This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json) Hash identifier: FpoQNmiEDTlEFLR0o8UT2iKk+PLv3TZsqFw6zh2DaEc= Subject key identifier: FA:E2:C2:76:9E:4C:45:A5:F7:4E:99:97:2F:C0:07:B6:2A:B5:BF:F6 Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de Certificate serial: 019B3D59B1F761202072DD9C24565848354C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=) 2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: id9w+VICATP1m/KVh+LkFrHVq3vyGmv+G33kocEGoo8=) 3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b1:f7:61:20:20:72:dd:9c:24:56:58:48:35:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9706aa905465586424f387fdbd83648b72d946de Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=fae2c2769e4c45a5f74e99972fc007b62ab5bff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:98:7f:40:51:4e:e6:26:cd:ad:64:fb:be: ba:96:c4:10:18:26:c8:3b:be:7f:27:03:46:04:9b: 35:9d:78:58:35:e0:51:14:50:74:23:6f:cd:c0:07: bc:53:a0:68:f7:f3:c7:a8:25:b4:69:5e:1a:84:81: e7:c1:42:fc:31:5e:9a:59:a2:c1:b5:81:32:61:32: 1e:13:ce:93:4b:51:d3:14:4a:c4:35:35:3a:4e:eb: 34:93:18:3e:47:84:c2:c3:45:7a:60:6d:5f:ff:62: 42:2c:7f:df:78:b4:43:87:0e:85:05:72:a5:97:3f: 5c:a0:0a:81:bd:6e:ff:b0:3d:eb:60:3a:f2:b2:26: 65:bb:83:35:5f:63:4c:61:d0:77:c5:86:9f:c1:85: e7:d7:51:c5:5d:f6:85:81:b9:89:b4:07:a1:58:bd: a7:c3:a7:19:aa:4e:39:86:b1:db:5f:40:84:44:02: 22:3d:ca:1c:66:20:54:6c:84:4f:75:b8:a3:ce:ca: a9:6c:8a:a8:8e:2c:51:f4:38:87:8f:3d:7c:1c:db: c9:62:80:6c:ba:95:71:01:49:aa:4a:28:fb:e1:9f: e3:7b:95:6b:7d:86:c5:52:92:2b:96:5d:b0:73:78: 6b:91:f3:65:f4:bd:9a:b3:b1:ad:b1:cf:1e:cb:f7: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E2:C2:76:9E:4C:45:A5:F7:4E:99:97:2F:C0:07:B6:2A:B5:BF:F6 X509v3 Authority Key Identifier: keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:50:fe:cd:ab:a9:e2:f6:03:d8:3c:70:fe:6f:18:63:1a:27: 99:bc:6f:73:5b:49:7e:40:65:71:29:fd:f2:ae:47:fc:51:32: f4:f9:da:90:a6:54:3c:ca:81:62:07:f9:17:04:84:e4:01:cd: 25:24:a0:2c:f5:c6:7d:4a:ca:62:da:b5:ce:c9:02:48:29:36: 23:3c:70:49:f7:b3:9b:fa:86:41:bc:b2:4c:00:2c:ba:ac:a4: 76:3c:5c:6a:83:43:08:b9:92:1d:6d:b1:0c:2b:02:c5:26:bc: 22:7e:c1:49:09:9a:83:55:0e:8a:e4:ba:fc:e1:78:bb:c9:63: ef:5a:6f:27:e9:5a:39:f6:3a:38:9e:51:bd:63:2a:6c:6d:a5: fe:77:d5:06:ab:ee:18:b9:06:5e:73:4f:c8:c3:bc:06:89:7e: 6a:a9:96:f5:f7:21:61:17:4a:eb:77:3a:df:21:ef:b7:ff:c6: 02:8c:b1:29:a8:31:47:5b:da:fe:f1:6c:55:2c:3c:b6:ab:bf: 9f:35:87:a0:f3:0f:57:5e:f0:f8:7d:28:e3:c1:87:40:99:b2: f3:9a:5c:bb:78:ef:f7:d7:fb:9d:ce:e0:7a:03:b0:95:be:08: eb:48:1d:08:f9:a3:dd:d1:9e:0e:d5:d0:39:65:9a:44:89:d7: b6:5d:2d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbH3YSAgct2cJFZYSDVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk OTQ2ZGUwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD EyhmYWUyYzI3NjllNGM0NWE1Zjc0ZTk5OTcyZmMwMDdiNjJhYjViZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoGYf0BRTuYmza1k+766lsQQGCbI O75/JwNGBJs1nXhYNeBRFFB0I2/NwAe8U6Bo9/PHqCW0aV4ahIHnwUL8MV6aWaLB tYEyYTIeE86TS1HTFErENTU6Tus0kxg+R4TCw0V6YG1f/2JCLH/feLRDhw6FBXKl lz9coAqBvW7/sD3rYDrysiZlu4M1X2NMYdB3xYafwYXn11HFXfaFgbmJtAehWL2n w6cZqk45hrHbX0CERAIiPcocZiBUbIRPdbijzsqpbIqojixR9DiHjz18HNvJYoBs upVxAUmqSij74Z/je5VrfYbFUpIrll2wc3hrkfNl9L2as7Gtsc8ey/d4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPriwnaeTEWl906Zly/AB7Yqtb/2MB8GA1UdIwQY MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt NWM1MzViNzQ2MzUzLzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVD+zaup 4vYD2Dxw/m8YYxonmbxvc1tJfkBlcSn98q5H/FEy9PnakKZUPMqBYgf5FwSE5AHN JSSgLPXGfUrKYtq1zskCSCk2IzxwSfezm/qGQbyyTAAsuqykdjxcaoNDCLmSHW2x DCsCxSa8In7BSQmag1UOiuS6/OF4u8lj71pvJ+laOfY6OJ5RvWMqbG2l/nfVBqvu GLkGXnNPyMO8Bol+aqmW9fchYRdK63c63yHvt//GAoyxKagxR1va/vFsVSw8tqu/ nzWHoPMPV17w+H0o48GHQJmy85pcu3jv99f7nc7gegOwlb4I60gdCPmj3dGeDtXQ OWWaRInXtl0ttg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:14 2025 by rpki-client