This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: KXqt31B1fDGE8Mt1Jp9D4kQI7+lhcXLkkr2PJYCGZJs= Subject key identifier: 31:55:F9:9A:7F:65:DE:2C:2D:9D:D9:5D:21:4E:01:C1:F0:77:F1:20 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019B48B95E535333587CCFD387CCB13223F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 0473 Signing time: Tue 23 Dec 2025 01:01:06 +0000 Manifest this update: Tue 23 Dec 2025 01:01:06 +0000 Manifest next update: Wed 24 Dec 2025 01:01:06 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: +zDQE/yxhgirXGp2hu7l7FMhEO2PXjIi1E2dohljXw0=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:5e:53:53:33:58:7c:cf:d3:87:cc:b1:32:23:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Dec 23 01:01:06 2025 GMT Not After : Dec 24 01:01:06 2025 GMT Subject: CN=3155f99a7f65de2c2d9dd95d214e01c1f077f120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:79:45:fc:ea:20:fc:73:82:66:73:8d:6d: ce:04:9d:1e:b6:cc:f6:0e:19:f5:7d:ac:aa:1c:0f: ac:26:e1:5c:09:a0:80:f8:4f:9d:1b:d1:1e:c3:b0: 10:c9:ca:c1:55:59:fb:be:26:eb:90:fe:44:5a:1e: 28:e8:e7:08:b4:02:66:31:a6:49:1d:dc:1c:43:81: 5d:35:68:6f:84:26:f6:4f:0c:b2:40:58:d7:e3:e6: 5f:62:f2:ff:61:1d:e2:e7:22:be:1e:dd:25:82:8c: 45:2b:03:0a:a4:30:6e:88:9c:0f:2a:3b:1c:34:2f: 3a:75:c1:28:65:e1:2c:83:da:eb:f3:51:83:b3:b4: 44:ee:e0:21:07:54:74:04:fb:d3:0a:e4:b1:ea:ec: 84:d8:50:10:b2:ed:88:a8:4e:78:15:00:52:e6:c8: 7e:42:38:20:a7:1c:c5:d3:f9:79:b8:b6:b2:ca:a7: 2f:fe:bb:0f:09:7d:6f:8a:80:69:03:69:2a:db:ba: 91:a9:e6:41:ea:d2:9d:b1:cb:37:63:10:5e:50:bb: 43:a6:4c:16:9f:0c:0f:c5:4d:c2:6d:0b:61:63:e5: a2:e8:5d:c1:7b:b4:c6:35:9e:09:df:ba:56:7f:18: cc:c1:f2:7c:ce:63:c3:8d:1c:40:d6:78:01:a3:67: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:F9:9A:7F:65:DE:2C:2D:9D:D9:5D:21:4E:01:C1:F0:77:F1:20 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:59:62:bf:48:d7:ac:67:75:14:79:7a:88:d7:34:b3:af:5a: 46:3c:07:6c:61:6e:fd:2f:a2:68:79:8a:dd:4f:2e:40:79:d1: 7c:af:73:c4:6c:42:59:d2:aa:ea:a6:e3:1e:fe:f5:d9:69:b9: 03:8c:ea:ee:fd:2a:6b:11:9f:bd:46:60:de:86:ea:29:ee:4e: c4:1b:0f:e1:8f:b7:14:a2:32:69:9b:b9:3e:b6:2e:1d:54:81: d9:bc:2c:1f:f3:75:41:83:7f:c5:c4:23:a5:63:8d:a9:b6:27: 00:4e:71:d4:da:d1:c0:5a:e3:e4:8b:d6:77:40:c7:38:31:94: f9:46:bf:a6:11:4c:7e:d7:e2:c9:00:6e:86:dc:03:2d:3b:2b: c1:ee:87:23:84:f0:69:37:87:ca:8d:56:71:83:cd:3a:67:73: 02:da:ef:d1:b6:31:a3:89:49:1b:7e:a9:ed:76:e2:11:89:6b: 12:3e:e6:93:92:a6:60:e0:ed:01:19:66:bc:8e:f5:09:4a:df: b9:44:59:8e:73:71:59:89:2d:a6:e8:6f:96:f2:db:a0:5f:b3: bd:ab:1e:85:3d:19:0e:49:f4:1b:e4:5d:98:0a:2a:2a:73:05: c8:10:27:7e:09:3d:25:cf:35:0a:10:f8:d4:f0:54:7b:04:bd: 95:3a:60:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuV5TUzNYfM/Th8yxMiPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMjIzMDEwMTA2WhcNMjUxMjI0MDEwMTA2WjAzMTEwLwYDVQQD EygzMTU1Zjk5YTdmNjVkZTJjMmQ5ZGQ5NWQyMTRlMDFjMWYwNzdmMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssd5RfzqIPxzgmZzjW3OBJ0etsz2 Dhn1fayqHA+sJuFcCaCA+E+dG9Eew7AQycrBVVn7vibrkP5EWh4o6OcItAJmMaZJ HdwcQ4FdNWhvhCb2TwyyQFjX4+ZfYvL/YR3i5yK+Ht0lgoxFKwMKpDBuiJwPKjsc NC86dcEoZeEsg9rr81GDs7RE7uAhB1R0BPvTCuSx6uyE2FAQsu2IqE54FQBS5sh+ QjggpxzF0/l5uLayyqcv/rsPCX1vioBpA2kq27qRqeZB6tKdscs3YxBeULtDpkwW nwwPxU3CbQthY+Wi6F3Be7TGNZ4J37pWfxjMwfJ8zmPDjRxA1ngBo2cdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFV+Zp/Zd4sLZ3ZXSFOAcHwd/EgMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1liv0jX rGd1FHl6iNc0s69aRjwHbGFu/S+iaHmK3U8uQHnRfK9zxGxCWdKq6qbjHv712Wm5 A4zq7v0qaxGfvUZg3obqKe5OxBsP4Y+3FKIyaZu5PrYuHVSB2bwsH/N1QYN/xcQj pWONqbYnAE5x1NrRwFrj5IvWd0DHODGU+Ua/phFMftfiyQBuhtwDLTsrwe6HI4Tw aTeHyo1WcYPNOmdzAtrv0bYxo4lJG36p7XbiEYlrEj7mk5KmYODtARlmvI71CUrf uURZjnNxWYktpuhvlvLboF+zvasehT0ZDkn0G+RdmAoqKnMFyBAnfgk9Jc81ChD4 1PBUewS9lTpgqQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:57 2025 by rpki-client