This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 0kDzUaRUQ4/KOwk4TFrrB32ijzvUU6qD2CXloV3yjmI= Subject key identifier: C4:11:EF:61:4A:7E:8A:F9:CE:C4:B1:79:16:0E:F1:4A:29:C6:42:A8 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B2C2F04BE661F0471CBC3365D00B01395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 09B0 Signing time: Wed 17 Dec 2025 12:00:37 +0000 Manifest this update: Wed 17 Dec 2025 12:00:37 +0000 Manifest next update: Thu 18 Dec 2025 12:00:37 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: uXPqGzu6phvgNRMhHRicPtUAqkhSRSoBjHjQ+jCm8cE=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: 7y0HEBKtThwqpVnMqjdVrnLEi4E.roa (hash: 6/V4tWszZ+0oUo8YJ4mg3Pxu2rzylnwMTQjo5zLhoNg=) 4: BY0ulxbKjju4vLrdhG3t1EWUsfc.roa (hash: K5zGur7lx+aV24qdxwKfnGw/Mm79v7yGfl4MiAhAsZQ=) 5: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: Pm3ij8drL7WRD0R4R54qP4eC7Q0.roa (hash: hzWkutnsJx/Qg99NS0sDlr/7EdarXvXso1X585eWACI=) 9: TEJEbJfLCSRRss_K_5H5CYFaiCg.roa (hash: M75oi001sE7d1H5/CUbAVgDs1DNoW5yTIFB3xJzgE24=) 10: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 11: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 12: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 13: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 16: wDRNVGfCfFpT0KL5KWdncpjKmrU.roa (hash: dd5hEWdRRbgBUUxwR6vJEl9R7LMSAx7EstPyaawGUNU=) 17: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:04:be:66:1f:04:71:cb:c3:36:5d:00:b0:13:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Dec 17 12:00:37 2025 GMT Not After : Dec 18 12:00:37 2025 GMT Subject: CN=c411ef614a7e8af9cec4b179160ef14a29c642a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:2f:97:10:25:e2:a7:6e:c0:b2:45:8f:9d: 98:8a:fe:bc:98:b9:27:8e:d0:26:d1:59:af:26:22: 00:ae:6c:02:a9:ab:79:32:ce:dd:fa:1d:25:93:64: b4:52:9f:e3:e0:8d:6e:96:0d:bd:5b:c3:a1:43:20: 0d:8d:5b:23:b8:84:b7:bc:12:be:60:12:e8:5f:c6: 22:67:c4:82:92:19:08:3e:38:d2:fc:55:93:37:c8: 99:b4:46:b2:10:eb:f8:29:46:0a:d2:48:15:f3:ee: 22:4c:65:23:1c:48:f5:dd:3d:b0:58:91:25:4c:7c: c0:86:af:38:4b:0a:98:1e:e7:00:78:64:2d:ad:85: 16:a9:65:70:87:95:9f:21:a0:01:7b:a5:b7:cf:b6: 39:b6:ba:65:c1:ea:98:a6:af:90:81:df:44:9d:36: 2c:15:23:62:b8:1e:57:72:11:78:64:6e:5b:78:c2: bf:f5:fa:3e:51:76:59:18:4a:50:90:cb:1e:3e:77: 64:95:af:11:f8:7f:1f:71:fb:6b:9a:16:15:4e:c3: fc:c5:23:fd:5a:04:0b:31:10:46:50:5e:8c:9d:b3: 2a:fe:c0:14:63:67:a1:1d:8b:c1:d8:eb:6a:d8:6e: 38:ce:73:b6:2a:b7:e0:39:07:04:25:8c:70:a2:76: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:11:EF:61:4A:7E:8A:F9:CE:C4:B1:79:16:0E:F1:4A:29:C6:42:A8 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f1:5b:3f:3b:f8:3b:c0:b1:29:b3:eb:40:c4:42:36:c4:4d: 88:58:79:3d:34:04:73:c1:07:c2:24:95:61:85:95:f9:8e:2a: 65:98:8c:62:30:ff:46:6d:f4:9c:76:45:01:e8:e0:fb:ba:64: 37:e5:80:fd:98:1d:ec:5d:2e:fa:97:d4:c5:06:66:66:67:83: cd:fa:15:72:d6:0a:97:fa:d2:5f:cd:af:ac:b0:e8:eb:76:c9: e9:00:3d:c2:b9:51:2c:1e:21:db:fe:b5:9b:ed:0d:6e:16:33: af:a4:66:ea:8b:74:82:03:a7:d4:11:bf:ed:27:92:bd:d9:dc: 1f:db:5e:4d:a5:d8:55:68:32:4c:20:28:1a:7b:8b:2b:97:30: 14:40:cc:34:86:41:27:22:fb:b3:df:6a:d5:56:42:09:5f:77: 32:5d:56:7b:4d:fa:56:b5:a0:eb:fc:8b:f5:e3:70:ef:60:0b: 18:8e:b7:b2:b2:5d:df:81:fc:e4:32:10:fa:a0:55:ae:f9:8e: 90:7f:a9:64:5a:a4:8e:09:ea:47:d0:f1:1f:21:04:d9:46:ec: de:83:eb:df:b9:7b:23:35:20:f7:c8:f6:49:d1:0c:f0:7f:fa: be:30:e3:fe:23:56:04:05:61:42:e3:5b:b5:51:0c:05:43:c2: 2b:ee:4e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwS+Zh8EccvDNl0AsBOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUxMjE3MTIwMDM3WhcNMjUxMjE4MTIwMDM3WjAzMTEwLwYDVQQD EyhjNDExZWY2MTRhN2U4YWY5Y2VjNGIxNzkxNjBlZjE0YTI5YzY0MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/cvlxAl4qduwLJFj52Yiv68mLkn jtAm0VmvJiIArmwCqat5Ms7d+h0lk2S0Up/j4I1ulg29W8OhQyANjVsjuIS3vBK+ YBLoX8YiZ8SCkhkIPjjS/FWTN8iZtEayEOv4KUYK0kgV8+4iTGUjHEj13T2wWJEl THzAhq84SwqYHucAeGQtrYUWqWVwh5WfIaABe6W3z7Y5trplweqYpq+Qgd9EnTYs FSNiuB5XchF4ZG5beMK/9fo+UXZZGEpQkMsePndkla8R+H8fcftrmhYVTsP8xSP9 WgQLMRBGUF6MnbMq/sAUY2ehHYvB2Otq2G44znO2KrfgOQcEJYxwonaJnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQR72FKfor5zsSxeRYO8UopxkKoMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPFbPzv4 O8CxKbPrQMRCNsRNiFh5PTQEc8EHwiSVYYWV+Y4qZZiMYjD/Rm30nHZFAejg+7pk N+WA/Zgd7F0u+pfUxQZmZmeDzfoVctYKl/rSX82vrLDo63bJ6QA9wrlRLB4h2/61 m+0NbhYzr6Rm6ot0ggOn1BG/7SeSvdncH9teTaXYVWgyTCAoGnuLK5cwFEDMNIZB JyL7s99q1VZCCV93Ml1We036VrWg6/yL9eNw72ALGI63srJd34H85DIQ+qBVrvmO kH+pZFqkjgnqR9DxHyEE2Ubs3oPr37l7IzUg98j2SdEM8H/6vjDj/iNWBAVhQuNb tVEMBUPCK+5OzA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:17 2025 by rpki-client