This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json) Hash identifier: 5Y2u/OAFnRs+LbI7M4Z4lqCGWIwrHdsIplQ0mwUD4zg= Subject key identifier: F3:66:7D:4A:AD:B3:E8:00:33:51:A1:0C:47:68:33:42:29:AF:ED:01 Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Certificate serial: 019AF23FF7D0597BF9B63C18AF58F87D87CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft Manifest number: 1212 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: XBp/9u6saAKPQhqA/CjPj6pybs9Gh2dyHeairppyP+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f7:d0:59:7b:f9:b6:3c:18:af:58:f8:7d:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=f3667d4aadb3e8003351a10c4768334229afed01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:78:6e:50:0f:1b:33:53:73:75:1a:0f:c9: 20:4f:7d:47:6f:10:18:41:3b:dc:fe:e9:fc:59:3a: 33:eb:d5:c8:29:26:e9:1c:86:b0:0b:b9:60:de:5e: 90:84:7c:69:da:46:2e:c3:ee:1d:9b:78:14:29:24: 6d:15:76:0e:9e:80:46:32:63:8d:7c:19:a3:54:1c: a0:56:87:9c:49:d9:dc:9c:47:ca:eb:59:ec:16:66: 71:35:f2:bb:d0:8e:54:79:0c:b2:aa:2f:0a:c3:28: ba:35:48:09:7b:7d:f1:3d:86:60:b8:b6:73:5b:8c: 0d:9a:31:d3:94:70:73:a0:a7:62:fe:21:79:5a:3a: 10:d1:62:b4:3d:5f:f1:af:08:59:69:8b:f3:5b:e4: 5d:39:75:6e:6d:30:7f:77:a3:35:56:f6:1c:80:99: e5:f6:4e:62:1b:a2:f4:34:a5:9c:f8:5f:91:7f:4a: f1:de:70:09:f7:f6:83:9d:37:94:13:c8:58:e1:24: 9e:47:d0:70:f8:50:e0:0c:30:f9:7f:68:17:02:1b: af:bc:76:e6:a4:f8:de:fb:d3:e8:50:89:b3:6c:da: 0b:99:18:46:20:ee:49:9c:ed:41:17:97:cc:90:88: 4a:03:d6:3c:e3:09:a8:11:32:b3:8f:0c:cf:f1:e6: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:66:7D:4A:AD:B3:E8:00:33:51:A1:0C:47:68:33:42:29:AF:ED:01 X509v3 Authority Key Identifier: keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:80:81:c0:db:31:ee:fd:c2:0a:7a:28:fe:3a:ba:85:85:2b: f7:6b:38:1d:c7:b7:41:96:e5:53:3d:4b:88:d6:56:b2:0b:60: 7c:91:d9:9c:b1:6b:74:9e:ba:a5:13:7d:c0:a1:4a:10:8b:b0: 71:a5:c0:e4:77:00:e9:d4:02:3c:4c:05:7b:0b:df:bf:44:ca: bf:57:5f:64:aa:2a:e4:27:49:9d:98:34:1d:5d:00:ca:e2:09: 33:ec:2b:d8:e0:bf:d0:82:46:69:7a:d6:34:9f:50:b5:b1:70: 63:ea:69:3f:6b:e4:43:df:3e:71:9b:06:e3:56:ad:c6:54:7d: b0:c2:a8:ba:32:f7:08:06:95:97:59:3b:22:4a:ea:d3:c7:71: cb:12:28:2f:cb:42:e2:82:7d:59:5f:54:5f:33:88:44:c9:1b: b2:35:ea:b5:4b:99:5c:c4:a5:24:46:01:57:1d:9e:b1:1e:25: bc:1a:eb:b8:e0:63:84:a2:55:a3:99:7b:ab:60:f2:fe:7b:a2: c1:26:e4:7c:dc:21:6a:93:76:e2:ff:87:16:18:40:30:0a:65: 8f:1d:9b:d9:75:7d:df:4a:fa:60:25:34:ef:e7:61:2f:04:f1: 25:ce:70:07:f5:86:e6:7b:41:29:3a:4c:5a:d2:91:5e:bd:eb: 7b:ed:41:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/fQWXv5tjwYr1j4fYfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5 MWExODYwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EyhmMzY2N2Q0YWFkYjNlODAwMzM1MWExMGM0NzY4MzM0MjI5YWZlZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sR4blAPGzNTc3UaD8kgT31HbxAY QTvc/un8WToz69XIKSbpHIawC7lg3l6QhHxp2kYuw+4dm3gUKSRtFXYOnoBGMmON fBmjVBygVoecSdncnEfK61nsFmZxNfK70I5UeQyyqi8Kwyi6NUgJe33xPYZguLZz W4wNmjHTlHBzoKdi/iF5WjoQ0WK0PV/xrwhZaYvzW+RdOXVubTB/d6M1VvYcgJnl 9k5iG6L0NKWc+F+Rf0rx3nAJ9/aDnTeUE8hY4SSeR9Bw+FDgDDD5f2gXAhuvvHbm pPje+9PoUImzbNoLmRhGIO5JnO1BF5fMkIhKA9Y84wmoETKzjwzP8eZg4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNmfUqts+gAM1GhDEdoM0Ipr+0BMB8GA1UdIwQY MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1 LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA34CBwNsx 7v3CCnoo/jq6hYUr92s4Hce3QZblUz1LiNZWsgtgfJHZnLFrdJ66pRN9wKFKEIuw caXA5HcA6dQCPEwFewvfv0TKv1dfZKoq5CdJnZg0HV0AyuIJM+wr2OC/0IJGaXrW NJ9QtbFwY+ppP2vkQ98+cZsG41atxlR9sMKoujL3CAaVl1k7Ikrq08dxyxIoL8tC 4oJ9WV9UXzOIRMkbsjXqtUuZXMSlJEYBVx2esR4lvBrruOBjhKJVo5l7q2Dy/nui wSbkfNwhapN24v+HFhhAMApljx2b2XV930r6YCU07+dhLwTxJc5wB/WG5ntBKTpM WtKRXr3re+1B1w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:43 2025 by rpki-client