This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json) Hash identifier: PBiDAa/T69OcdkJXw2q6KzsOvBdnqXBOvGu3gPYIyug= Subject key identifier: 3D:2E:3F:70:95:5D:E2:C7:8B:72:CF:BA:E6:39:C1:6E:BA:25:8F:65 Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202 Certificate serial: 019B27AE7250D2C686480088623B05FA5BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft Manifest number: 0E73 Signing time: Tue 16 Dec 2025 15:01:42 +0000 Manifest this update: Tue 16 Dec 2025 15:01:42 +0000 Manifest next update: Wed 17 Dec 2025 15:01:42 +0000 Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: fFZJ2nxwA+NRaj+qqfNXUHip3PGc6lboHWyPXzEHUoU=) 2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:72:50:d2:c6:86:48:00:88:62:3b:05:fa:5b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202 Validity Not Before: Dec 16 15:01:42 2025 GMT Not After : Dec 17 15:01:42 2025 GMT Subject: CN=3d2e3f70955de2c78b72cfbae639c16eba258f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:95:56:ee:b5:d3:07:a0:2d:01:e6:97:3f: c2:fe:32:dc:cc:c9:27:3e:57:80:4c:be:30:e2:2b: bd:5d:22:d5:a6:a9:d2:7f:77:97:ae:78:be:2a:98: 48:ce:21:e5:51:b0:d8:36:66:6b:e4:94:69:43:ea: 02:ca:8e:b7:b8:c7:61:83:fe:8e:77:c9:ad:0d:44: 04:08:c2:6a:aa:bd:08:6f:12:a1:0d:52:e3:55:1d: 82:a4:5e:6c:2b:d3:4f:b3:72:04:52:11:be:37:17: 4d:27:a8:72:1a:e3:ab:10:41:c2:7d:ea:72:a6:7c: 71:8f:f7:0a:dd:2c:00:59:54:cc:d4:57:74:7e:f0: b7:50:12:b2:0f:01:14:37:45:64:97:9d:35:da:74: b9:61:4f:3a:b0:c6:81:bb:5a:42:43:b4:36:06:c8: a0:f6:79:f9:d3:6c:d5:45:04:4b:df:f2:d0:64:ac: 9e:df:49:17:45:d4:69:88:11:e8:9d:a4:7a:e2:f5: cc:de:76:78:37:91:20:1a:ef:03:98:e6:62:0e:67: 48:15:e0:b8:2e:79:2f:39:34:49:e0:d8:13:e1:0e: 15:d1:c5:d9:f2:44:3b:97:d6:ce:9f:43:67:fc:b8: 9e:2b:ab:94:56:37:ec:eb:4e:b7:c6:16:1a:3d:b8: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:3F:70:95:5D:E2:C7:8B:72:CF:BA:E6:39:C1:6E:BA:25:8F:65 X509v3 Authority Key Identifier: keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d9:e7:45:e4:1b:0b:90:06:a8:34:a0:f9:cc:3f:f0:a4:6f: f1:75:e1:8b:98:f1:de:41:f2:6e:e4:9d:df:d7:98:07:24:fd: 09:16:50:27:eb:17:20:96:99:5c:1b:fc:ba:bf:36:03:fb:98: 62:9a:99:d9:59:d8:df:db:aa:69:46:d2:81:47:f2:a1:12:0d: 57:c6:0c:ca:ed:a6:a1:87:68:75:18:f0:02:53:de:ba:b8:b2: 5e:25:27:81:11:16:c5:1d:67:41:70:c3:ab:41:e3:61:41:5a: 3b:92:7b:53:47:43:bb:83:8a:cd:3f:ac:5e:90:bf:e5:b3:7e: 6e:34:4b:64:80:43:59:79:d2:6e:25:06:05:e8:46:fb:02:90: 95:fb:33:65:30:98:d5:9b:6d:fa:2e:e8:32:e3:b9:a2:3b:8f: ac:12:2f:1b:9d:81:3f:de:22:a3:06:da:a9:dd:00:96:0f:89: cc:a3:70:0b:f0:eb:af:2d:98:32:32:4b:62:06:b6:63:50:dd: 44:51:e6:3d:57:94:31:a1:21:f5:78:55:7d:12:55:48:cf:71: 6a:9c:50:8c:f3:05:79:79:aa:27:29:98:78:30:10:7c:ea:37: 0e:bd:1b:fe:2b:84:b1:36:d0:d1:15:8b:db:e6:da:d2:61:74: 7f:fc:03:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrnJQ0saGSACIYjsF+lvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWNlNzJmYmJhZjdiZDA5NzVlZGRhNjc2M2I2ODA3NzM2 NGUyMDIwHhcNMjUxMjE2MTUwMTQyWhcNMjUxMjE3MTUwMTQyWjAzMTEwLwYDVQQD EygzZDJlM2Y3MDk1NWRlMmM3OGI3MmNmYmFlNjM5YzE2ZWJhMjU4ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RaVVu610wegLQHmlz/C/jLczMkn PleATL4w4iu9XSLVpqnSf3eXrni+KphIziHlUbDYNmZr5JRpQ+oCyo63uMdhg/6O d8mtDUQECMJqqr0IbxKhDVLjVR2CpF5sK9NPs3IEUhG+NxdNJ6hyGuOrEEHCfepy pnxxj/cK3SwAWVTM1Fd0fvC3UBKyDwEUN0Vkl5012nS5YU86sMaBu1pCQ7Q2Bsig 9nn502zVRQRL3/LQZKye30kXRdRpiBHonaR64vXM3nZ4N5EgGu8DmOZiDmdIFeC4 LnkvOTRJ4NgT4Q4V0cXZ8kQ7l9bOn0Nn/LieK6uUVjfs6063xhYaPbhVKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0uP3CVXeLHi3LPuuY5wW66JY9lMB8GA1UdIwQY MBaAFC3s5y+7r3vQl17dpnY7aAdzZOICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAt ZDUxYWU0YWExMjdiLzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMjZjYjEtNGMwZi00N2Q4LWI3MDAtZDUxYWU0YWExMjdi LzEvTGV6bkw3dXZlOUNYWHQybWRqdG9CM05rNGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9nnReQb C5AGqDSg+cw/8KRv8XXhi5jx3kHybuSd39eYByT9CRZQJ+sXIJaZXBv8ur82A/uY YpqZ2VnY39uqaUbSgUfyoRINV8YMyu2moYdodRjwAlPeuriyXiUngREWxR1nQXDD q0HjYUFaO5J7U0dDu4OKzT+sXpC/5bN+bjRLZIBDWXnSbiUGBehG+wKQlfszZTCY 1Ztt+i7oMuO5ojuPrBIvG52BP94iowbaqd0Alg+JzKNwC/Drry2YMjJLYga2Y1Dd RFHmPVeUMaEh9XhVfRJVSM9xapxQjPMFeXmqJymYeDAQfOo3Dr0b/iuEsTbQ0RWL 2+ba0mF0f/wD3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 20:28:48 2025 by rpki-client