This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json) Hash identifier: r3GN3oViasSF9OJHMQlLcORjGw6wrBjBnjbOb6twTQs= Subject key identifier: 57:AD:C0:4F:FA:6F:38:15:87:B8:AE:EC:98:18:36:9D:09:DD:C4:53 Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad Certificate serial: 019B5DF746F0C887DAF05983EE1699979CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft Manifest number: 0612 Signing time: Sat 27 Dec 2025 04:00:45 +0000 Manifest this update: Sat 27 Dec 2025 04:00:45 +0000 Manifest next update: Sun 28 Dec 2025 04:00:45 +0000 Files and hashes: 1: QlwSz5QY3CNReEwoqy5_qdcxp7E.roa (hash: J1QwLI9Oak3umoZp+VK8k+3z4SfC016Ed6Yx+Y0FOX0=) 2: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: 4pgobopsdQIc5c3fa5oyTltqcBhCfT9OVSAFiwB3Lp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:46:f0:c8:87:da:f0:59:83:ee:16:99:97:9c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad Validity Not Before: Dec 27 04:00:45 2025 GMT Not After : Dec 28 04:00:45 2025 GMT Subject: CN=57adc04ffa6f381587b8aeec9818369d09ddc453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:4f:00:5e:06:32:28:c6:ab:a5:4a:26:cf: 8c:89:1d:f6:b0:d6:14:72:eb:a4:3e:73:c9:3f:79: 04:8e:8e:61:41:53:60:ae:c0:f3:f5:23:55:84:df: 31:4c:71:3a:7d:8a:0e:48:8d:89:6d:0b:35:c6:9b: 8b:96:e2:01:e3:8b:d3:b3:fe:00:c8:d7:a0:73:fc: 17:30:7f:8f:d0:c7:6b:c0:c2:a7:aa:94:4f:0e:62: 46:dd:3d:ec:86:20:b9:b4:56:08:86:c0:2d:44:da: 79:51:d9:c6:c5:25:e5:78:a4:e2:ac:ad:c2:02:18: bc:95:a7:cb:6e:73:65:33:9b:99:8a:27:8a:a8:4c: 0d:f7:30:32:66:fd:75:f7:6c:b1:69:d9:28:ce:76: d5:9d:33:45:88:eb:29:fb:d7:de:95:2f:b1:ed:ab: 98:d7:4b:dd:9e:11:79:31:36:4c:5e:4c:21:42:60: 55:4e:60:4a:0d:6f:cf:74:c0:4c:d8:8e:d7:e5:3d: 15:da:73:65:56:8a:12:7c:16:9c:e6:3a:63:2e:4f: 92:1d:6c:5e:4c:19:db:3c:4f:ed:43:23:10:8e:92: 42:5c:54:f1:c8:06:34:00:c8:99:f5:58:69:e3:e9: e9:07:c1:0f:15:59:91:96:b0:68:a1:33:a3:88:3b: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:C0:4F:FA:6F:38:15:87:B8:AE:EC:98:18:36:9D:09:DD:C4:53 X509v3 Authority Key Identifier: keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:42:2a:ca:9a:0f:8c:39:e2:0e:af:21:68:96:e0:75:28: 79:ce:8c:36:81:49:1d:4e:ab:1c:12:a2:68:5a:80:c8:8b:4b: ac:f5:27:26:09:b2:4f:e7:9c:37:ca:89:37:57:95:d6:bf:d6: fa:f4:b8:67:35:f6:5a:2f:67:d0:20:92:de:4e:4e:29:51:7f: 0d:be:08:a2:3d:64:6e:06:48:3c:79:e0:70:cd:92:7e:6a:33: 74:e0:1e:c1:fc:94:a5:96:65:16:df:58:03:e7:8b:80:79:e2: 5a:a6:97:34:b7:d3:0d:ac:7f:09:15:81:e7:83:84:24:c4:36: c6:06:14:be:b3:ba:a5:7a:78:bd:d8:55:93:7a:38:58:73:64: 00:d1:4e:db:91:e2:e6:57:b1:48:83:70:1c:04:dc:1a:12:38: da:1e:2a:c3:92:1b:6d:49:7e:0d:5a:2c:e6:2b:98:9a:10:11: f7:cd:ed:21:4e:53:99:c2:8a:63:a4:2f:ac:3d:d6:56:0f:8a: ef:d2:db:e5:fe:70:b0:a8:15:fb:99:d0:3b:56:59:c3:0d:d3: ff:e7:6e:0b:bd:cf:8c:af:ca:b0:f8:df:9e:18:f3:e1:a0:b3: 5f:42:12:dc:22:12:eb:4e:dd:c9:b3:3f:2b:5f:55:d1:9b:76: 20:ff:7a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd90bwyIfa8FmD7haZl5y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Njk5MzE2NDI0OTYwNzExYzJlOGVjYjUzNmJkZDAyYmM3 MjRmYWQwHhcNMjUxMjI3MDQwMDQ1WhcNMjUxMjI4MDQwMDQ1WjAzMTEwLwYDVQQD Eyg1N2FkYzA0ZmZhNmYzODE1ODdiOGFlZWM5ODE4MzY5ZDA5ZGRjNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMFPAF4GMijGq6VKJs+MiR32sNYU cuukPnPJP3kEjo5hQVNgrsDz9SNVhN8xTHE6fYoOSI2JbQs1xpuLluIB44vTs/4A yNegc/wXMH+P0MdrwMKnqpRPDmJG3T3shiC5tFYIhsAtRNp5UdnGxSXleKTirK3C Ahi8lafLbnNlM5uZiieKqEwN9zAyZv1192yxadkoznbVnTNFiOsp+9felS+x7auY 10vdnhF5MTZMXkwhQmBVTmBKDW/PdMBM2I7X5T0V2nNlVooSfBac5jpjLk+SHWxe TBnbPE/tQyMQjpJCXFTxyAY0AMiZ9Vhp4+npB8EPFVmRlrBooTOjiDt7zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFetwE/6bzgVh7iu7JgYNp0J3cRTMB8GA1UdIwQY MBaAFJVpkxZCSWBxHC6Oy1Nr3QK8ck+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYt Zjg1YzYwYmUzNDBkLzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYtZjg1YzYwYmUzNDBk LzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwpCKsqa D4w54g6vIWiW4HUoec6MNoFJHU6rHBKiaFqAyItLrPUnJgmyT+ecN8qJN1eV1r/W +vS4ZzX2Wi9n0CCS3k5OKVF/Db4Ioj1kbgZIPHngcM2SfmozdOAewfyUpZZlFt9Y A+eLgHniWqaXNLfTDax/CRWB54OEJMQ2xgYUvrO6pXp4vdhVk3o4WHNkANFO25Hi 5lexSINwHATcGhI42h4qw5IbbUl+DVos5iuYmhAR983tIU5TmcKKY6QvrD3WVg+K 79Lb5f5wsKgV+5nQO1ZZww3T/+duC73PjK/KsPjfnhjz4aCzX0IS3CIS607dybM/ K19V0Zt2IP96XQ== -----END CERTIFICATE-----Generated at Sat Dec 27 10:49:54 2025 by rpki-client