This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft File: LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json) Hash identifier: zx8/Z0kWfvPnmrMlGAl9OxBUak5kGO/HMjL88c0QRQ8= Subject key identifier: 3B:82:00:AE:03:39:2E:FE:9D:85:55:10:B1:5A:9A:EC:6C:55:61:05 Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7 Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7 Certificate serial: 019B26D278B030D6E2EB00CA09A07A9BF090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft Manifest number: 0220 Signing time: Tue 16 Dec 2025 11:01:26 +0000 Manifest this update: Tue 16 Dec 2025 11:01:26 +0000 Manifest next update: Wed 17 Dec 2025 11:01:26 +0000 Files and hashes: 1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=) 2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: myBt2NWl+fmQKa2A0N2gWJjRKiVC8KEvgi/jVASGfh8=) 3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=) 4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=) 5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:78:b0:30:d6:e2:eb:00:ca:09:a0:7a:9b:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7 Validity Not Before: Dec 16 11:01:26 2025 GMT Not After : Dec 17 11:01:26 2025 GMT Subject: CN=3b8200ae03392efe9d855510b15a9aec6c556105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:28:6b:4b:2f:99:36:90:68:32:f7:5d:31: 4c:77:96:eb:b1:74:15:15:7f:d1:38:53:ce:d7:bc: b5:3d:4a:19:74:16:11:ad:a4:af:43:37:9c:8d:8b: 06:f6:2f:62:af:50:0d:65:f4:15:cb:0f:f9:4f:52: 72:54:b0:f1:0a:05:5e:8a:5a:05:bc:43:88:fa:42: 36:e6:9a:c5:ec:13:4a:7d:ac:c0:52:43:ae:7e:0a: cb:dd:ee:a8:06:f3:dc:ed:54:5e:19:bd:f0:8f:b3: 97:23:2f:12:3b:bb:f2:8c:d2:1e:54:e0:c7:d5:30: 3d:d7:d4:01:19:19:4e:69:57:83:56:8e:9d:c1:7d: 53:ae:27:c9:cd:5e:7e:ef:ff:4c:fa:a6:92:40:23: f1:c1:59:4e:b5:a4:02:25:75:52:24:5d:b7:64:ca: 2e:11:43:05:89:7c:6d:6d:b2:0e:94:6f:ef:01:4c: e2:f2:1e:ef:5b:2b:b6:a2:22:14:de:f0:c8:b1:de: 41:fc:5a:92:8d:6d:15:74:eb:00:06:3b:08:e0:9e: 4b:89:bf:db:70:cb:9c:d1:de:03:02:91:bf:d2:f7: 5c:c9:e3:be:af:1d:42:ba:49:ef:f9:1a:48:60:30: 26:59:ea:22:63:0f:53:5f:e6:47:3a:5b:fc:5c:71: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:00:AE:03:39:2E:FE:9D:85:55:10:B1:5A:9A:EC:6C:55:61:05 X509v3 Authority Key Identifier: keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cf:06:b3:52:db:41:3b:bb:40:dc:ac:da:94:0a:9c:29:c1: d3:86:ca:2b:05:95:83:87:e1:8d:43:00:22:ca:f2:28:2a:e5: 86:0c:2b:1a:a3:3c:fd:30:50:04:1e:5b:27:43:ce:26:de:a9: 0b:66:46:99:2c:05:3b:a7:ac:b2:ee:9c:ad:52:15:71:ee:60: 06:1e:7f:48:0b:e6:54:d7:1c:0a:17:63:a2:ec:0b:43:0c:50: 92:15:c7:dc:69:db:d2:0a:da:28:bc:62:db:c1:f8:f2:cf:ac: 24:a4:f9:4e:01:f0:ff:0a:0b:ff:78:86:b5:c9:5b:84:6a:4c: 4f:15:54:da:47:31:c9:5b:90:2e:aa:5b:b9:02:d4:4e:ad:46: c2:68:92:d2:7f:b7:3d:65:66:b6:d1:5e:e2:04:4a:ce:78:1a: 13:37:90:db:ab:6a:0d:38:6b:2e:f8:6e:16:a1:d7:80:b4:ea: 9c:9f:66:f0:69:8b:22:c9:46:3a:d6:ce:60:5b:64:9c:ab:e5: e0:d0:be:a4:50:92:da:62:b8:d6:03:d6:d2:2b:76:a2:d4:dc: 20:13:38:cf:6c:9a:ff:38:53:fd:fa:47:0b:0f:31:3c:c9:6b: 01:30:47:94:a0:d2:28:03:7e:13:26:d9:69:af:16:10:58:c4: a5:65:12:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0niwMNbi6wDKCaB6m/CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm YThiZjcwHhcNMjUxMjE2MTEwMTI2WhcNMjUxMjE3MTEwMTI2WjAzMTEwLwYDVQQD EygzYjgyMDBhZTAzMzkyZWZlOWQ4NTU1MTBiMTVhOWFlYzZjNTU2MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QIoa0svmTaQaDL3XTFMd5brsXQV FX/ROFPO17y1PUoZdBYRraSvQzecjYsG9i9ir1ANZfQVyw/5T1JyVLDxCgVeiloF vEOI+kI25prF7BNKfazAUkOufgrL3e6oBvPc7VReGb3wj7OXIy8SO7vyjNIeVODH 1TA919QBGRlOaVeDVo6dwX1TrifJzV5+7/9M+qaSQCPxwVlOtaQCJXVSJF23ZMou EUMFiXxtbbIOlG/vAUzi8h7vWyu2oiIU3vDIsd5B/FqSjW0VdOsABjsI4J5Lib/b cMuc0d4DApG/0vdcyeO+rx1Cuknv+RpIYDAmWeoiYw9TX+ZHOlv8XHFHlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuCAK4DOS7+nYVVELFamuxsVWEFMB8GA1UdIwQY MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt MjE2NGQ5OTk1MTk4LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4 LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL88Gs1Lb QTu7QNys2pQKnCnB04bKKwWVg4fhjUMAIsryKCrlhgwrGqM8/TBQBB5bJ0POJt6p C2ZGmSwFO6essu6crVIVce5gBh5/SAvmVNccChdjouwLQwxQkhXH3Gnb0graKLxi 28H48s+sJKT5TgHw/woL/3iGtclbhGpMTxVU2kcxyVuQLqpbuQLUTq1GwmiS0n+3 PWVmttFe4gRKzngaEzeQ26tqDThrLvhuFqHXgLTqnJ9m8GmLIslGOtbOYFtknKvl 4NC+pFCS2mK41gPW0it2otTcIBM4z2ya/zhT/fpHCw8xPMlrATBHlKDSKAN+EybZ aa8WEFjEpWUSLg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:22:10 2025 by rpki-client