This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json) Hash identifier: 4vAANIthZ94bvGQA2VorRjdW6yFtEvgdpXa3WOU9EDE= Subject key identifier: 5B:4D:B3:98:B3:2C:94:BB:D8:F8:26:AB:A4:D5:1C:26:6B:B3:11:57 Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf Certificate serial: 019B33444C0CBEB14CBE80BF419BA9AE04DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft Manifest number: 0A79 Signing time: Thu 18 Dec 2025 21:01:12 +0000 Manifest this update: Thu 18 Dec 2025 21:01:12 +0000 Manifest next update: Fri 19 Dec 2025 21:01:12 +0000 Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: ztiT0T41ivAc3Jp0Hy/EiicdTs+p0e35rm0PND+GXAk=) 2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:4c:0c:be:b1:4c:be:80:bf:41:9b:a9:ae:04:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf Validity Not Before: Dec 18 21:01:12 2025 GMT Not After : Dec 19 21:01:12 2025 GMT Subject: CN=5b4db398b32c94bbd8f826aba4d51c266bb31157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:85:77:05:e7:c6:22:e4:e2:b1:7e:70:ef: 85:e1:5b:72:ae:74:6c:ae:aa:6b:e9:8e:d8:f4:7f: 2c:55:20:2d:82:d9:ab:22:22:68:6f:44:05:ca:23: f9:ff:d9:d8:6a:e9:68:34:28:c5:36:df:40:b9:6e: 91:db:13:5a:df:58:45:f7:a1:fe:1a:22:1b:ab:1e: 1b:c7:f9:7f:c2:ed:53:b4:ec:35:11:86:7d:03:a4: 15:75:68:da:1e:34:7a:d3:c6:c0:5e:29:f7:c0:2b: b9:0f:0e:df:f2:c1:74:27:46:d6:9a:66:92:55:c8: 76:02:85:de:5e:aa:14:cf:21:32:79:ba:a5:e3:e0: ce:3e:c7:6d:d7:d7:c2:bd:82:76:8b:8f:4c:bc:bb: e3:cc:95:3f:eb:16:a0:9b:86:c9:9b:f0:f3:dc:c3: d3:62:7d:a5:4c:53:60:c5:04:38:79:a9:6e:6c:bf: 19:31:7b:e8:c5:d3:8f:d2:6b:88:67:41:40:85:7e: 4a:74:6b:88:80:2b:b9:e6:e3:83:b0:20:c1:96:78: d5:ac:af:c9:2d:7f:f4:6e:5c:28:a0:26:20:20:8d: 14:f0:9a:ed:78:2c:b1:03:9d:40:fe:26:12:17:e9: e9:20:2f:25:52:4a:67:14:bb:5b:22:16:d7:38:65: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:B3:98:B3:2C:94:BB:D8:F8:26:AB:A4:D5:1C:26:6B:B3:11:57 X509v3 Authority Key Identifier: keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:08:07:a7:8c:bc:95:3e:1b:24:41:be:34:03:b3:71:09: 65:81:55:bb:87:68:b8:d3:4b:83:a5:ca:43:a6:91:50:46:58: f6:c5:8b:91:89:4a:c5:69:29:f6:aa:4e:a9:bd:93:69:58:f0: cc:10:09:5d:65:3f:d8:a0:00:0c:fb:34:af:53:0e:5a:28:22: f0:b5:c9:ef:d8:90:54:f5:a9:6f:94:ea:d3:58:d3:6c:3c:fd: d6:4a:0b:cd:a8:0b:93:cc:9c:5b:d5:0d:25:05:a7:74:4c:7b: 23:5a:ff:34:04:26:03:c5:97:29:c1:8e:20:36:53:aa:3d:55: 9f:97:23:8f:f0:59:2a:68:24:e3:e2:21:9a:bb:64:6b:7d:2b: d9:8d:e1:4e:9e:15:6a:45:20:d9:5a:a1:25:63:83:4a:c7:e4: 56:8a:1c:63:c7:ef:fa:ca:f7:32:91:56:02:32:44:96:03:2e: 01:a5:b3:95:26:a0:82:cb:1a:52:b7:f6:64:67:39:63:68:b3: 84:ac:77:cc:2d:05:3b:3a:0e:87:86:eb:24:1a:9d:5f:c6:4a: 29:f4:6d:e4:b5:e3:a7:97:a7:78:71:0a:09:ce:65:52:80:d4: 68:e6:d8:bc:68:ea:49:b0:6a:8d:53:ba:dd:95:c7:48:c1:2e: 5d:3a:79:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszREwMvrFMvoC/QZuprgTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjM0ZmI2ODE4MDIxNDRmMDY0YzFiMTlmMTFmNmFhZTc1 OTZkY2YwHhcNMjUxMjE4MjEwMTEyWhcNMjUxMjE5MjEwMTEyWjAzMTEwLwYDVQQD Eyg1YjRkYjM5OGIzMmM5NGJiZDhmODI2YWJhNGQ1MWMyNjZiYjMxMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn+FdwXnxiLk4rF+cO+F4VtyrnRs rqpr6Y7Y9H8sVSAtgtmrIiJob0QFyiP5/9nYauloNCjFNt9AuW6R2xNa31hF96H+ GiIbqx4bx/l/wu1TtOw1EYZ9A6QVdWjaHjR608bAXin3wCu5Dw7f8sF0J0bWmmaS Vch2AoXeXqoUzyEyebql4+DOPsdt19fCvYJ2i49MvLvjzJU/6xagm4bJm/Dz3MPT Yn2lTFNgxQQ4ealubL8ZMXvoxdOP0muIZ0FAhX5KdGuIgCu55uODsCDBlnjVrK/J LX/0blwooCYgII0U8JrteCyxA51A/iYSF+npIC8lUkpnFLtbIhbXOGUdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtNs5izLJS72Pgmq6TVHCZrsxFXMB8GA1UdIwQY MBaAFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTkt NzZhMGY3Yjg0MWRjLzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iYTE5ODctNTIyZS00OThjLWEzNTktNzZhMGY3Yjg0MWRj LzEvTFdOUHRvR0FJVVR3Wk1HeG54SDJxdWRaYmM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSQIB6eM vJU+GyRBvjQDs3EJZYFVu4douNNLg6XKQ6aRUEZY9sWLkYlKxWkp9qpOqb2TaVjw zBAJXWU/2KAADPs0r1MOWigi8LXJ79iQVPWpb5Tq01jTbDz91koLzagLk8ycW9UN JQWndEx7I1r/NAQmA8WXKcGOIDZTqj1Vn5cjj/BZKmgk4+Ihmrtka30r2Y3hTp4V akUg2VqhJWODSsfkVoocY8fv+sr3MpFWAjJElgMuAaWzlSaggssaUrf2ZGc5Y2iz hKx3zC0FOzoOh4brJBqdX8ZKKfRt5LXjp5eneHEKCc5lUoDUaObYvGjqSbBqjVO6 3ZXHSMEuXTp5/A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:24 2025 by rpki-client