This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: 5tA+M3zieSfyqhOIAkIfM1te3jzQrIzIu3u+spfVeAs= Subject key identifier: 18:1A:06:0D:C4:92:F5:C5:F3:9A:EE:A8:39:15:22:89:75:FE:7B:DA Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019B5A1B1009210E6EA0769A4A2F8E719FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 047C Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: 6xYcZznXl8FMkjeiJA6SuWsl5ew1sFCJeY+qfCLI24Y=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:10:09:21:0e:6e:a0:76:9a:4a:2f:8e:71:9f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=181a060dc492f5c5f39aeea83915228975fe7bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:31:fe:8a:2b:34:f8:98:80:5f:45:e4:47: dd:08:f9:fa:b5:ed:5d:63:68:73:1b:a4:d7:1d:13: f8:84:12:7f:7b:c2:54:0c:9f:1b:8c:73:a1:9e:90: bb:ab:ab:f2:94:f2:56:4d:2a:d8:65:4d:35:f0:5e: fb:58:0c:62:29:4c:d5:ff:d1:a5:73:eb:46:6e:11: fb:11:dd:21:8d:40:e5:91:d2:5e:5b:9e:16:26:13: d1:cb:4e:ca:71:cf:2d:0a:24:e4:c5:09:11:d2:53: 8c:55:cc:cb:66:a7:e7:6e:de:76:3b:74:24:2d:48: f2:02:ab:7d:5c:b2:a6:d9:40:34:11:fe:cc:a5:5f: 15:a5:63:ae:c7:01:4b:3c:14:57:b6:27:36:a8:c6: 8d:4f:73:10:7b:b4:0d:bc:e3:b7:39:94:0d:32:92: 2d:e4:59:65:43:73:3b:fe:6c:fd:5d:f2:e7:0c:fe: a8:73:6c:ef:c4:e0:92:80:ec:68:d3:f8:fa:93:73: c0:b2:26:21:00:00:fd:f9:a6:b6:cc:6c:0e:70:88: dc:31:b1:30:f3:c1:81:c0:ee:e8:df:d0:c2:f9:e1: 45:cf:e0:34:c7:61:a9:ea:27:1e:c8:f7:cb:b9:83: 12:e8:e1:f6:e9:a3:f6:37:d0:93:5c:26:a1:71:ad: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:06:0D:C4:92:F5:C5:F3:9A:EE:A8:39:15:22:89:75:FE:7B:DA X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c9:33:50:e7:3d:ea:1b:87:d2:e4:7d:c7:27:0b:a8:ab:8d: fb:aa:3b:4f:8d:c9:cc:50:a5:01:9d:19:ba:94:d5:23:24:a8: 80:28:52:49:17:ee:9e:de:bb:c1:25:e9:47:4f:27:8f:97:84: 2a:d9:68:1d:6d:62:fd:f3:17:18:f6:6c:b5:0f:16:97:2d:37: 88:b4:08:a3:50:a1:ef:76:ee:d3:f0:f0:e0:c3:61:9d:2b:53: 0e:bb:1c:d5:20:a0:8e:c5:e0:7e:da:4c:78:6c:95:8f:39:de: e1:b4:30:0b:b7:59:4c:ea:cc:87:f0:1d:49:29:fa:09:1a:d2: 0d:85:6a:76:c0:8a:fd:b8:90:6c:0c:f8:91:37:77:b9:69:e4: d4:41:66:65:a5:ef:60:df:34:c9:4f:9b:c5:ac:b1:bf:7a:f8: 87:51:9f:e1:09:9f:df:87:6d:3f:11:f6:e4:ef:c3:70:05:80: b2:07:2e:20:fa:92:c1:ed:98:c8:c7:12:a4:55:cc:75:ac:33: 03:d3:28:67:24:8f:bf:0f:ce:48:43:87:16:f5:08:ae:4c:37: d2:08:fb:1d:b1:37:35:06:98:c4:19:23:df:ef:fe:91:81:5d: a9:83:3f:4d:fd:d8:d0:f0:f0:5b:cf:d5:fb:72:3c:8c:f4:bb: 02:c6:44:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxAJIQ5uoHaaSi+OcZ/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD EygxODFhMDYwZGM0OTJmNWM1ZjM5YWVlYTgzOTE1MjI4OTc1ZmU3YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYwx/oorNPiYgF9F5EfdCPn6te1d Y2hzG6TXHRP4hBJ/e8JUDJ8bjHOhnpC7q6vylPJWTSrYZU018F77WAxiKUzV/9Gl c+tGbhH7Ed0hjUDlkdJeW54WJhPRy07Kcc8tCiTkxQkR0lOMVczLZqfnbt52O3Qk LUjyAqt9XLKm2UA0Ef7MpV8VpWOuxwFLPBRXtic2qMaNT3MQe7QNvOO3OZQNMpIt 5FllQ3M7/mz9XfLnDP6oc2zvxOCSgOxo0/j6k3PAsiYhAAD9+aa2zGwOcIjcMbEw 88GBwO7o39DC+eFFz+A0x2Gp6iceyPfLuYMS6OH26aP2N9CTXCahca05+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgaBg3EkvXF85ruqDkVIol1/nvaMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtckzUOc9 6huH0uR9xycLqKuN+6o7T43JzFClAZ0ZupTVIySogChSSRfunt67wSXpR08nj5eE KtloHW1i/fMXGPZstQ8Wly03iLQIo1Ch73bu0/Dw4MNhnStTDrsc1SCgjsXgftpM eGyVjzne4bQwC7dZTOrMh/AdSSn6CRrSDYVqdsCK/biQbAz4kTd3uWnk1EFmZaXv YN80yU+bxayxv3r4h1Gf4Qmf34dtPxH25O/DcAWAsgcuIPqSwe2YyMcSpFXMdawz A9MoZySPvw/OSEOHFvUIrkw30gj7HbE3NQaYxBkj3+/+kYFdqYM/Tf3Y0PDwW8/V +3I8jPS7AsZEkA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:34 2025 by rpki-client