This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json) Hash identifier: ZCrOtbB03ekVAHlbKHE3OPviu34D46/vJnXMCYPA/Og= Subject key identifier: 4F:73:30:13:7D:DB:9D:6F:A9:B5:BE:75:E3:C2:55:2F:37:E6:6A:6A Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Certificate serial: 019AF12D7C8421508BABDE6AE02BE629ED43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: XtluKp/YqLxt+9UxpW59y/+zWRtHxQZOSYP2Xk9zfdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7c:84:21:50:8b:ab:de:6a:e0:2b:e6:29:ed:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=4f7330137ddb9d6fa9b5be75e3c2552f37e66a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:8d:26:df:91:0e:99:06:1e:61:d5:66:e5: bb:0a:fb:ef:9d:dc:cc:3e:a1:49:4a:a3:62:c9:69: c0:f9:6d:50:ba:93:96:18:9f:39:0e:41:75:84:c4: b6:e4:eb:a7:16:1c:5a:39:38:0c:87:6e:3c:9a:b8: 6f:42:0d:dc:02:c8:6c:06:8c:49:e3:ba:2b:4f:3e: 83:81:12:8c:14:e1:c4:96:a4:8e:92:9f:13:18:f5: da:c5:4d:7e:7f:e4:af:ed:38:d4:13:17:f4:4c:cc: b5:42:32:e9:f5:8f:5f:16:a1:2f:f1:eb:d7:72:34: ef:95:4d:98:1e:54:94:d5:bc:d9:22:62:4e:35:ea: d1:0b:61:94:36:45:16:e7:38:db:9d:12:01:8b:61: 75:2e:dc:37:5f:25:f3:20:65:53:9b:02:08:0f:a5: 02:ef:ac:f1:32:d5:52:f6:b3:ce:b1:c1:0f:b3:82: 7a:d9:52:84:4e:08:a4:a1:cb:77:d0:2b:ba:aa:1e: 22:d7:5f:c0:f8:fd:45:28:cb:a1:b0:82:bb:2d:2d: 4f:07:c5:21:74:20:16:1e:72:1d:24:4b:0e:cb:71: 42:67:40:f4:6c:46:4f:53:d3:1e:44:3d:fd:2c:01: ab:67:1a:8f:33:15:a8:2d:b3:43:6b:20:7e:00:c1: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:30:13:7D:DB:9D:6F:A9:B5:BE:75:E3:C2:55:2F:37:E6:6A:6A X509v3 Authority Key Identifier: keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ac:ac:69:89:56:ad:fb:dc:0d:a6:1c:7a:e9:98:d4:c4:bb: 47:b9:2d:20:fe:e5:35:58:db:e8:b9:c0:52:05:92:38:f0:54: cd:8e:bc:74:9d:83:eb:7c:77:92:3b:a4:65:04:87:6a:45:73: e5:da:6b:e6:e9:70:4b:b5:45:51:76:b3:f0:bf:80:ec:6f:39: 0d:3e:ae:0f:c1:ca:fe:6d:25:2f:f7:ad:af:f3:b7:e0:f0:25: f9:72:17:5f:4e:70:8e:8a:13:b2:cb:e6:cf:bd:06:4a:07:5f: 8f:a4:c6:78:b6:9a:15:24:1d:7b:50:0c:d3:7b:1a:81:73:54: d0:ae:63:9f:1f:64:c1:56:8d:23:8e:2f:f3:3b:bf:85:60:ca: d9:0f:8f:06:23:69:95:b5:11:8d:15:1c:9a:51:3b:35:27:b9: 63:b8:a2:3f:3f:1c:23:26:9c:2e:30:e9:26:b7:44:42:38:ec: 94:62:27:c8:28:6c:a6:e4:37:9d:b2:f0:66:23:42:ec:ad:94: 4a:4c:2c:5b:73:76:71:60:b8:ea:36:a4:20:d1:63:cd:a5:ce: dc:67:98:e7:e7:50:94:8c:3c:0f:3e:cc:5b:d1:e6:65:13:0c: c7:60:e7:39:50:c3:86:38:cd:bf:89:c4:99:56:c0:8f:69:d3: 55:b9:90:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXyEIVCLq95q4CvmKe1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm MGYxMjAwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD Eyg0ZjczMzAxMzdkZGI5ZDZmYTliNWJlNzVlM2MyNTUyZjM3ZTY2YTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBmNJt+RDpkGHmHVZuW7CvvvndzM PqFJSqNiyWnA+W1QupOWGJ85DkF1hMS25OunFhxaOTgMh248mrhvQg3cAshsBoxJ 47orTz6DgRKMFOHElqSOkp8TGPXaxU1+f+Sv7TjUExf0TMy1QjLp9Y9fFqEv8evX cjTvlU2YHlSU1bzZImJONerRC2GUNkUW5zjbnRIBi2F1Ltw3XyXzIGVTmwIID6UC 76zxMtVS9rPOscEPs4J62VKETgikoct30Cu6qh4i11/A+P1FKMuhsIK7LS1PB8Uh dCAWHnIdJEsOy3FCZ0D0bEZPU9MeRD39LAGrZxqPMxWoLbNDayB+AMEl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9zMBN9251vqbW+dePCVS835mpqMB8GA1UdIwQY MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1 LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqysaYlW rfvcDaYceumY1MS7R7ktIP7lNVjb6LnAUgWSOPBUzY68dJ2D63x3kjukZQSHakVz 5dpr5ulwS7VFUXaz8L+A7G85DT6uD8HK/m0lL/etr/O34PAl+XIXX05wjooTssvm z70GSgdfj6TGeLaaFSQde1AM03sagXNU0K5jnx9kwVaNI44v8zu/hWDK2Q+PBiNp lbURjRUcmlE7NSe5Y7iiPz8cIyacLjDpJrdEQjjslGInyChspuQ3nbLwZiNC7K2U SkwsW3N2cWC46jakINFjzaXO3GeY5+dQlIw8Dz7MW9HmZRMMx2DnOVDDhjjNv4nE mVbAj2nTVbmQKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:02 2025 by rpki-client