This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json) Hash identifier: qUQNZgyud1iUYYwCZ2TOUXYUcqRn9YKR3SEkqiOutUA= Subject key identifier: 54:F9:DB:33:52:0B:4C:9B:C8:85:B8:20:C8:FD:EA:E9:E6:44:E2:3E Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d Certificate serial: 019AF464D25C9C5B7CE599A2EC17A1918745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft Manifest number: 113F Signing time: Sat 06 Dec 2025 16:00:39 +0000 Manifest this update: Sat 06 Dec 2025 16:00:39 +0000 Manifest next update: Sun 07 Dec 2025 16:00:39 +0000 Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: /i6AlvLJITikfwAGi84lrHWgcGJH0r4i4yAZ9kdeX4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d2:5c:9c:5b:7c:e5:99:a2:ec:17:a1:91:87:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d Validity Not Before: Dec 6 16:00:39 2025 GMT Not After : Dec 7 16:00:39 2025 GMT Subject: CN=54f9db33520b4c9bc885b820c8fdeae9e644e23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:50:44:22:c1:70:90:79:97:44:17:72:ca: e3:1c:95:f1:46:c3:5e:49:8d:a1:bf:a7:ee:f3:40: 3a:00:fd:61:e4:d8:51:be:f0:79:10:68:f9:17:a8: 27:a7:6f:cc:30:72:67:59:ef:b0:66:07:c6:91:b7: a2:63:c2:e6:bc:e3:34:2f:b0:7c:a2:bf:df:96:02: 14:18:4f:57:91:01:ca:00:48:f8:aa:1e:46:5e:e6: 1f:94:a2:e2:37:ba:ba:ae:f0:b1:7d:f7:dd:b3:a1: d5:05:82:1e:cd:1a:05:4a:22:77:87:6a:25:f1:96: d0:cf:3f:a9:5e:66:0f:c9:e5:66:a4:1b:0d:c6:4a: 72:45:72:56:1d:ff:88:5c:ab:f5:51:72:3f:c7:a7: c7:7f:28:65:7e:5b:9d:d5:75:a7:dc:28:d9:23:6e: 27:d8:0f:a9:7a:65:0a:38:16:f1:58:5f:e9:32:9c: 1b:c1:c9:20:92:2e:96:73:4e:fb:00:48:a1:a8:c8: 8b:0d:9e:6e:5b:cb:de:fb:fa:01:fe:6d:df:99:86: f3:e8:7c:dc:ef:ca:e3:7f:08:fa:7f:f9:d1:4c:8b: 1f:81:62:d8:24:74:8b:90:cd:bb:fa:30:56:9a:49: 4a:6f:e7:8a:c9:75:92:43:00:2f:eb:f6:b7:a8:2a: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:DB:33:52:0B:4C:9B:C8:85:B8:20:C8:FD:EA:E9:E6:44:E2:3E X509v3 Authority Key Identifier: keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:95:60:7b:06:ce:dc:2b:47:ed:28:db:ab:d6:e8:11:28: d6:a9:75:f4:6d:0c:b1:9b:c7:ac:2a:14:ed:ad:08:d1:83:30: 11:af:9c:2e:f0:9e:1d:fb:4a:40:21:7c:ff:1f:55:ea:7c:e5: 2c:8a:69:f1:59:70:1a:84:e8:3f:a8:a7:d7:23:95:63:c3:04: ee:6e:cd:a3:c6:c7:93:e2:49:7b:8b:d4:f9:ea:c1:2a:93:28: ae:4f:7b:c6:5a:b5:3a:b4:b7:4c:aa:8e:ce:3b:b5:e7:f7:d6: e6:09:d1:5a:5b:55:03:f0:7d:50:12:44:66:58:e6:51:c7:e7: 9e:38:74:1e:06:9e:48:61:a9:b3:ef:1c:92:07:04:c3:0e:f8: 8c:1f:fa:97:6d:50:ae:bc:8e:ba:7c:49:8b:4e:ea:a6:11:07: 7e:fb:83:0e:95:88:8d:cc:c5:d3:3b:88:c0:20:d1:4b:e2:c7: c4:9c:86:49:44:19:16:61:48:be:49:20:b8:c4:ab:3b:ca:b3: 23:2f:36:c5:b6:04:95:b6:57:ff:26:68:73:f2:c0:85:ce:73: 2b:9f:02:17:7a:14:73:5c:32:67:27:e2:13:45:f5:52:64:7e: 61:10:21:36:4a:88:ce:bf:a0:e3:4a:a9:9d:e5:62:67:80:12: 51:36:89:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNJcnFt85Zmi7BehkYdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYWMzZThkNjNiMWMzYWZjN2M2YzBiZmRhOWQ1YWM4MTdi NmVlNmQwHhcNMjUxMjA2MTYwMDM5WhcNMjUxMjA3MTYwMDM5WjAzMTEwLwYDVQQD Eyg1NGY5ZGIzMzUyMGI0YzliYzg4NWI4MjBjOGZkZWFlOWU2NDRlMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTlQRCLBcJB5l0QXcsrjHJXxRsNe SY2hv6fu80A6AP1h5NhRvvB5EGj5F6gnp2/MMHJnWe+wZgfGkbeiY8LmvOM0L7B8 or/flgIUGE9XkQHKAEj4qh5GXuYflKLiN7q6rvCxfffds6HVBYIezRoFSiJ3h2ol 8ZbQzz+pXmYPyeVmpBsNxkpyRXJWHf+IXKv1UXI/x6fHfyhlflud1XWn3CjZI24n 2A+pemUKOBbxWF/pMpwbwckgki6Wc077AEihqMiLDZ5uW8ve+/oB/m3fmYbz6Hzc 78rjfwj6f/nRTIsfgWLYJHSLkM27+jBWmklKb+eKyXWSQwAv6/a3qCqP+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT52zNSC0ybyIW4IMj96unmROI+MB8GA1UdIwQY MBaAFCysPo1jscOvx8bAv9qdWsgXtu5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEt OTVhZTY0YmQ1NmVjLzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEtOTVhZTY0YmQ1NmVj LzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCuVYHsG ztwrR+0o26vW6BEo1ql19G0MsZvHrCoU7a0I0YMwEa+cLvCeHftKQCF8/x9V6nzl LIpp8VlwGoToP6in1yOVY8ME7m7No8bHk+JJe4vU+erBKpMork97xlq1OrS3TKqO zju15/fW5gnRWltVA/B9UBJEZljmUcfnnjh0HgaeSGGps+8ckgcEww74jB/6l21Q rryOunxJi07qphEHfvuDDpWIjczF0zuIwCDRS+LHxJyGSUQZFmFIvkkguMSrO8qz Iy82xbYElbZX/yZoc/LAhc5zK58CF3oUc1wyZyfiE0X1UmR+YRAhNkqIzr+g40qp neViZ4ASUTaJUg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:51 2025 by rpki-client