This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json) Hash identifier: IOJH0bYZH3NhmOOwVrGzPS57UXG87ETvwL07sYFliJk= Subject key identifier: E4:2C:56:E2:D0:EC:30:D3:18:9F:A2:04:4D:57:30:91:07:38:AE:BF Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98 Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98 Certificate serial: 019B958B55DBE17D6E18CF0EBC352AFEB1AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft Manifest number: 17B9 Signing time: Tue 06 Jan 2026 23:01:35 +0000 Manifest this update: Tue 06 Jan 2026 23:01:35 +0000 Manifest next update: Wed 07 Jan 2026 23:01:35 +0000 Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: aXgHL+O4WC0BFBWBbN+XRwz9Lwle56OHmZaw8C2t/fU=) 2: iH-W1KrCxFHlEwTj-N3qmKRJjJM.roa (hash: KY2lJTniA4rnCiE0KdvRBg56MPlz79jziBGeziSB/MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:8b:55:db:e1:7d:6e:18:cf:0e:bc:35:2a:fe:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98 Validity Not Before: Jan 6 23:01:35 2026 GMT Not After : Jan 7 23:01:35 2026 GMT Subject: CN=e42c56e2d0ec30d3189fa2044d5730910738aebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:d4:f4:08:01:42:f8:a0:b5:ae:08:79:e8: 40:bf:ef:e9:4f:0b:5a:d6:41:be:28:b5:65:6f:16: fa:1f:a2:d7:dd:0d:69:cd:b5:b9:91:b1:44:2e:45: 79:a5:09:84:41:34:e5:72:75:13:c7:de:38:70:5e: 88:56:3e:95:6b:ad:e0:c2:af:0a:74:82:88:10:77: 34:88:7c:6a:bf:3d:13:e3:b1:94:56:a0:48:b2:4b: be:0a:4d:59:e1:42:ae:fe:5a:67:35:63:d1:d3:82: 68:01:d2:7b:a8:2a:f8:9f:a0:6e:9c:03:39:7c:99: 09:af:cb:12:46:ab:c3:9b:3d:05:25:97:b7:62:67: d7:22:28:76:72:be:60:a1:4f:68:ea:33:c5:38:ea: 4d:b8:c8:65:77:7f:76:41:5a:03:b4:3e:29:94:93: 84:31:44:e2:8f:49:bc:dd:cb:eb:e7:6e:c8:06:b5: db:e5:b2:07:80:e4:e1:03:bc:f3:0b:78:06:9c:90: 18:80:87:17:60:70:9e:c6:d0:17:06:56:47:c6:53: 6c:48:fa:a7:c4:56:c9:70:13:8b:3e:21:85:fd:38: 96:b4:a3:66:38:79:8d:f2:8e:2c:53:2e:0d:c6:ff: ca:0f:fe:88:cf:58:22:57:d5:5f:f8:c2:12:1b:ce: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:56:E2:D0:EC:30:D3:18:9F:A2:04:4D:57:30:91:07:38:AE:BF X509v3 Authority Key Identifier: keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c9:51:24:fb:a6:c2:c0:e8:c4:1b:ca:77:49:9e:61:fb:99: 31:9f:c7:56:17:44:5a:52:08:07:9e:c7:40:46:81:b2:c4:7f: 40:cf:20:3e:93:53:c3:c6:49:20:5a:06:a7:12:9a:9f:df:cc: 56:b3:fd:c1:a8:2f:01:ca:39:49:4a:59:c2:9a:63:fb:e9:b4: cb:97:2a:49:1f:d8:1a:0a:e8:dc:b3:6d:5e:9d:4c:47:9f:95: 98:dc:63:aa:e0:70:40:61:0a:51:da:0d:6a:0a:83:bd:43:4c: e7:1b:e8:00:21:2a:08:70:e1:86:32:44:46:8e:73:c5:0e:5d: f5:f5:d3:e7:d2:e7:9d:bf:5f:d7:1b:9a:3c:05:5d:e8:76:9a: b1:b1:20:d0:59:81:9f:db:8a:47:31:ab:a0:04:e8:fe:e6:f2: 1a:43:28:7b:91:87:60:36:e8:37:30:0b:a5:14:dc:e1:82:fb: e9:ae:0b:c3:e8:d6:0a:6c:fb:bb:af:de:f4:e6:d0:d1:48:b4: a8:db:85:7e:ae:9a:6f:ae:39:b4:b0:e0:37:26:bc:9c:aa:3b: 87:d6:01:3a:60:65:12:3a:c1:66:f3:06:25:23:e4:b2:51:bd: 09:07:74:13:18:31:47:66:f2:f4:89:48:01:03:75:fd:1c:10: 21:2b:43:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVi1Xb4X1uGM8OvDUq/rGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDM0MmUwZDIzZWY3ZTA2YjFkZmY1Y2M2ZWU0ZmExN2Fm OGJkOTgwHhcNMjYwMTA2MjMwMTM1WhcNMjYwMTA3MjMwMTM1WjAzMTEwLwYDVQQD EyhlNDJjNTZlMmQwZWMzMGQzMTg5ZmEyMDQ0ZDU3MzA5MTA3MzhhZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUfU9AgBQvigta4IeehAv+/pTwta 1kG+KLVlbxb6H6LX3Q1pzbW5kbFELkV5pQmEQTTlcnUTx944cF6IVj6Va63gwq8K dIKIEHc0iHxqvz0T47GUVqBIsku+Ck1Z4UKu/lpnNWPR04JoAdJ7qCr4n6BunAM5 fJkJr8sSRqvDmz0FJZe3YmfXIih2cr5goU9o6jPFOOpNuMhld392QVoDtD4plJOE MUTij0m83cvr527IBrXb5bIHgOThA7zzC3gGnJAYgIcXYHCextAXBlZHxlNsSPqn xFbJcBOLPiGF/TiWtKNmOHmN8o4sUy4Nxv/KD/6Iz1giV9Vf+MISG86TewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQsVuLQ7DDTGJ+iBE1XMJEHOK6/MB8GA1UdIwQY MBaAFC8DQuDSPvfgax3/XMbuT6F6+L2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2Mt YzkxMGFmOTNlNDI2LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2MtYzkxMGFmOTNlNDI2 LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATslRJPum wsDoxBvKd0meYfuZMZ/HVhdEWlIIB57HQEaBssR/QM8gPpNTw8ZJIFoGpxKan9/M VrP9wagvAco5SUpZwppj++m0y5cqSR/YGgro3LNtXp1MR5+VmNxjquBwQGEKUdoN agqDvUNM5xvoACEqCHDhhjJERo5zxQ5d9fXT59Lnnb9f1xuaPAVd6HaasbEg0FmB n9uKRzGroATo/ubyGkMoe5GHYDboNzALpRTc4YL76a4Lw+jWCmz7u6/e9ObQ0Ui0 qNuFfq6ab645tLDgNya8nKo7h9YBOmBlEjrBZvMGJSPkslG9CQd0ExgxR2by9IlI AQN1/RwQIStDqA== -----END CERTIFICATE-----Generated at Wed Jan 7 06:59:39 2026 by rpki-client