This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json) Hash identifier: 3ZypoNOmF2xvSZfZoxWMOHo51EUZ5Qn5tVhAL1YzSik= Subject key identifier: 96:6F:4E:03:37:95:00:51:71:7C:1E:59:80:24:CA:06:DB:89:58:C0 Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Certificate serial: 019B3BD94DE3C585C016D335A561BAE8BEC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft Manifest number: 067E Signing time: Sat 20 Dec 2025 13:00:55 +0000 Manifest this update: Sat 20 Dec 2025 13:00:55 +0000 Manifest next update: Sun 21 Dec 2025 13:00:55 +0000 Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=) 2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=) 3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: YhwU1vOZ8OFw4o5hh6C1ZIo+H3OMmLUz7j+8Wg4+XBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4d:e3:c5:85:c0:16:d3:35:a5:61:ba:e8:be:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Validity Not Before: Dec 20 13:00:55 2025 GMT Not After : Dec 21 13:00:55 2025 GMT Subject: CN=966f4e0337950051717c1e598024ca06db8958c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:3a:50:e2:57:f0:37:a9:30:a8:62:3b:2f: aa:4e:56:6e:80:71:b0:2d:8d:ea:52:e8:ba:23:e1: fc:73:14:48:ba:cf:b4:40:a8:96:39:e4:66:9f:c0: 00:85:7e:5f:3d:cb:e0:a4:32:28:ed:41:a6:78:e8: 7c:aa:2e:ca:19:3f:92:35:16:1e:8f:80:a8:9d:1b: 5e:03:b0:a9:b0:71:95:1f:16:49:49:f3:ca:41:c8: 2a:9e:87:cc:75:65:e9:84:81:86:86:28:22:f2:d4: 19:02:67:19:66:54:78:7b:51:f5:90:51:55:ba:61: 5b:dd:b1:a9:84:20:c5:97:fc:8d:23:63:17:53:b9: 8a:60:64:90:3c:f5:7e:5c:ec:29:4c:c5:7b:ba:84: 31:63:7d:b3:be:29:32:0a:4d:ef:ec:5d:f7:cb:a2: 62:b5:88:83:78:c7:a2:1e:57:79:44:a6:18:a6:3f: 32:b5:dc:a3:06:28:d1:81:c5:9a:08:8d:78:64:0e: 64:e5:79:98:76:bd:e7:44:16:47:f0:af:4a:8a:78: 5d:cd:73:2d:c5:ec:33:25:f2:49:b0:48:d3:4c:76: 72:c7:35:6a:44:82:b5:97:85:8d:24:53:83:ca:4e: 11:79:60:9f:ca:28:95:a1:52:36:7c:1f:7c:e8:48: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6F:4E:03:37:95:00:51:71:7C:1E:59:80:24:CA:06:DB:89:58:C0 X509v3 Authority Key Identifier: keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:df:49:81:c8:2c:b0:60:e8:6e:1b:c5:e2:b6:34:39:0e: 03:20:7c:9b:f1:d8:52:1d:03:c6:71:c3:fc:31:9b:74:7a:ad: 6e:8f:e5:15:f0:01:3f:0c:58:f9:64:9d:06:aa:bf:ed:c1:57: 11:d9:da:c6:65:ab:61:e2:bd:cd:9f:cf:8b:62:e3:da:bc:d6: 67:e8:45:b3:c2:fa:fa:7f:bf:2e:da:ba:ce:26:17:8f:e5:bc: 51:a7:8a:f4:90:b4:b2:19:d6:f8:75:e7:4a:57:cd:8a:2a:55: 00:c1:86:5b:b9:4e:ad:01:84:b4:c4:37:92:80:3a:24:54:de: 6e:62:4f:bf:2b:9f:d1:1b:a0:5a:6d:53:90:3f:ff:7e:76:21: a6:39:d3:c0:c5:6d:55:47:d4:eb:36:98:53:a6:35:86:b0:64: 72:62:f2:4c:cf:75:f9:c5:89:87:56:61:a7:03:a4:21:be:a2: 57:fe:c2:d6:4d:75:d7:f7:33:1f:c6:8b:79:0a:24:a0:d0:18: 8f:e8:92:f6:f8:85:22:f8:b7:5e:dd:6e:2b:ae:94:b9:a8:0f: ec:27:05:62:c9:32:ec:16:4d:62:13:c8:f8:f6:40:40:21:f2: 9c:2f:69:69:f6:a1:86:09:2a:bb:58:c2:9f:54:5c:e8:65:32: 60:7d:c9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72U3jxYXAFtM1pWG66L7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi MjliOWMwHhcNMjUxMjIwMTMwMDU1WhcNMjUxMjIxMTMwMDU1WjAzMTEwLwYDVQQD Eyg5NjZmNGUwMzM3OTUwMDUxNzE3YzFlNTk4MDI0Y2EwNmRiODk1OGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwk6UOJX8DepMKhiOy+qTlZugHGw LY3qUui6I+H8cxRIus+0QKiWOeRmn8AAhX5fPcvgpDIo7UGmeOh8qi7KGT+SNRYe j4ConRteA7CpsHGVHxZJSfPKQcgqnofMdWXphIGGhigi8tQZAmcZZlR4e1H1kFFV umFb3bGphCDFl/yNI2MXU7mKYGSQPPV+XOwpTMV7uoQxY32zvikyCk3v7F33y6Ji tYiDeMeiHld5RKYYpj8ytdyjBijRgcWaCI14ZA5k5XmYdr3nRBZH8K9KinhdzXMt xewzJfJJsEjTTHZyxzVqRIK1l4WNJFODyk4ReWCfyiiVoVI2fB986Ei1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZvTgM3lQBRcXweWYAkygbbiVjAMB8GA1UdIwQY MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG7fSYHI LLBg6G4bxeK2NDkOAyB8m/HYUh0DxnHD/DGbdHqtbo/lFfABPwxY+WSdBqq/7cFX EdnaxmWrYeK9zZ/Pi2Lj2rzWZ+hFs8L6+n+/Ltq6ziYXj+W8UaeK9JC0shnW+HXn SlfNiipVAMGGW7lOrQGEtMQ3koA6JFTebmJPvyuf0RugWm1TkD//fnYhpjnTwMVt VUfU6zaYU6Y1hrBkcmLyTM91+cWJh1ZhpwOkIb6iV/7C1k111/czH8aLeQokoNAY j+iS9viFIvi3Xt1uK66UuagP7CcFYsky7BZNYhPI+PZAQCHynC9pafahhgkqu1jC n1Rc6GUyYH3JhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:35 2025 by rpki-client