This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json) Hash identifier: jH4KgFF2j0tfClfXDUCd5pMjQPzekv0zbq3Yw5gjD6o= Subject key identifier: D4:6A:81:BF:74:69:E4:AA:A9:57:09:12:E5:EE:D9:88:E7:5C:F3:8E Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5 Certificate serial: 019AF3F7DC4F1F37AE3C3454830130A0B261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft Manifest number: 0288 Signing time: Sat 06 Dec 2025 14:01:38 +0000 Manifest this update: Sat 06 Dec 2025 14:01:38 +0000 Manifest next update: Sun 07 Dec 2025 14:01:38 +0000 Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: 17j/gmeCmaZyCqivXwwAq0Bs18TO8LyJhqcsYTQWJTI=) 2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:dc:4f:1f:37:ae:3c:34:54:83:01:30:a0:b2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9708724593b4753175b214812cf6891a645f84c5 Validity Not Before: Dec 6 14:01:38 2025 GMT Not After : Dec 7 14:01:38 2025 GMT Subject: CN=d46a81bf7469e4aaa9570912e5eed988e75cf38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:8b:26:37:7e:fc:7c:48:a8:4c:52:85:46: 6d:d2:93:f8:96:7e:b4:00:e1:19:de:cc:d7:f9:80: 5f:71:d3:a9:45:cc:71:d2:a6:73:57:e3:25:9a:fd: ff:0a:d2:fc:4e:b7:60:d3:71:8d:78:6e:ae:f9:b9: 20:6c:fb:b4:44:a6:e4:e1:b1:a3:7a:b0:4d:36:0d: 3b:82:b4:b5:b0:d2:7e:8e:1a:0d:9f:e3:6e:f4:59: 72:ba:5d:89:17:dc:e1:b9:44:d3:80:95:b9:12:f4: 9a:32:99:2e:e1:6f:cd:2d:0e:be:4b:1f:50:b6:91: a9:2c:e6:8a:fc:92:f1:72:ca:e8:69:b4:9e:b2:1d: 2f:90:c6:29:d2:69:32:b3:bf:61:9c:00:b6:ff:7c: ea:50:20:a7:19:4a:f6:a4:bf:8e:84:ba:7b:a9:50: 0a:a5:47:13:66:6f:24:42:bd:38:d7:11:7c:aa:0c: b9:2d:60:5a:8c:80:ff:74:c5:74:f1:bd:85:b2:7b: 41:1a:ae:8d:d2:b4:b1:fc:54:3d:54:9b:a5:01:c5: 8c:7d:71:b0:b1:39:c8:47:9d:3d:5f:7c:24:eb:79: 82:07:dc:c2:94:72:cd:24:58:29:42:15:ca:31:7d: e1:1f:1e:5b:b1:86:17:c8:6e:37:23:48:3a:2a:6b: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:81:BF:74:69:E4:AA:A9:57:09:12:E5:EE:D9:88:E7:5C:F3:8E X509v3 Authority Key Identifier: keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1d:de:6a:39:08:56:c3:1c:2c:e0:74:b2:2d:ee:77:2b:09: 1c:8c:32:da:ba:84:50:61:ef:b8:63:52:8e:62:95:a9:b2:7c: 8a:6d:02:2b:72:0a:98:8f:f4:96:b1:d8:26:3f:79:67:99:ff: 2b:79:35:60:02:44:26:4c:74:9e:3a:e7:3a:4c:ba:d8:19:55: 27:8a:92:5d:a2:bb:4b:80:b0:62:d4:3e:6c:a4:76:b4:f4:80: b6:0e:75:1e:51:bf:8d:28:d5:56:d8:bf:88:64:c9:fa:a8:60: 5f:55:ce:54:e4:44:55:36:ef:95:97:0a:a7:f5:96:2a:47:fd: 65:83:48:95:2a:88:44:96:70:7a:43:62:2b:f3:29:ec:f1:68: 33:6e:d3:4f:9e:ad:3f:cf:b4:52:c8:7a:05:18:5e:32:6d:08: 14:06:63:0a:24:ea:64:cf:6d:04:22:e8:ff:fc:97:cb:88:98: a0:3f:5a:ec:82:8e:8a:79:55:3e:82:64:bd:62:57:02:c7:9f: c2:83:4f:23:49:33:69:ee:92:68:2d:20:d7:06:28:5d:b2:c9: c5:30:08:c4:b9:dd:b7:85:3e:55:78:b8:ef:3b:17:48:6a:16: a1:a1:84:66:58:00:dc:ce:8a:81:03:e1:29:b4:6a:f7:c3:67: 2e:6b:8c:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99xPHzeuPDRUgwEwoLJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1 Zjg0YzUwHhcNMjUxMjA2MTQwMTM4WhcNMjUxMjA3MTQwMTM4WjAzMTEwLwYDVQQD EyhkNDZhODFiZjc0NjllNGFhYTk1NzA5MTJlNWVlZDk4OGU3NWNmMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq12LJjd+/HxIqExShUZt0pP4ln60 AOEZ3szX+YBfcdOpRcxx0qZzV+Mlmv3/CtL8Trdg03GNeG6u+bkgbPu0RKbk4bGj erBNNg07grS1sNJ+jhoNn+Nu9Flyul2JF9zhuUTTgJW5EvSaMpku4W/NLQ6+Sx9Q tpGpLOaK/JLxcsroabSesh0vkMYp0mkys79hnAC2/3zqUCCnGUr2pL+OhLp7qVAK pUcTZm8kQr041xF8qgy5LWBajID/dMV08b2FsntBGq6N0rSx/FQ9VJulAcWMfXGw sTnIR509X3wk63mCB9zClHLNJFgpQhXKMX3hHx5bsYYXyG43I0g6KmvGvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRqgb90aeSqqVcJEuXu2YjnXPOOMB8GA1UdIwQY MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt MzJhNDI3OGU1YmM1LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1 LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdh3eajkI VsMcLOB0si3udysJHIwy2rqEUGHvuGNSjmKVqbJ8im0CK3IKmI/0lrHYJj95Z5n/ K3k1YAJEJkx0njrnOky62BlVJ4qSXaK7S4CwYtQ+bKR2tPSAtg51HlG/jSjVVti/ iGTJ+qhgX1XOVOREVTbvlZcKp/WWKkf9ZYNIlSqIRJZwekNiK/Mp7PFoM27TT56t P8+0Ush6BRheMm0IFAZjCiTqZM9tBCLo//yXy4iYoD9a7IKOinlVPoJkvWJXAsef woNPI0kzae6SaC0g1wYoXbLJxTAIxLndt4U+VXi47zsXSGoWoaGEZlgA3M6KgQPh KbRq98NnLmuMFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:58 2025 by rpki-client