This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: OIFUDnJtyTB4oYifFkGeyx6Y7KDnTvCd4uVm6XkKrcY= Subject key identifier: 1C:68:73:14:12:A9:B0:99:5B:D2:C9:90:9D:07:23:B6:5C:10:AF:4C Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B39B3A7E1F7FCF23EA0CB387A72B029DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 09B7 Signing time: Sat 20 Dec 2025 03:00:33 +0000 Manifest this update: Sat 20 Dec 2025 03:00:33 +0000 Manifest next update: Sun 21 Dec 2025 03:00:33 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: sYs4xS5WCFcNwOKN22LTAmhve3misb80xkpHldE2dWI=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (hash: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=) 4: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 5: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 16: wDRNVGfCfFpT0KL5KWdncpjKmrU.roa (hash: dd5hEWdRRbgBUUxwR6vJEl9R7LMSAx7EstPyaawGUNU=) 17: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:a7:e1:f7:fc:f2:3e:a0:cb:38:7a:72:b0:29:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Dec 20 03:00:33 2025 GMT Not After : Dec 21 03:00:33 2025 GMT Subject: CN=1c68731412a9b0995bd2c9909d0723b65c10af4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:91:8b:ae:0f:99:be:66:fd:0c:bb:4b:b9: 04:67:c8:cb:18:94:9f:50:11:f2:0c:c1:77:cf:9d: 80:08:c5:41:04:67:81:f1:24:8a:94:da:74:54:79: 2f:e3:03:60:c2:61:5f:26:1d:1f:43:e6:19:a7:12: ae:17:a0:12:af:77:f7:6b:28:5b:62:ee:ee:3a:3a: 6a:3e:38:1f:ae:37:e0:41:56:9a:47:27:ee:a7:21: 40:54:5d:08:c4:fe:a4:f0:d7:df:d2:88:30:7b:6b: 9b:b7:3c:be:49:b6:2b:4c:e6:07:57:72:c5:9d:0a: e2:08:61:8a:bc:d5:e6:da:ec:6b:ce:08:e0:44:1e: 29:02:dd:b6:bf:b6:6e:e9:df:fb:e2:8b:2a:a8:a1: 5d:51:4b:6e:35:18:f9:66:bc:ea:ff:0c:17:c8:58: 6c:ed:af:56:38:57:d4:77:f6:cc:68:fc:c6:12:93: cb:30:bd:30:d9:c4:b9:9a:ed:7e:6e:8f:ce:51:6f: 9c:39:b5:3c:d3:a8:9a:0a:6d:86:7d:b7:72:53:1c: 16:d9:8b:e8:8b:1c:05:dc:9f:c9:6b:e9:40:e4:7c: 2c:0f:a0:bb:ee:b5:2e:50:ae:46:15:5a:69:7a:2b: 58:d6:28:04:62:a3:c5:9c:c5:2f:3d:fb:b5:7c:4c: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:73:14:12:A9:B0:99:5B:D2:C9:90:9D:07:23:B6:5C:10:AF:4C X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:50:de:91:0e:b3:8c:9c:0a:72:0a:15:d2:8a:d2:af:8f: 01:8a:19:fd:a7:db:e3:7c:03:d5:70:f6:4f:7d:6b:1b:3b:2b: 37:a9:fe:dc:e5:0b:80:13:dc:6b:c0:cb:0d:8d:bf:9b:a3:b9: 19:ce:b7:df:74:f6:3e:29:a8:19:ec:74:29:54:b4:37:7d:a1: fb:fd:a7:f1:31:d3:30:3e:49:18:94:cf:55:5f:ad:53:e3:39: a3:05:7f:f2:cc:ac:22:2e:fa:bc:9c:71:77:b1:86:f2:48:f5: 00:6a:3f:8b:01:11:74:b7:5a:e4:9b:60:36:23:3f:49:0f:81: 90:84:3b:ba:49:f0:0d:6e:7c:49:3e:75:fc:bf:65:ef:6d:c4: 8b:f2:9a:6d:2f:59:9d:aa:e9:e5:08:9d:fa:0c:8c:b0:58:13: df:b2:65:73:2b:49:2f:2f:5a:49:95:f0:5c:51:ec:de:02:75: c4:84:d5:6f:46:a1:1e:7c:a5:05:b4:9c:38:b2:e2:32:fa:81: 26:3f:39:85:6f:b7:b2:6d:61:63:eb:7e:81:35:bc:07:5a:d9: e4:38:e1:4e:b9:45:30:d9:7e:25:e1:a8:77:5d:c0:6b:ac:47: fc:9b:a3:09:77:99:d4:58:3a:0b:e6:2f:5c:e5:ed:d1:3d:c6: 46:df:df:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6fh9/zyPqDLOHpysCnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMjIwMDMwMDMzWhcNMjUxMjIxMDMwMDMzWjAzMTEwLwYDVQQD EygxYzY4NzMxNDEyYTliMDk5NWJkMmM5OTA5ZDA3MjNiNjVjMTBhZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveqRi64Pmb5m/Qy7S7kEZ8jLGJSf UBHyDMF3z52ACMVBBGeB8SSKlNp0VHkv4wNgwmFfJh0fQ+YZpxKuF6ASr3f3ayhb Yu7uOjpqPjgfrjfgQVaaRyfupyFAVF0IxP6k8Nff0ogwe2ubtzy+SbYrTOYHV3LF nQriCGGKvNXm2uxrzgjgRB4pAt22v7Zu6d/74osqqKFdUUtuNRj5Zrzq/wwXyFhs 7a9WOFfUd/bMaPzGEpPLML0w2cS5mu1+bo/OUW+cObU806iaCm2GfbdyUxwW2Yvo ixwF3J/Ja+lA5HwsD6C77rUuUK5GFVppeitY1igEYqPFnMUvPfu1fEya/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxocxQSqbCZW9LJkJ0HI7ZcEK9MMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKG5Q3pEO s4ycCnIKFdKK0q+PAYoZ/afb43wD1XD2T31rGzsrN6n+3OULgBPca8DLDY2/m6O5 Gc6333T2PimoGex0KVS0N32h+/2n8THTMD5JGJTPVV+tU+M5owV/8sysIi76vJxx d7GG8kj1AGo/iwERdLda5JtgNiM/SQ+BkIQ7uknwDW58ST51/L9l723Ei/KabS9Z narp5Qid+gyMsFgT37JlcytJLy9aSZXwXFHs3gJ1xITVb0ahHnylBbScOLLiMvqB Jj85hW+3sm1hY+t+gTW8B1rZ5DjhTrlFMNl+JeGod13Aa6xH/JujCXeZ1Fg6C+Yv XOXt0T3GRt/f7A== -----END CERTIFICATE-----Generated at Sat Dec 20 05:11:28 2025 by rpki-client