This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json) Hash identifier: X1FbLlpyBf8O8Cc6NvXKOiFl3v/tN5JWcumhpQL5Xl8= Subject key identifier: E2:77:45:C2:9D:D2:47:A7:18:05:CD:6E:91:90:B1:85:AD:D2:8E:E5 Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Certificate serial: 019B2475CEB197DD65EE41815C98F3DE23A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft Manifest number: 1790 Signing time: Tue 16 Dec 2025 00:00:58 +0000 Manifest this update: Tue 16 Dec 2025 00:00:58 +0000 Manifest next update: Wed 17 Dec 2025 00:00:58 +0000 Files and hashes: 1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: xfSE4cE0CPEqd1Xiw6W7FW4znEiOw1cU9572cWJepAA=) 2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=) 3: DPsq0OHf8MVPtjf1meByn-PM7Q0.roa (hash: oRmxnthJtArJCnDUTkrTLD5StLSleGnIBmGT013Rl5I=) 4: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=) 5: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:ce:b1:97:dd:65:ee:41:81:5c:98:f3:de:23:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Validity Not Before: Dec 16 00:00:58 2025 GMT Not After : Dec 17 00:00:58 2025 GMT Subject: CN=e27745c29dd247a71805cd6e9190b185add28ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:56:d9:3d:98:d6:66:03:43:9e:84:4f:b8: 4a:45:07:a4:1c:07:fc:e7:ed:fd:44:97:29:5a:8c: a3:ea:d4:be:3d:9e:82:55:f5:23:c2:31:7b:39:c9: f8:39:fb:57:84:75:96:84:94:24:b5:95:10:65:69: 18:a1:ab:c7:75:d4:a5:ed:40:e0:28:3b:af:eb:c8: b6:9c:c6:00:99:10:c0:a1:46:74:7e:dd:30:84:ad: c0:88:14:f2:14:58:2f:cf:95:48:33:39:1f:9b:d5: 91:0b:80:e7:03:c0:07:72:df:b5:62:34:ea:8d:0f: 69:fc:6e:cc:65:fc:db:cc:a1:2b:32:4e:33:5c:f5: 36:7f:f7:a9:40:28:de:3d:8e:9b:74:09:4f:6f:d8: a8:36:11:9d:c2:d7:8a:63:4c:4a:cf:17:28:6b:df: 76:39:29:52:a9:22:d7:94:85:98:6d:d1:bb:85:f4: b0:d7:70:69:56:fc:54:f2:05:9e:ae:1f:4a:90:4e: 28:0b:f1:ce:86:5b:d4:0b:f6:60:d0:4a:22:f4:9f: 09:7a:10:14:4d:f1:a8:82:85:7f:75:25:75:0f:59: 06:fb:a6:4c:8a:86:77:fb:ba:46:dd:ff:8e:c6:7f: 98:31:fb:7d:76:7f:1d:c0:ad:72:53:6a:2e:aa:b4: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:45:C2:9D:D2:47:A7:18:05:CD:6E:91:90:B1:85:AD:D2:8E:E5 X509v3 Authority Key Identifier: keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e0:1c:07:1a:ef:3f:93:2e:61:ab:5c:d5:4b:09:19:88:a1: 3d:ea:0e:c5:b1:67:a7:fa:e6:ae:9d:74:8b:4c:e9:74:fa:01: 65:15:47:99:dd:b3:a3:27:f5:a1:71:d7:9e:43:7c:6e:6f:04: de:5f:f3:b3:bc:79:26:eb:fa:22:16:8e:71:38:07:74:2e:44: 26:48:4c:dd:35:56:37:be:b6:e9:69:46:5d:a6:26:e6:93:41: 9b:f2:2e:a8:b3:23:59:e1:04:33:f3:a8:54:b9:31:ba:be:b5: b5:63:2a:56:9c:52:68:9b:a9:16:fe:ef:86:3d:f0:cf:aa:f3: c9:4e:a9:c8:b3:a2:9a:5c:c7:a8:50:85:e9:b4:6a:4f:3f:b0: ec:c7:0b:d7:a6:06:ae:65:1e:61:a6:6f:2c:76:bc:72:47:ad: b9:9a:5a:83:95:c9:87:ad:50:1f:13:de:ce:24:df:21:7c:50: 33:0d:57:97:3d:f8:a3:44:c3:0d:dc:22:98:1f:f4:53:a4:a9: 09:00:bb:d8:ac:f1:11:39:04:af:97:06:f7:a2:fa:31:b2:24: 9b:8f:25:7a:d4:e3:7a:b7:e9:de:51:c0:a5:28:42:eb:45:d7: 04:17:38:f1:b5:5f:e9:b1:43:0f:b9:0d:5d:4a:8e:8b:73:5e: 32:81:15:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdc6xl91l7kGBXJjz3iOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2 ZGNmMTAwHhcNMjUxMjE2MDAwMDU4WhcNMjUxMjE3MDAwMDU4WjAzMTEwLwYDVQQD EyhlMjc3NDVjMjlkZDI0N2E3MTgwNWNkNmU5MTkwYjE4NWFkZDI4ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jtW2T2Y1mYDQ56ET7hKRQekHAf8 5+39RJcpWoyj6tS+PZ6CVfUjwjF7Ocn4OftXhHWWhJQktZUQZWkYoavHddSl7UDg KDuv68i2nMYAmRDAoUZ0ft0whK3AiBTyFFgvz5VIMzkfm9WRC4DnA8AHct+1YjTq jQ9p/G7MZfzbzKErMk4zXPU2f/epQCjePY6bdAlPb9ioNhGdwteKY0xKzxcoa992 OSlSqSLXlIWYbdG7hfSw13BpVvxU8gWerh9KkE4oC/HOhlvUC/Zg0Eoi9J8JehAU TfGogoV/dSV1D1kG+6ZMioZ3+7pG3f+Oxn+YMft9dn8dwK1yU2ouqrTuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ3RcKd0kenGAXNbpGQsYWt0o7lMB8GA1UdIwQY MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuAcBxrv P5MuYatc1UsJGYihPeoOxbFnp/rmrp10i0zpdPoBZRVHmd2zoyf1oXHXnkN8bm8E 3l/zs7x5Juv6IhaOcTgHdC5EJkhM3TVWN7626WlGXaYm5pNBm/IuqLMjWeEEM/Oo VLkxur61tWMqVpxSaJupFv7vhj3wz6rzyU6pyLOimlzHqFCF6bRqTz+w7McL16YG rmUeYaZvLHa8cketuZpag5XJh61QHxPeziTfIXxQMw1Xlz34o0TDDdwimB/0U6Sp CQC72KzxETkEr5cG96L6MbIkm48letTjerfp3lHApShC60XXBBc48bVf6bFDD7kN XUqOi3NeMoEVow== -----END CERTIFICATE-----Generated at Tue Dec 16 03:10:51 2025 by rpki-client