This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json) Hash identifier: t6IXlymA9OmHPOF5NkVYgL5KhZGf/3/8iNXvArrASz4= Subject key identifier: 46:F4:2F:9F:E4:BC:24:E2:FC:9F:C9:ED:17:E8:17:A1:DA:45:35:3E Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Certificate serial: 019B3420134C9FB5AB4C47FC76735A6A7E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft Manifest number: 067A Signing time: Fri 19 Dec 2025 01:01:15 +0000 Manifest this update: Fri 19 Dec 2025 01:01:15 +0000 Manifest next update: Sat 20 Dec 2025 01:01:15 +0000 Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=) 2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=) 3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: eMJYe+6QH6gu60wnxjhrk88zFIRI+MXFoAzTyxZKing=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:13:4c:9f:b5:ab:4c:47:fc:76:73:5a:6a:7e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Validity Not Before: Dec 19 01:01:15 2025 GMT Not After : Dec 20 01:01:15 2025 GMT Subject: CN=46f42f9fe4bc24e2fc9fc9ed17e817a1da45353e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:79:c1:5a:51:41:0a:09:3c:b6:fb:4b:5e: bf:b7:47:29:cb:b9:6d:2a:1f:62:6c:1f:66:3a:0d: 77:44:15:a1:4f:ed:94:47:4c:c0:e9:72:41:23:a3: 6c:79:b3:db:b5:a6:09:8a:51:80:d2:ba:87:a1:79: 2a:47:08:64:45:b1:a5:34:47:d2:a3:8b:1e:35:d4: 67:43:6f:7f:66:6a:2e:2f:b1:0b:78:a5:4e:e2:82: f1:5c:45:b7:d0:fe:b5:10:94:85:a2:c3:7d:f1:af: a3:69:1e:de:40:24:c6:77:e8:1b:db:d5:61:d4:17: 7c:45:97:0e:b7:a5:5c:e4:c0:30:51:a1:0c:16:5c: 9d:e5:c6:63:10:27:66:e2:61:48:fd:40:1a:b0:4e: 9b:6c:7a:da:76:65:65:4d:21:73:de:30:b4:84:f2: 95:00:1c:2f:6c:5f:e9:d5:51:6b:04:18:f3:10:1e: 05:b8:23:33:d1:09:9c:d9:fc:db:06:78:ad:62:05: 41:52:b9:ac:f5:62:5c:99:39:46:05:9e:dc:77:82: 10:56:d3:48:ca:91:7b:49:06:9f:2d:bc:9f:08:3b: 4c:ce:51:cb:fd:a9:9e:74:db:5d:84:fb:b7:62:b1: f4:26:60:de:8b:1a:55:57:5f:71:60:37:4d:6e:9f: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:2F:9F:E4:BC:24:E2:FC:9F:C9:ED:17:E8:17:A1:DA:45:35:3E X509v3 Authority Key Identifier: keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ca:b0:f7:16:a3:71:0c:c8:22:3a:d3:d0:8b:8c:66:86:03: 9d:1b:9b:55:7c:a8:71:aa:ee:3f:a5:3f:52:ed:49:0e:53:18: 7c:1e:92:2a:0c:53:cf:28:c9:87:39:d1:1a:ef:c4:81:47:14: 57:f7:c7:65:a6:72:2f:a2:b0:12:ec:75:5e:bf:74:3a:6a:3e: 13:12:40:e8:31:d4:0e:c3:22:93:d2:e0:4a:37:83:23:24:d6: 19:c1:08:71:06:fe:61:b4:2d:42:84:6a:fc:f5:6d:ae:03:c0: cc:52:9b:44:0a:19:e2:22:7b:ea:68:60:92:0b:dc:81:f2:47: 2c:aa:dd:0e:d2:e4:a3:dd:7d:bf:61:45:5e:4d:29:c7:36:1c: 0f:91:67:2f:59:7a:b3:46:69:a7:3b:86:86:93:99:0e:d3:d8: c3:1a:c2:63:7d:9f:a2:bd:ea:58:e3:8e:4e:dd:93:4d:21:99: c1:59:1d:34:b7:ff:f0:52:53:d0:81:5e:29:1f:5e:fd:16:d0: dc:0c:8a:9f:7f:8b:c4:24:7f:52:83:55:ac:45:7c:1a:a8:60: fe:45:65:34:d2:b2:8e:cc:9f:e6:b3:d6:98:8f:0e:31:cf:28: 17:bc:1d:cc:fc:07:74:78:45:27:57:c8:1e:41:16:b1:0f:7b: 2c:30:98:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBNMn7WrTEf8dnNaan5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi MjliOWMwHhcNMjUxMjE5MDEwMTE1WhcNMjUxMjIwMDEwMTE1WjAzMTEwLwYDVQQD Eyg0NmY0MmY5ZmU0YmMyNGUyZmM5ZmM5ZWQxN2U4MTdhMWRhNDUzNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZR5wVpRQQoJPLb7S16/t0cpy7lt Kh9ibB9mOg13RBWhT+2UR0zA6XJBI6NsebPbtaYJilGA0rqHoXkqRwhkRbGlNEfS o4seNdRnQ29/ZmouL7ELeKVO4oLxXEW30P61EJSFosN98a+jaR7eQCTGd+gb29Vh 1Bd8RZcOt6Vc5MAwUaEMFlyd5cZjECdm4mFI/UAasE6bbHradmVlTSFz3jC0hPKV ABwvbF/p1VFrBBjzEB4FuCMz0Qmc2fzbBnitYgVBUrms9WJcmTlGBZ7cd4IQVtNI ypF7SQafLbyfCDtMzlHL/amedNtdhPu3YrH0JmDeixpVV19xYDdNbp/wVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb0L5/kvCTi/J/J7RfoF6HaRTU+MB8GA1UdIwQY MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8qw9xaj cQzIIjrT0IuMZoYDnRubVXyocaruP6U/Uu1JDlMYfB6SKgxTzyjJhznRGu/EgUcU V/fHZaZyL6KwEux1Xr90Omo+ExJA6DHUDsMik9LgSjeDIyTWGcEIcQb+YbQtQoRq /PVtrgPAzFKbRAoZ4iJ76mhgkgvcgfJHLKrdDtLko919v2FFXk0pxzYcD5FnL1l6 s0ZppzuGhpOZDtPYwxrCY32for3qWOOOTt2TTSGZwVkdNLf/8FJT0IFeKR9e/RbQ 3AyKn3+LxCR/UoNVrEV8Gqhg/kVlNNKyjsyf5rPWmI8OMc8oF7wdzPwHdHhFJ1fI HkEWsQ97LDCYJQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:33:04 2025 by rpki-client