This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json) Hash identifier: ecMIqaWD24KVb+p31mJpMHL+LnodFO0EfiVz1eEVfUA= Subject key identifier: 2D:D1:EB:64:A9:59:B8:1C:D4:10:67:2A:98:BA:06:A5:C1:8D:7C:0B Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Certificate serial: 019B39B42CC520D45EE30056E306F5D1F914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft Manifest number: 1237 Signing time: Sat 20 Dec 2025 03:01:07 +0000 Manifest this update: Sat 20 Dec 2025 03:01:07 +0000 Manifest next update: Sun 21 Dec 2025 03:01:07 +0000 Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: Vf+zPITxSOgPAF4+E67rjmGFAezB11Sp0XAF+qCIiB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:2c:c5:20:d4:5e:e3:00:56:e3:06:f5:d1:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Validity Not Before: Dec 20 03:01:07 2025 GMT Not After : Dec 21 03:01:07 2025 GMT Subject: CN=2dd1eb64a959b81cd410672a98ba06a5c18d7c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:88:80:d0:ad:58:93:81:ec:e0:6b:28:b3: 41:67:0f:dc:6a:3c:74:ce:43:82:ff:d5:2d:bf:86: 12:c7:82:c4:68:63:07:5b:f7:8c:4b:df:e6:29:a3: 9d:1e:70:91:74:49:59:1c:36:d4:8e:f3:c0:db:b0: 45:87:00:93:11:a6:64:28:91:e7:73:ee:58:90:d6: 8b:ea:44:34:82:2e:a9:e7:2d:d4:8d:cb:01:e4:88: f3:e1:53:6b:fa:27:6b:cf:e5:0c:b0:fe:6f:1c:2d: 17:10:86:ff:0c:c2:59:7f:a8:9b:6e:e6:74:29:40: 9a:d9:df:1d:ab:26:a3:66:6e:a2:3d:65:b0:44:26: f4:c3:9b:99:cb:05:f7:11:22:34:4a:d6:b4:eb:54: da:e5:34:37:f3:33:5d:35:c0:f1:0b:da:2a:c6:7d: 38:ab:65:46:89:71:99:64:73:71:93:c5:e0:0d:06: 7d:a3:de:dd:27:ee:cc:3c:5d:18:5e:c5:65:9e:e1: 34:75:32:94:c3:47:c5:59:4d:98:1f:c4:85:04:32: 43:d5:bc:65:1b:9c:da:42:51:11:cb:5c:f1:58:ce: d3:b1:6c:eb:6c:93:46:8b:08:96:21:40:06:f7:88: f8:ba:f5:97:fe:f6:5e:ec:c0:50:f8:aa:b7:9d:cd: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:EB:64:A9:59:B8:1C:D4:10:67:2A:98:BA:06:A5:C1:8D:7C:0B X509v3 Authority Key Identifier: keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:5d:28:ed:5d:cd:f2:ee:81:c4:46:4c:cc:2a:29:74:61:32: f1:2e:b4:81:7d:41:fa:fb:22:92:b6:f7:ff:a2:ee:86:68:5e: b6:be:0e:d2:ae:f1:a1:df:e4:3c:dd:d3:b2:e5:49:7c:0c:01: f6:7c:86:59:44:22:fe:61:36:11:7a:ba:cc:37:1a:b0:26:4e: 60:ab:2a:06:f7:30:01:5e:0f:36:81:d1:b4:a9:68:ca:1f:8c: b6:1c:29:b5:92:16:59:8e:52:1f:a7:93:aa:94:0b:03:b4:8f: db:a8:47:f6:2b:58:91:fe:ed:ad:5d:17:e4:4b:ad:8c:06:73: 0a:3c:e8:4b:f3:6c:b4:76:dd:ef:b6:d8:c2:ca:38:fd:d8:83: fe:90:0d:b4:1c:82:91:25:f2:c6:c7:d0:2a:5b:0b:59:1b:9c: 74:74:17:aa:d9:46:50:1d:ea:28:02:86:bb:2c:46:46:fc:87: 0f:3e:6c:98:de:e8:d0:1d:3d:23:d7:b5:39:ac:a8:9f:6c:4c: dd:b8:a8:38:90:fb:f2:0c:58:92:89:36:d5:a4:a4:7a:bc:9c: 5e:a7:59:c9:ab:82:57:dd:53:c5:5f:f2:ae:89:7a:cf:0b:db: a4:91:ed:c2:34:8b:31:6c:bd:46:34:dd:c9:6f:50:e3:e0:b4: 8b:7f:c2:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCzFINRe4wBW4wb10fkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5 MWExODYwHhcNMjUxMjIwMDMwMTA3WhcNMjUxMjIxMDMwMTA3WjAzMTEwLwYDVQQD EygyZGQxZWI2NGE5NTliODFjZDQxMDY3MmE5OGJhMDZhNWMxOGQ3YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjeIgNCtWJOB7OBrKLNBZw/cajx0 zkOC/9Utv4YSx4LEaGMHW/eMS9/mKaOdHnCRdElZHDbUjvPA27BFhwCTEaZkKJHn c+5YkNaL6kQ0gi6p5y3UjcsB5Ijz4VNr+idrz+UMsP5vHC0XEIb/DMJZf6ibbuZ0 KUCa2d8dqyajZm6iPWWwRCb0w5uZywX3ESI0Sta061Ta5TQ38zNdNcDxC9oqxn04 q2VGiXGZZHNxk8XgDQZ9o97dJ+7MPF0YXsVlnuE0dTKUw0fFWU2YH8SFBDJD1bxl G5zaQlERy1zxWM7TsWzrbJNGiwiWIUAG94j4uvWX/vZe7MBQ+Kq3nc37lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3R62SpWbgc1BBnKpi6BqXBjXwLMB8GA1UdIwQY MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1 LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA310o7V3N 8u6BxEZMzCopdGEy8S60gX1B+vsikrb3/6Luhmhetr4O0q7xod/kPN3TsuVJfAwB 9nyGWUQi/mE2EXq6zDcasCZOYKsqBvcwAV4PNoHRtKloyh+MthwptZIWWY5SH6eT qpQLA7SP26hH9itYkf7trV0X5EutjAZzCjzoS/NstHbd77bYwso4/diD/pANtByC kSXyxsfQKlsLWRucdHQXqtlGUB3qKAKGuyxGRvyHDz5smN7o0B09I9e1Oayon2xM 3bioOJD78gxYkok21aSkerycXqdZyauCV91TxV/yrol6zwvbpJHtwjSLMWy9RjTd yW9Q4+C0i3/Cxw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:45 2025 by rpki-client