This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: gHMyrUTwibCSJo5bgYS7U0dZk0E74uzdizvBICpGbdU= Subject key identifier: 92:04:15:B8:B4:08:D9:04:31:00:26:D4:44:E3:BC:7B:8F:DB:4A:8C Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B077D9E5603C6BFBA073374A927F2DC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 099D Signing time: Wed 10 Dec 2025 09:00:31 +0000 Manifest this update: Wed 10 Dec 2025 09:00:31 +0000 Manifest next update: Thu 11 Dec 2025 09:00:31 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 6lgRQkmLAWYm8oQMhJnU4ufasPcKuz+iPtaGz0kgIcE=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (hash: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=) 4: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 5: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 16: wDRNVGfCfFpT0KL5KWdncpjKmrU.roa (hash: dd5hEWdRRbgBUUxwR6vJEl9R7LMSAx7EstPyaawGUNU=) 17: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:9e:56:03:c6:bf:ba:07:33:74:a9:27:f2:dc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Dec 10 09:00:31 2025 GMT Not After : Dec 11 09:00:31 2025 GMT Subject: CN=920415b8b408d904310026d444e3bc7b8fdb4a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:cc:f2:f3:d9:a4:33:fc:20:32:83:93:6e: a8:97:0b:91:8f:ff:55:47:f7:7b:f4:65:1a:00:eb: fe:5c:81:76:dc:15:9c:9e:52:9f:6c:55:6f:91:3e: cd:01:c9:44:51:7a:50:ed:e9:36:e5:18:5c:ea:5a: e4:be:38:3c:6e:37:23:be:5b:a7:51:51:6b:bb:1f: 00:fe:4e:2e:68:2e:2c:22:79:a2:33:f7:b5:3c:ea: 6a:7f:06:4b:3f:10:dd:27:d7:de:c1:ce:0c:69:af: c9:a4:79:93:82:f3:76:e6:9d:45:a5:fa:55:83:03: a6:26:8c:21:4f:ea:47:49:df:0b:3c:eb:26:8c:01: 49:2c:04:11:d1:3d:e2:49:ce:30:28:4a:45:fb:0e: dc:de:03:77:5e:dd:24:45:bf:2b:d0:db:b9:fa:6f: a5:13:62:ca:db:d3:6f:fc:8a:40:ad:8b:b8:85:ef: 21:f2:07:b2:5d:2f:14:17:8d:d7:6f:e8:f2:60:59: 87:26:8b:0e:df:2b:75:2d:ab:e6:aa:c6:38:9e:d8: e6:1f:76:1d:cf:93:35:23:e0:33:4d:a8:d9:fb:1b: d4:20:dd:49:58:14:6e:71:b1:7e:b7:57:0e:82:e7: 26:aa:f6:4f:eb:dc:84:1c:a2:d9:ad:c3:e1:ad:97: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:15:B8:B4:08:D9:04:31:00:26:D4:44:E3:BC:7B:8F:DB:4A:8C X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:d0:c2:00:6b:56:c4:b5:88:89:c5:25:1b:cd:3e:c5:e7: d7:75:12:30:8d:73:17:d6:8a:00:cc:0d:56:1e:43:8a:5d:9c: 1e:99:d2:d3:d1:7d:c6:f6:9e:9d:cf:db:45:99:dc:10:8c:29: f4:f7:29:b2:d3:9c:9e:5c:f7:db:13:75:df:a5:41:3c:6f:f2: a0:b3:e0:d9:0d:5b:a0:64:98:a0:c2:59:36:8b:f5:97:60:4d: 99:2b:a7:00:a8:dd:ef:14:60:44:cf:b4:b8:e8:9f:fd:c9:6c: 71:36:66:e7:c4:3d:22:0e:2a:ea:30:94:ef:b6:d0:3d:cb:15: cb:fd:c2:c4:97:26:82:85:84:e9:81:64:2f:85:eb:64:fa:51: 5c:a2:0c:e8:93:81:65:c3:9d:ec:ec:e5:96:8c:4d:52:68:a8: de:b3:46:34:83:6e:47:e4:6a:45:be:12:cb:27:c9:01:80:3c: 95:3b:e7:f8:ed:25:7e:4d:f1:af:51:2f:6b:d7:0f:a3:b9:67: 5a:d9:8f:1a:ef:27:7f:c8:df:a0:45:37:b9:24:b4:1d:e2:98: 38:54:28:0d:0e:71:e7:53:b5:f9:e9:31:b0:42:3c:54:57:97: 8b:2a:a6:e9:cd:24:7f:e3:63:b7:e4:78:8a:b4:06:19:cb:f3: 1d:ca:e7:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfZ5WA8a/ugczdKkn8tyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMjEwMDkwMDMxWhcNMjUxMjExMDkwMDMxWjAzMTEwLwYDVQQD Eyg5MjA0MTViOGI0MDhkOTA0MzEwMDI2ZDQ0NGUzYmM3YjhmZGI0YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlPM8vPZpDP8IDKDk26olwuRj/9V R/d79GUaAOv+XIF23BWcnlKfbFVvkT7NAclEUXpQ7ek25Rhc6lrkvjg8bjcjvlun UVFrux8A/k4uaC4sInmiM/e1POpqfwZLPxDdJ9fewc4Maa/JpHmTgvN25p1FpfpV gwOmJowhT+pHSd8LPOsmjAFJLAQR0T3iSc4wKEpF+w7c3gN3Xt0kRb8r0Nu5+m+l E2LK29Nv/IpArYu4he8h8geyXS8UF43Xb+jyYFmHJosO3yt1LavmqsY4ntjmH3Yd z5M1I+AzTajZ+xvUIN1JWBRucbF+t1cOgucmqvZP69yEHKLZrcPhrZcknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIEFbi0CNkEMQAm1ETjvHuP20qMMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovnQwgBr VsS1iInFJRvNPsXn13USMI1zF9aKAMwNVh5Dil2cHpnS09F9xvaenc/bRZncEIwp 9PcpstOcnlz32xN136VBPG/yoLPg2Q1boGSYoMJZNov1l2BNmSunAKjd7xRgRM+0 uOif/clscTZm58Q9Ig4q6jCU77bQPcsVy/3CxJcmgoWE6YFkL4XrZPpRXKIM6JOB ZcOd7OzlloxNUmio3rNGNINuR+RqRb4SyyfJAYA8lTvn+O0lfk3xr1Eva9cPo7ln WtmPGu8nf8jfoEU3uSS0HeKYOFQoDQ5x51O1+ekxsEI8VFeXiyqm6c0kf+Njt+R4 irQGGcvzHcrnfg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:46 2025 by rpki-client