This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json) Hash identifier: 5shLb3G+QxmZ22oSI93IELgK6KZ5icsHrc9G7VIeGRo= Subject key identifier: 0A:22:54:EE:36:1D:EF:49:2F:E5:CE:B1:61:82:DB:C1:48:DA:52:B5 Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf Certificate serial: 019B4A71309C6544F2740CE1B806E54F66E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft Manifest number: 0A85 Signing time: Tue 23 Dec 2025 09:01:30 +0000 Manifest this update: Tue 23 Dec 2025 09:01:30 +0000 Manifest next update: Wed 24 Dec 2025 09:01:30 +0000 Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: X1t9Ok81YXMOBNYZEPIkPglfmOXAmOnbodOfaxyqu1U=) 2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:30:9c:65:44:f2:74:0c:e1:b8:06:e5:4f:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf Validity Not Before: Dec 23 09:01:30 2025 GMT Not After : Dec 24 09:01:30 2025 GMT Subject: CN=0a2254ee361def492fe5ceb16182dbc148da52b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:12:65:b3:3a:50:04:37:be:01:cd:87:d8: b9:4c:ea:b8:c1:f4:ce:be:39:7a:85:9b:d6:73:90: 19:8c:fc:d1:1c:36:74:34:70:b7:f2:4e:c4:e2:b5: a5:c6:fd:ab:db:a9:d2:1c:f4:99:5d:43:d0:39:c1: 4e:7f:73:58:90:6b:59:3d:cb:b8:4b:14:a4:8a:57: 38:35:27:fa:7e:25:3a:3f:05:6d:90:d5:54:e6:a1: ea:e6:03:67:a4:77:76:c2:fa:54:18:f8:fe:d2:e4: 71:d3:b8:9c:13:53:f4:f7:70:fc:3a:5c:bf:9f:e9: 60:ef:20:c9:59:27:0b:aa:62:e2:06:08:71:93:60: e0:75:58:f4:60:eb:79:77:10:9f:c7:4e:ea:4c:0d: ac:b9:71:b3:26:83:4c:5e:26:71:c3:47:29:02:e9: 6c:c8:dc:7f:50:b6:8d:9d:98:d6:f7:ff:b2:dc:74: 5a:0b:d1:a7:5b:46:01:38:9e:c1:cb:ce:48:9a:d7: 72:f4:34:90:ae:1f:2b:d7:c5:5e:50:e8:41:b3:4d: 5e:29:ed:98:65:47:20:8e:28:2f:7b:a8:a2:e8:9b: a9:ef:57:47:6d:9f:0b:cd:4f:6d:3c:fb:dd:80:64: 6c:c1:b0:4a:88:89:67:5f:3f:84:27:76:fc:85:e6: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:22:54:EE:36:1D:EF:49:2F:E5:CE:B1:61:82:DB:C1:48:DA:52:B5 X509v3 Authority Key Identifier: keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:be:92:a5:de:71:d1:b1:95:8c:5b:d4:f5:4e:58:18:52:5b: a2:c4:23:5f:e6:98:e0:1f:78:4b:b6:7a:8b:66:f3:19:ea:0b: 77:16:25:1f:23:e4:4b:bf:35:8b:5a:49:45:40:fe:ca:41:52: d8:2a:ac:e8:22:6a:8b:df:6d:8e:4d:7b:46:f3:86:77:43:62: 33:64:c6:f1:bd:83:86:14:35:0a:0b:84:d0:18:9d:6e:17:16: 6d:2b:15:63:15:46:d9:a5:b0:f0:96:6b:38:51:6c:74:52:f5: 43:07:50:e7:dc:d0:d5:cb:e3:a2:bb:54:6c:0a:0f:02:6f:55: c0:34:c8:fe:f9:a2:e3:c2:5a:1c:1a:6d:1d:0b:1c:2d:9b:71: 12:66:30:33:18:d1:a7:cb:36:f7:da:28:8f:49:7c:7f:24:e8: 38:9e:a8:1b:0b:0d:51:60:fb:0b:ec:dc:2a:a5:08:b3:d8:c8: 96:0c:47:be:73:3d:1c:ed:f5:12:a2:dd:5e:a1:dd:50:41:3e: 05:e2:60:01:59:45:ec:f0:66:6c:90:34:42:12:1d:ba:3f:af: 1b:55:6e:0a:e8:4b:c9:f2:7e:9f:2a:70:c0:19:b7:01:b4:77: 90:1e:85:97:93:c5:16:48:c6:91:f0:32:20:5e:ed:34:51:9a: a4:45:37:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcTCcZUTydAzhuAblT2bkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjM0ZmI2ODE4MDIxNDRmMDY0YzFiMTlmMTFmNmFhZTc1 OTZkY2YwHhcNMjUxMjIzMDkwMTMwWhcNMjUxMjI0MDkwMTMwWjAzMTEwLwYDVQQD EygwYTIyNTRlZTM2MWRlZjQ5MmZlNWNlYjE2MTgyZGJjMTQ4ZGE1MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyycSZbM6UAQ3vgHNh9i5TOq4wfTO vjl6hZvWc5AZjPzRHDZ0NHC38k7E4rWlxv2r26nSHPSZXUPQOcFOf3NYkGtZPcu4 SxSkilc4NSf6fiU6PwVtkNVU5qHq5gNnpHd2wvpUGPj+0uRx07icE1P093D8Oly/ n+lg7yDJWScLqmLiBghxk2DgdVj0YOt5dxCfx07qTA2suXGzJoNMXiZxw0cpAuls yNx/ULaNnZjW9/+y3HRaC9GnW0YBOJ7By85Imtdy9DSQrh8r18VeUOhBs01eKe2Y ZUcgjigve6ii6Jup71dHbZ8LzU9tPPvdgGRswbBKiIlnXz+EJ3b8heaXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoiVO42He9JL+XOsWGC28FI2lK1MB8GA1UdIwQY MBaAFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTkt NzZhMGY3Yjg0MWRjLzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTktNzZhMGY3Yjg0MWRj LzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL6Spd5x 0bGVjFvU9U5YGFJbosQjX+aY4B94S7Z6i2bzGeoLdxYlHyPkS781i1pJRUD+ykFS 2Cqs6CJqi99tjk17RvOGd0NiM2TG8b2DhhQ1CguE0BidbhcWbSsVYxVG2aWw8JZr OFFsdFL1QwdQ59zQ1cvjortUbAoPAm9VwDTI/vmi48JaHBptHQscLZtxEmYwMxjR p8s299ooj0l8fyToOJ6oGwsNUWD7C+zcKqUIs9jIlgxHvnM9HO31EqLdXqHdUEE+ BeJgAVlF7PBmbJA0QhIduj+vG1VuCuhLyfJ+nypwwBm3AbR3kB6Fl5PFFkjGkfAy IF7tNFGapEU3yA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:52:38 2025 by rpki-client