This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json) Hash identifier: 0JXldRtPWce1LAWSE8RYvzxlD4PovuqFILyBO6XLRus= Subject key identifier: CA:24:19:AF:E9:E4:FF:FE:D9:8F:F0:92:15:93:6F:62:12:3B:B6:13 Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Certificate serial: 019B1EAA34C1F1150C7862408634FD3CE4AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft Manifest number: 1229 Signing time: Sun 14 Dec 2025 21:00:29 +0000 Manifest this update: Sun 14 Dec 2025 21:00:29 +0000 Manifest next update: Mon 15 Dec 2025 21:00:29 +0000 Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: 9gX9ynbDB2BKJftoZG9WgzcGo5MdxyVW4DMCRkPxRcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:34:c1:f1:15:0c:78:62:40:86:34:fd:3c:e4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Validity Not Before: Dec 14 21:00:29 2025 GMT Not After : Dec 15 21:00:29 2025 GMT Subject: CN=ca2419afe9e4fffed98ff09215936f62123bb613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:48:61:7e:ee:c6:fe:b4:6b:72:58:37:9b: d2:ac:b2:2d:50:1c:2f:66:3c:ed:4c:e7:47:56:b6: 60:df:d4:44:ab:5e:1f:5c:34:32:6e:15:a9:be:18: 45:39:d3:c9:b4:6c:ef:43:eb:a2:d6:2f:f5:0d:5f: 44:a1:a2:54:52:af:7d:3d:e1:40:04:fc:34:2d:f6: 5a:41:b1:7a:3b:e8:8c:7f:86:2e:3c:b9:fa:d8:d6: 73:78:32:7b:0e:32:5f:7d:55:f3:a5:17:20:2c:0e: 26:6d:25:36:af:8e:42:da:99:e3:0b:4e:09:87:8a: e9:90:f8:f0:4e:4b:c8:3d:42:54:c9:30:37:ff:38: 2e:70:7a:76:eb:9a:d5:7a:17:41:be:d6:e6:9a:03: 73:b7:14:ce:95:6f:f9:dc:3b:fc:e0:ac:98:69:92: 4f:7e:11:f3:75:72:cc:e6:74:19:3e:a8:8c:f4:fa: 36:79:e2:76:44:62:1a:0a:ee:6a:df:2f:39:63:f0: 9d:2f:26:c8:29:13:c7:da:ca:d4:6f:b5:fb:e3:30: 9d:12:d7:a4:bb:08:c9:89:30:3e:3e:5d:9b:9e:e3: e8:19:53:d7:fe:64:26:fa:e6:df:2e:e1:85:2a:ab: 2d:41:12:a6:aa:5d:ed:19:d2:d5:89:54:e8:9a:91: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:24:19:AF:E9:E4:FF:FE:D9:8F:F0:92:15:93:6F:62:12:3B:B6:13 X509v3 Authority Key Identifier: keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5c:ad:d8:eb:6f:ec:13:16:c9:bd:99:6e:24:b7:0d:eb:78: 2e:4c:08:e0:2a:09:8b:29:74:6d:cb:45:69:58:20:67:fd:9c: 97:82:e1:f7:54:ef:d4:0a:b2:2b:70:90:44:c3:1e:c3:af:b2: 12:78:eb:91:f0:9a:28:0f:e0:be:10:47:d4:9d:62:5e:00:3d: 95:9f:f4:86:14:56:19:27:9c:89:76:9d:ea:ec:8a:6a:57:b7: 5d:18:15:c1:b4:7a:be:d2:d9:51:24:74:19:e1:59:b0:eb:eb: e8:d1:49:ed:6b:6a:87:89:53:6d:b5:c5:b3:50:ab:80:91:f2: d4:b1:64:31:53:6a:1c:4d:ad:98:31:75:3a:3e:aa:2e:da:44: d5:f8:7f:6f:3c:fc:1a:f0:21:bd:53:2b:92:3d:ee:31:bd:69: 99:cb:83:45:e9:95:01:ca:83:7c:b9:9a:74:02:6b:76:a3:e2: 9e:49:39:d3:85:d1:17:17:c4:ac:85:ad:9d:82:04:6a:a9:50: 33:52:54:36:11:bc:99:3e:d1:88:62:ef:6a:22:e3:18:7d:cd: 66:b3:57:3b:35:09:55:72:5e:45:de:c3:6c:60:3b:c5:29:fa: f4:cd:49:ba:49:4e:09:b0:0c:53:02:24:59:08:89:e8:21:91: 50:23:7c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqjTB8RUMeGJAhjT9POSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5 MWExODYwHhcNMjUxMjE0MjEwMDI5WhcNMjUxMjE1MjEwMDI5WjAzMTEwLwYDVQQD EyhjYTI0MTlhZmU5ZTRmZmZlZDk4ZmYwOTIxNTkzNmY2MjEyM2JiNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOFIYX7uxv60a3JYN5vSrLItUBwv ZjztTOdHVrZg39REq14fXDQybhWpvhhFOdPJtGzvQ+ui1i/1DV9EoaJUUq99PeFA BPw0LfZaQbF6O+iMf4YuPLn62NZzeDJ7DjJffVXzpRcgLA4mbSU2r45C2pnjC04J h4rpkPjwTkvIPUJUyTA3/zgucHp265rVehdBvtbmmgNztxTOlW/53Dv84KyYaZJP fhHzdXLM5nQZPqiM9Po2eeJ2RGIaCu5q3y85Y/CdLybIKRPH2srUb7X74zCdEtek uwjJiTA+Pl2bnuPoGVPX/mQm+ubfLuGFKqstQRKmql3tGdLViVTompGmqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMokGa/p5P/+2Y/wkhWTb2ISO7YTMB8GA1UdIwQY MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1 LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1yt2Otv 7BMWyb2ZbiS3Det4LkwI4CoJiyl0bctFaVggZ/2cl4Lh91Tv1AqyK3CQRMMew6+y EnjrkfCaKA/gvhBH1J1iXgA9lZ/0hhRWGSeciXad6uyKale3XRgVwbR6vtLZUSR0 GeFZsOvr6NFJ7Wtqh4lTbbXFs1CrgJHy1LFkMVNqHE2tmDF1Oj6qLtpE1fh/bzz8 GvAhvVMrkj3uMb1pmcuDRemVAcqDfLmadAJrdqPinkk504XRFxfErIWtnYIEaqlQ M1JUNhG8mT7RiGLvaiLjGH3NZrNXOzUJVXJeRd7DbGA7xSn69M1JuklOCbAMUwIk WQiJ6CGRUCN81g== -----END CERTIFICATE-----Generated at Mon Dec 15 06:39:30 2025 by rpki-client