This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json) Hash identifier: IWNJty2nKnhM0Up9uEsp8jaUTY50WnighTdP+AIqPrQ= Subject key identifier: 20:82:E5:D7:6C:8F:EE:59:88:73:CA:88:54:80:03:BB:A4:D0:5D:47 Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf Certificate serial: 019C427D9CF068DDFB349309F010FE8C8C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft Manifest number: 0B06 Signing time: Mon 09 Feb 2026 13:00:54 +0000 Manifest this update: Mon 09 Feb 2026 13:00:54 +0000 Manifest next update: Tue 10 Feb 2026 13:00:54 +0000 Files and hashes: 1: 8r5CCMNCOrF5UeZm--M1-L2_aNE.roa (hash: 5uZrQi9goTIW1VoDg15afLwiKtYpkz/EDyqXcTbpQqo=) 2: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: VcAtqfikalAeyBxLiPs0Jc8+wAYB9oun2WMgvOn/Hxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:9c:f0:68:dd:fb:34:93:09:f0:10:fe:8c:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf Validity Not Before: Feb 9 13:00:54 2026 GMT Not After : Feb 10 13:00:54 2026 GMT Subject: CN=2082e5d76c8fee598873ca88548003bba4d05d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:b9:43:8e:d4:38:f2:8d:21:27:f7:bf:b0: 1e:03:0a:9a:be:c8:83:ce:ea:de:37:e9:a1:2d:c5: 83:6b:52:a3:a8:66:e5:36:10:8a:fa:37:52:21:44: 57:df:a9:14:c2:a6:6f:22:ff:0b:a2:6f:43:bf:14: ad:d5:01:f1:8f:16:b7:9a:a1:6b:cc:e7:2e:56:65: 84:6f:e2:eb:27:24:d2:f4:ba:3d:01:aa:84:83:1a: 8a:63:05:2e:eb:40:cd:4f:cf:f9:82:7f:f1:f8:3f: 03:89:a4:d3:a8:ce:fb:f1:e4:be:39:c0:19:97:a7: 2a:71:16:f0:a2:d8:9a:ed:94:46:90:bb:d9:0f:08: 6a:3f:d9:49:14:cb:a1:51:97:4f:42:2c:f1:e6:58: 3e:60:19:f5:36:1b:4b:94:f7:3d:e7:20:ca:6b:ab: ce:04:54:cb:cd:89:53:fd:e9:e4:f6:a6:34:7b:71: b7:34:ed:16:04:86:c8:27:ac:71:fe:54:be:d6:e3: 43:1f:0f:96:ba:0c:05:2a:cc:64:33:ff:97:45:52: 64:75:d0:0b:e3:23:0b:02:4a:f7:e9:e5:46:4c:e8: da:02:b9:d5:5c:8c:70:79:c3:75:d2:39:c6:d3:60: ed:55:34:b5:36:9a:04:86:96:1f:7d:cf:46:55:2f: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:E5:D7:6C:8F:EE:59:88:73:CA:88:54:80:03:BB:A4:D0:5D:47 X509v3 Authority Key Identifier: keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a4:12:5e:0a:ca:dc:14:31:b9:e6:fb:02:d1:d9:ef:f5:39: 57:01:3f:2d:e3:3c:ea:45:52:3c:60:ac:5b:0a:c7:1a:1f:fa: 09:32:0a:23:fb:59:0b:f1:8c:d8:bf:f4:7d:cb:4b:bd:dc:1a: 21:27:77:ae:e8:f6:91:48:7c:f2:8f:17:6e:d8:b1:04:f5:b7: 9c:64:48:54:5a:8f:db:e0:21:8d:5b:1f:ea:43:42:0c:f2:56: 7a:57:7a:b6:24:c2:2b:b7:0d:5c:85:0f:2a:4f:90:dc:f6:e6: a5:15:07:ad:b9:11:72:2c:87:42:05:63:15:d2:66:43:2b:05: 0e:c0:8b:43:13:f8:db:bc:24:29:de:6a:5e:ec:5b:4b:29:cf: c1:8b:c9:2a:49:44:29:cd:f3:34:ea:74:cf:6e:db:bb:82:31: 2d:11:12:40:1a:08:29:91:6e:2b:7e:3d:c6:89:a9:72:10:f8: 41:bb:4c:9e:21:e7:c9:1d:64:33:18:08:28:d1:88:7b:79:70: 9c:d1:c1:b1:cc:e2:50:af:6d:19:f2:6f:87:1b:26:71:4e:85: c6:60:ed:c5:43:60:ed:3d:3d:cc:6e:cd:fe:b3:5d:30:85:11: 31:03:38:fc:03:9a:b1:3f:68:48:88:bf:01:8d:35:16:1b:37: e7:fa:78:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZzwaN37NJMJ8BD+jIwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjM0ZmI2ODE4MDIxNDRmMDY0YzFiMTlmMTFmNmFhZTc1 OTZkY2YwHhcNMjYwMjA5MTMwMDU0WhcNMjYwMjEwMTMwMDU0WjAzMTEwLwYDVQQD EygyMDgyZTVkNzZjOGZlZTU5ODg3M2NhODg1NDgwMDNiYmE0ZDA1ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzO5Q47UOPKNISf3v7AeAwqavsiD zureN+mhLcWDa1KjqGblNhCK+jdSIURX36kUwqZvIv8Lom9DvxSt1QHxjxa3mqFr zOcuVmWEb+LrJyTS9Lo9AaqEgxqKYwUu60DNT8/5gn/x+D8DiaTTqM778eS+OcAZ l6cqcRbwotia7ZRGkLvZDwhqP9lJFMuhUZdPQizx5lg+YBn1NhtLlPc95yDKa6vO BFTLzYlT/enk9qY0e3G3NO0WBIbIJ6xx/lS+1uNDHw+WugwFKsxkM/+XRVJkddAL 4yMLAkr36eVGTOjaArnVXIxwecN10jnG02DtVTS1NpoEhpYffc9GVS+gnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCC5ddsj+5ZiHPKiFSAA7uk0F1HMB8GA1UdIwQY MBaAFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTkt NzZhMGY3Yjg0MWRjLzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTktNzZhMGY3Yjg0MWRj LzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaQSXgrK 3BQxueb7AtHZ7/U5VwE/LeM86kVSPGCsWwrHGh/6CTIKI/tZC/GM2L/0fctLvdwa ISd3ruj2kUh88o8XbtixBPW3nGRIVFqP2+AhjVsf6kNCDPJWeld6tiTCK7cNXIUP Kk+Q3PbmpRUHrbkRciyHQgVjFdJmQysFDsCLQxP427wkKd5qXuxbSynPwYvJKklE Kc3zNOp0z27bu4IxLRESQBoIKZFuK349xompchD4QbtMniHnyR1kMxgIKNGIe3lw nNHBscziUK9tGfJvhxsmcU6FxmDtxUNg7T09zG7N/rNdMIURMQM4/AOasT9oSIi/ AY01Fhs35/p41A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:08 2026 by rpki-client