This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json) Hash identifier: JjRHQhK/HbVK5f4O5QbfcEVUGc/R686jrkZovRUSaps= Subject key identifier: C9:54:AC:CE:A7:2C:EA:25:F2:6F:32:EE:ED:BF:24:BC:4D:E3:E1:2F Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae Certificate serial: 019B360E1B8D97D00ADAB9FF2F717DD1D653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft Manifest number: 112D Signing time: Fri 19 Dec 2025 10:00:52 +0000 Manifest this update: Fri 19 Dec 2025 10:00:52 +0000 Manifest next update: Sat 20 Dec 2025 10:00:52 +0000 Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=) 2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=) 3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: wsubSL47nsVTxqdMIYSzP3cnOcYJaFMNQXrceZsQSwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:1b:8d:97:d0:0a:da:b9:ff:2f:71:7d:d1:d6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae Validity Not Before: Dec 19 10:00:52 2025 GMT Not After : Dec 20 10:00:52 2025 GMT Subject: CN=c954accea72cea25f26f32eeedbf24bc4de3e12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:bb:c0:75:2b:30:ce:41:0c:eb:e1:39:70: 87:a6:7d:f6:67:57:06:d9:e6:66:d4:81:bc:4f:21: dc:08:b3:9e:20:1e:99:90:66:37:dc:15:4b:45:34: 2e:81:ee:c4:d6:58:b1:f6:c2:89:87:3b:f6:cb:56: 68:90:64:a5:1c:84:67:b9:0d:97:0a:de:4f:3f:db: 3e:45:8e:09:e6:38:73:e5:6d:a1:00:e6:9d:a1:d9: bc:2a:8d:40:56:7d:1e:12:8a:04:e8:68:92:aa:95: 94:53:34:30:7a:04:20:4a:54:3f:a6:59:71:b8:05: 79:85:7d:bf:59:80:4e:5b:4b:6c:dc:77:37:62:d1: f0:40:4f:71:99:2c:43:dd:fc:79:82:05:21:d9:d6: 0e:eb:4f:08:5c:e7:16:5b:e3:5f:c6:4b:c7:3a:79: 6a:da:cd:65:8f:7b:5c:7c:0a:c3:66:e5:9d:42:f5: 3a:3c:44:bb:62:eb:49:6e:c6:f1:79:f2:c9:02:a9: aa:d6:50:71:ab:27:a5:93:c9:ba:87:50:72:64:a7: ad:95:ba:70:08:5e:0b:ed:4f:f5:10:d6:50:2f:32: f1:8b:b7:67:96:62:73:91:a5:f8:6c:17:7a:e5:9a: 9b:35:aa:9e:2e:50:1f:ff:0b:4d:f2:7e:02:23:c6: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:AC:CE:A7:2C:EA:25:F2:6F:32:EE:ED:BF:24:BC:4D:E3:E1:2F X509v3 Authority Key Identifier: keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:41:82:19:ec:7c:eb:34:f9:aa:a8:b4:75:85:3c:76:b3:cb: b2:e2:da:38:50:13:01:0f:49:0b:f8:01:d3:f9:83:f3:39:46: 35:a4:59:aa:c2:f6:e5:8d:a9:8d:3c:c9:24:7a:b5:94:17:f5: 26:1c:93:a6:b7:cd:d8:0a:7b:61:08:89:b1:a5:a4:6a:7d:8e: 1d:f2:10:1a:f5:dd:34:61:4c:fe:ed:d6:4f:bb:3f:1c:62:cd: 1a:ae:47:ed:be:8f:40:ac:58:c3:57:2a:4b:ae:d2:9b:6a:e6: 20:39:16:3c:06:88:ad:50:03:58:6b:ce:60:66:45:f1:7c:39: 97:ff:c1:fe:8b:72:08:b6:a6:54:e3:3a:0a:8c:45:35:ff:99: 1a:bb:0c:76:a4:6a:c8:76:4c:f4:b5:c4:33:90:07:34:80:a3: bb:e8:9e:a1:2e:25:a6:7b:52:0e:98:e5:47:1b:0c:03:3c:3d: fc:90:d0:10:69:60:79:45:5d:0c:90:1a:3e:cf:38:58:72:1d: db:45:76:ea:da:26:e1:d2:de:7b:7b:a9:48:e2:e9:9d:ed:43: 44:12:e2:7d:b4:ee:0a:db:fb:95:c5:db:c1:3d:fb:ae:b7:cc: 75:86:74:92:ad:88:57:8d:97:a7:67:a7:fb:38:fb:c5:be:91: 14:2b:e4:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DhuNl9AK2rn/L3F90dZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx ZDhhYWUwHhcNMjUxMjE5MTAwMDUyWhcNMjUxMjIwMTAwMDUyWjAzMTEwLwYDVQQD EyhjOTU0YWNjZWE3MmNlYTI1ZjI2ZjMyZWVlZGJmMjRiYzRkZTNlMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7e7wHUrMM5BDOvhOXCHpn32Z1cG 2eZm1IG8TyHcCLOeIB6ZkGY33BVLRTQuge7E1lix9sKJhzv2y1ZokGSlHIRnuQ2X Ct5PP9s+RY4J5jhz5W2hAOadodm8Ko1AVn0eEooE6GiSqpWUUzQwegQgSlQ/pllx uAV5hX2/WYBOW0ts3Hc3YtHwQE9xmSxD3fx5ggUh2dYO608IXOcWW+NfxkvHOnlq 2s1lj3tcfArDZuWdQvU6PES7YutJbsbxefLJAqmq1lBxqyelk8m6h1ByZKetlbpw CF4L7U/1ENZQLzLxi7dnlmJzkaX4bBd65ZqbNaqeLlAf/wtN8n4CI8a4dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlUrM6nLOol8m8y7u2/JLxN4+EvMB8GA1UdIwQY MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt YTg2YTI0NjU1ODcwLzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUGCGex8 6zT5qqi0dYU8drPLsuLaOFATAQ9JC/gB0/mD8zlGNaRZqsL25Y2pjTzJJHq1lBf1 JhyTprfN2Ap7YQiJsaWkan2OHfIQGvXdNGFM/u3WT7s/HGLNGq5H7b6PQKxYw1cq S67Sm2rmIDkWPAaIrVADWGvOYGZF8Xw5l//B/otyCLamVOM6CoxFNf+ZGrsMdqRq yHZM9LXEM5AHNICju+ieoS4lpntSDpjlRxsMAzw9/JDQEGlgeUVdDJAaPs84WHId 20V26tom4dLee3upSOLpne1DRBLifbTuCtv7lcXbwT37rrfMdYZ0kq2IV42Xp2en +zj7xb6RFCvkzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:40:57 2025 by rpki-client