This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: k1D5eOJODJNy1MSoCrUWjGF4sl1lKxur0RYDlgB3yzo=
Subject key identifier: E2:6C:6E:7E:C3:7A:3F:4B:B0:D4:03:8E:1A:DA:7B:7F:D0:2F:D8:61
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019AF19B76FD932B0FB2C0AE946B9E21CB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 03:01:28 +0000
Manifest this update: Sat 06 Dec 2025 03:01:28 +0000
Manifest next update: Sun 07 Dec 2025 03:01:28 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: 7g36dVCgXX0on3HqKLods00dCiDNUQkIEhM/Go5C98Q=)
2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:76:fd:93:2b:0f:b2:c0:ae:94:6b:9e:21:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Dec 6 03:01:28 2025 GMT
Not After : Dec 7 03:01:28 2025 GMT
Subject: CN=e26c6e7ec37a3f4bb0d4038e1ada7b7fd02fd861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:ca:c8:45:18:2a:a5:64:b9:ff:3d:4e:e7:
e3:b8:ca:00:e2:96:45:1b:72:ef:de:df:3b:a6:e7:
95:e0:63:33:25:c9:38:ac:58:e0:e3:98:41:9f:e9:
b6:52:2d:8e:d9:8f:1e:00:00:a8:90:71:0d:0f:92:
1e:bc:77:d2:b6:2c:8e:f0:f8:1d:70:d5:99:6d:49:
7b:8f:31:70:16:0e:77:66:d1:e0:f6:7c:8b:05:eb:
7e:c6:7f:06:01:6f:c0:2d:94:27:53:6f:e6:6d:9a:
f8:fe:6a:50:2a:35:f4:b7:6d:eb:6a:0d:3c:3b:c0:
f4:cd:4b:3a:73:ab:1f:b8:68:77:42:22:2d:fb:58:
e6:16:dd:a7:fa:d1:10:ab:2d:1e:bf:a7:f8:7c:86:
46:92:80:78:02:9e:ea:71:d3:82:2c:77:43:f9:29:
34:d2:d2:1a:e3:51:65:92:55:d2:b1:4e:9a:8d:86:
f1:cd:21:1a:db:06:e4:77:4d:01:0b:cf:be:df:d6:
e5:3c:9c:69:42:fe:16:b0:13:58:08:0f:bd:1e:da:
6b:e7:c9:3f:f8:0e:b6:b5:59:a8:c8:b5:4e:aa:f9:
2c:93:63:21:9c:93:d8:5a:da:17:12:6f:69:52:b1:
a3:9b:d1:0c:7d:4e:52:29:08:01:3e:65:28:f2:fa:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:6E:7E:C3:7A:3F:4B:B0:D4:03:8E:1A:DA:7B:7F:D0:2F:D8:61
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7b:c5:b6:88:45:34:c4:9d:7c:ea:a7:db:ae:6e:cd:b0:ea:
9b:db:4e:d7:a4:24:64:fd:d0:11:e4:c4:f7:79:f9:2f:e4:01:
98:72:79:d4:8a:ed:ed:c3:6a:63:87:29:3f:d5:6d:e8:f9:63:
c8:19:63:a0:04:01:99:fd:78:df:03:e3:4d:cd:eb:19:a0:05:
12:8f:aa:79:56:7e:78:a1:23:55:5f:bc:04:7d:67:c3:55:72:
4a:c3:4e:05:1b:37:e7:fe:fc:ea:63:7c:e1:80:88:47:75:f5:
85:b7:9d:b0:61:1d:1d:d4:d7:d5:8f:75:6d:0b:6a:b5:3f:a8:
38:81:bb:9c:85:09:0f:bf:7a:5d:7f:20:f0:bc:8c:c2:37:fe:
52:f1:b8:87:de:63:5f:17:51:5b:bf:36:b6:56:36:62:a0:d0:
2c:53:a5:9f:6f:c6:92:99:f5:6a:1b:63:54:9c:03:9e:cf:ea:
ea:25:b6:6f:e4:df:fd:8e:3a:43:b2:41:74:a8:c1:3e:42:38:
ec:73:1b:5c:f0:07:0b:47:e5:58:e8:97:f7:32:b3:4f:76:33:
e4:df:88:8d:da:67:f0:ce:99:6e:3e:b0:fb:bd:5e:fc:6f:19:
5a:0f:8b:07:68:62:85:6d:b6:97:45:50:1b:29:83:80:77:e3:
cb:e7:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:54 2025 by rpki-client