This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft File: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json) Hash identifier: 3UKIzhcjDk1ITth9xzZvcLJgvLkP5nP1+i84Oex3M2o= Subject key identifier: A2:B2:7F:4F:D3:E4:32:8D:BE:E7:05:C1:AB:99:DF:13:E6:6D:EF:0E Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48 Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48 Certificate serial: 019B2B8B22551C7DFF93C054B0C1BF8A1B9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft Manifest number: 1613 Signing time: Wed 17 Dec 2025 09:01:37 +0000 Manifest this update: Wed 17 Dec 2025 09:01:37 +0000 Manifest next update: Thu 18 Dec 2025 09:01:37 +0000 Files and hashes: 1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: Km5eeeoUpx9yWe5NsYB5SFje2WJxGVK4O10WWgQu7lw=) 2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:22:55:1c:7d:ff:93:c0:54:b0:c1:bf:8a:1b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48 Validity Not Before: Dec 17 09:01:37 2025 GMT Not After : Dec 18 09:01:37 2025 GMT Subject: CN=a2b27f4fd3e4328dbee705c1ab99df13e66def0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:c3:0c:c1:88:f3:af:ec:2d:fb:50:47:1f: ad:52:ce:e9:5a:59:99:b6:70:43:11:e2:10:f4:b4: 03:e0:86:77:e7:13:18:80:76:a3:d5:b4:2c:e7:7d: 08:26:ac:0f:ac:cc:4a:52:97:11:7d:8c:50:5d:c2: c8:a6:5e:ee:8a:e7:99:6b:3a:af:b1:ea:cc:74:1a: b5:93:0f:8c:2d:a2:1a:46:e1:06:93:58:47:96:b9: d3:33:2e:f5:10:e7:1d:c7:ce:c8:c4:92:17:f3:2e: 65:16:ca:c5:f9:4e:e1:88:ea:ee:2c:d7:5b:6d:da: 41:a5:10:44:71:2b:3d:af:4a:d7:9a:cd:05:fb:a2: 9a:06:78:68:ad:08:ad:69:5f:e8:52:40:c7:42:35: 8b:ce:27:d2:ca:24:f0:f7:df:23:5a:e1:98:08:7e: 19:d1:7d:c4:17:81:69:d7:3c:38:4a:6f:26:8e:13: 7a:fd:93:47:53:3d:c0:56:da:e9:af:e6:e6:af:9a: e6:ba:51:e3:be:41:ac:f0:c7:14:bf:67:4d:7a:a0: 4f:be:f3:de:76:69:90:d5:49:47:6d:ca:34:1d:f5: d8:5b:04:bc:05:51:e2:d6:7c:63:37:af:27:c5:f1: c9:f1:5b:85:b4:6b:7a:45:0a:30:c8:0b:b5:86:83: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B2:7F:4F:D3:E4:32:8D:BE:E7:05:C1:AB:99:DF:13:E6:6D:EF:0E X509v3 Authority Key Identifier: keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c0:7b:5d:4a:fa:24:73:5f:b3:98:4e:26:eb:2f:13:74:41: 21:80:3f:f9:47:e9:55:3e:95:0b:de:c2:d4:e4:c7:4d:c6:2b: d2:0a:34:f4:69:02:0a:b9:7f:29:ea:f3:54:81:07:dc:ed:ba: 70:4d:87:50:68:1b:57:e3:79:91:64:4e:21:88:92:65:f1:50: ce:92:09:b3:cf:9b:55:01:c6:29:37:51:49:a2:ce:e8:f6:0a: a8:5f:18:cd:8b:53:c0:fb:eb:e7:57:25:9f:76:a9:9b:3b:c6: 0d:b3:77:9d:65:ea:db:a8:2b:74:32:81:0c:46:28:77:e1:d4: 91:b4:76:1a:9a:d5:40:46:d3:ac:b3:84:df:e9:ad:e0:8d:d4: d6:a4:79:c1:d4:6b:de:99:01:e9:c4:6c:ae:86:ac:4f:a9:91: 04:2c:ec:01:6e:f8:97:27:0f:91:f2:d0:0a:6b:09:8b:98:41: 93:24:d3:10:05:3e:ef:03:68:54:3e:d4:21:bd:2f:d3:b3:4c: d4:0f:00:fb:d9:35:2f:04:4b:f2:e6:f2:b2:f3:e9:1d:b4:58: db:e3:0c:9a:5a:e7:93:2c:a7:b4:9d:8e:94:e2:46:5b:fd:3c: cb:7d:f3:15:6b:68:1a:ae:89:85:a1:30:3d:89:8a:13:da:0b: 5b:93:e7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriyJVHH3/k8BUsMG/ihubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGMyMWNmZmE4MGI1YTFlNWNiZDYzMTkzMGU3ZmM1NWZk ZGZjNDgwHhcNMjUxMjE3MDkwMTM3WhcNMjUxMjE4MDkwMTM3WjAzMTEwLwYDVQQD EyhhMmIyN2Y0ZmQzZTQzMjhkYmVlNzA1YzFhYjk5ZGYxM2U2NmRlZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCzDDMGI86/sLftQRx+tUs7pWlmZ tnBDEeIQ9LQD4IZ35xMYgHaj1bQs530IJqwPrMxKUpcRfYxQXcLIpl7uiueZazqv serMdBq1kw+MLaIaRuEGk1hHlrnTMy71EOcdx87IxJIX8y5lFsrF+U7hiOruLNdb bdpBpRBEcSs9r0rXms0F+6KaBnhorQitaV/oUkDHQjWLzifSyiTw998jWuGYCH4Z 0X3EF4Fp1zw4Sm8mjhN6/ZNHUz3AVtrpr+bmr5rmulHjvkGs8McUv2dNeqBPvvPe dmmQ1UlHbco0HfXYWwS8BVHi1nxjN68nxfHJ8VuFtGt6RQowyAu1hoN65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKyf0/T5DKNvucFwauZ3xPmbe8OMB8GA1UdIwQY MBaAFC0MIc/6gLWh5cvWMZMOf8Vf3fxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAt Y2RjYzcwNGIzOGE3LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iYmY3NWQtYzFkZC00NGIwLWE1ZTAtY2RjYzcwNGIzOGE3 LzEvTFF3aHpfcUF0YUhseTlZeGt3NV94Vl9kX0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMB7XUr6 JHNfs5hOJusvE3RBIYA/+UfpVT6VC97C1OTHTcYr0go09GkCCrl/KerzVIEH3O26 cE2HUGgbV+N5kWROIYiSZfFQzpIJs8+bVQHGKTdRSaLO6PYKqF8YzYtTwPvr51cl n3apmzvGDbN3nWXq26grdDKBDEYod+HUkbR2GprVQEbTrLOE3+mt4I3U1qR5wdRr 3pkB6cRsroasT6mRBCzsAW74lycPkfLQCmsJi5hBkyTTEAU+7wNoVD7UIb0v07NM 1A8A+9k1LwRL8ubysvPpHbRY2+MMmlrnkyyntJ2OlOJGW/08y33zFWtoGq6JhaEw PYmKE9oLW5Pn2A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:10 2025 by rpki-client