This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: EzrErw/3rbjy5z7IGjtCRVoCEJHpSJG4n0UFIiMk+Lw= Subject key identifier: 79:87:6A:F8:60:6E:EA:F3:DC:A0:C0:95:85:71:7C:DC:67:17:0C:10 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019AF1D207B758F108A21230F0A60AB782A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 0446 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: REcnoHL+lbdkScNW0fk1xGkHfpS3FhDzKDkbbcYFPwU=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:07:b7:58:f1:08:a2:12:30:f0:a6:0a:b7:82:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=79876af8606eeaf3dca0c09585717cdc67170c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:ff:1a:3d:e1:11:76:51:b9:90:33:3f:6d: aa:93:8d:cf:64:f3:6e:18:fd:0f:54:bd:8b:82:de: 17:6c:f0:2f:94:c3:17:88:2e:eb:80:d5:fc:9a:b4: 7d:cf:4e:60:f1:ca:29:9e:b3:d9:ac:b7:8c:c0:4e: b3:a2:f2:39:c2:72:5b:c5:e9:a3:04:b7:ea:ac:ad: db:12:95:d3:2f:78:d8:ed:13:50:bb:2d:27:53:cb: ac:86:83:aa:18:16:4c:c3:f1:47:64:49:82:3c:15: 2d:e8:a3:5a:cc:f3:c7:f2:55:fc:27:72:a0:d8:a2: a1:fb:99:dc:96:36:17:95:f8:7b:07:62:b1:c0:14: 62:f9:b1:d9:fd:8f:97:ae:80:8b:e3:e5:38:1b:7e: bc:b0:31:2c:e9:de:52:ae:ba:89:14:ea:a2:cb:03: 1b:4f:df:9b:59:96:1b:96:c8:21:19:ef:c0:15:4c: 11:a9:a2:67:57:25:5d:99:49:ad:4c:11:30:e1:00: 2f:d6:60:3b:bd:a0:16:f4:0b:15:1c:5a:12:93:50: 08:1c:1f:ab:f2:65:f3:19:c1:fc:2c:e6:54:4e:f5: 44:57:55:1f:51:4f:e0:32:3d:bd:9e:22:b5:e4:82: ba:09:27:bb:4c:ea:90:c5:15:4d:1e:1b:fb:b6:23: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:6A:F8:60:6E:EA:F3:DC:A0:C0:95:85:71:7C:DC:67:17:0C:10 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9d:5c:9c:9a:b4:a6:8f:10:9a:d8:d0:82:8f:91:af:df:8e: f7:62:7d:25:51:b5:66:47:16:58:c0:34:20:0a:00:5e:4d:e7: 66:9d:4a:dc:03:3a:45:0d:30:54:61:d6:3b:d8:2f:9c:41:1c: 72:c8:ab:dd:17:9a:4b:d2:e5:30:1d:1f:cf:2f:76:88:b3:4a: 57:56:a5:c4:84:52:e1:07:f3:29:ea:ba:16:bb:29:c4:0b:db: 9d:cc:8c:be:88:df:55:dd:35:ab:f5:1f:43:5c:ec:d5:8e:4f: a2:9d:57:5e:26:a0:1a:3b:ec:5b:9f:ee:51:6d:33:4c:9f:02: 74:83:af:e8:df:e5:82:2f:be:03:bd:d9:13:db:18:fc:75:71: 00:eb:d5:54:e5:fa:50:e0:7a:75:e4:81:31:aa:25:1a:e0:d9: 92:75:ec:92:00:ba:ce:d6:eb:35:d3:b8:1f:89:41:ff:2d:61: 51:e6:4b:3e:0a:01:27:f6:e6:e1:65:65:f3:5e:b1:8f:12:bc: e8:e9:61:59:0a:c3:94:fd:d9:ef:2d:ed:9d:8b:9d:f4:2a:4c: 72:ca:34:91:f0:7d:e3:23:ca:ac:26:43:18:87:ff:2f:80:2f: 4a:1e:ae:41:ef:46:03:62:6f:da:72:07:cd:51:17:cb:80:17: d1:58:56:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ge3WPEIohIw8KYKt4KhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg3OTg3NmFmODYwNmVlYWYzZGNhMGMwOTU4NTcxN2NkYzY3MTcwYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sz/Gj3hEXZRuZAzP22qk43PZPNu GP0PVL2Lgt4XbPAvlMMXiC7rgNX8mrR9z05g8copnrPZrLeMwE6zovI5wnJbxemj BLfqrK3bEpXTL3jY7RNQuy0nU8ushoOqGBZMw/FHZEmCPBUt6KNazPPH8lX8J3Kg 2KKh+5ncljYXlfh7B2KxwBRi+bHZ/Y+XroCL4+U4G368sDEs6d5SrrqJFOqiywMb T9+bWZYblsghGe/AFUwRqaJnVyVdmUmtTBEw4QAv1mA7vaAW9AsVHFoSk1AIHB+r 8mXzGcH8LOZUTvVEV1UfUU/gMj29niK15IK6CSe7TOqQxRVNHhv7tiO+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmHavhgburz3KDAlYVxfNxnFwwQMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw51cnJq0 po8QmtjQgo+Rr9+O92J9JVG1ZkcWWMA0IAoAXk3nZp1K3AM6RQ0wVGHWO9gvnEEc csir3ReaS9LlMB0fzy92iLNKV1alxIRS4QfzKeq6FrspxAvbncyMvojfVd01q/Uf Q1zs1Y5Pop1XXiagGjvsW5/uUW0zTJ8CdIOv6N/lgi++A73ZE9sY/HVxAOvVVOX6 UOB6deSBMaolGuDZknXskgC6ztbrNdO4H4lB/y1hUeZLPgoBJ/bm4WVl816xjxK8 6OlhWQrDlP3Z7y3tnYud9CpMcso0kfB94yPKrCZDGIf/L4AvSh6uQe9GA2Jv2nIH zVEXy4AX0VhWqg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:00 2025 by rpki-client