This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json) Hash identifier: /pm/zps8PDXBD6foKWAFYCihaLVS7yHwzF6wytB/pSE= Subject key identifier: F5:A9:97:77:1D:AD:0F:F0:C5:C2:76:3B:9A:8E:D9:68:6B:ED:02:C8 Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Certificate serial: 019B3C1077959694F247C120AF7C3AE73F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft Manifest number: 1011 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: wYWlS3kyeN6yV7UrJIu6D0CVNw2+WJAjyhlqvmYmTZo=) 2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:77:95:96:94:f2:47:c1:20:af:7c:3a:e7:3f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=f5a997771dad0ff0c5c2763b9a8ed9686bed02c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:6c:ff:79:53:45:77:24:b9:93:9d:34:14: 69:b6:f3:a0:10:45:e8:7d:dc:15:d7:b2:cc:e7:87: 18:cf:57:b9:ba:22:6d:b9:d3:7b:4a:c4:05:0d:85: e3:f0:0e:64:d4:6a:4f:e0:d0:63:89:e3:86:bd:83: 7f:44:fe:2e:f8:3f:4c:8f:8c:f2:bc:5e:9b:a6:7c: c1:ae:6d:17:35:a8:2a:40:07:aa:f8:b6:f3:f2:89: 61:83:e6:68:91:12:eb:79:32:c5:88:f0:eb:c1:29: 5d:5c:8f:66:50:6e:37:8d:50:89:bf:1a:ea:45:7b: fe:47:15:24:4d:6c:80:11:60:5e:b0:0f:68:7f:0a: 9c:e2:56:9d:fa:f9:a7:cf:7e:40:46:cf:08:88:a4: ee:5e:e8:db:90:aa:af:47:ef:8f:90:c0:5c:fe:65: 55:0d:88:f5:a3:3f:73:fa:83:2e:c8:00:80:13:66: 71:24:2a:b6:f3:a2:7a:3d:10:ac:d5:d4:96:bb:68: 59:28:2e:2f:7c:8a:01:5b:55:6b:9a:0e:85:cd:59: a4:db:9f:79:b6:3a:9d:d6:93:5e:64:aa:85:c8:c8: 2a:9e:39:eb:f3:e2:85:cb:80:8a:8d:a3:00:2a:60: 12:e1:08:41:e8:be:47:4d:ac:67:d8:44:3f:c4:6c: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A9:97:77:1D:AD:0F:F0:C5:C2:76:3B:9A:8E:D9:68:6B:ED:02:C8 X509v3 Authority Key Identifier: keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9e:3b:16:20:65:e8:88:6f:4c:c7:68:46:1c:5a:d5:ec:d4: b1:9f:e3:87:6d:1a:5b:db:15:2d:66:60:96:35:a5:63:31:64: 70:41:ec:3d:62:56:8f:ea:83:1d:4a:2c:ad:e3:9b:82:52:6a: 95:79:76:a1:93:42:e6:9e:4a:01:28:8f:7d:23:56:27:78:25: 72:83:ab:4d:92:b1:60:1d:10:43:09:4e:aa:6f:ab:1a:ea:7f: 4d:b4:83:9a:bb:d5:78:c9:5c:00:eb:86:be:79:2f:81:87:16: 03:0f:a9:31:6a:54:42:d9:d2:03:22:cb:18:83:93:7c:46:0d: 09:f0:85:b4:79:ed:57:64:eb:cd:b1:43:c0:6d:b3:28:86:e5: d5:83:db:d7:1c:30:26:75:ce:e2:b2:df:10:a2:d8:4a:8c:8e: ce:b8:26:7a:a6:30:f4:f6:93:ef:b0:09:83:21:8d:0c:a8:f2: 4d:c4:9c:60:bf:b6:39:ba:51:c7:3a:71:11:c8:a0:09:86:59: 34:ea:83:e1:03:16:8f:48:45:c9:b1:f9:67:e5:f4:82:d0:7e: db:d9:b8:09:21:c4:69:76:32:a5:c4:2a:67:1d:5c:f4:2a:44: c7:b1:07:9c:4e:6d:2a:4a:e2:16:3b:31:83:a8:e3:27:35:90: ac:a3:94:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHeVlpTyR8Egr3w65z8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2 ODNjODEwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD EyhmNWE5OTc3NzFkYWQwZmYwYzVjMjc2M2I5YThlZDk2ODZiZWQwMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCZs/3lTRXckuZOdNBRptvOgEEXo fdwV17LM54cYz1e5uiJtudN7SsQFDYXj8A5k1GpP4NBjieOGvYN/RP4u+D9Mj4zy vF6bpnzBrm0XNagqQAeq+Lbz8olhg+ZokRLreTLFiPDrwSldXI9mUG43jVCJvxrq RXv+RxUkTWyAEWBesA9ofwqc4lad+vmnz35ARs8IiKTuXujbkKqvR++PkMBc/mVV DYj1oz9z+oMuyACAE2ZxJCq286J6PRCs1dSWu2hZKC4vfIoBW1Vrmg6FzVmk2595 tjqd1pNeZKqFyMgqnjnr8+KFy4CKjaMAKmAS4QhB6L5HTaxn2EQ/xGwO/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWpl3cdrQ/wxcJ2O5qO2Whr7QLIMB8GA1UdIwQY MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ47FiBl 6IhvTMdoRhxa1ezUsZ/jh20aW9sVLWZgljWlYzFkcEHsPWJWj+qDHUosreObglJq lXl2oZNC5p5KASiPfSNWJ3glcoOrTZKxYB0QQwlOqm+rGup/TbSDmrvVeMlcAOuG vnkvgYcWAw+pMWpUQtnSAyLLGIOTfEYNCfCFtHntV2TrzbFDwG2zKIbl1YPb1xww JnXO4rLfEKLYSoyOzrgmeqYw9PaT77AJgyGNDKjyTcScYL+2ObpRxzpxEcigCYZZ NOqD4QMWj0hFybH5Z+X0gtB+29m4CSHEaXYypcQqZx1c9CpEx7EHnE5tKkriFjsx g6jjJzWQrKOUKA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:43 2025 by rpki-client