This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json) Hash identifier: LzPEzIA2ZZlb+FZ3xByE7F/CeAVgzoblJpZWqemj4nw= Subject key identifier: 1E:15:FF:1C:45:E2:61:28:7B:C9:44:ED:CA:56:23:A3:93:AB:D0:0A Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Certificate serial: 019B416DAFFB42BA89C2548B216869E84944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft Manifest number: 123B Signing time: Sun 21 Dec 2025 15:01:06 +0000 Manifest this update: Sun 21 Dec 2025 15:01:06 +0000 Manifest next update: Mon 22 Dec 2025 15:01:06 +0000 Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: s1UKtNMrk2wjyf1hHsqZ2cXO5FdIyZGG4NZK+z+Qk0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:af:fb:42:ba:89:c2:54:8b:21:68:69:e8:49:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Validity Not Before: Dec 21 15:01:06 2025 GMT Not After : Dec 22 15:01:06 2025 GMT Subject: CN=1e15ff1c45e261287bc944edca5623a393abd00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:7e:87:1b:5b:22:5e:63:ac:dd:a2:5f:a5: 63:7f:bf:50:8f:fa:a8:c5:31:bc:dd:5c:97:46:ab: 14:a3:01:8d:36:9a:9f:fe:b0:9f:a5:9d:ee:64:c5: e9:eb:19:fd:32:12:56:9d:a3:36:49:c8:21:1e:9e: e5:72:77:91:3b:06:8c:1a:2a:ba:15:37:d2:4e:7f: af:82:a3:68:79:92:6d:fe:4f:57:fd:fb:bc:85:9e: 2b:4c:c1:03:51:f4:8d:b6:5f:2e:45:15:3c:e0:0c: 9a:73:e7:51:f9:cb:89:8d:7c:55:d3:e2:de:29:5c: ad:49:97:88:99:e5:32:e2:62:c6:11:3b:3c:95:e3: 66:74:4a:ad:ef:ab:ea:60:49:c3:7c:f3:37:6b:50: 7b:cc:7b:81:3c:85:42:48:50:a8:3b:a0:b3:3c:c0: 1d:75:53:5d:ef:83:f5:8e:9f:9b:0d:e4:06:24:d2: c4:ed:35:59:e0:9b:d7:e9:65:f2:df:45:52:bd:e1: 6a:23:8e:de:a5:ce:cc:d4:eb:e6:b5:24:3e:44:bf: e8:65:7f:87:20:bc:d5:60:db:f8:6f:bf:99:78:aa: 49:48:6c:f4:13:51:08:50:be:83:a1:23:7f:27:46: 56:7b:7b:02:d0:4d:57:05:08:92:f7:e2:c4:7f:ee: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:FF:1C:45:E2:61:28:7B:C9:44:ED:CA:56:23:A3:93:AB:D0:0A X509v3 Authority Key Identifier: keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:8e:45:42:ac:96:53:44:e1:fd:3b:b9:51:e6:a7:ba:d6: c1:9c:34:da:4d:4c:f6:f4:0f:25:2b:b3:4e:8e:c2:81:ab:3d: f9:54:16:93:dd:17:42:ed:cc:a9:ae:2a:9c:72:32:cf:56:d5: 27:60:67:93:db:60:3a:6c:90:93:b0:c7:d0:91:e5:57:74:ae: 13:9f:39:e9:a1:f6:72:80:0a:72:01:60:d5:23:cf:8a:0e:2e: d9:93:cc:fa:35:8e:38:1d:f7:4e:5b:bb:07:88:cc:c4:eb:71: e3:46:13:4d:f5:43:59:d3:1c:c8:70:9c:be:8c:4e:79:38:b0: 80:de:cb:05:66:9a:73:95:10:67:79:79:49:46:c9:62:80:35: 70:aa:a2:18:bb:a8:f6:de:7b:a7:c0:26:cc:c6:e4:64:6e:f7: f2:4b:84:a7:39:11:ae:a0:9d:62:64:bf:33:7b:76:14:5f:c9: 03:c0:59:73:a3:f1:44:08:be:bd:0d:a4:be:ca:66:e3:b2:1a: 3d:b3:ad:fd:5e:79:96:45:9d:f3:c9:f1:b5:b1:97:74:ed:39: cc:40:57:f0:d4:25:2c:90:52:bd:c1:e3:7b:5b:81:9b:8c:30: 4d:a2:7b:d5:5d:50:04:bb:03:bb:14:b9:cb:11:c2:eb:d5:da: 25:c5:cd:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBba/7QrqJwlSLIWhp6ElEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5 MWExODYwHhcNMjUxMjIxMTUwMTA2WhcNMjUxMjIyMTUwMTA2WjAzMTEwLwYDVQQD EygxZTE1ZmYxYzQ1ZTI2MTI4N2JjOTQ0ZWRjYTU2MjNhMzkzYWJkMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLF+hxtbIl5jrN2iX6Vjf79Qj/qo xTG83VyXRqsUowGNNpqf/rCfpZ3uZMXp6xn9MhJWnaM2ScghHp7lcneROwaMGiq6 FTfSTn+vgqNoeZJt/k9X/fu8hZ4rTMEDUfSNtl8uRRU84Ayac+dR+cuJjXxV0+Le KVytSZeImeUy4mLGETs8leNmdEqt76vqYEnDfPM3a1B7zHuBPIVCSFCoO6CzPMAd dVNd74P1jp+bDeQGJNLE7TVZ4JvX6WXy30VSveFqI47epc7M1OvmtSQ+RL/oZX+H ILzVYNv4b7+ZeKpJSGz0E1EIUL6DoSN/J0ZWe3sC0E1XBQiS9+LEf+5d0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4V/xxF4mEoe8lE7cpWI6OTq9AKMB8GA1UdIwQY MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1 LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJuORUKs llNE4f07uVHmp7rWwZw02k1M9vQPJSuzTo7Cgas9+VQWk90XQu3Mqa4qnHIyz1bV J2Bnk9tgOmyQk7DH0JHlV3SuE5856aH2coAKcgFg1SPPig4u2ZPM+jWOOB33Tlu7 B4jMxOtx40YTTfVDWdMcyHCcvoxOeTiwgN7LBWaac5UQZ3l5SUbJYoA1cKqiGLuo 9t57p8AmzMbkZG738kuEpzkRrqCdYmS/M3t2FF/JA8BZc6PxRAi+vQ2kvspm47Ia PbOt/V55lkWd88nxtbGXdO05zEBX8NQlLJBSvcHje1uBm4wwTaJ71V1QBLsDuxS5 yxHC69XaJcXNJA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:03:15 2025 by rpki-client