This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json) Hash identifier: XJj88zrFdcF115hl9DWvLTP1YnAgHCIDJ962o7ybWoc= Subject key identifier: 0F:AE:70:7E:9A:AF:7D:77:5F:7C:89:88:30:39:BF:1B:32:B5:BF:7A Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Certificate serial: 019B59E3DE527EE14DDF07738891058F1ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 09:01:04 +0000 Manifest this update: Fri 26 Dec 2025 09:01:04 +0000 Manifest next update: Sat 27 Dec 2025 09:01:04 +0000 Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: eU7OGsz6sLDN4euPLeCBTmPU8sHQ3M3GAcY/1WYA8+A=) 2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=) 3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=) 4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=) 5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:de:52:7e:e1:4d:df:07:73:88:91:05:8f:1a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Validity Not Before: Dec 26 09:01:04 2025 GMT Not After : Dec 27 09:01:04 2025 GMT Subject: CN=0fae707e9aaf7d775f7c89883039bf1b32b5bf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:3e:b7:f0:12:4c:37:e7:49:14:14:ad:51: 74:7b:ea:68:e9:3a:63:7e:a3:32:25:e2:cb:c2:ad: 89:fa:36:09:4e:13:b4:07:2a:fd:12:49:a6:2f:cb: 43:ca:cf:50:7f:39:06:8d:31:b4:c1:8d:fc:0a:01: 41:43:8c:08:84:3c:8e:f9:15:2e:98:bb:7d:ae:ac: 6b:34:1b:19:1a:72:fa:79:07:1f:db:e1:14:9b:32: d2:a1:62:61:9c:a5:22:0a:c4:c9:fa:72:b8:ef:95: 66:12:a8:3b:1c:c9:29:c9:18:20:03:20:71:a7:a0: f0:6e:be:a8:f4:34:2c:1d:e7:b9:24:91:16:b4:ed: a9:9a:0f:a3:dc:10:45:dd:f3:2d:43:0f:54:78:d5: 7e:49:42:ec:3a:26:75:94:2b:fb:c6:1e:b5:a6:d1: 06:2c:ee:07:1d:43:99:84:49:20:44:72:c9:94:5c: 30:e4:3e:62:12:c6:44:2c:81:b5:01:2e:2d:3b:eb: fd:31:b1:cc:b2:2b:1e:c7:d2:f4:76:2c:96:75:c6: 5d:2a:59:8e:7e:54:41:f7:6f:b2:46:e1:3b:e7:49: 7b:43:91:cc:a9:e1:07:4f:e8:a5:fe:64:cd:4f:07: 25:a0:fc:6f:a0:0c:08:19:a5:d9:70:72:cf:47:da: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:70:7E:9A:AF:7D:77:5F:7C:89:88:30:39:BF:1B:32:B5:BF:7A X509v3 Authority Key Identifier: keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:65:35:e0:7e:7a:91:e3:42:42:7b:e0:70:d5:e0:e1:4a:6b: 34:7f:d3:3a:a9:2b:b5:33:9f:ae:56:27:56:53:c6:83:8e:e3: 8d:23:5c:23:4a:5d:b7:5f:7a:93:2a:c0:70:af:98:99:40:64: e6:f0:c9:fc:03:7b:d5:c8:28:12:1e:89:6a:6f:b8:dc:85:a3: c4:0b:1d:97:bc:67:44:30:44:5b:1e:c7:82:ac:56:88:25:d2: 71:13:0e:b9:b6:87:e9:51:04:2f:d4:4c:fd:72:8e:22:53:d3: 43:25:e9:83:1f:49:34:b5:65:ed:e6:44:8e:28:bc:c0:24:40: 30:1a:96:45:5c:c0:f4:d6:e7:8b:63:be:b5:40:b0:8d:ea:59: 5a:2c:a9:fc:88:82:44:f3:e9:05:46:62:b6:84:c8:4b:78:f4: 2c:52:f3:bb:04:f1:07:5c:f0:8a:ce:e9:22:7a:8f:22:31:83: 06:84:1c:58:39:2b:a1:45:34:93:7f:3f:00:1b:d2:20:25:3f: af:e6:c1:d3:ab:8a:9f:18:7c:5f:2f:65:cf:91:ad:cc:20:d3: 77:68:11:a4:ab:ba:31:8a:b0:fe:e0:5f:df:47:04:68:5f:73: 1c:04:16:ad:9b:40:43:ed:12:e7:7e:df:01:02:c8:83:b8:e7: 9e:da:47:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ495SfuFN3wdziJEFjxq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4 NDYxNWEwHhcNMjUxMjI2MDkwMTA0WhcNMjUxMjI3MDkwMTA0WjAzMTEwLwYDVQQD EygwZmFlNzA3ZTlhYWY3ZDc3NWY3Yzg5ODgzMDM5YmYxYjMyYjViZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDA+t/ASTDfnSRQUrVF0e+po6Tpj fqMyJeLLwq2J+jYJThO0Byr9EkmmL8tDys9QfzkGjTG0wY38CgFBQ4wIhDyO+RUu mLt9rqxrNBsZGnL6eQcf2+EUmzLSoWJhnKUiCsTJ+nK475VmEqg7HMkpyRggAyBx p6Dwbr6o9DQsHee5JJEWtO2pmg+j3BBF3fMtQw9UeNV+SULsOiZ1lCv7xh61ptEG LO4HHUOZhEkgRHLJlFww5D5iEsZELIG1AS4tO+v9MbHMsisex9L0diyWdcZdKlmO flRB92+yRuE750l7Q5HMqeEHT+il/mTNTwcloPxvoAwIGaXZcHLPR9pR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+ucH6ar313X3yJiDA5vxsytb96MB8GA1UdIwQY MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt Y2FjM2U0MmFlMDNmLzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2U14H56 keNCQnvgcNXg4UprNH/TOqkrtTOfrlYnVlPGg47jjSNcI0pdt196kyrAcK+YmUBk 5vDJ/AN71cgoEh6Jam+43IWjxAsdl7xnRDBEWx7HgqxWiCXScRMOubaH6VEEL9RM /XKOIlPTQyXpgx9JNLVl7eZEjii8wCRAMBqWRVzA9Nbni2O+tUCwjepZWiyp/IiC RPPpBUZitoTIS3j0LFLzuwTxB1zwis7pInqPIjGDBoQcWDkroUU0k38/ABvSICU/ r+bB06uKnxh8Xy9lz5GtzCDTd2gRpKu6MYqw/uBf30cEaF9zHAQWrZtAQ+0S537f AQLIg7jnntpHxQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:13 2025 by rpki-client