This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json) Hash identifier: kTng8vU0Pr2UYyGqIBs4fqLGOCn31YrjoRAFeZXDXGk= Subject key identifier: 80:B9:72:A3:EC:F6:16:D2:F1:5D:DB:A0:03:E8:71:E1:D3:47:A5:C8 Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Certificate serial: 019AF088C6ABD44C2696448ECF4AAFE45A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft Manifest number: 0657 Signing time: Fri 05 Dec 2025 22:01:26 +0000 Manifest this update: Fri 05 Dec 2025 22:01:26 +0000 Manifest next update: Sat 06 Dec 2025 22:01:26 +0000 Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=) 2: fW59GwI_KAwaVGhC5a0dW4NB2hI.roa (hash: LYrUl2+GkLWjJFUB21HGGxfQCjcqZ5WTWRPhnXvbNB8=) 3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: IF6jQEwLY4bXq4Hz+irx7L2wxaES9fE15Q0bQFcg76Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c6:ab:d4:4c:26:96:44:8e:cf:4a:af:e4:5a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Validity Not Before: Dec 5 22:01:26 2025 GMT Not After : Dec 6 22:01:26 2025 GMT Subject: CN=80b972a3ecf616d2f15ddba003e871e1d347a5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:94:12:83:0b:8d:71:86:99:ef:a6:ff:de: 05:d6:6f:7d:f5:9e:20:9c:b1:f5:3c:74:fb:60:90: 62:71:01:e4:cf:1f:3c:52:9d:76:c9:59:43:fd:73: da:54:d2:d8:cc:73:2c:48:57:66:9e:b3:c1:e0:11: 53:3e:bc:f3:e2:2d:03:db:36:15:e4:fe:6c:82:c7: c7:30:b8:a5:34:8b:95:88:05:7b:0b:79:90:fe:31: 2f:ea:a0:2a:08:d6:36:73:47:17:d6:01:09:13:07: a2:ed:34:18:cd:ee:8e:18:cb:b1:88:b9:46:ad:bc: 0a:b1:92:67:1a:fd:a0:18:fe:7b:79:5f:f4:ed:70: 66:8c:53:13:09:f2:a4:07:79:24:da:9c:c6:41:20: 33:ca:d2:1a:66:81:7b:d3:b0:14:8a:fc:4d:9c:da: 27:b2:9a:05:07:9e:11:7a:46:ac:1f:27:ad:50:1f: de:b3:5f:86:8c:75:eb:61:37:01:8d:9a:ea:a2:67: ac:10:11:d1:98:b1:d9:38:2a:83:8c:2a:36:20:98: bf:f7:1c:a0:bb:84:7d:e5:7a:00:86:a2:0e:4d:ed: 11:a0:eb:31:a9:7e:1c:43:c8:d8:bf:85:98:b4:eb: 90:51:99:4d:ef:0e:e5:f3:b3:06:85:7e:16:f3:9d: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B9:72:A3:EC:F6:16:D2:F1:5D:DB:A0:03:E8:71:E1:D3:47:A5:C8 X509v3 Authority Key Identifier: keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:3a:a3:ac:b5:fa:74:11:54:72:99:37:0d:8b:6c:f1:6f: 21:f1:20:b9:6a:a4:b2:47:10:5e:a0:7c:d7:41:4d:11:ca:99: 7f:c4:1f:89:ae:da:71:dd:7a:fa:f9:8b:24:b0:c7:fd:72:09: a7:e6:43:0b:da:2f:71:65:28:e8:dd:45:35:60:96:b7:52:3d: f4:20:3a:4c:a2:80:43:8e:f0:49:44:20:ec:24:a4:b6:5d:f7: f4:34:22:35:51:62:50:a3:4f:fa:50:c1:51:3a:9a:7b:ae:b5: 4d:70:eb:00:81:65:42:d5:b7:fb:46:d3:72:d3:2e:f7:36:43: c7:7a:89:75:9a:f4:43:7b:ec:d1:80:05:ec:c1:7b:4b:83:0e: 97:c1:9c:97:01:00:5a:b4:ff:c5:33:48:18:02:53:73:9b:55: ff:71:f0:be:f1:cd:ac:55:47:a5:7b:10:31:1c:30:ed:24:78: 64:b2:a6:03:c5:c3:6c:b8:41:1b:1a:f2:76:92:5b:ab:93:0a: 46:09:2c:e6:06:1d:17:7d:52:c0:93:e7:ec:b5:dc:09:cf:8a: bb:2e:69:7d:d3:9f:a6:cc:97:2f:cd:ad:d8:0e:26:90:54:62: e9:2c:16:cb:4c:e5:72:95:fd:77:85:08:83:21:2b:8e:03:65: 85:97:f4:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMar1EwmlkSOz0qv5FonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi MjliOWMwHhcNMjUxMjA1MjIwMTI2WhcNMjUxMjA2MjIwMTI2WjAzMTEwLwYDVQQD Eyg4MGI5NzJhM2VjZjYxNmQyZjE1ZGRiYTAwM2U4NzFlMWQzNDdhNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0eUEoMLjXGGme+m/94F1m999Z4g nLH1PHT7YJBicQHkzx88Up12yVlD/XPaVNLYzHMsSFdmnrPB4BFTPrzz4i0D2zYV 5P5sgsfHMLilNIuViAV7C3mQ/jEv6qAqCNY2c0cX1gEJEwei7TQYze6OGMuxiLlG rbwKsZJnGv2gGP57eV/07XBmjFMTCfKkB3kk2pzGQSAzytIaZoF707AUivxNnNon spoFB54RekasHyetUB/es1+GjHXrYTcBjZrqomesEBHRmLHZOCqDjCo2IJi/9xyg u4R95XoAhqIOTe0RoOsxqX4cQ8jYv4WYtOuQUZlN7w7l87MGhX4W853lEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC5cqPs9hbS8V3boAPoceHTR6XIMB8GA1UdIwQY MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF06o6y1 +nQRVHKZNw2LbPFvIfEguWqkskcQXqB810FNEcqZf8Qfia7acd16+vmLJLDH/XIJ p+ZDC9ovcWUo6N1FNWCWt1I99CA6TKKAQ47wSUQg7CSktl339DQiNVFiUKNP+lDB UTqae661TXDrAIFlQtW3+0bTctMu9zZDx3qJdZr0Q3vs0YAF7MF7S4MOl8GclwEA WrT/xTNIGAJTc5tV/3HwvvHNrFVHpXsQMRww7SR4ZLKmA8XDbLhBGxrydpJbq5MK Rgks5gYdF31SwJPn7LXcCc+Kuy5pfdOfpsyXL82t2A4mkFRi6SwWy0zlcpX9d4UI gyErjgNlhZf0ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:02 2025 by rpki-client