This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json) Hash identifier: K+a114hG6fQ+iej29yEAWou2/5NcjYPUbHEGgWP6nlY= Subject key identifier: A5:1E:E2:7B:E4:1E:02:DA:EF:30:86:9E:33:D6:98:DA:2F:50:15:F0 Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f Certificate serial: 019B311E9E57BBD24507EE7329A984683688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft Manifest number: 0473 Signing time: Thu 18 Dec 2025 11:00:48 +0000 Manifest this update: Thu 18 Dec 2025 11:00:48 +0000 Manifest next update: Fri 19 Dec 2025 11:00:48 +0000 Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: 31VUolrJzOQq6FRKMM28sG8TEGeUD0bIzPx5JO4mG0A=) 2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:9e:57:bb:d2:45:07:ee:73:29:a9:84:68:36:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f Validity Not Before: Dec 18 11:00:48 2025 GMT Not After : Dec 19 11:00:48 2025 GMT Subject: CN=a51ee27be41e02daef30869e33d698da2f5015f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:6c:94:95:40:14:d4:89:8a:79:3c:81:2a: 19:78:e2:49:0f:cb:92:c5:3a:9d:a0:0d:49:5b:63: 84:f0:35:f5:c9:56:7c:2e:a0:40:f2:91:2d:4c:f2: 01:dd:1c:24:46:b9:58:ee:dd:ef:b4:ce:d7:58:4b: fc:37:16:8d:6a:41:a0:d2:c7:2e:eb:f8:3e:44:37: c2:de:04:b2:95:c7:11:48:e5:6d:66:1e:88:1d:a8: 8a:a4:40:4f:d6:1a:79:09:f9:8a:6c:0d:da:11:18: 39:12:de:6e:60:68:9f:d7:92:c6:18:9c:ed:09:4e: ad:9a:a0:75:49:ba:68:6f:65:dc:8a:3f:39:6c:08: 97:38:d9:a7:cb:a0:3e:b9:2a:55:2d:84:8c:a2:9c: eb:0d:f7:12:23:40:e9:5e:fd:a2:f8:07:ab:3d:a4: ba:23:00:75:6f:18:16:58:1b:aa:22:61:78:8f:9c: 55:f1:1f:40:3e:e9:9a:37:f9:a3:d9:72:b7:39:60: 50:5b:49:77:b0:5f:b3:2e:96:28:0e:d8:e3:d8:ed: 61:56:1c:18:6d:c3:ce:04:bc:75:2d:2c:cc:04:76: 29:31:c6:38:f7:26:b4:b1:e8:a5:9e:9e:81:5a:21: 5a:1f:79:12:31:70:e3:c5:7d:1c:a1:4d:45:6c:84: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:E2:7B:E4:1E:02:DA:EF:30:86:9E:33:D6:98:DA:2F:50:15:F0 X509v3 Authority Key Identifier: keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:37:b5:cb:c0:63:03:ac:2e:f1:e8:f6:18:87:f2:c5:1c:b3: 9e:f2:e2:b2:9a:0c:36:d3:47:94:18:8b:00:e0:ac:ca:24:1f: 92:49:93:e9:b3:b3:40:9f:6d:62:27:32:ab:01:bf:58:16:79: 06:f3:9a:d8:f9:1f:fa:ec:62:5c:11:0c:93:07:b7:6e:94:3e: 80:15:99:7a:87:48:42:b9:12:ea:bd:32:c5:8f:02:47:27:7d: d4:b3:8b:2f:33:ae:7a:43:01:d5:16:a4:87:fa:90:09:67:05: 4c:22:91:98:d8:43:d6:24:cb:f2:78:0c:08:af:3b:1e:55:33: 31:5e:56:9c:5e:63:73:fc:30:e1:69:ea:6b:32:b9:ef:f0:89: 91:26:fc:65:3c:a9:1b:94:7e:db:bf:61:0d:10:70:c6:52:d3: 20:62:d7:f9:ae:e3:bd:cd:f5:98:17:e1:29:ed:2e:ce:b0:64: 7a:57:21:dd:31:8d:69:39:14:f6:2b:33:f7:51:12:c3:4e:4d: d6:a6:a8:37:86:64:fe:16:2f:1d:d1:e6:95:00:e5:b6:1b:bc: e9:7b:75:ca:58:47:44:02:83:a7:55:84:54:a6:ed:47:8b:65: b7:84:7c:95:2f:f1:df:76:0e:a6:cf:3a:8e:63:39:ef:f0:98: d0:25:98:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHp5Xu9JFB+5zKamEaDaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTA4Yjk3MGJjOGNiZDBlNDQ1M2M4OTZiZGI4MjJhYTcx Y2EyNmYwHhcNMjUxMjE4MTEwMDQ4WhcNMjUxMjE5MTEwMDQ4WjAzMTEwLwYDVQQD EyhhNTFlZTI3YmU0MWUwMmRhZWYzMDg2OWUzM2Q2OThkYTJmNTAxNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRslJVAFNSJink8gSoZeOJJD8uS xTqdoA1JW2OE8DX1yVZ8LqBA8pEtTPIB3RwkRrlY7t3vtM7XWEv8NxaNakGg0scu 6/g+RDfC3gSylccRSOVtZh6IHaiKpEBP1hp5CfmKbA3aERg5Et5uYGif15LGGJzt CU6tmqB1Sbpob2Xcij85bAiXONmny6A+uSpVLYSMopzrDfcSI0DpXv2i+AerPaS6 IwB1bxgWWBuqImF4j5xV8R9APumaN/mj2XK3OWBQW0l3sF+zLpYoDtjj2O1hVhwY bcPOBLx1LSzMBHYpMcY49ya0seilnp6BWiFaH3kSMXDjxX0coU1FbIR5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUe4nvkHgLa7zCGnjPWmNovUBXwMB8GA1UdIwQY MBaAFC+gi5cLyMvQ5EU8iWvbgiqnHKJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEt YTQ0ZGQ5NjZjZTUwLzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEtYTQ0ZGQ5NjZjZTUw LzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDe1y8Bj A6wu8ej2GIfyxRyznvLispoMNtNHlBiLAOCsyiQfkkmT6bOzQJ9tYicyqwG/WBZ5 BvOa2Pkf+uxiXBEMkwe3bpQ+gBWZeodIQrkS6r0yxY8CRyd91LOLLzOuekMB1Rak h/qQCWcFTCKRmNhD1iTL8ngMCK87HlUzMV5WnF5jc/ww4WnqazK57/CJkSb8ZTyp G5R+279hDRBwxlLTIGLX+a7jvc31mBfhKe0uzrBkelch3TGNaTkU9isz91ESw05N 1qaoN4Zk/hYvHdHmlQDlthu86Xt1ylhHRAKDp1WEVKbtR4tlt4R8lS/x33YOps86 jmM57/CY0CWYdQ== -----END CERTIFICATE-----Generated at Thu Dec 18 20:35:08 2025 by rpki-client