This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json) Hash identifier: s9j7CeZ49QBk4HYr2B/hcEfGpO/MBDx9sas5QHYBsqg= Subject key identifier: 40:85:3C:5F:9E:8B:AE:88:25:BF:01:BE:B1:6E:A3:0D:75:6E:00:69 Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Certificate serial: 019B33B1E4A8B5DDA7FE571F42339F038898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft Manifest number: 0588 Signing time: Thu 18 Dec 2025 23:00:54 +0000 Manifest this update: Thu 18 Dec 2025 23:00:54 +0000 Manifest next update: Fri 19 Dec 2025 23:00:54 +0000 Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: AAvxe3/oleF4GqM41a4/1AWZiZG8V/SN0I5Xx+U1FbE=) 2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:e4:a8:b5:dd:a7:fe:57:1f:42:33:9f:03:88:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Validity Not Before: Dec 18 23:00:54 2025 GMT Not After : Dec 19 23:00:54 2025 GMT Subject: CN=40853c5f9e8bae8825bf01beb16ea30d756e0069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:1b:d7:d7:1d:19:ea:72:27:09:aa:db:d3: 03:ab:7d:47:12:3f:49:0c:93:e7:76:65:6d:4e:11: 02:ac:c9:03:16:99:1a:82:7d:e6:1d:60:4d:e0:64: c0:85:00:f9:77:87:79:f9:7b:b1:a1:d6:a7:d5:0b: e7:f4:94:fc:49:03:35:e7:70:ae:44:30:5c:b0:85: 62:13:f9:c0:a6:c9:14:80:21:b3:fc:e9:0c:79:40: 33:e6:7e:21:77:73:05:70:91:6d:73:5d:dc:15:36: d3:d7:9f:6f:11:0b:92:c0:c8:57:b1:e6:48:32:4e: 8a:eb:6e:2d:85:14:d5:23:cc:93:a0:80:fe:f0:32: ef:f3:90:2d:85:03:16:f4:3f:66:4f:cc:48:37:0f: 95:e3:63:d8:22:3a:e3:48:e4:4a:b7:e7:80:4a:dc: 19:90:61:24:6f:32:d6:29:be:f4:5f:53:15:c3:18: e0:82:db:cc:e8:25:32:5f:e1:59:9a:0e:69:a8:a0: 6b:62:dd:2d:09:4f:b8:10:7a:1e:bd:f4:de:e9:16: 5a:4e:84:ce:ec:82:1a:0c:ce:32:d7:40:c4:fc:9f: 70:8f:89:81:ad:4f:c6:36:b7:d3:cd:b4:16:90:88: 94:db:ba:73:60:35:f3:73:8a:9f:e9:c0:f8:20:e5: ed:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:3C:5F:9E:8B:AE:88:25:BF:01:BE:B1:6E:A3:0D:75:6E:00:69 X509v3 Authority Key Identifier: keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ee:f2:ff:be:58:74:79:56:18:dd:d3:59:40:13:2b:11:9f: 59:4d:d4:a2:62:e5:aa:fd:a8:14:fb:76:b2:fa:d3:c6:5a:9c: ef:2a:f3:2c:8b:58:13:6e:cb:ac:18:76:ab:69:ae:b3:b2:77: 42:25:4d:3a:c6:e0:97:2d:bf:34:80:45:73:2a:cd:ef:4c:45: 60:8c:c9:7d:cd:a1:47:4c:9a:ae:38:b2:9c:15:f3:6d:e9:9e: eb:4a:44:79:2b:2f:54:01:ca:79:2f:ca:89:d0:79:59:62:74: 1b:b2:4c:7a:0a:22:ea:7b:e9:7e:b8:4c:97:38:42:41:0f:b7: 6a:1c:47:14:d2:30:32:23:c2:e3:f6:64:17:18:e4:69:23:31: 71:73:62:e5:fc:e2:83:27:5b:35:0a:c2:a5:e9:17:9f:11:c6: c7:d2:ea:65:ae:83:fe:97:55:b6:75:73:98:13:8f:0c:13:5d: 8f:b8:b4:9a:e4:33:68:1a:d4:12:fa:4e:7d:93:c5:7f:38:8b: f8:0f:f6:49:bb:62:fb:b6:78:53:b2:14:25:82:68:ae:97:0e: e2:c2:74:6e:9f:9f:0c:36:5c:12:67:0b:55:c6:52:6c:a0:d1: f2:70:60:d4:2c:2a:70:36:3b:fa:77:7c:b7:df:a8:a0:f8:d4: 03:f3:dc:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszseSotd2n/lcfQjOfA4iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi OTk3OWMwHhcNMjUxMjE4MjMwMDU0WhcNMjUxMjE5MjMwMDU0WjAzMTEwLwYDVQQD Eyg0MDg1M2M1ZjllOGJhZTg4MjViZjAxYmViMTZlYTMwZDc1NmUwMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq8b19cdGepyJwmq29MDq31HEj9J DJPndmVtThECrMkDFpkagn3mHWBN4GTAhQD5d4d5+Xuxodan1Qvn9JT8SQM153Cu RDBcsIViE/nApskUgCGz/OkMeUAz5n4hd3MFcJFtc13cFTbT159vEQuSwMhXseZI Mk6K624thRTVI8yToID+8DLv85AthQMW9D9mT8xINw+V42PYIjrjSORKt+eAStwZ kGEkbzLWKb70X1MVwxjggtvM6CUyX+FZmg5pqKBrYt0tCU+4EHoevfTe6RZaToTO 7IIaDM4y10DE/J9wj4mBrU/GNrfTzbQWkIiU27pzYDXzc4qf6cD4IOXtfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECFPF+ei66IJb8BvrFuow11bgBpMB8GA1UdIwQY MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt OGU2MzNlMGYwNzlkLzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+7y/75Y dHlWGN3TWUATKxGfWU3UomLlqv2oFPt2svrTxlqc7yrzLItYE27LrBh2q2mus7J3 QiVNOsbgly2/NIBFcyrN70xFYIzJfc2hR0yarjiynBXzbeme60pEeSsvVAHKeS/K idB5WWJ0G7JMegoi6nvpfrhMlzhCQQ+3ahxHFNIwMiPC4/ZkFxjkaSMxcXNi5fzi gydbNQrCpekXnxHGx9LqZa6D/pdVtnVzmBOPDBNdj7i0muQzaBrUEvpOfZPFfziL +A/2Sbti+7Z4U7IUJYJorpcO4sJ0bp+fDDZcEmcLVcZSbKDR8nBg1CwqcDY7+nd8 t9+ooPjUA/PcpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:49:11 2025 by rpki-client