This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json) Hash identifier: DDb2owCGAclFKKPbE41u4Sm5M5p8ga6Qh/ivv9D3ANQ= Subject key identifier: B1:7A:D0:6F:5D:44:29:B7:3E:88:65:F8:36:98:78:97:7D:02:B1:2D Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Certificate serial: 019B3AC6CD7B520F34C79EDA54EA7B57375B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft Manifest number: 12C2 Signing time: Sat 20 Dec 2025 08:01:05 +0000 Manifest this update: Sat 20 Dec 2025 08:01:05 +0000 Manifest next update: Sun 21 Dec 2025 08:01:05 +0000 Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: ADg1GFUa58DMo2j/7n70/+rSYxuHq0wjpnq/rrpPaXQ=) 2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:cd:7b:52:0f:34:c7:9e:da:54:ea:7b:57:37:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Validity Not Before: Dec 20 08:01:05 2025 GMT Not After : Dec 21 08:01:05 2025 GMT Subject: CN=b17ad06f5d4429b73e8865f8369878977d02b12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:0e:cb:0f:74:22:63:ad:9c:c6:47:b5:de: e0:33:8a:b1:e2:03:06:d7:6a:1d:6c:d0:72:bb:64: 45:b4:4c:ca:41:56:87:91:bb:eb:e2:ee:11:a0:69: 3e:24:78:61:ec:50:3a:06:31:b9:b2:c2:82:f3:57: ab:dc:90:07:2d:c8:80:ee:90:d1:23:3f:19:62:06: a0:97:94:98:29:fb:be:bf:55:42:b1:da:dd:79:0d: af:bf:fb:a3:8d:f6:7a:83:b4:ef:8a:74:39:93:d3: 68:a0:f7:3a:e1:7e:87:24:e8:58:eb:86:b5:43:75: 22:3b:38:30:45:17:59:95:32:8d:ca:90:af:79:46: ce:97:62:51:4c:c8:59:a4:bb:ea:24:b5:d0:37:5d: 57:7a:5a:9d:24:9e:c8:1f:9c:78:46:40:06:f1:78: 33:a8:1a:44:04:2f:86:c3:4a:67:8e:a8:75:d9:20: 8e:dd:56:57:39:8a:b7:1c:a4:e7:26:d4:8a:3e:36: a7:be:f5:8a:bb:c0:78:a7:c7:cb:ea:ec:2c:7b:62: 15:f2:8f:24:ac:dc:da:5e:c8:a3:88:25:c3:58:0b: e9:e8:88:08:0c:e4:3e:17:63:48:66:fb:00:8f:dd: 8c:fa:74:54:42:56:da:1d:64:9f:6d:7f:d1:ba:c4: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7A:D0:6F:5D:44:29:B7:3E:88:65:F8:36:98:78:97:7D:02:B1:2D X509v3 Authority Key Identifier: keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:66:1e:12:3e:e1:23:ec:82:65:40:99:07:1a:85:21:55:4a: 81:c4:c1:af:be:64:03:e2:21:c7:1f:0c:42:d1:ff:d5:73:16: ab:8f:9f:48:d8:9b:51:8f:a5:54:fa:e9:ec:39:e1:18:59:a9: 8a:47:1d:d1:19:32:02:32:ea:50:57:b8:46:37:68:cd:2b:0c: 6e:fe:35:7f:a4:b6:d2:c9:2a:10:40:39:94:b4:3b:86:1c:c4: b7:c6:38:ed:1b:e6:36:93:b5:ae:78:88:db:4f:13:10:f8:99: 3f:8e:be:20:7f:04:20:dd:77:49:77:cf:d8:33:cf:7b:5b:6f: 12:29:9a:51:53:a6:25:09:af:fe:0b:e6:29:1a:13:76:88:b1: 9d:3b:43:de:02:84:86:e0:1b:68:ac:a5:b9:f9:82:69:4d:37: 48:69:b9:17:3b:60:f6:34:16:c2:dc:90:db:e5:57:05:4a:f8: 39:a2:da:fe:8d:70:0a:49:d2:3f:b5:6e:63:1e:40:6e:fa:2e: 47:48:f6:8f:f9:9e:c2:66:56:4d:8e:5d:16:4d:b5:91:5b:84: c1:5c:6f:82:29:5a:91:61:5d:03:f0:76:99:1f:64:77:39:95: 68:a0:2b:e9:1d:cd:ed:65:97:a8:7a:99:35:04:f4:50:09:c5: 6c:ad:08:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xs17Ug80x57aVOp7VzdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4 YTc2YzUwHhcNMjUxMjIwMDgwMTA1WhcNMjUxMjIxMDgwMTA1WjAzMTEwLwYDVQQD EyhiMTdhZDA2ZjVkNDQyOWI3M2U4ODY1ZjgzNjk4Nzg5NzdkMDJiMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUOyw90ImOtnMZHtd7gM4qx4gMG 12odbNByu2RFtEzKQVaHkbvr4u4RoGk+JHhh7FA6BjG5ssKC81er3JAHLciA7pDR Iz8ZYgagl5SYKfu+v1VCsdrdeQ2vv/ujjfZ6g7TvinQ5k9NooPc64X6HJOhY64a1 Q3UiOzgwRRdZlTKNypCveUbOl2JRTMhZpLvqJLXQN11XelqdJJ7IH5x4RkAG8Xgz qBpEBC+Gw0pnjqh12SCO3VZXOYq3HKTnJtSKPjanvvWKu8B4p8fL6uwse2IV8o8k rNzaXsijiCXDWAvp6IgIDOQ+F2NIZvsAj92M+nRUQlbaHWSfbX/RusSsyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF60G9dRCm3Pohl+DaYeJd9ArEtMB8GA1UdIwQY MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2YeEj7h I+yCZUCZBxqFIVVKgcTBr75kA+Ihxx8MQtH/1XMWq4+fSNibUY+lVPrp7DnhGFmp ikcd0RkyAjLqUFe4RjdozSsMbv41f6S20skqEEA5lLQ7hhzEt8Y47RvmNpO1rniI 208TEPiZP46+IH8EIN13SXfP2DPPe1tvEimaUVOmJQmv/gvmKRoTdoixnTtD3gKE huAbaKylufmCaU03SGm5Fztg9jQWwtyQ2+VXBUr4OaLa/o1wCknSP7VuYx5Abvou R0j2j/mewmZWTY5dFk21kVuEwVxvgilakWFdA/B2mR9kdzmVaKAr6R3N7WWXqHqZ NQT0UAnFbK0I0w== -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:06 2025 by rpki-client