This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json) Hash identifier: heuvno1XrFCh5IQBU4T/MLFowfozSXvc/4KSBfA3caw= Subject key identifier: 4D:F3:6D:7D:A0:80:86:94:7B:F4:8D:36:7F:CE:6A:9C:B7:D9:B4:C2 Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Certificate serial: 019B3AFE2B5096E535AB16241CABE34AC3EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 09:01:34 +0000 Manifest this update: Sat 20 Dec 2025 09:01:34 +0000 Manifest next update: Sun 21 Dec 2025 09:01:34 +0000 Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: g5LxdAhLViFoNqQXLE4AHNRvmvNUgG9RaQK6FIwjvtE=) 2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=) 3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=) 4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=) 5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:2b:50:96:e5:35:ab:16:24:1c:ab:e3:4a:c3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a Validity Not Before: Dec 20 09:01:34 2025 GMT Not After : Dec 21 09:01:34 2025 GMT Subject: CN=4df36d7da08086947bf48d367fce6a9cb7d9b4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:9b:5a:de:d9:f5:c1:12:68:c2:09:cf:3a: 03:f2:62:c0:be:c8:44:76:e0:d6:91:ac:4c:1d:24: 35:37:9c:73:a3:6c:82:a2:82:5f:6d:ac:77:ae:b9: b2:6b:9e:ba:f2:fc:d9:df:3c:95:4b:88:3c:1a:7e: ba:c8:c5:dd:bb:06:99:18:9f:d0:68:c1:4e:2c:57: e3:d1:13:cc:3e:8f:cc:6b:9c:b3:f4:77:75:24:8e: d7:14:56:86:d8:19:92:59:f6:78:4c:2e:f9:c8:68: fa:5d:de:bd:3c:ac:56:05:d5:14:f5:e7:e6:7b:f2: ab:b2:1f:51:c8:7d:42:28:55:78:83:59:03:12:0e: 7b:15:ed:6b:83:13:be:ea:e3:8a:80:7f:87:bd:fd: 39:78:6f:a3:51:f5:77:38:70:e7:8c:7a:cb:af:2c: 48:33:7c:7a:b7:de:95:29:82:82:d5:16:ec:26:ef: 86:52:9a:fd:d5:11:c2:bd:3f:e5:6d:5d:07:e1:13: 3c:f1:3b:6a:f1:e1:e2:34:c8:24:58:54:d3:57:37: 7b:49:47:ce:9f:3f:79:85:da:a6:84:7b:8e:59:68: a7:6b:f4:16:6d:05:58:6d:88:42:c6:ed:4e:1c:32: 5c:54:16:a8:14:bc:cf:4a:69:d2:6d:53:a1:ad:57: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F3:6D:7D:A0:80:86:94:7B:F4:8D:36:7F:CE:6A:9C:B7:D9:B4:C2 X509v3 Authority Key Identifier: keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:55:37:ad:06:9e:5d:b9:e9:a3:71:84:8d:a8:fa:c0:2d:ee: c7:e9:20:48:8f:4e:95:12:05:57:a2:47:c9:7e:e0:72:a2:d7: ce:9b:40:76:c5:06:09:7c:d8:37:13:e8:8c:cc:db:be:0b:c7: 6f:82:64:e7:f9:3a:63:45:91:82:25:2e:38:fa:c3:86:64:e8: c1:81:5f:64:d3:d7:69:54:98:9e:6c:18:1f:1d:5b:d7:44:09: e1:90:ea:e2:96:e4:ac:09:c0:bd:35:6a:1c:6f:6d:0a:83:aa: a8:ec:59:c9:fc:49:8d:b4:d6:7a:65:41:b9:79:5f:da:cf:52: 82:55:83:bc:82:fb:91:43:d7:22:82:24:64:7e:73:0b:52:53: 07:ac:af:4d:4e:55:94:42:8a:7c:46:8e:b1:33:f2:f0:a1:86: 5f:a4:83:7f:25:a0:d4:f8:8c:d3:5c:7b:c5:aa:7d:31:71:0c: 43:15:f8:cf:3c:c0:6d:bd:74:c6:7f:0c:72:71:ee:ad:2d:5b: 23:2f:5d:27:f5:bd:d5:07:94:6d:6a:1b:09:10:18:f2:5a:87: 79:76:3d:db:3b:eb:1c:a1:52:3f:ec:62:a1:7d:5d:44:0b:9b: 25:85:43:8e:9e:e4:94:1f:16:cc:50:10:5b:ad:35:6e:b2:4a: 75:f5:f4:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/itQluU1qxYkHKvjSsPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDhkZjE2NWQ0OTdkN2E5Yjk5ZTBlNzFmMTViYTA3ZDE4 NDYxNWEwHhcNMjUxMjIwMDkwMTM0WhcNMjUxMjIxMDkwMTM0WjAzMTEwLwYDVQQD Eyg0ZGYzNmQ3ZGEwODA4Njk0N2JmNDhkMzY3ZmNlNmE5Y2I3ZDliNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/ebWt7Z9cESaMIJzzoD8mLAvshE duDWkaxMHSQ1N5xzo2yCooJfbax3rrmya5668vzZ3zyVS4g8Gn66yMXduwaZGJ/Q aMFOLFfj0RPMPo/Ma5yz9Hd1JI7XFFaG2BmSWfZ4TC75yGj6Xd69PKxWBdUU9efm e/Krsh9RyH1CKFV4g1kDEg57Fe1rgxO+6uOKgH+Hvf05eG+jUfV3OHDnjHrLryxI M3x6t96VKYKC1RbsJu+GUpr91RHCvT/lbV0H4RM88Ttq8eHiNMgkWFTTVzd7SUfO nz95hdqmhHuOWWina/QWbQVYbYhCxu1OHDJcVBaoFLzPSmnSbVOhrVeE3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3zbX2ggIaUe/SNNn/Oapy32bTCMB8GA1UdIwQY MBaAFC8I3xZdSX16m5ng5x8VugfRhGFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzIt Y2FjM2U0MmFlMDNmLzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZDAzNjAtZmJjMi00NmViLTlhYzItY2FjM2U0MmFlMDNm LzEvTHdqZkZsMUpmWHFibWVEbkh4VzZCOUdFWVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1U3rQae Xbnpo3GEjaj6wC3ux+kgSI9OlRIFV6JHyX7gcqLXzptAdsUGCXzYNxPojMzbvgvH b4Jk5/k6Y0WRgiUuOPrDhmTowYFfZNPXaVSYnmwYHx1b10QJ4ZDq4pbkrAnAvTVq HG9tCoOqqOxZyfxJjbTWemVBuXlf2s9SglWDvIL7kUPXIoIkZH5zC1JTB6yvTU5V lEKKfEaOsTPy8KGGX6SDfyWg1PiM01x7xap9MXEMQxX4zzzAbb10xn8McnHurS1b Iy9dJ/W91QeUbWobCRAY8lqHeXY92zvrHKFSP+xioX1dRAubJYVDjp7klB8WzFAQ W601brJKdfX09A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:54 2025 by rpki-client