This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json) Hash identifier: YnN6QSOUwOmTVXs2K6wOZ08RXDZ4JE+CvKP0mjgQB3k= Subject key identifier: 6C:6E:E9:89:D8:E0:9B:04:AA:0F:94:6C:20:A0:7F:EB:FA:85:BC:4B Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Certificate serial: 019B50E038B78FFC96A2CB89FD60ECDBED4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 15:00:30 +0000 Manifest this update: Wed 24 Dec 2025 15:00:30 +0000 Manifest next update: Thu 25 Dec 2025 15:00:30 +0000 Files and hashes: 1: CM1I0g6vXtA41a0rBYPAv0a0YtI.roa (hash: x+yWLPFvIYaQ0HKjxHn7eS1o7Fpl3blU8cO8iwEiSFM=) 2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=) 3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: BIcByMUnhvMg2RsOnuQVG+iGkeC3435kujCmQ/EKJFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:38:b7:8f:fc:96:a2:cb:89:fd:60:ec:db:ed:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Validity Not Before: Dec 24 15:00:30 2025 GMT Not After : Dec 25 15:00:30 2025 GMT Subject: CN=6c6ee989d8e09b04aa0f946c20a07febfa85bc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:d1:dc:e9:f1:98:74:6a:fa:38:db:79:6f: a8:a6:8e:b4:6c:8e:d3:0b:35:83:49:af:08:4a:52: b6:cc:2f:cb:1d:8c:fd:30:ea:cf:4d:e6:02:44:ab: 8f:c4:f3:47:fb:66:62:b8:5e:66:7f:fc:9b:76:ab: 13:b0:90:0e:e4:0d:c0:7a:52:25:30:9c:1f:10:44: 2c:5e:6f:e3:8a:c7:be:d6:f0:b6:7e:a7:be:1e:42: c8:4b:97:38:66:09:c6:ca:3f:3b:ab:09:57:66:b4: 5a:20:9e:5d:6f:25:fe:09:0f:9e:38:cc:85:89:63: 57:a6:4f:9d:f7:36:a8:81:84:d7:ce:9b:5d:c9:2f: 2b:71:0c:7c:02:5e:ae:41:6c:91:2e:f0:51:c5:1e: f2:71:44:7f:c4:89:5b:ae:3b:ea:d8:14:22:9f:f0: df:61:0b:48:d3:a8:8b:30:f7:e8:35:ee:1a:75:77: 5a:b1:aa:b1:c1:cd:c1:20:ee:24:ae:53:20:c5:47: 47:98:54:c4:c2:9f:43:f3:54:28:35:d2:08:5d:43: be:60:84:18:34:7c:fb:2c:34:84:10:82:85:86:bc: 18:3c:d6:83:1b:60:66:12:47:86:20:f2:4f:13:f3: f1:3d:e3:58:a1:f7:d5:3b:c3:b8:f9:24:39:53:e3: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6E:E9:89:D8:E0:9B:04:AA:0F:94:6C:20:A0:7F:EB:FA:85:BC:4B X509v3 Authority Key Identifier: keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ad:93:1f:d6:ab:5a:ff:74:c4:c1:46:ad:07:ec:98:f1:f9: b5:fc:73:33:79:2d:e0:2d:32:9b:dd:75:06:a1:dc:27:88:63: 2e:f6:4c:3a:26:7c:00:4b:74:c8:6c:2c:87:3b:a8:e3:c6:e2: e7:43:b8:5d:33:8d:d4:d5:ad:63:77:7c:42:ac:7d:bc:e3:0f: 48:1a:be:78:28:57:c3:b4:9b:50:dc:fa:c5:24:c3:f3:eb:2b: b5:14:b6:59:cd:b4:ba:b0:cb:13:a0:5d:51:96:0f:16:01:ef: 0d:78:cd:23:68:57:d5:06:92:a8:30:ff:0f:47:aa:c9:4b:5c: ce:9c:d0:9f:f7:d0:d9:82:6a:64:7c:40:54:fd:15:75:9f:6d: 40:7d:e1:e7:cb:d2:65:44:80:27:97:21:9c:e9:ef:c3:ac:73: 72:03:af:32:fc:4a:cf:39:d0:ac:1f:b4:89:b8:61:a8:dd:10: 27:a1:aa:31:ff:51:95:14:db:e1:4b:e0:c8:5b:6b:36:ee:b7: f6:36:32:72:a2:b1:1a:ae:80:64:08:00:4b:31:89:7a:0e:5d: 2a:d0:fa:a7:54:80:fe:e2:99:6d:a9:2c:b5:22:1d:c7:4c:e5: b8:7f:a1:d8:05:9b:1a:f1:c1:41:8c:e1:5b:54:d0:70:d7:ff: 64:06:32:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Di3j/yWosuJ/WDs2+1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YmMzY2RhYzQ2NDA4YzBjOGEzNTgxNzg4YjUxMGQwZjA0 ZTlkMWYwHhcNMjUxMjI0MTUwMDMwWhcNMjUxMjI1MTUwMDMwWjAzMTEwLwYDVQQD Eyg2YzZlZTk4OWQ4ZTA5YjA0YWEwZjk0NmMyMGEwN2ZlYmZhODViYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnR3OnxmHRq+jjbeW+opo60bI7T CzWDSa8ISlK2zC/LHYz9MOrPTeYCRKuPxPNH+2ZiuF5mf/ybdqsTsJAO5A3AelIl MJwfEEQsXm/jise+1vC2fqe+HkLIS5c4ZgnGyj87qwlXZrRaIJ5dbyX+CQ+eOMyF iWNXpk+d9zaogYTXzptdyS8rcQx8Al6uQWyRLvBRxR7ycUR/xIlbrjvq2BQin/Df YQtI06iLMPfoNe4adXdasaqxwc3BIO4krlMgxUdHmFTEwp9D81QoNdIIXUO+YIQY NHz7LDSEEIKFhrwYPNaDG2BmEkeGIPJPE/PxPeNYoffVO8O4+SQ5U+MBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxu6YnY4JsEqg+UbCCgf+v6hbxLMB8GA1UdIwQY MBaAFJS8PNrEZAjAyKNYF4i1ENDwTp0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEt YzYwNDcyZTlmNzE3LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEtYzYwNDcyZTlmNzE3 LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq2TH9ar Wv90xMFGrQfsmPH5tfxzM3kt4C0ym911BqHcJ4hjLvZMOiZ8AEt0yGwshzuo48bi 50O4XTON1NWtY3d8Qqx9vOMPSBq+eChXw7SbUNz6xSTD8+srtRS2Wc20urDLE6Bd UZYPFgHvDXjNI2hX1QaSqDD/D0eqyUtczpzQn/fQ2YJqZHxAVP0VdZ9tQH3h58vS ZUSAJ5chnOnvw6xzcgOvMvxKzznQrB+0ibhhqN0QJ6GqMf9RlRTb4UvgyFtrNu63 9jYycqKxGq6AZAgASzGJeg5dKtD6p1SA/uKZbakstSIdx0zluH+h2AWbGvHBQYzh W1TQcNf/ZAYyIw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:31:59 2025 by rpki-client