This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json) Hash identifier: MUd0Np+lDfygsXYJLGxkK3jYVxeabiUhf79Lc2hd6S0= Subject key identifier: 62:D5:4E:81:29:B3:E9:20:6E:AE:1F:71:A6:66:A3:AE:78:19:46:0B Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Certificate serial: 019AF12EA164F5DDB48CDB327937B03F62DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft Manifest number: 053D Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=) 2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: R7HlChuXAX0fGsNtVq+q8bvO5w8SxBdtidLEEu5MsCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a1:64:f5:dd:b4:8c:db:32:79:37:b0:3f:62:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=62d54e8129b3e9206eae1f71a666a3ae7819460b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:0e:79:0c:f1:2f:01:a7:9a:c1:b6:ef:ba: fd:0c:9c:6b:88:6f:01:3e:79:d0:20:42:08:2a:d9: ab:47:d3:db:85:9d:b0:b6:1c:d9:4f:7c:e5:19:6a: 54:6e:23:22:77:04:6e:0c:f9:15:90:16:a2:90:ca: 4b:d4:c5:84:33:f3:61:16:b1:49:88:b6:ea:0b:e9: f2:2f:18:64:f7:a0:82:b7:e1:1f:17:ca:11:4e:e0: 2e:8e:0c:0a:bd:fd:73:68:f4:14:4d:3d:20:1d:10: 99:19:1f:52:17:72:44:eb:f6:13:91:f7:60:87:ac: 85:cf:ec:ea:e2:b0:c0:49:a6:aa:61:b0:ad:a7:86: 65:bc:be:6f:44:b1:1e:de:77:46:eb:f0:c5:7e:2e: 33:9b:cf:3b:cd:32:cf:cf:23:c5:89:ee:1f:b5:c4: c2:c5:71:24:1e:ba:65:c7:4e:7b:83:b5:7f:fb:05: 34:48:41:0c:6d:3b:06:4d:1b:fa:f8:e0:6e:6d:46: 54:2b:57:8e:b5:37:b7:7f:9c:c2:28:fd:72:61:d5: 96:98:b2:2f:4c:07:27:ed:ec:f1:44:22:12:65:12: 2c:64:f8:4b:95:8e:f3:61:40:a5:0e:ed:bb:5d:aa: a2:74:9a:bb:a5:c5:f4:71:51:fa:b5:a1:cd:87:8d: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D5:4E:81:29:B3:E9:20:6E:AE:1F:71:A6:66:A3:AE:78:19:46:0B X509v3 Authority Key Identifier: keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:1c:d3:b5:4f:ea:ff:f9:d4:f0:d3:4e:ac:dd:2e:38:46: 1b:df:00:ac:94:fa:08:f9:cf:04:8e:4c:66:59:10:b7:2a:75: a2:86:78:69:0e:a0:cc:cc:43:77:38:23:75:d1:c3:8c:c8:13: 59:28:2b:c8:46:41:97:d4:54:8f:90:f6:76:c2:5e:df:84:bb: 5e:a3:8d:9d:7c:d3:4a:51:6b:3c:42:32:33:38:4d:b8:48:a2: 45:db:5a:3c:2b:c5:cc:a7:7b:17:94:41:7f:ea:dd:c2:2b:a1: 6c:a3:81:fd:f7:0b:0b:e6:21:b1:10:e9:5f:72:2a:6e:93:b5: 91:27:2c:93:06:a9:39:0d:da:d3:b4:8a:f9:d4:77:a3:a1:df: 0c:c1:70:3c:d9:a9:2a:34:60:21:8c:ce:25:c7:2e:65:e9:de: 38:89:38:d8:c3:24:20:18:8e:4f:37:58:ee:19:5c:46:b0:bb: 8f:a1:c5:ce:c1:8b:e7:a2:8c:55:50:46:49:9b:35:51:83:13: 5a:48:22:5b:58:f6:5d:7c:2c:89:6f:16:6c:20:8b:4a:15:9c: e9:76:d5:94:ea:23:6e:49:17:96:7d:bf:d8:8a:74:f9:4e:dd: 30:e0:eb:63:5b:8d:8d:23:cb:a2:ea:f6:22:86:37:26:83:55: 6b:e1:6b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqFk9d20jNsyeTewP2LfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj ZjgyZjEwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD Eyg2MmQ1NGU4MTI5YjNlOTIwNmVhZTFmNzFhNjY2YTNhZTc4MTk0NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviUOeQzxLwGnmsG277r9DJxriG8B PnnQIEIIKtmrR9PbhZ2wthzZT3zlGWpUbiMidwRuDPkVkBaikMpL1MWEM/NhFrFJ iLbqC+nyLxhk96CCt+EfF8oRTuAujgwKvf1zaPQUTT0gHRCZGR9SF3JE6/YTkfdg h6yFz+zq4rDASaaqYbCtp4ZlvL5vRLEe3ndG6/DFfi4zm887zTLPzyPFie4ftcTC xXEkHrplx057g7V/+wU0SEEMbTsGTRv6+OBubUZUK1eOtTe3f5zCKP1yYdWWmLIv TAcn7ezxRCISZRIsZPhLlY7zYUClDu27XaqidJq7pcX0cVH6taHNh4346wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLVToEps+kgbq4fcaZmo654GUYLMB8GA1UdIwQY MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5 LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8cc07VP 6v/51PDTTqzdLjhGG98ArJT6CPnPBI5MZlkQtyp1ooZ4aQ6gzMxDdzgjddHDjMgT WSgryEZBl9RUj5D2dsJe34S7XqONnXzTSlFrPEIyMzhNuEiiRdtaPCvFzKd7F5RB f+rdwiuhbKOB/fcLC+YhsRDpX3IqbpO1kScskwapOQ3a07SK+dR3o6HfDMFwPNmp KjRgIYzOJccuZeneOIk42MMkIBiOTzdY7hlcRrC7j6HFzsGL56KMVVBGSZs1UYMT WkgiW1j2XXwsiW8WbCCLShWc6XbVlOojbkkXln2/2Ip0+U7dMODrY1uNjSPLour2 IoY3JoNVa+FrrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:42 2025 by rpki-client