This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json) Hash identifier: nWQjO3fU+Dls2UzKIpASFgK2RJ+US9j7kmdL9DYgTjc= Subject key identifier: 86:A3:F0:30:F9:7D:BF:D4:E9:2F:C8:1B:EA:29:0C:66:41:17:C3:A4 Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Certificate serial: 019AFC55BBBA68820D38F4E6B24ED6896BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft Manifest number: 0FF0 Signing time: Mon 08 Dec 2025 05:01:08 +0000 Manifest this update: Mon 08 Dec 2025 05:01:08 +0000 Manifest next update: Tue 09 Dec 2025 05:01:08 +0000 Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: NGTi2uTp1QYtkRsCSBjsOsFFGFSGiHsW3/4OIdKw7sY=) 2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:bb:ba:68:82:0d:38:f4:e6:b2:4e:d6:89:6b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81 Validity Not Before: Dec 8 05:01:08 2025 GMT Not After : Dec 9 05:01:08 2025 GMT Subject: CN=86a3f030f97dbfd4e92fc81bea290c664117c3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:8e:60:18:34:29:6b:2f:52:64:fb:02:eb: 22:a6:b9:f2:8b:51:0c:61:a2:7e:1f:cd:51:7b:0d: 9b:29:91:46:86:8d:a3:f8:5d:f2:28:6c:e3:9b:b4: e6:bf:cc:58:9c:1b:08:34:b8:1a:d8:3c:1b:e7:ae: 3a:28:b7:bc:bb:6c:77:d3:04:c1:22:86:24:ec:a5: b7:54:ee:02:f7:79:f3:b2:e3:af:5c:b3:50:93:01: 83:7d:64:71:9c:4e:8b:0d:9e:ad:c5:c7:89:38:f4: d7:4a:e1:62:40:9a:11:1c:e5:b4:3a:1e:59:a2:5f: 0a:3c:17:4a:34:44:76:75:e4:d0:15:a9:de:8b:df: 5c:9a:34:2e:0f:ee:10:86:a9:0c:07:9d:a2:0f:5d: 92:5b:9e:ea:9d:dd:83:6c:8f:08:dc:ac:ca:f4:39: 00:13:67:3c:99:8f:da:f1:44:5b:e1:4b:81:02:16: c6:49:6b:b4:46:77:be:db:82:06:e9:46:fb:6f:75: 57:12:2b:63:22:84:d1:d8:1d:1d:62:7f:8d:22:24: 6d:2c:fd:d0:b1:d3:9c:6f:51:82:87:96:4c:34:fb: 19:b8:e2:8a:b4:15:3d:5c:04:b9:2f:26:32:10:50: 3f:98:9f:14:bc:1d:f9:08:47:43:1c:94:12:44:f5: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A3:F0:30:F9:7D:BF:D4:E9:2F:C8:1B:EA:29:0C:66:41:17:C3:A4 X509v3 Authority Key Identifier: keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:af:69:c1:5e:fc:49:38:21:de:cd:3e:20:e8:51:eb:c8: 8e:fc:0d:43:db:9e:3d:98:02:8c:38:21:0e:05:a2:90:14:b1: b5:7c:4a:72:2b:9c:bd:97:4d:ad:f4:bf:73:38:5e:98:11:07: 1e:51:da:eb:2a:92:18:fb:af:2d:d3:61:d9:2b:9f:f0:18:d8: 9e:23:4c:0b:8b:46:8c:80:33:70:67:d3:40:d0:37:2b:1e:62: ea:ec:61:c2:ca:57:29:94:f4:37:a7:14:15:1e:11:ac:53:15: 10:4a:35:c9:88:07:fa:00:06:d2:bd:fc:81:a3:3c:5f:ae:e4: 21:b2:38:cb:79:41:ca:89:95:b6:57:8b:a6:b5:23:24:89:fc: 36:7d:c4:4c:63:e2:1b:78:dc:bf:78:77:c2:c6:24:e2:d9:80: 3e:59:6c:3e:e4:51:28:ef:ea:dc:5e:7f:77:2c:08:7e:46:11: f7:4d:bc:1e:2e:74:a2:d7:1f:47:6b:7c:b7:49:de:93:35:90: 91:73:a2:69:9c:ac:16:04:44:45:2a:a9:c8:30:16:fe:0c:b1: da:b1:53:e9:bc:0d:59:07:71:f5:1b:68:52:27:df:0a:16:ac: 43:39:0c:7e:20:b5:9f:df:44:bd:48:60:97:57:a9:7f:9f:0f: ff:c1:55:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8Vbu6aIINOPTmsk7WiWu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2 ODNjODEwHhcNMjUxMjA4MDUwMTA4WhcNMjUxMjA5MDUwMTA4WjAzMTEwLwYDVQQD Eyg4NmEzZjAzMGY5N2RiZmQ0ZTkyZmM4MWJlYTI5MGM2NjQxMTdjM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnuOYBg0KWsvUmT7Ausiprnyi1EM YaJ+H81Rew2bKZFGho2j+F3yKGzjm7Tmv8xYnBsINLga2Dwb5646KLe8u2x30wTB IoYk7KW3VO4C93nzsuOvXLNQkwGDfWRxnE6LDZ6txceJOPTXSuFiQJoRHOW0Oh5Z ol8KPBdKNER2deTQFanei99cmjQuD+4QhqkMB52iD12SW57qnd2DbI8I3KzK9DkA E2c8mY/a8URb4UuBAhbGSWu0Rne+24IG6Ub7b3VXEitjIoTR2B0dYn+NIiRtLP3Q sdOcb1GCh5ZMNPsZuOKKtBU9XAS5LyYyEFA/mJ8UvB35CEdDHJQSRPWcYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaj8DD5fb/U6S/IG+opDGZBF8OkMB8GA1UdIwQY MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc56vacFe /Ek4Id7NPiDoUevIjvwNQ9uePZgCjDghDgWikBSxtXxKciucvZdNrfS/czhemBEH HlHa6yqSGPuvLdNh2Suf8BjYniNMC4tGjIAzcGfTQNA3Kx5i6uxhwspXKZT0N6cU FR4RrFMVEEo1yYgH+gAG0r38gaM8X67kIbI4y3lByomVtleLprUjJIn8Nn3ETGPi G3jcv3h3wsYk4tmAPllsPuRRKO/q3F5/dywIfkYR9028Hi50otcfR2t8t0nekzWQ kXOiaZysFgRERSqpyDAW/gyx2rFT6bwNWQdx9RtoUiffChasQzkMfiC1n99EvUhg l1epf58P/8FV2Q== -----END CERTIFICATE-----Generated at Mon Dec 8 09:14:10 2025 by rpki-client