This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: RJC7Gh97qbb7/Vwm89BiXl+pfc4wPYvbbElML/wZvKA= Subject key identifier: B3:3B:34:93:88:BD:52:0B:9D:F9:C7:10:AF:A7:60:82:C3:75:A8:E5 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019AF23F8351757B99C4FC634C297EE967C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0992 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: o7eThOHa1hgzNEyr1F18vsmr5oUm5C1nrSJ6xO7pz+c=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (hash: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=) 4: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 5: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 16: wDRNVGfCfFpT0KL5KWdncpjKmrU.roa (hash: dd5hEWdRRbgBUUxwR6vJEl9R7LMSAx7EstPyaawGUNU=) 17: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:83:51:75:7b:99:c4:fc:63:4c:29:7e:e9:67:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=b33b349388bd520b9df9c710afa76082c375a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:e0:f8:27:d4:25:7e:06:51:fe:5f:b8:9e: 7d:b3:c9:85:8b:05:5d:3b:38:7a:07:65:7f:4f:b4: 48:d5:50:18:5f:9a:aa:ac:e9:7c:7c:92:de:e2:1e: 45:ad:ba:80:14:2e:e0:46:30:fa:45:f9:22:b5:dd: 6a:fa:d9:71:b1:7a:5b:ea:d8:81:b4:80:61:a5:60: b4:b5:c3:3b:f1:a8:1a:0f:ef:49:8b:15:c4:66:8b: 2b:01:8f:a7:6e:cf:05:97:30:06:37:9f:6e:4d:d0: 64:58:44:7b:54:35:41:b9:a1:9f:5a:60:53:e8:49: b2:e0:7f:29:a4:7c:23:22:e5:33:b4:f3:5a:94:d2: af:a9:c5:49:7b:82:f6:f5:4e:84:d1:1a:f2:ee:07: 4c:f1:d3:aa:98:72:1f:d4:cd:96:8d:39:99:20:2f: bd:9f:6c:ed:b2:94:ad:e3:41:7d:f1:3a:c5:c0:33: 02:75:eb:52:8c:93:1b:43:64:ce:23:0f:e5:8f:e6: 18:16:80:4c:28:d4:84:e6:90:d1:b6:dd:22:7e:79: f2:79:74:4d:77:3d:6e:35:7d:43:b6:29:90:d8:78: 35:db:75:7a:b6:1f:b1:35:0b:86:ac:ef:fb:10:a3: 6a:bc:58:b2:12:39:c0:0d:40:31:4d:96:47:8d:0d: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:34:93:88:BD:52:0B:9D:F9:C7:10:AF:A7:60:82:C3:75:A8:E5 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:68:8f:79:83:71:10:4a:8f:fa:a8:d8:ea:73:25:26:1d: f7:86:f7:d5:f5:cc:31:9b:74:b9:50:a2:79:55:20:ce:d3:3b: 62:98:53:fb:88:32:c8:c8:a7:a4:e7:98:c9:90:b5:8a:3a:07: dd:d7:9f:30:4e:b8:2f:eb:97:ef:b5:7f:3d:64:4f:cc:82:dc: 09:b0:ca:c4:7f:c4:0f:96:21:0f:b2:fc:0e:2f:b1:af:c8:89: 92:3c:10:99:f4:00:01:53:db:cc:35:c4:37:9d:ef:49:69:bc: 18:4f:db:85:50:d5:d2:8f:89:f2:5d:a3:3f:25:47:b3:db:24: b3:7f:a5:b3:47:78:06:d0:01:e3:70:86:03:c9:5a:ec:68:40: 05:f5:8c:4d:94:f9:9e:7f:13:0c:ed:8d:3d:d2:cd:37:82:7b: cd:84:8c:d4:8c:c3:78:b2:42:bc:69:1d:4c:bf:84:d8:7b:aa: 68:bd:f6:de:26:57:92:f3:2e:31:8d:2e:ba:1c:7e:d3:8d:db: c8:bb:7f:ae:20:fa:3b:b2:1d:99:a4:43:bb:4f:40:4e:00:e1: 23:ef:4d:eb:2b:6f:75:c4:b5:91:6b:22:e3:fe:8f:bd:30:74: a4:f8:60:24:c0:85:78:d8:50:00:fd:42:89:36:79:b7:18:fd: 91:c5:96:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4NRdXuZxPxjTCl+6WfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhiMzNiMzQ5Mzg4YmQ1MjBiOWRmOWM3MTBhZmE3NjA4MmMzNzVhOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rfg+CfUJX4GUf5fuJ59s8mFiwVd Ozh6B2V/T7RI1VAYX5qqrOl8fJLe4h5FrbqAFC7gRjD6Rfkitd1q+tlxsXpb6tiB tIBhpWC0tcM78agaD+9JixXEZosrAY+nbs8FlzAGN59uTdBkWER7VDVBuaGfWmBT 6Emy4H8ppHwjIuUztPNalNKvqcVJe4L29U6E0Rry7gdM8dOqmHIf1M2WjTmZIC+9 n2ztspSt40F98TrFwDMCdetSjJMbQ2TOIw/lj+YYFoBMKNSE5pDRtt0ifnnyeXRN dz1uNX1DtimQ2Hg123V6th+xNQuGrO/7EKNqvFiyEjnADUAxTZZHjQ3U/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM7NJOIvVILnfnHEK+nYILDdajlMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmL5oj3mD cRBKj/qo2OpzJSYd94b31fXMMZt0uVCieVUgztM7YphT+4gyyMinpOeYyZC1ijoH 3defME64L+uX77V/PWRPzILcCbDKxH/ED5YhD7L8Di+xr8iJkjwQmfQAAVPbzDXE N53vSWm8GE/bhVDV0o+J8l2jPyVHs9sks3+ls0d4BtAB43CGA8la7GhABfWMTZT5 nn8TDO2NPdLNN4J7zYSM1IzDeLJCvGkdTL+E2HuqaL323iZXkvMuMY0uuhx+043b yLt/riD6O7IdmaRDu09ATgDhI+9N6ytvdcS1kWsi4/6PvTB0pPhgJMCFeNhQAP1C iTZ5txj9kcWWyg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:09 2025 by rpki-client