This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json) Hash identifier: zyvzHZtJWZWRJHpWDpJsUgGyicKEIR1V7WzizxLjZmc= Subject key identifier: 6E:BC:23:A4:2D:C3:FA:CD:A4:17:FB:06:F2:A2:25:AB:DD:9D:23:43 Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019B3532F36A1C0F8C52987EF88B1B493025 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft Manifest number: 0E7A Signing time: Fri 19 Dec 2025 06:01:30 +0000 Manifest this update: Fri 19 Dec 2025 06:01:30 +0000 Manifest next update: Sat 20 Dec 2025 06:01:30 +0000 Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: WzvNYVlsThi8mk1WpQknlr6k9kUNcMcf+pzJNwIJAwY=) 2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f3:6a:1c:0f:8c:52:98:7e:f8:8b:1b:49:30:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Dec 19 06:01:30 2025 GMT Not After : Dec 20 06:01:30 2025 GMT Subject: CN=6ebc23a42dc3facda417fb06f2a225abdd9d2343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:64:19:61:e7:85:8f:82:dc:b6:58:4b:8e: ae:13:a8:56:ec:8f:a1:43:b7:4f:ab:86:c8:bc:0d: 34:0d:32:83:0d:50:47:dc:1d:3f:43:95:2c:b1:a1: 2a:d4:7e:80:8e:1a:87:33:47:64:29:7a:bd:9c:e7: 09:49:cc:54:79:14:e9:96:c3:cf:74:17:28:bd:25: f4:88:b6:b0:92:15:e7:94:28:cc:10:8c:47:8d:2d: 8c:37:cf:33:57:48:42:24:21:f4:12:67:ec:16:87: ec:f0:25:7c:82:a4:b5:8e:10:32:32:3d:00:7f:a9: a1:b0:28:b3:d7:c4:c4:59:58:03:8d:8e:0c:49:2f: 96:7b:3c:1a:42:50:30:97:f6:63:99:48:d4:98:3d: fe:96:4e:ac:57:fb:ec:38:1d:d2:26:84:d8:90:d2: db:81:9d:e0:28:9e:4c:ca:5c:7c:02:ef:c7:d9:d1: 43:d9:bf:eb:5b:09:df:f4:c5:17:9a:b6:67:15:e2: 11:12:1f:9f:7b:61:70:df:31:21:26:c3:9b:ad:ec: f4:d3:f1:59:48:3f:79:e5:8c:eb:f3:48:bc:00:a6: bd:d2:e6:c3:20:34:66:a1:b9:87:8c:2d:ec:e6:77: 8f:91:55:28:4f:e1:f5:06:e2:7b:c8:22:5e:9e:9f: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:23:A4:2D:C3:FA:CD:A4:17:FB:06:F2:A2:25:AB:DD:9D:23:43 X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:43:99:56:2d:c8:d3:4b:f1:79:f6:e4:ec:99:07:02:77:d0: ce:53:57:b8:23:c3:57:85:e0:39:33:db:76:62:56:6a:86:79: b8:c4:65:69:c9:8e:d5:7b:62:7d:29:53:15:6a:4d:cb:fe:c0: 55:ce:4c:83:5e:b8:29:48:ae:c2:10:dc:08:8b:9a:73:9e:0f: e7:31:e9:fd:bc:46:5f:54:fb:86:60:fe:64:0c:3d:7d:1f:23: 8e:f5:aa:06:11:6a:45:63:cd:ba:e3:f5:31:a3:d4:58:49:e1: 2f:d8:73:0c:23:6a:e3:3e:67:46:ec:22:a1:c7:e6:8d:df:a3: fa:67:fc:da:68:b2:66:07:23:87:5f:5d:6f:7b:84:5f:16:14: 05:2e:37:16:9d:f0:11:90:75:ee:c7:38:9f:db:4f:1e:2f:6f: 74:ec:3f:76:69:a4:6e:7f:5f:10:9e:6e:6c:06:f3:34:6a:31: 29:21:6d:77:c1:fa:43:90:d2:14:0d:df:2c:b3:c9:72:4b:ef: 80:30:f5:1c:62:d9:20:07:40:b2:1f:fb:78:7d:89:0e:15:38: f4:9e:27:6d:b2:0f:4b:8a:bd:51:bd:d3:6a:01:5c:6d:bd:9a: 0a:d7:73:71:33:2e:2f:7a:91:d9:74:7a:51:2f:74:68:26:e6: 16:f4:26:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvNqHA+MUph++IsbSTAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjUxMjE5MDYwMTMwWhcNMjUxMjIwMDYwMTMwWjAzMTEwLwYDVQQD Eyg2ZWJjMjNhNDJkYzNmYWNkYTQxN2ZiMDZmMmEyMjVhYmRkOWQyMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoJkGWHnhY+C3LZYS46uE6hW7I+h Q7dPq4bIvA00DTKDDVBH3B0/Q5UssaEq1H6AjhqHM0dkKXq9nOcJScxUeRTplsPP dBcovSX0iLawkhXnlCjMEIxHjS2MN88zV0hCJCH0EmfsFofs8CV8gqS1jhAyMj0A f6mhsCiz18TEWVgDjY4MSS+WezwaQlAwl/ZjmUjUmD3+lk6sV/vsOB3SJoTYkNLb gZ3gKJ5Mylx8Au/H2dFD2b/rWwnf9MUXmrZnFeIREh+fe2Fw3zEhJsObrez00/FZ SD955Yzr80i8AKa90ubDIDRmobmHjC3s5nePkVUoT+H1BuJ7yCJenp/utwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG68I6Qtw/rNpBf7BvKiJavdnSNDMB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkOZVi3I 00vxefbk7JkHAnfQzlNXuCPDV4XgOTPbdmJWaoZ5uMRlacmO1XtifSlTFWpNy/7A Vc5Mg164KUiuwhDcCIuac54P5zHp/bxGX1T7hmD+ZAw9fR8jjvWqBhFqRWPNuuP1 MaPUWEnhL9hzDCNq4z5nRuwiocfmjd+j+mf82miyZgcjh19db3uEXxYUBS43Fp3w EZB17sc4n9tPHi9vdOw/dmmkbn9fEJ5ubAbzNGoxKSFtd8H6Q5DSFA3fLLPJckvv gDD1HGLZIAdAsh/7eH2JDhU49J4nbbIPS4q9Ub3TagFcbb2aCtdzcTMuL3qR2XR6 US90aCbmFvQm9g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:57 2025 by rpki-client