This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json) Hash identifier: Ztr5ANdRibli7EQiies57PWnhsFpxLHbWK07/nm/1sQ= Subject key identifier: DC:87:38:7B:B7:CC:69:18:DB:8E:99:D3:1B:3F:6F:83:10:BF:8D:42 Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98 Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98 Certificate serial: 019AF1D1BFEF73E046B1570458F4A7C5F475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: JeBeKFqX+ycDj2ppyi9x1jz38oGLQL/KoN2nWWQv4Xw=) 2: RysabfgSrooxUAVkb0Cu2rOa1B8.roa (hash: kDFtRPNIEsF7OH+wALA7E+fu8R+E9Lu/M1W1e9aWGpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bf:ef:73:e0:46:b1:57:04:58:f4:a7:c5:f4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=dc87387bb7cc6918db8e99d31b3f6f8310bf8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e0:e1:bd:27:0d:53:1e:6c:ba:91:9b:e2:fc: 7b:ed:d5:12:6c:78:87:f8:46:82:9e:b7:40:43:ee: 32:26:84:30:59:4f:e9:c0:eb:f5:b1:43:cf:2b:8c: 33:23:1f:ac:bd:da:eb:c4:1a:10:ed:51:57:04:4c: ec:10:48:b8:c5:ff:3b:60:77:79:91:10:6a:a7:6d: 33:cc:e9:64:76:0e:0e:69:5d:7f:8b:5d:df:34:bc: c7:16:ba:0a:7d:e8:4b:d3:d6:03:2c:27:ed:0b:76: 32:35:d5:bd:a8:76:09:dc:bc:77:d1:65:ef:01:44: eb:1f:c6:58:f8:9a:c2:b4:92:f5:77:58:4b:9d:99: fd:1f:48:70:a5:3a:17:0a:eb:3b:0b:d7:13:8e:0c: fe:e1:9a:2a:ee:d5:2e:13:49:65:4f:8d:5f:38:d6: 09:b9:ef:21:a5:95:51:c5:5e:8e:72:a5:b8:5c:7e: f4:dc:f6:ff:a9:02:b7:26:18:76:fe:bf:e5:ef:62: fc:cd:b8:71:29:df:e5:bc:3d:5b:bf:fe:b5:b9:d4: e2:50:21:da:4f:66:50:da:a3:34:73:bc:a9:9a:51: 10:11:b6:bf:c8:fd:d8:0c:36:81:5a:06:16:bc:fa: 61:ca:ce:14:11:01:58:72:76:98:78:bc:a6:8a:29: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:38:7B:B7:CC:69:18:DB:8E:99:D3:1B:3F:6F:83:10:BF:8D:42 X509v3 Authority Key Identifier: keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:83:25:e2:2c:11:16:40:c2:2e:84:ee:2b:98:84:6e:14:a7: 05:f5:9d:15:1e:97:f3:67:7a:88:4f:31:24:86:32:84:4e:79: 72:6e:a5:d5:b6:39:17:ee:40:ac:36:97:ff:62:63:d1:ca:f3: 49:72:c5:8b:87:81:80:92:06:49:fa:a2:c5:17:b2:db:2d:62: a0:83:67:85:a7:b3:96:28:e6:f7:f3:1a:3b:28:e6:10:1d:2c: c6:16:58:59:54:37:3f:b9:a0:77:48:50:ed:2b:e1:94:9d:46: b6:4b:52:79:fe:67:1d:fe:99:54:5d:27:d9:99:00:aa:8f:6a: 2d:60:c6:f6:cd:51:43:17:86:1b:ef:85:d7:10:e1:69:b7:73: 8c:0e:94:1f:34:7f:2f:c3:75:75:fc:89:b7:b5:ed:11:46:0e: 15:aa:b8:6d:4a:6a:32:1c:d3:40:6b:ed:00:d4:99:9c:c0:84: 73:e7:75:f5:8d:e3:ea:33:24:73:eb:a1:25:d2:1a:86:8b:c5: a2:fe:9c:06:d8:b7:27:b6:1b:16:3f:dc:10:4f:ca:e1:54:b3: c0:c0:87:05:5a:63:06:12:b6:cb:3e:c8:04:95:25:b4:b8:c5: 97:d8:cb:d4:f3:80:3f:32:fa:c8:08:bc:09:28:56:9b:79:bc: 8d:da:68:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b/vc+BGsVcEWPSnxfR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMDM0MmUwZDIzZWY3ZTA2YjFkZmY1Y2M2ZWU0ZmExN2Fm OGJkOTgwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhkYzg3Mzg3YmI3Y2M2OTE4ZGI4ZTk5ZDMxYjNmNmY4MzEwYmY4ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eDhvScNUx5supGb4vx77dUSbHiH +EaCnrdAQ+4yJoQwWU/pwOv1sUPPK4wzIx+svdrrxBoQ7VFXBEzsEEi4xf87YHd5 kRBqp20zzOlkdg4OaV1/i13fNLzHFroKfehL09YDLCftC3YyNdW9qHYJ3Lx30WXv AUTrH8ZY+JrCtJL1d1hLnZn9H0hwpToXCus7C9cTjgz+4Zoq7tUuE0llT41fONYJ ue8hpZVRxV6OcqW4XH703Pb/qQK3Jhh2/r/l72L8zbhxKd/lvD1bv/61udTiUCHa T2ZQ2qM0c7ypmlEQEba/yP3YDDaBWgYWvPphys4UEQFYcnaYeLymiika8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyHOHu3zGkY246Z0xs/b4MQv41CMB8GA1UdIwQY MBaAFC8DQuDSPvfgax3/XMbuT6F6+L2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2Mt YzkxMGFmOTNlNDI2LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kMWZkNDgtOTE2Yi00ZDgzLTk2Y2MtYzkxMGFmOTNlNDI2 LzEvTHdOQzROSS05LUJySGY5Y3h1NVBvWHI0dlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoMl4iwR FkDCLoTuK5iEbhSnBfWdFR6X82d6iE8xJIYyhE55cm6l1bY5F+5ArDaX/2Jj0crz SXLFi4eBgJIGSfqixRey2y1ioINnhaezlijm9/MaOyjmEB0sxhZYWVQ3P7mgd0hQ 7SvhlJ1GtktSef5nHf6ZVF0n2ZkAqo9qLWDG9s1RQxeGG++F1xDhabdzjA6UHzR/ L8N1dfyJt7XtEUYOFaq4bUpqMhzTQGvtANSZnMCEc+d19Y3j6jMkc+uhJdIahovF ov6cBti3J7YbFj/cEE/K4VSzwMCHBVpjBhK2yz7IBJUltLjFl9jL1POAPzL6yAi8 CShWm3m8jdpoZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:41 2025 by rpki-client