This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json) Hash identifier: PunUf7Du/9Uxs99l/nVZQX/leUj10WGhm6qxOZEBFJE= Subject key identifier: 3E:F7:E9:B2:03:23:8B:38:FE:57:63:84:DC:8C:6C:8B:F9:B4:61:DA Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de Certificate serial: 019AF3F7509EDB56658C2BD7F48E730C0B12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=) 2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: AB+ZHPwmZRPSLqBpFNcdWZCPxUiPvPRAC0qo73VNRBA=) 3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:50:9e:db:56:65:8c:2b:d7:f4:8e:73:0c:0b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9706aa905465586424f387fdbd83648b72d946de Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=3ef7e9b203238b38fe576384dc8c6c8bf9b461da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:f2:63:f7:93:b5:9b:24:94:de:59:4b:be: 5f:11:53:fa:23:61:29:50:ff:86:2f:2b:d5:22:d2: 09:79:86:d6:d1:ad:92:71:27:01:5e:99:8d:78:ba: 0d:be:d3:29:8a:e1:53:15:6e:cd:52:a8:ba:8d:4f: 82:85:d3:34:57:2e:9d:72:49:df:9e:cb:1c:1e:5d: 6c:89:c7:8b:b3:a5:26:3b:23:f4:3e:8a:fe:da:fe: 9d:01:90:53:b1:c9:a0:f9:c9:81:75:96:79:7f:7c: 58:db:99:af:ba:f2:4a:f0:29:b8:79:e7:5e:e6:9d: b4:d0:83:13:c6:17:66:7b:56:14:45:52:83:fc:c1: a0:f9:9b:39:87:1b:98:12:0e:fb:59:47:79:9b:61: 1f:60:34:68:38:52:6f:06:17:64:b4:b5:75:e5:4f: 93:e1:e7:f9:e6:4b:db:ad:2a:9f:4e:b6:71:d7:4b: 80:78:d9:70:96:fd:75:fa:ba:92:21:28:5b:37:86: 1c:24:94:39:40:c3:30:54:9e:8a:b9:21:7f:3b:10: 5c:7c:1b:b2:3f:73:a1:cc:07:d5:ba:5d:fd:f8:10: 35:26:e2:47:06:4e:ea:48:80:cc:f6:c3:e8:b0:69: df:31:de:9d:c2:b1:5e:d2:1c:f8:95:1f:e6:5a:93: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F7:E9:B2:03:23:8B:38:FE:57:63:84:DC:8C:6C:8B:F9:B4:61:DA X509v3 Authority Key Identifier: keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c4:51:c8:16:f4:96:aa:fe:be:3e:a0:a1:69:ff:81:c5:84: cc:34:d9:d9:0e:90:a3:15:26:18:b8:be:5f:63:18:8b:56:38: 7f:09:18:63:aa:cd:a5:ae:3d:39:49:31:e7:43:df:a2:c8:25: de:97:20:3d:14:0b:2b:21:64:2b:1b:71:11:1e:42:c7:3f:b3: 7e:be:d2:08:71:f2:0e:ec:ac:94:2d:84:f3:5b:df:d3:00:e0: 8f:73:24:83:4f:39:85:9d:43:44:ca:12:04:7e:64:e1:e1:bf: 4c:80:d9:9e:5d:26:05:42:63:68:dc:77:f1:64:d4:cc:86:55: af:69:b7:5f:83:eb:9e:09:b5:74:b2:01:8d:fc:69:6a:60:24: 5a:db:15:bf:28:38:de:bd:4f:c6:55:ca:f9:49:8c:8d:fc:2a: 1e:10:1c:9f:2b:45:01:c4:51:cb:93:98:92:ac:70:72:43:f6: 87:15:22:dd:b4:61:46:e8:7a:94:0c:2d:62:2b:9b:8b:03:30: 99:2b:96:45:ca:0c:75:f3:6b:5c:6a:35:d0:d6:8c:ca:f5:91: e1:5a:65:b9:e1:1b:e3:94:0f:fa:31:eb:67:62:ec:ec:6e:9e: 6b:30:f0:0b:3c:12:9b:24:79:8b:c4:f7:1c:a5:c4:61:b6:fb: 0f:ac:84:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91Ce21ZljCvX9I5zDAsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk OTQ2ZGUwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EygzZWY3ZTliMjAzMjM4YjM4ZmU1NzYzODRkYzhjNmM4YmY5YjQ2MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dLyY/eTtZsklN5ZS75fEVP6I2Ep UP+GLyvVItIJeYbW0a2ScScBXpmNeLoNvtMpiuFTFW7NUqi6jU+ChdM0Vy6dcknf nsscHl1siceLs6UmOyP0Por+2v6dAZBTscmg+cmBdZZ5f3xY25mvuvJK8Cm4eede 5p200IMTxhdme1YURVKD/MGg+Zs5hxuYEg77WUd5m2EfYDRoOFJvBhdktLV15U+T 4ef55kvbrSqfTrZx10uAeNlwlv11+rqSIShbN4YcJJQ5QMMwVJ6KuSF/OxBcfBuy P3OhzAfVul39+BA1JuJHBk7qSIDM9sPosGnfMd6dwrFe0hz4lR/mWpMA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD736bIDI4s4/ldjhNyMbIv5tGHaMB8GA1UdIwQY MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt NWM1MzViNzQ2MzUzLzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8RRyBb0 lqr+vj6goWn/gcWEzDTZ2Q6QoxUmGLi+X2MYi1Y4fwkYY6rNpa49OUkx50Pfosgl 3pcgPRQLKyFkKxtxER5Cxz+zfr7SCHHyDuyslC2E81vf0wDgj3Mkg085hZ1DRMoS BH5k4eG/TIDZnl0mBUJjaNx38WTUzIZVr2m3X4Prngm1dLIBjfxpamAkWtsVvyg4 3r1PxlXK+UmMjfwqHhAcnytFAcRRy5OYkqxwckP2hxUi3bRhRuh6lAwtYiubiwMw mSuWRcoMdfNrXGo10NaMyvWR4VplueEb45QP+jHrZ2Ls7G6eazDwCzwSmyR5i8T3 HKXEYbb7D6yE6w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:43 2025 by rpki-client