This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json) Hash identifier: QQGgbsx4H05ZV2ATOSlzRRjz5xqzntDJ2iYdN0yTg3E= Subject key identifier: EF:8E:FE:C2:C7:2E:E6:B1:6D:ED:79:CF:4E:BE:0B:92:A9:CA:41:71 Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Certificate serial: 019B42B7A2E88FF3B682D4C0AA5D1D3F1929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:01:29 +0000 Manifest this update: Sun 21 Dec 2025 21:01:29 +0000 Manifest next update: Mon 22 Dec 2025 21:01:29 +0000 Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: X1YRBQHiBJk75W1hnSGcHRu2H5CYeToboLamhQrIDCc=) 2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=) 3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=) 4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=) 5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:a2:e8:8f:f3:b6:82:d4:c0:aa:5d:1d:3f:19:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Validity Not Before: Dec 21 21:01:29 2025 GMT Not After : Dec 22 21:01:29 2025 GMT Subject: CN=ef8efec2c72ee6b16ded79cf4ebe0b92a9ca4171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:7b:8d:a5:4e:a8:6b:5e:be:58:ce:bd:49: 4b:93:f1:44:36:b3:b5:44:40:a0:ce:b1:96:97:b1: 9d:39:d8:eb:18:41:3f:10:b7:23:6b:e7:50:3d:ef: 53:d9:ff:49:e1:44:eb:21:95:50:e8:05:03:6e:8a: 23:bc:38:27:45:a7:51:ff:34:a5:af:01:a8:78:b5: a3:ac:4f:df:b0:e0:d9:1f:a3:17:2c:03:d7:ce:ab: 16:aa:63:0e:4a:01:c5:a4:83:3d:bf:10:ac:0a:c0: 80:9f:c9:c7:0c:34:8b:4d:7e:ea:27:d9:d7:43:a5: 50:65:3a:db:98:13:7a:da:a4:42:c7:f4:05:eb:67: ff:0c:19:98:b1:05:35:15:ed:e4:1f:6f:8f:44:a0: 7a:39:af:fc:bc:7f:90:cd:3a:8f:ba:75:c9:b1:4f: 69:37:fc:1c:27:8e:88:17:17:0c:d0:02:88:fe:df: 84:5e:75:a2:bd:78:85:14:f4:b1:de:90:e0:7f:93: 12:67:7c:ee:12:a2:93:72:8f:9d:df:03:6d:09:4d: e2:6e:e1:07:66:14:2d:e2:bd:bc:bc:57:22:5c:e8: f3:85:2f:1f:69:49:2e:68:17:b3:7f:72:11:06:b7: d6:03:d7:e6:86:30:51:ae:f7:9a:c4:90:1b:78:3f: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:FE:C2:C7:2E:E6:B1:6D:ED:79:CF:4E:BE:0B:92:A9:CA:41:71 X509v3 Authority Key Identifier: keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2a:68:54:74:26:dc:33:33:37:1d:ef:a0:f0:66:94:3b:1b: 18:40:74:91:7e:6f:51:dc:c7:3c:6d:e8:29:cc:7e:c2:13:47: 7e:d7:7e:c9:62:96:ec:00:aa:ea:f9:e5:60:31:22:97:db:96: 43:07:f3:76:64:d6:01:c3:45:2a:3f:59:69:ab:24:36:4c:57: a2:32:e4:37:92:0c:e9:bf:91:8e:f9:ae:ab:61:14:ea:eb:aa: b6:8d:45:c5:df:ff:88:ab:59:97:4c:61:a5:90:0d:e5:af:e1: b8:64:95:1d:a7:00:76:1d:b2:20:ff:ec:73:fc:61:c2:98:58: d3:fa:78:25:7b:6f:78:ed:a6:ed:30:47:c0:06:5d:08:50:be: 0c:31:7b:6c:25:e3:1e:ba:34:49:21:52:ec:27:9d:a1:56:1e: 0e:52:ad:54:3e:99:49:d3:77:d3:2d:32:a1:07:c7:a8:2b:01: d9:b1:ae:49:fc:89:0b:0f:70:4c:06:14:dc:ce:1b:73:77:7b: 33:71:af:4c:9b:3e:d7:29:e4:50:b3:2d:eb:93:d4:67:38:cd: 3c:63:13:0c:e9:c8:7f:ae:f3:c6:a7:aa:d7:85:ca:da:41:b4: f2:46:1e:e3:bb:bd:fa:eb:e9:7d:3b:21:a9:fd:a3:c8:c1:19: 54:50:04:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt6Loj/O2gtTAql0dPxkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4 NDYxNWEwHhcNMjUxMjIxMjEwMTI5WhcNMjUxMjIyMjEwMTI5WjAzMTEwLwYDVQQD EyhlZjhlZmVjMmM3MmVlNmIxNmRlZDc5Y2Y0ZWJlMGI5MmE5Y2E0MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxox7jaVOqGtevljOvUlLk/FENrO1 RECgzrGWl7GdOdjrGEE/ELcja+dQPe9T2f9J4UTrIZVQ6AUDboojvDgnRadR/zSl rwGoeLWjrE/fsODZH6MXLAPXzqsWqmMOSgHFpIM9vxCsCsCAn8nHDDSLTX7qJ9nX Q6VQZTrbmBN62qRCx/QF62f/DBmYsQU1Fe3kH2+PRKB6Oa/8vH+QzTqPunXJsU9p N/wcJ46IFxcM0AKI/t+EXnWivXiFFPSx3pDgf5MSZ3zuEqKTco+d3wNtCU3ibuEH ZhQt4r28vFciXOjzhS8faUkuaBezf3IRBrfWA9fmhjBRrveaxJAbeD8T2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+O/sLHLuaxbe15z06+C5KpykFxMB8GA1UdIwQY MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt Y2FjM2U0MmFlMDNmLzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUipoVHQm 3DMzNx3voPBmlDsbGEB0kX5vUdzHPG3oKcx+whNHftd+yWKW7ACq6vnlYDEil9uW QwfzdmTWAcNFKj9ZaaskNkxXojLkN5IM6b+Rjvmuq2EU6uuqto1Fxd//iKtZl0xh pZAN5a/huGSVHacAdh2yIP/sc/xhwphY0/p4JXtveO2m7TBHwAZdCFC+DDF7bCXj Hro0SSFS7CedoVYeDlKtVD6ZSdN30y0yoQfHqCsB2bGuSfyJCw9wTAYU3M4bc3d7 M3GvTJs+1ynkULMt65PUZzjNPGMTDOnIf67zxqeq14XK2kG08kYe47u9+uvpfTsh qf2jyMEZVFAEEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:16 2025 by rpki-client