This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json) Hash identifier: zxA9CG6+4w4OrY3OULlGDwdtEprviGcxf+5zHllxiFs= Subject key identifier: 10:FB:64:E5:E7:C7:46:AB:74:67:3D:BB:1F:F9:9F:68:8D:46:91:84 Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Certificate serial: 019B0FA5D5B75AF081B79061E359FDCB17A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft Manifest number: 0FFA Signing time: Thu 11 Dec 2025 23:01:24 +0000 Manifest this update: Thu 11 Dec 2025 23:01:24 +0000 Manifest next update: Fri 12 Dec 2025 23:01:24 +0000 Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 6ZHS7IRsJsTFy130lSAImU+/hHEzZzdkvuRdJmu4/7o=) 2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:d5:b7:5a:f0:81:b7:90:61:e3:59:fd:cb:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Validity Not Before: Dec 11 23:01:24 2025 GMT Not After : Dec 12 23:01:24 2025 GMT Subject: CN=10fb64e5e7c746ab74673dbb1ff99f688d469184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:5a:0c:b9:6d:03:47:55:9f:35:e3:c6:45: 83:a3:f9:ac:f7:77:a9:8b:8a:d1:8f:78:75:82:65: eb:8b:3b:c2:85:9f:b2:63:22:dc:3e:52:41:75:0f: d7:9d:79:87:9e:a9:81:27:20:c7:d2:aa:6a:26:eb: 0e:ea:da:44:a8:77:cc:68:ac:44:5e:a0:0b:d2:5c: 86:4c:5b:a3:9d:1e:9b:bf:f5:c6:34:13:06:cf:24: c5:ac:0d:9f:08:5c:7b:20:0b:4a:59:67:2a:0d:c7: 3c:78:3f:65:ff:2f:23:73:10:c5:2d:41:97:80:a9: 0d:61:c6:37:04:9c:cf:30:c8:d9:af:3b:a2:38:ab: 91:36:d2:0e:ea:ca:e4:f6:80:f7:fc:19:dd:27:5c: 34:a3:27:c6:3e:f1:b2:3d:0f:51:43:3d:3d:8e:48: de:f1:7d:3e:55:6b:f0:99:86:20:53:c1:ae:75:7e: b6:00:58:5b:4c:55:21:41:2b:97:87:15:c7:67:05: a3:66:15:35:87:bf:5c:d2:08:91:9d:c7:43:03:ef: b0:f4:b6:7e:28:cf:00:10:6b:60:4c:4d:3f:47:3b: b1:20:0f:b3:44:63:cf:37:03:4f:2b:e4:c1:8a:ba: 6a:4e:8f:9f:ec:b2:bc:72:78:6f:21:4e:4c:01:36: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FB:64:E5:E7:C7:46:AB:74:67:3D:BB:1F:F9:9F:68:8D:46:91:84 X509v3 Authority Key Identifier: keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:3c:12:1b:f5:c7:94:c4:41:a1:ef:bf:8b:43:c4:a4:0b: 36:3d:b4:f9:d6:76:ad:ce:5d:b9:ed:d6:d0:c7:eb:ea:b5:da: fe:93:b6:02:c0:b0:21:33:c8:51:1b:11:2b:8f:ec:e9:b9:42: 09:95:6a:9e:df:fa:66:32:6a:11:76:b3:1e:c7:a4:b6:e6:39: f7:3b:e2:56:a3:b2:d9:d7:8d:5e:c7:7c:04:fd:3c:9c:e8:50: ab:91:5e:bf:33:54:ae:80:58:fb:00:1c:0a:04:41:d0:a3:64: a8:38:f9:c8:f2:02:32:ab:3b:65:10:8f:2b:37:2a:f9:2a:44: a8:59:31:ac:0a:28:79:74:7f:5d:f7:f3:bf:e0:5d:b8:d5:c8: fe:b2:1a:bd:29:ca:4b:3c:b8:30:4e:cf:10:b2:d2:37:0d:78: 98:d7:ec:e6:39:7d:27:50:da:08:ae:2a:29:76:77:f8:98:e0: a3:65:bb:cd:46:85:d9:76:51:39:26:e0:21:05:28:33:cc:75: 4d:87:fb:55:4e:2a:49:d5:e7:81:94:dd:72:40:c4:4f:50:77: d0:d0:96:fa:6b:f9:e4:c3:a9:fb:2a:b4:62:5c:2c:42:3c:98: 32:40:a8:d5:87:9b:a3:2d:8f:60:b7:8b:af:cb:e0:22:e7:2a: 4e:f6:f6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpdW3WvCBt5Bh41n9yxegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2 ODNjODEwHhcNMjUxMjExMjMwMTI0WhcNMjUxMjEyMjMwMTI0WjAzMTEwLwYDVQQD EygxMGZiNjRlNWU3Yzc0NmFiNzQ2NzNkYmIxZmY5OWY2ODhkNDY5MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL1aDLltA0dVnzXjxkWDo/ms93ep i4rRj3h1gmXrizvChZ+yYyLcPlJBdQ/XnXmHnqmBJyDH0qpqJusO6tpEqHfMaKxE XqAL0lyGTFujnR6bv/XGNBMGzyTFrA2fCFx7IAtKWWcqDcc8eD9l/y8jcxDFLUGX gKkNYcY3BJzPMMjZrzuiOKuRNtIO6srk9oD3/BndJ1w0oyfGPvGyPQ9RQz09jkje 8X0+VWvwmYYgU8GudX62AFhbTFUhQSuXhxXHZwWjZhU1h79c0giRncdDA++w9LZ+ KM8AEGtgTE0/RzuxIA+zRGPPNwNPK+TBirpqTo+f7LK8cnhvIU5MATYCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD7ZOXnx0ardGc9ux/5n2iNRpGEMB8GA1UdIwQY MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg08Ehv1 x5TEQaHvv4tDxKQLNj20+dZ2rc5due3W0Mfr6rXa/pO2AsCwITPIURsRK4/s6blC CZVqnt/6ZjJqEXazHsektuY59zviVqOy2deNXsd8BP08nOhQq5FevzNUroBY+wAc CgRB0KNkqDj5yPICMqs7ZRCPKzcq+SpEqFkxrAooeXR/Xffzv+BduNXI/rIavSnK Szy4ME7PELLSNw14mNfs5jl9J1DaCK4qKXZ3+Jjgo2W7zUaF2XZROSbgIQUoM8x1 TYf7VU4qSdXngZTdckDET1B30NCW+mv55MOp+yq0YlwsQjyYMkCo1Yeboy2PYLeL r8vgIucqTvb2xw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:07 2025 by rpki-client