This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json) Hash identifier: 1oAAKeHHlzy6J6n+pzEYIQX0AxdmSzBVEHgwwpdaSEE= Subject key identifier: F5:7B:9A:86:7F:C1:1C:3C:A9:5A:B8:D5:87:7B:C0:A4:7B:7D:AC:80 Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Certificate serial: 019AF1D184437557BF5521B48462A54C95B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft Manifest number: 0EBE Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: OFSYsbqEiHZCyB7Qmh4K/0wgPGc2EgL6QQeyoLBEqb4=) 2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=) 3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:43:75:57:bf:55:21:b4:84:62:a5:4c:95:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=f57b9a867fc11c3ca95ab8d5877bc0a47b7dac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:a1:09:25:9e:3a:84:78:db:71:d4:77:ec: 9b:c5:45:12:29:d8:f3:da:10:b7:8c:a8:26:33:8d: 12:2a:3e:bc:53:dd:69:0c:3a:0d:a3:69:9d:15:97: 39:2d:9f:9a:9b:3f:e7:16:52:7c:a2:95:aa:4f:f2: 44:10:68:2d:92:08:63:f3:19:df:1e:f4:a3:61:9e: b3:3d:36:4e:10:42:6b:6a:86:09:d9:13:ed:6b:dd: 34:67:91:5a:01:a4:6a:67:a5:47:ba:1e:8b:a6:ab: be:ed:3a:fc:1b:b3:98:ec:3a:bb:7b:31:dc:2d:e4: 90:9b:b8:07:a8:16:0f:87:a4:6f:d9:fa:fb:64:5f: b8:52:56:f6:92:68:e1:fc:05:1e:8c:7a:76:fb:9c: 50:7d:90:53:a8:70:08:e9:5f:87:f3:09:47:bf:8d: 11:4a:e5:77:09:c7:47:40:7f:50:95:12:63:68:00: d5:11:e9:8e:2f:dd:27:1e:09:b0:41:4d:d5:15:9a: 5e:07:a6:b4:76:d5:0d:5d:a7:0f:4e:53:d2:f4:0e: 74:eb:9b:54:35:90:5e:ed:34:a8:7a:f2:6f:c8:88: dd:1d:cd:e6:37:5a:88:bf:03:39:f7:c4:b8:ca:13: fa:31:b3:e7:fd:87:c5:64:48:14:92:93:ef:7b:64: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7B:9A:86:7F:C1:1C:3C:A9:5A:B8:D5:87:7B:C0:A4:7B:7D:AC:80 X509v3 Authority Key Identifier: keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c3:20:40:19:de:b0:a1:cb:10:60:35:46:26:f0:46:19:b5: d5:a7:a6:96:5a:d6:b9:58:09:62:82:ff:b1:7a:e9:3d:a3:b4: a4:4a:c8:7d:16:c2:ed:06:2c:a6:ea:30:ad:df:af:04:bf:4e: 09:b9:e3:f6:00:c0:44:2c:ab:a4:68:2b:aa:52:a9:90:7f:56: 15:63:c2:bc:6a:84:db:12:eb:89:3f:86:59:59:9a:10:69:6e: db:84:09:59:9c:f2:18:4d:b1:c5:d1:60:00:e5:5d:81:cd:63: 6f:0d:11:96:35:27:47:f9:69:f5:11:5b:d7:1a:19:09:81:97: f8:53:6c:d3:95:5f:ca:76:ec:24:a4:88:c1:2e:ce:20:39:22: a0:26:9e:9c:0d:d8:70:a9:12:76:3d:b4:dc:6a:67:c0:97:17: c9:8a:9c:c1:48:83:b1:fb:de:f1:c5:57:aa:b9:35:3c:cd:4a: f0:30:ed:0c:e5:43:ce:96:ae:41:04:6b:50:55:b4:93:81:76: 10:0f:4a:9e:83:6c:cf:86:75:21:e3:96:3c:ba:0f:d1:94:e1: 02:df:3d:3a:b1:f2:c6:92:67:92:74:fa:7e:21:4f:79:8e:11: ca:17:03:8d:f7:14:f2:2e:cb:aa:5b:de:13:05:78:8e:e2:ac: 6c:ab:41:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YRDdVe/VSG0hGKlTJWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk ZTgxODkwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhmNTdiOWE4NjdmYzExYzNjYTk1YWI4ZDU4NzdiYzBhNDdiN2RhYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzChCSWeOoR423HUd+ybxUUSKdjz 2hC3jKgmM40SKj68U91pDDoNo2mdFZc5LZ+amz/nFlJ8opWqT/JEEGgtkghj8xnf HvSjYZ6zPTZOEEJraoYJ2RPta900Z5FaAaRqZ6VHuh6Lpqu+7Tr8G7OY7Dq7ezHc LeSQm7gHqBYPh6Rv2fr7ZF+4Ulb2kmjh/AUejHp2+5xQfZBTqHAI6V+H8wlHv40R SuV3CcdHQH9QlRJjaADVEemOL90nHgmwQU3VFZpeB6a0dtUNXacPTlPS9A5065tU NZBe7TSoevJvyIjdHc3mN1qIvwM598S4yhP6MbPn/YfFZEgUkpPve2SqyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPV7moZ/wRw8qVq41Yd7wKR7fayAMB8GA1UdIwQY MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMMgQBne sKHLEGA1RibwRhm11aemllrWuVgJYoL/sXrpPaO0pErIfRbC7QYspuowrd+vBL9O Cbnj9gDARCyrpGgrqlKpkH9WFWPCvGqE2xLriT+GWVmaEGlu24QJWZzyGE2xxdFg AOVdgc1jbw0RljUnR/lp9RFb1xoZCYGX+FNs05VfynbsJKSIwS7OIDkioCaenA3Y cKkSdj203GpnwJcXyYqcwUiDsfve8cVXqrk1PM1K8DDtDOVDzpauQQRrUFW0k4F2 EA9KnoNsz4Z1IeOWPLoP0ZThAt89OrHyxpJnknT6fiFPeY4RyhcDjfcU8i7Lqlve EwV4juKsbKtBbA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:30 2025 by rpki-client