This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json) Hash identifier: yvTCAaVhY88fjtDpmWkY4KWfiqcHjS+0Jd7NSCZ9Uno= Subject key identifier: 53:C0:5A:4D:8F:6F:75:12:B2:69:C9:81:F5:F1:E2:AA:C6:29:F8:8D Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Certificate serial: 019AF209794D8075EC2ECA221A9B3592930E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft Manifest number: 0566 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: SPfV79ZmfoK8rtB9Tjp+4Z5o0e9E0weAPelQqmDKLCA=) 2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:79:4d:80:75:ec:2e:ca:22:1a:9b:35:92:93:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=53c05a4d8f6f7512b269c981f5f1e2aac629f88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:02:c3:60:e0:c3:a4:22:fe:f3:30:a4:e5: 0c:9f:62:31:68:5e:a8:76:46:0d:50:af:2d:b3:11: cc:bf:ee:04:d0:e8:4f:7c:9d:e6:6e:82:d6:4d:26: 44:50:18:29:81:b1:7d:67:c5:4e:20:cb:2c:96:0c: 12:8c:16:0b:4c:3a:b5:00:08:54:df:f9:bf:8b:0b: 49:51:8e:e9:eb:9b:aa:5b:9f:12:bd:e2:1d:e8:d6: a4:81:6d:2a:15:6c:06:65:e1:87:dc:55:fc:57:09: 7d:54:91:ff:5f:9e:01:60:29:be:01:26:3e:03:0c: e0:d4:7a:85:10:8a:18:3a:da:9b:f3:96:18:cb:0d: 63:c4:6b:7d:ab:eb:20:ed:82:a2:13:a9:e9:fe:c1: 11:ca:65:32:05:f0:4e:11:10:57:a6:32:44:f3:b7: 9d:40:39:77:f4:42:8d:3e:d5:c6:28:bc:32:63:38: bd:87:92:ba:3e:7b:ed:c9:ca:10:0c:a5:ec:99:be: 97:26:16:52:7d:bb:88:3e:b5:39:92:82:71:c0:5a: 5d:6a:f8:ef:96:f3:62:1c:64:4d:9e:c9:bc:58:cf: ea:a0:2e:82:7c:87:06:20:7a:2b:e1:b3:6c:3f:f1: 47:ea:48:f8:13:22:bc:1c:2a:11:05:c4:18:c4:11: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:5A:4D:8F:6F:75:12:B2:69:C9:81:F5:F1:E2:AA:C6:29:F8:8D X509v3 Authority Key Identifier: keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:00:f6:00:3c:ba:9f:37:0a:ee:c8:15:1f:6c:35:9b:65:d1: ba:10:05:e1:51:51:cf:45:bb:1b:fd:43:41:03:53:3e:5e:ea: 7a:3e:b6:13:50:1c:29:fd:97:f2:58:59:59:b1:70:b3:6f:5f: 73:08:55:51:81:e0:75:06:34:d1:25:a3:0b:e1:12:39:51:57: ad:97:56:de:61:ec:32:a7:b5:23:0b:d5:93:6f:bc:1b:bc:7f: 80:15:a4:06:b1:f9:ed:04:49:a6:22:cd:88:68:d7:62:4b:39: ff:c6:77:8d:3d:5e:4a:8d:a3:cf:f2:59:cf:ec:95:49:d8:58: 72:22:bf:5c:71:9e:87:2a:6d:05:29:cf:0b:0b:00:bd:fb:05: cb:4f:59:87:9b:87:fd:d3:ed:0b:a9:2a:cf:4a:ba:78:9c:88: 1b:75:60:82:23:09:47:2e:9e:4e:91:f6:60:f1:53:62:27:f8: be:aa:66:12:5c:fc:ec:e6:f7:f5:2d:58:b0:da:03:fe:f6:d8: fc:36:62:bf:55:e5:06:f6:77:63:90:cc:7b:46:6c:eb:72:7b: 10:c5:29:1e:d2:61:04:7c:36:6a:25:b1:d0:d6:79:78:ef:33: 39:b8:89:d3:c3:c7:a8:39:9a:57:da:ee:5a:68:fa:3b:78:3c: 15:1a:d7:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXlNgHXsLsoiGps1kpMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjVmNWRjNzg0M2Y1Yjc2Njg5ZjM2YWI5MTZhMGQ5OTRi OTk3OWMwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD Eyg1M2MwNWE0ZDhmNmY3NTEyYjI2OWM5ODFmNWYxZTJhYWM2MjlmODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNkCw2Dgw6Qi/vMwpOUMn2IxaF6o dkYNUK8tsxHMv+4E0OhPfJ3mboLWTSZEUBgpgbF9Z8VOIMsslgwSjBYLTDq1AAhU 3/m/iwtJUY7p65uqW58SveId6NakgW0qFWwGZeGH3FX8Vwl9VJH/X54BYCm+ASY+ Awzg1HqFEIoYOtqb85YYyw1jxGt9q+sg7YKiE6np/sERymUyBfBOERBXpjJE87ed QDl39EKNPtXGKLwyYzi9h5K6PnvtycoQDKXsmb6XJhZSfbuIPrU5koJxwFpdavjv lvNiHGRNnsm8WM/qoC6CfIcGIHor4bNsP/FH6kj4EyK8HCoRBcQYxBFzbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPAWk2Pb3USsmnJgfXx4qrGKfiNMB8GA1UdIwQY MBaAFC1l9dx4Q/W3ZonzarkWoNmUuZecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUt OGU2MzNlMGYwNzlkLzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84NTBhZjgtNDhkNS00Mjk3LTlkYmUtOGU2MzNlMGYwNzlk LzEvTFdYMTNIaEQ5YmRtaWZOcXVSYWcyWlM1bDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagD2ADy6 nzcK7sgVH2w1m2XRuhAF4VFRz0W7G/1DQQNTPl7qej62E1AcKf2X8lhZWbFws29f cwhVUYHgdQY00SWjC+ESOVFXrZdW3mHsMqe1IwvVk2+8G7x/gBWkBrH57QRJpiLN iGjXYks5/8Z3jT1eSo2jz/JZz+yVSdhYciK/XHGehyptBSnPCwsAvfsFy09Zh5uH /dPtC6kqz0q6eJyIG3VggiMJRy6eTpH2YPFTYif4vqpmElz87Ob39S1YsNoD/vbY /DZiv1XlBvZ3Y5DMe0Zs63J7EMUpHtJhBHw2aiWx0NZ5eO8zObiJ08PHqDmaV9ru Wmj6O3g8FRrXBw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:23 2025 by rpki-client