This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json) Hash identifier: QHeo/zjXd4Q3qkZtwgVaAb7UdFRYCMeMwyobMWGiqpM= Subject key identifier: C8:E9:CF:43:8F:EE:11:34:76:8B:32:F3:DB:A5:1A:28:55:DB:DC:0A Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05 Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705 Certificate serial: 019AF1D1C5AD48ED44B9CD81200FE6157773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=) 2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: oN9rqY3NXeXAIS4Lx0vZvx2c8+3cIqPe3Ss0pwF6UCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c5:ad:48:ed:44:b9:cd:81:20:0f:e6:15:77:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=c8e9cf438fee1134768b32f3dba51a2855dbdc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:d2:4c:90:22:b2:72:66:d3:57:35:1f:7c: c7:53:f0:70:84:84:aa:44:5f:ee:7f:ee:db:40:04: 15:69:6f:2e:5a:d1:be:20:17:2a:41:6d:cb:04:f2: 84:87:bd:68:37:e9:7e:8d:aa:75:bf:07:cd:72:9a: 09:83:8e:2f:f3:fb:37:20:ed:b9:85:ac:46:19:ab: e7:d3:9d:ac:d2:9e:d9:f6:2c:a5:d8:da:56:b8:db: fc:fb:33:c2:33:7c:cc:24:25:9d:05:23:57:3f:2e: de:d8:47:b3:ea:64:29:ae:2c:4c:36:ec:4a:4e:50: fb:4a:5f:d7:43:10:c9:3c:c0:a4:16:41:99:a7:41: bc:11:c2:9d:a1:40:44:89:77:54:d1:e6:92:dc:c2: 42:4e:14:7c:be:65:be:67:04:dc:f8:83:45:8d:70: ee:ff:1e:f1:73:4f:6e:6b:2a:b6:c4:27:77:58:cd: dd:ae:6a:05:5e:a8:f8:46:ca:2c:74:7b:59:50:5d: e3:59:5e:6e:98:de:64:38:92:67:6d:91:f4:c4:11: bf:a2:a1:1f:fd:43:ec:86:c8:95:e6:11:ed:0f:65: 51:db:8a:75:44:92:7f:5f:0e:ae:1c:2d:22:10:ca: 95:62:77:db:2e:2b:75:36:33:48:da:f0:86:48:86: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:CF:43:8F:EE:11:34:76:8B:32:F3:DB:A5:1A:28:55:DB:DC:0A X509v3 Authority Key Identifier: keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:89:8c:56:05:29:92:9c:ca:9e:f2:26:ad:39:d5:b0:3a:16: 79:5d:41:52:ed:82:0e:c1:e2:3f:0f:b3:0d:6a:66:fc:24:9d: fe:47:a0:ee:e8:58:96:97:2e:5c:89:b4:e3:e3:17:b7:82:a9: 19:7d:a7:c6:a4:fb:f8:09:bb:75:7f:11:51:1a:54:60:50:3b: 90:69:11:e5:e5:22:65:91:81:51:3f:09:50:7e:97:ac:7e:84: ea:e4:74:3e:77:84:62:c8:5b:21:d7:8e:f3:cb:e5:58:28:63: 58:01:89:b3:6f:ae:a9:87:91:3a:42:55:b5:d0:61:82:27:d9: e2:3c:a5:55:36:e3:ce:f0:a0:32:6f:57:03:93:a6:84:f9:19: 64:29:ba:ef:90:7e:c6:30:7c:80:a0:e7:ed:ca:89:be:06:c3: d4:05:cd:42:22:09:c6:3c:1d:77:17:2f:81:3d:c7:dc:e1:56: c2:1e:96:73:68:cc:12:57:a0:82:50:07:4a:ed:ef:8c:30:c5: df:01:7f:0c:cf:2e:94:8c:5c:c7:d9:ea:cc:4d:7a:d0:f0:d0: 55:f4:f3:b1:82:a6:d4:f2:dd:1f:a4:6b:6d:bc:02:cf:a5:96: 4f:81:e4:09:b6:43:aa:f3:1b:75:ea:fe:6b:52:6b:e5:60:67: c7:cb:cf:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cWtSO1Euc2BIA/mFXdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmMxYjYyM2U5ODA1NTllMzJhNWExZGI1ODBmOGE3MzQ0 MTc3MDUwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhjOGU5Y2Y0MzhmZWUxMTM0NzY4YjMyZjNkYmE1MWEyODU1ZGJkYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfSTJAisnJm01c1H3zHU/BwhISq RF/uf+7bQAQVaW8uWtG+IBcqQW3LBPKEh71oN+l+jap1vwfNcpoJg44v8/s3IO25 haxGGavn052s0p7Z9iyl2NpWuNv8+zPCM3zMJCWdBSNXPy7e2Eez6mQprixMNuxK TlD7Sl/XQxDJPMCkFkGZp0G8EcKdoUBEiXdU0eaS3MJCThR8vmW+ZwTc+INFjXDu /x7xc09uayq2xCd3WM3drmoFXqj4RsosdHtZUF3jWV5umN5kOJJnbZH0xBG/oqEf /UPshsiV5hHtD2VR24p1RJJ/Xw6uHC0iEMqVYnfbLit1NjNI2vCGSIZDVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjpz0OP7hE0dosy89ulGihV29wKMB8GA1UdIwQY MBaAFPy8G2I+mAVZ4ypaHbWA+Kc0QXcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQt NzFhNzU0MmE2MDY2LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQtNzFhNzU0MmE2MDY2 LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4mMVgUp kpzKnvImrTnVsDoWeV1BUu2CDsHiPw+zDWpm/CSd/keg7uhYlpcuXIm04+MXt4Kp GX2nxqT7+Am7dX8RURpUYFA7kGkR5eUiZZGBUT8JUH6XrH6E6uR0PneEYshbIdeO 88vlWChjWAGJs2+uqYeROkJVtdBhgifZ4jylVTbjzvCgMm9XA5OmhPkZZCm675B+ xjB8gKDn7cqJvgbD1AXNQiIJxjwddxcvgT3H3OFWwh6Wc2jMElegglAHSu3vjDDF 3wF/DM8ulIxcx9nqzE160PDQVfTzsYKm1PLdH6RrbbwCz6WWT4HkCbZDqvMbder+ a1Jr5WBnx8vPzw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:27 2025 by rpki-client