This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json) Hash identifier: +dxnwMe0q3ZZOpAnoUVs1VPrKQuq68DrlHnDQ7/ryXo= Subject key identifier: 18:54:79:DF:6F:4D:A0:95:D0:91:31:DB:57:CC:68:C1:07:13:40:D7 Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11 Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311 Certificate serial: 019B0E26B25C38C9FB2110E52A19D55F53B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 16:02:55 +0000 Manifest this update: Thu 11 Dec 2025 16:02:55 +0000 Manifest next update: Fri 12 Dec 2025 16:02:55 +0000 Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=) 2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=) 3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: 6umIQOo6V9rM5/A1sbH4Jr9nhGI0woeDdw/5aW0eI2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:b2:5c:38:c9:fb:21:10:e5:2a:19:d5:5f:53:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311 Validity Not Before: Dec 11 16:02:55 2025 GMT Not After : Dec 12 16:02:55 2025 GMT Subject: CN=185479df6f4da095d09131db57cc68c1071340d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:c1:02:31:ea:b1:74:39:61:81:5f:95:99: 89:a6:ff:6f:ae:5c:bc:48:e8:77:fb:60:40:4e:36: 12:1a:b7:d1:c0:07:1a:84:99:3d:e7:60:06:d1:37: ab:3c:e4:0d:dd:84:4b:4c:60:66:3d:10:81:53:4a: 68:e1:e7:fa:bf:7b:68:d7:1e:64:4b:05:bd:34:1c: ff:b1:a1:e1:55:52:0d:02:98:db:d2:f9:d5:22:32: ac:75:8d:ce:69:c0:5a:4f:c7:3c:09:2e:df:6a:7d: 97:e3:db:13:b7:79:c3:e4:2f:2c:62:20:49:50:4e: bd:9b:9b:cd:82:07:7e:51:a7:56:80:7b:87:09:b0: 2d:52:16:1e:77:51:03:df:e8:bc:94:44:11:7a:d4: 9b:c5:d8:65:f1:e8:83:b6:fb:81:73:09:15:11:ac: ad:de:9f:54:f6:23:03:03:30:89:43:74:07:5f:88: de:e5:95:1a:86:23:74:5f:64:65:c9:7a:fe:91:47: b1:85:96:ad:ad:df:12:ae:4f:d8:f0:e8:ff:99:8b: d5:6b:86:5d:e3:75:04:f4:84:da:6f:85:50:c3:8f: fc:2c:78:ad:ef:da:c6:9e:d6:8b:11:d1:2c:44:45: 0d:9f:d8:f6:f2:23:61:1f:01:36:55:df:84:6c:6a: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:79:DF:6F:4D:A0:95:D0:91:31:DB:57:CC:68:C1:07:13:40:D7 X509v3 Authority Key Identifier: keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:23:64:b1:21:7a:6c:d0:03:db:40:e6:84:37:e3:63:9c:8c: ef:4f:4b:cd:ec:6b:be:59:3a:93:7d:51:d4:3c:2e:e0:b9:2b: e1:62:9f:fe:af:62:82:94:e0:76:3f:14:72:54:ae:6e:6c:07: 16:c5:ee:27:26:1b:e7:32:9c:e8:dd:5c:03:d7:7b:d1:62:16: d6:bc:21:80:d8:12:c3:9b:3d:9f:77:0f:98:00:9c:90:be:23: c0:10:37:ee:71:a0:bf:45:f4:8e:f3:1c:82:e1:dd:08:ae:f2: a7:bd:8a:e0:62:8a:4e:fc:72:46:9f:76:bb:98:92:ae:a8:dc: f4:66:e3:ef:07:71:e8:db:8f:e6:4a:0d:8e:39:4e:12:ce:af: c1:fb:61:99:71:7d:2a:12:94:c4:c7:33:6d:b8:92:e9:e3:6a: a4:72:63:b2:25:32:42:d2:8b:e3:25:de:97:73:82:5c:5f:f8: 5d:6c:45:79:27:1a:4e:c4:d7:61:10:e3:29:36:c1:63:e9:d0: b6:4c:92:3f:ab:0d:c6:f3:1a:09:6f:61:71:a8:e8:16:05:96: 7d:9c:d4:51:5e:fc:4c:fb:aa:b4:19:af:9f:c2:f9:31:95:41: a6:81:e7:51:c6:49:ad:96:f8:85:aa:f2:93:a6:cf:08:08:0f: 24:29:b6:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJrJcOMn7IRDlKhnVX1O5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl Y2UzMTEwHhcNMjUxMjExMTYwMjU1WhcNMjUxMjEyMTYwMjU1WjAzMTEwLwYDVQQD EygxODU0NzlkZjZmNGRhMDk1ZDA5MTMxZGI1N2NjNjhjMTA3MTM0MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydzBAjHqsXQ5YYFflZmJpv9vrly8 SOh3+2BATjYSGrfRwAcahJk952AG0TerPOQN3YRLTGBmPRCBU0po4ef6v3to1x5k SwW9NBz/saHhVVINApjb0vnVIjKsdY3OacBaT8c8CS7fan2X49sTt3nD5C8sYiBJ UE69m5vNggd+UadWgHuHCbAtUhYed1ED3+i8lEQRetSbxdhl8eiDtvuBcwkVEayt 3p9U9iMDAzCJQ3QHX4je5ZUahiN0X2RlyXr+kUexhZatrd8Srk/Y8Oj/mYvVa4Zd 43UE9ITab4VQw4/8LHit79rGntaLEdEsREUNn9j28iNhHwE2Vd+EbGpaTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhUed9vTaCV0JEx21fMaMEHE0DXMB8GA1UdIwQY MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiNksSF6 bNAD20DmhDfjY5yM709Lzexrvlk6k31R1Dwu4Lkr4WKf/q9igpTgdj8UclSubmwH FsXuJyYb5zKc6N1cA9d70WIW1rwhgNgSw5s9n3cPmACckL4jwBA37nGgv0X0jvMc guHdCK7yp72K4GKKTvxyRp92u5iSrqjc9Gbj7wdx6NuP5koNjjlOEs6vwfthmXF9 KhKUxMczbbiS6eNqpHJjsiUyQtKL4yXel3OCXF/4XWxFeScaTsTXYRDjKTbBY+nQ tkySP6sNxvMaCW9hcajoFgWWfZzUUV78TPuqtBmvn8L5MZVBpoHnUcZJrZb4hary k6bPCAgPJCm2rg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:58:07 2025 by rpki-client