This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json) Hash identifier: gk5wF4uxXJcxqy6LsA+CHVdP8O5rNJmAAdot6+/9UK0= Subject key identifier: BB:03:43:8C:0F:0E:0D:32:13:A8:BB:B1:DC:2D:BA:82:5F:AA:75:F8 Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Certificate serial: 019B32D5CB87DD0416CE50F1601CC95E6D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft Manifest number: 055F Signing time: Thu 18 Dec 2025 19:00:30 +0000 Manifest this update: Thu 18 Dec 2025 19:00:30 +0000 Manifest next update: Fri 19 Dec 2025 19:00:30 +0000 Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=) 2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: ThkrXPFF28KJ3n4SroIgNQAN1Hq6rjUZN2C6p7HH1FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:cb:87:dd:04:16:ce:50:f1:60:1c:c9:5e:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Validity Not Before: Dec 18 19:00:30 2025 GMT Not After : Dec 19 19:00:30 2025 GMT Subject: CN=bb03438c0f0e0d3213a8bbb1dc2dba825faa75f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:75:a0:96:f1:45:f1:16:8a:a6:43:e3:46: ca:1a:63:2a:b6:0e:0b:b0:fe:9f:60:af:48:65:5c: e2:82:c6:d9:88:88:46:e0:9f:99:d0:32:6c:fa:35: dd:31:bc:ee:70:0c:eb:43:d1:4a:e1:21:5f:a3:04: d1:3b:0d:1d:23:4c:e7:d6:a3:f8:dc:b0:fd:5b:0a: 89:48:f0:29:fc:af:cf:75:da:9b:b5:14:e2:1e:a0: 35:2b:50:fd:fe:a2:0f:a0:35:ca:37:c0:86:15:0d: 77:1b:a6:cd:4c:c8:ba:50:7b:99:8f:7b:35:bc:38: 72:14:e2:50:ce:f1:2c:39:1b:d0:0a:a5:d8:ca:90: 2a:7b:70:1c:51:7e:d7:4f:36:22:e8:70:e9:b8:9d: e4:aa:49:d2:a1:0e:9b:6b:28:7d:e9:d1:b8:91:d0: 1b:54:96:40:2f:0b:d6:de:93:b2:0a:5d:ee:48:f0: bf:a7:4a:ff:80:54:16:29:0f:1e:14:dc:70:57:ec: 92:68:fc:97:58:57:33:31:e8:fa:63:e2:0a:ca:9c: c0:36:09:a5:bc:c2:b0:99:26:90:60:83:89:eb:4a: 9b:18:20:e6:04:f7:84:33:e0:31:a2:e0:cc:66:fa: ec:58:17:7f:14:f7:cd:0b:54:52:03:90:14:15:51: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:43:8C:0F:0E:0D:32:13:A8:BB:B1:DC:2D:BA:82:5F:AA:75:F8 X509v3 Authority Key Identifier: keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:92:82:67:ba:9d:74:ad:49:41:58:f6:4f:31:8d:df:9c:70: 27:d8:17:6b:a0:aa:9b:dc:16:ec:9a:ae:2d:96:0b:b3:e9:c5: a8:3a:ca:20:e7:fd:30:e8:74:28:b8:28:c4:c9:0c:e7:ac:3d: 51:a4:a1:03:42:9a:54:4b:c2:65:b9:3e:bc:af:90:d5:8a:21: a5:02:8d:bf:50:8a:09:ed:a6:d4:4e:8e:d7:a0:31:20:a2:62: 0b:7c:24:bb:6a:41:75:69:f7:b2:96:d5:f9:85:1c:86:19:ac: 19:c4:4d:e6:3c:bd:c6:ea:f3:66:17:1e:15:e1:e3:b2:37:b2: 65:af:38:13:1c:7c:33:8a:cc:d4:24:ee:97:2a:7c:a2:6d:9d: 23:bf:8f:5f:bd:a5:7c:92:8e:87:41:b8:d7:3e:25:82:38:ea: 30:46:22:69:fc:93:5c:16:60:55:b3:9f:8b:9c:4a:a4:f0:46: b2:39:bc:0f:b9:ef:93:ee:e8:48:70:a1:51:af:d2:b2:47:41: 5c:33:d4:52:50:30:65:90:d8:d6:30:c4:ac:4e:16:ac:a7:12: 2b:5b:aa:48:93:da:c2:1b:03:5a:72:5d:92:5a:f1:6f:3f:e8: e9:7c:f0:b5:e1:bf:db:a5:aa:5f:75:08:5f:04:3d:33:95:68: ad:bb:bf:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1cuH3QQWzlDxYBzJXm2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj ZjgyZjEwHhcNMjUxMjE4MTkwMDMwWhcNMjUxMjE5MTkwMDMwWjAzMTEwLwYDVQQD EyhiYjAzNDM4YzBmMGUwZDMyMTNhOGJiYjFkYzJkYmE4MjVmYWE3NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/d1oJbxRfEWiqZD40bKGmMqtg4L sP6fYK9IZVzigsbZiIhG4J+Z0DJs+jXdMbzucAzrQ9FK4SFfowTROw0dI0zn1qP4 3LD9WwqJSPAp/K/PddqbtRTiHqA1K1D9/qIPoDXKN8CGFQ13G6bNTMi6UHuZj3s1 vDhyFOJQzvEsORvQCqXYypAqe3AcUX7XTzYi6HDpuJ3kqknSoQ6bayh96dG4kdAb VJZALwvW3pOyCl3uSPC/p0r/gFQWKQ8eFNxwV+ySaPyXWFczMej6Y+IKypzANgml vMKwmSaQYIOJ60qbGCDmBPeEM+AxouDMZvrsWBd/FPfNC1RSA5AUFVEmzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsDQ4wPDg0yE6i7sdwtuoJfqnX4MB8GA1UdIwQY MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5 LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZKCZ7qd dK1JQVj2TzGN35xwJ9gXa6Cqm9wW7JquLZYLs+nFqDrKIOf9MOh0KLgoxMkM56w9 UaShA0KaVEvCZbk+vK+Q1YohpQKNv1CKCe2m1E6O16AxIKJiC3wku2pBdWn3spbV +YUchhmsGcRN5jy9xurzZhceFeHjsjeyZa84Exx8M4rM1CTulyp8om2dI7+PX72l fJKOh0G41z4lgjjqMEYiafyTXBZgVbOfi5xKpPBGsjm8D7nvk+7oSHChUa/SskdB XDPUUlAwZZDY1jDErE4WrKcSK1uqSJPawhsDWnJdklrxbz/o6XzwteG/26WqX3UI XwQ9M5Vorbu/xw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:27 2025 by rpki-client