This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json) Hash identifier: bL5hD9B72cOxmkHEHPJIU0Ax0ZRsc2S2RCskvw1aBhs= Subject key identifier: 3A:B6:0E:BA:4D:7F:6D:93:EE:C8:78:A3:0D:4C:1B:2E:9C:64:9E:66 Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Certificate serial: 019B3CB51C356A266F3B8DA3641F9B7CBCF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft Manifest number: 12C3 Signing time: Sat 20 Dec 2025 17:01:00 +0000 Manifest this update: Sat 20 Dec 2025 17:01:00 +0000 Manifest next update: Sun 21 Dec 2025 17:01:00 +0000 Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: WbrulOi1oBcelH1QKUx5KyI4Qu9Z1IoTflMlEoegmZo=) 2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:1c:35:6a:26:6f:3b:8d:a3:64:1f:9b:7c:bc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5 Validity Not Before: Dec 20 17:01:00 2025 GMT Not After : Dec 21 17:01:00 2025 GMT Subject: CN=3ab60eba4d7f6d93eec878a30d4c1b2e9c649e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:35:63:5e:91:88:bf:36:13:18:dc:27:a8: 70:e2:39:a4:a2:08:32:b7:22:98:c8:37:9c:46:d0: 9c:0b:b6:38:04:4d:62:53:92:b8:72:60:aa:b5:b7: 0d:4a:25:2d:d8:d3:47:e1:5b:04:10:21:42:5f:7c: fa:29:3e:58:04:63:8a:10:1b:57:33:92:90:05:5b: 07:11:23:6a:48:a2:88:29:a9:0b:3a:cd:d7:93:15: 3c:bd:4d:f1:60:3b:1e:fa:6a:30:36:79:d0:47:23: 8e:23:9f:5a:86:e5:56:ec:1d:91:c7:a7:a8:3a:f3: 1b:05:97:1a:b6:61:5c:3f:af:2d:d4:be:9c:cd:43: 77:e0:a9:02:c1:03:c2:ec:84:11:99:2d:b9:bb:95: 56:0a:1a:78:02:81:50:d6:22:95:9f:1e:82:87:2a: ce:c5:50:44:b1:0c:45:d9:7c:69:7a:1e:67:0f:7a: 82:b6:3c:5c:48:1b:15:b7:6f:c5:b3:b2:52:7e:ee: 37:2b:da:da:b5:38:90:5b:2f:18:74:cb:36:3a:4a: 8f:bb:13:8d:58:b0:49:e1:be:08:3b:68:92:a4:bb: f8:67:82:fd:80:a8:63:ee:ff:61:8d:2f:20:23:1a: 77:10:2f:f0:f5:71:66:61:4d:5b:eb:f5:35:c0:51: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B6:0E:BA:4D:7F:6D:93:EE:C8:78:A3:0D:4C:1B:2E:9C:64:9E:66 X509v3 Authority Key Identifier: keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:46:fd:ea:49:e2:52:1b:9a:f4:6e:66:77:c2:1f:fe:22: 3b:df:c8:53:c5:74:61:50:68:f0:eb:0f:28:26:ee:7d:09:ea: 63:ac:91:98:95:a7:7a:2f:b3:53:e3:72:6f:a6:5f:82:e4:0d: be:e7:7b:4f:12:4a:63:75:00:45:0b:fe:73:84:b5:13:cc:4c: 9b:5d:5f:66:35:a7:a7:24:48:43:bf:d3:1f:c9:11:83:73:58: 09:d9:3f:2f:e0:84:b8:6a:97:bf:0f:dd:81:ee:7a:3e:d5:06: f9:1b:44:c0:9c:61:92:ee:1e:6c:0b:e9:ca:ec:53:08:29:fb: dd:31:d0:03:9f:7c:19:f5:59:ca:1d:26:dd:38:2b:06:3a:cb: 7d:e5:59:ec:38:c5:8b:9a:05:02:6a:45:80:a6:ec:bd:fd:25: d3:1f:c5:a7:3a:6e:b7:d2:28:3b:22:0d:52:87:d4:e8:0b:34: c0:06:44:29:09:10:42:9c:0d:01:f2:c3:27:8f:96:77:8c:f1: d5:92:e5:ff:b3:c1:f1:eb:25:7a:b4:d2:41:e1:92:9e:e0:54: cf:39:b8:71:ef:63:62:38:28:2e:ae:5c:e2:6b:ff:2a:94:3e: b5:ae:fe:d9:9d:7a:ca:ab:8b:80:aa:10:b0:35:45:d5:6d:09: a7:98:e2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRw1aiZvO42jZB+bfLz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4 YTc2YzUwHhcNMjUxMjIwMTcwMTAwWhcNMjUxMjIxMTcwMTAwWjAzMTEwLwYDVQQD EygzYWI2MGViYTRkN2Y2ZDkzZWVjODc4YTMwZDRjMWIyZTljNjQ5ZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRE1Y16RiL82ExjcJ6hw4jmkoggy tyKYyDecRtCcC7Y4BE1iU5K4cmCqtbcNSiUt2NNH4VsEECFCX3z6KT5YBGOKEBtX M5KQBVsHESNqSKKIKakLOs3XkxU8vU3xYDse+mowNnnQRyOOI59ahuVW7B2Rx6eo OvMbBZcatmFcP68t1L6czUN34KkCwQPC7IQRmS25u5VWChp4AoFQ1iKVnx6ChyrO xVBEsQxF2Xxpeh5nD3qCtjxcSBsVt2/Fs7JSfu43K9ratTiQWy8YdMs2OkqPuxON WLBJ4b4IO2iSpLv4Z4L9gKhj7v9hjS8gIxp3EC/w9XFmYU1b6/U1wFEZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq2DrpNf22T7sh4ow1MGy6cZJ5mMB8GA1UdIwQY MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt9G/epJ 4lIbmvRuZnfCH/4iO9/IU8V0YVBo8OsPKCbufQnqY6yRmJWnei+zU+Nyb6ZfguQN vud7TxJKY3UARQv+c4S1E8xMm11fZjWnpyRIQ7/TH8kRg3NYCdk/L+CEuGqXvw/d ge56PtUG+RtEwJxhku4ebAvpyuxTCCn73THQA598GfVZyh0m3TgrBjrLfeVZ7DjF i5oFAmpFgKbsvf0l0x/Fpzput9IoOyINUofU6As0wAZEKQkQQpwNAfLDJ4+Wd4zx 1ZLl/7PB8eslerTSQeGSnuBUzzm4ce9jYjgoLq5c4mv/KpQ+ta7+2Z16yquLgKoQ sDVF1W0Jp5ji6A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:52:35 2025 by rpki-client