This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: X9vIsFBQ+Re4hllE3pymlZpr9xRrqR7aRRPkWudZ3o0= Subject key identifier: 21:A4:8C:9E:4F:27:00:6A:BA:E5:3F:22:BB:1C:C0:BF:A4:02:74:42 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B38D83C627C8087D392D9B76F23374D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 1011 Signing time: Fri 19 Dec 2025 23:00:53 +0000 Manifest this update: Fri 19 Dec 2025 23:00:53 +0000 Manifest next update: Sat 20 Dec 2025 23:00:53 +0000 Files and hashes: 1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=) 2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=) 3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=) 4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=) 5: K57zRI93D4Vp1wMJF72FshTwG28.roa (hash: +61sxRGSjoUvyPkCFintn1yn0/ScQTJViPj1QF7B1mY=) 6: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=) 7: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: 4lr02ixyQWxaCyk0fvfOF8ibP4hh8DNpbOoVWbopY28=) 8: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (hash: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=) 9: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=) 10: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=) 11: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=) 12: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=) 13: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=) 14: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=) 15: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=) 16: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=) 17: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:3c:62:7c:80:87:d3:92:d9:b7:6f:23:37:4d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Dec 19 23:00:53 2025 GMT Not After : Dec 20 23:00:53 2025 GMT Subject: CN=21a48c9e4f27006abae53f22bb1cc0bfa4027442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:a1:d8:44:2f:25:27:67:4f:a3:76:c4:72: be:ca:27:a3:f2:6d:a8:14:00:e3:c8:50:26:be:19: 61:6e:d4:57:83:54:7c:4c:26:52:2f:5f:b5:0b:5d: 48:70:4a:b1:2d:ce:0d:41:3c:24:b7:33:ff:d7:63: de:46:00:39:3f:d4:60:93:a5:e1:70:05:4c:74:7d: 76:06:90:7f:b3:63:53:1e:fb:e4:98:4c:7f:de:14: 45:a7:12:3a:b7:53:52:d1:56:bb:4e:0c:10:62:e0: b3:ef:b3:57:18:a7:02:29:cb:b8:12:75:87:ab:93: 94:33:a9:eb:70:36:3a:ab:b0:de:85:7e:6e:96:23: c8:35:b8:69:c3:27:35:7f:1a:6a:69:98:5c:22:4d: 75:97:80:01:3c:e1:db:03:14:e2:b7:b0:e9:11:81: c7:c6:a5:33:32:90:49:92:8d:86:26:e3:40:3c:ce: 42:92:d4:49:51:bb:37:84:14:16:af:0f:6b:c9:6d: d2:47:cd:6d:43:4e:0a:67:16:76:6b:f9:c5:8d:30: 14:46:27:0d:79:53:f6:41:a6:e6:02:d0:f3:27:5d: 07:e8:d4:b0:9c:54:81:f7:28:60:35:e3:2e:82:2f: e8:2b:33:5b:77:93:24:e0:a9:14:9f:1a:78:ea:90: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:8C:9E:4F:27:00:6A:BA:E5:3F:22:BB:1C:C0:BF:A4:02:74:42 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:b2:f7:86:b6:c4:93:9d:a1:1c:c5:31:9d:24:94:f1:d7: 0d:7d:f4:9b:1e:54:8f:7b:80:02:7b:c1:81:98:34:09:ef:9d: 0d:65:3f:e2:bb:dc:88:98:1f:6e:28:8e:b0:ec:c2:21:cc:1b: eb:72:32:2d:6c:35:23:34:d6:7a:5a:61:e9:a0:e5:c2:e7:82: de:c4:52:87:54:91:dd:2a:b9:43:6f:1a:37:68:41:d0:5d:e3: a9:d0:e2:98:2c:59:3f:6b:f3:76:e6:65:37:e0:38:74:b7:7e: 4e:56:00:42:17:2f:db:31:25:89:11:f8:cc:54:9d:0c:f7:7b: b9:64:53:a0:88:24:f0:04:eb:ee:21:83:05:e6:1f:28:8c:03: 7b:e4:02:4f:c6:2d:60:ed:3d:65:99:55:16:c5:1f:d2:01:81: 66:36:ee:af:ca:9e:27:06:61:82:64:43:5d:59:d6:86:b1:85: 0f:c8:f1:8e:bf:12:41:a8:82:3c:58:cb:cf:83:44:87:b7:f6: 6b:1b:08:db:a4:3f:ac:a1:e9:01:0a:bd:23:74:8b:c0:4b:5e: 86:93:b5:20:b7:ba:03:20:e9:fa:fb:e4:f5:6b:33:ad:7f:33: 59:61:00:6a:1f:b8:7a:ed:0d:78:12:3b:01:52:a2:ab:da:f1: 10:40:c4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DxifICH05LZt28jN01VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjUxMjE5MjMwMDUzWhcNMjUxMjIwMjMwMDUzWjAzMTEwLwYDVQQD EygyMWE0OGM5ZTRmMjcwMDZhYmFlNTNmMjJiYjFjYzBiZmE0MDI3NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKah2EQvJSdnT6N2xHK+yiej8m2o FADjyFAmvhlhbtRXg1R8TCZSL1+1C11IcEqxLc4NQTwktzP/12PeRgA5P9Rgk6Xh cAVMdH12BpB/s2NTHvvkmEx/3hRFpxI6t1NS0Va7TgwQYuCz77NXGKcCKcu4EnWH q5OUM6nrcDY6q7DehX5uliPINbhpwyc1fxpqaZhcIk11l4ABPOHbAxTit7DpEYHH xqUzMpBJko2GJuNAPM5CktRJUbs3hBQWrw9ryW3SR81tQ04KZxZ2a/nFjTAURicN eVP2QabmAtDzJ10H6NSwnFSB9yhgNeMugi/oKzNbd5Mk4KkUnxp46pBS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGkjJ5PJwBquuU/IrscwL+kAnRCMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouyy94a2 xJOdoRzFMZ0klPHXDX30mx5Uj3uAAnvBgZg0Ce+dDWU/4rvciJgfbiiOsOzCIcwb 63IyLWw1IzTWelph6aDlwueC3sRSh1SR3Sq5Q28aN2hB0F3jqdDimCxZP2vzduZl N+A4dLd+TlYAQhcv2zEliRH4zFSdDPd7uWRToIgk8ATr7iGDBeYfKIwDe+QCT8Yt YO09ZZlVFsUf0gGBZjbur8qeJwZhgmRDXVnWhrGFD8jxjr8SQaiCPFjLz4NEh7f2 axsI26Q/rKHpAQq9I3SLwEtehpO1ILe6AyDp+vvk9WszrX8zWWEAah+4eu0NeBI7 AVKiq9rxEEDEsg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:47 2025 by rpki-client