0:0e:26:7f:96:96:ff:9d:72:69:38:9d:f4: c5:72:c0:8a:e5:9f:75:90:67:fc:b8:6c:be:72:05: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:B3:54:DD:DC:9F:40:6F:81:05:C5:B1:37:7E:C2:54:EE:9B:25 X509v3 Authority Key Identifier: keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:fb:dd:f6:4d:11:a9:ee:63:dc:56:9f:04:34:b0:14:3e: d9:bf:13:c1:61:18:71:4c:3e:53:c3:17:88:7c:ca:c0:ff:03: 15:68:0c:55:8e:b7:2f:bc:ee:0c:bc:60:01:8f:a6:6d:06:f2: 30:00:18:cf:77:af:23:88:cd:65:90:e3:49:fd:65:3d:f8:f9: 81:08:bf:fe:b1:56:86:a8:71:3f:fe:ce:fe:2a:8a:25:d1:82: 90:26:a1:98:f7:7d:f1:fe:a9:85:52:21:66:97:9a:84:02:26: f5:29:de:e4:3b:cb:ae:ca:fc:c8:82:27:36:27:78:b5:79:c0: 9d:a0:b6:0a:58:05:ae:6f:67:b5:88:8a:23:42:ce:4a:ed:cd: 65:b2:c6:c6:21:93:fc:24:95:9c:c3:85:06:07:2f:c3:f4:37: b3:fd:92:8c:d6:95:0b:04:3a:0d:06:18:e7:26:48:33:5c:a7: 27:c0:a9:b7:db:aa:9c:7c:42:77:cd:cd:2c:00:83:4d:43:49: 8c:7e:94:58:6b:c2:94:10:6d:b0:69:ec:59:6e:7a:6b:57:5f: a9:c0:da:7f:4a:73:bd:ac:93:bf:8c:41:d8:86:6f:1d:8c:17: 6a:e3:8f:00:69:85:7d:29:51:33:48:b6:c7:2d:0f:71:c2:e9: 5b:e7:6a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrlhE59CGLjRLapWYvVSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk ZDRkMGUwHhcNMjUxMjE2MTUwMTM1WhcNMjUxMjE3MTUwMTM1WjAzMTEwLwYDVQQD EyhiNGMxYjM1NGRkZGM5ZjQwNmY4MTA1YzViMTM3N2VjMjU0ZWU5YjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iR/A2szNCyPi+sFmz57bS6vYNI4 1+uhB+sTMMdvjpS1rRhjE1YQOUoGTFftR52YiGUeG+8OKFzKyDuxZB/UWtqRL6Zq GvLfT+dUgwvVxrxLzQXcx6lRLi7woJA/tUzJL34PxnHx6pwSxy/OzSscMyIHtBtw N73ndqj6jwPq2oPqym/vZ8ZjKZP3tC7Og0frSKmkY+lBgKUYPkmjG3Sj2/huQXNy WBGGkowxFND8yscAyL01wdxvUrRW42J55UNlRi+3H+46j90NB5gb24KogkI/2iEf UhUUpgwx+lz4nXTiteAOJn+Wlv+dcmk4nfTFcsCK5Z91kGf8uGy+cgXZ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTBs1Td3J9Ab4EFxbE3fsJU7pslMB8GA1UdIwQY MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtb73fZN EanuY9xWnwQ0sBQ+2b8TwWEYcUw+U8MXiHzKwP8DFWgMVY63L7zuDLxgAY+mbQby MAAYz3evI4jNZZDjSf1lPfj5gQi//rFWhqhxP/7O/iqKJdGCkCahmPd98f6phVIh ZpeahAIm9Sne5DvLrsr8yIInNid4tXnAnaC2ClgFrm9ntYiKI0LOSu3NZbLGxiGT /CSVnMOFBgcvw/Q3s/2SjNaVCwQ6DQYY5yZIM1ynJ8Cpt9uqnHxCd83NLACDTUNJ jH6UWGvClBBtsGnsWW56a1dfqcDaf0pzvayTv4xB2IZvHYwXauOPAGmFfSlRM0i2 xy0PccLpW+dqmw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:35:11 2025 by rpki-client