This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft File: L761tTgJwKseTgF9tL9QeIFa5mo.mft (raw, json) Hash identifier: UmPYKtBL19/XjaLpCgEAWQkrYMj9w4dobHdj9OST6tE= Subject key identifier: 59:62:19:2D:6A:64:C2:6C:E9:E2:5D:56:08:74:1B:29:80:9F:FF:98 Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A Certificate issuer: /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Certificate serial: 019AF42E3A3D844A37CE9E3D6A75C2BCEC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 15:01:01 +0000 Manifest this update: Sat 06 Dec 2025 15:01:01 +0000 Manifest next update: Sun 07 Dec 2025 15:01:01 +0000 Files and hashes: 1: L761tTgJwKseTgF9tL9QeIFa5mo.crl (hash: AY5b8M+GoJrPsbss4Spux0yzG0wgoSrqxQEutkusW2w=) 2: bi2rgr1mwihMTviNCzdJhqMEHIE.roa (hash: 9YBEOHgs2y2rTJyOfEqp4CwAwfBA0dewuMGVkGf2YyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3a:3d:84:4a:37:ce:9e:3d:6a:75:c2:bc:ec:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Validity Not Before: Dec 6 15:01:01 2025 GMT Not After : Dec 7 15:01:01 2025 GMT Subject: CN=5962192d6a64c26ce9e25d5608741b29809fff98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:d4:99:0a:52:ee:fe:2b:e4:af:d4:3c:9f: 19:dd:07:a6:40:d6:e0:13:ad:7b:1b:8a:fa:fb:59: 90:8d:c3:60:26:92:82:2e:00:7c:40:5e:b6:fd:18: fd:b0:9f:f7:ef:1f:6b:ae:2a:38:eb:ed:e0:b1:5a: a6:9d:ee:36:88:22:e3:45:57:29:57:0b:fe:5c:bf: a5:cc:43:a7:9a:7f:21:9a:38:09:a0:25:30:c6:1d: c2:90:40:19:f5:79:11:ba:c1:e8:b4:29:92:c3:84: 34:7b:61:07:35:5a:b8:f6:17:30:8e:a5:4e:58:27: e8:79:24:6d:b7:07:e1:18:53:89:43:fd:40:45:42: b8:f3:5e:bb:4f:7b:14:e9:27:d1:88:9d:2c:2a:56: 12:f7:cd:bc:a2:d6:01:e1:18:33:43:f2:cd:d1:a6: d0:28:49:f2:26:34:84:3e:01:c3:f1:f5:c5:11:ea: 8b:4c:38:b2:19:c9:a6:54:b0:2e:12:0b:e0:3b:50: e6:c7:d1:62:6c:e5:51:1b:00:27:4d:0b:74:81:29: 9a:f4:1a:0e:f5:b1:fa:42:1e:43:6b:8b:33:4f:0e: db:c9:fe:7f:f3:8e:5b:99:0e:66:f3:0f:32:12:f5: 19:bc:e7:7c:16:a0:fb:c5:4d:46:73:7a:70:c5:32: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:62:19:2D:6A:64:C2:6C:E9:E2:5D:56:08:74:1B:29:80:9F:FF:98 X509v3 Authority Key Identifier: keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c0:36:8c:d1:ef:cd:4c:88:03:b2:2b:b9:18:45:4d:d6:b5: dd:b4:1b:cc:60:3e:7d:0c:a9:b1:8e:0d:e0:4f:b1:4c:56:16: 0b:5c:9c:d5:9f:de:77:ff:c8:0d:b3:81:75:7e:de:8b:78:5a: d9:0d:d0:f7:c1:ab:79:19:c4:4b:8e:ec:46:d0:b4:b7:52:2e: 4a:55:87:fc:12:a4:54:ed:3e:4d:f0:7f:a5:b6:2a:03:a9:db: 31:10:85:e9:ed:a9:a7:68:84:77:ca:07:7e:5b:84:0f:76:7a: ec:e4:e5:2a:3d:e9:44:53:26:3c:30:ce:b0:fb:7b:f9:b0:a3: bd:18:1c:af:3b:94:82:16:f9:45:e0:95:03:6e:4a:31:a5:6a: fa:29:d7:5e:dd:b1:5c:18:51:a1:58:bd:99:f7:ff:5f:58:13: 5e:b5:4b:c1:59:1e:0c:77:ff:08:4a:02:43:c7:f8:21:d6:27: 74:81:8c:df:d6:8c:3d:c6:f6:8a:23:43:12:71:32:02:30:87: d2:69:68:81:54:42:14:6c:73:81:fe:b3:09:4d:77:4d:07:ed: 21:c2:92:82:d6:2d:96:1c:c9:ea:73:82:ec:97:22:7c:64:7d: 6c:9c:3f:ae:d0:70:81:e9:e8:27:c2:0e:40:4e:75:51:df:1a: 41:d6:00:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ljo9hEo3zp49anXCvOxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmViNWI1MzgwOWMwYWIxZTRlMDE3ZGI0YmY1MDc4ODE1 YWU2NmEwHhcNMjUxMjA2MTUwMTAxWhcNMjUxMjA3MTUwMTAxWjAzMTEwLwYDVQQD Eyg1OTYyMTkyZDZhNjRjMjZjZTllMjVkNTYwODc0MWIyOTgwOWZmZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl3UmQpS7v4r5K/UPJ8Z3QemQNbg E617G4r6+1mQjcNgJpKCLgB8QF62/Rj9sJ/37x9rrio46+3gsVqmne42iCLjRVcp Vwv+XL+lzEOnmn8hmjgJoCUwxh3CkEAZ9XkRusHotCmSw4Q0e2EHNVq49hcwjqVO WCfoeSRttwfhGFOJQ/1ARUK48167T3sU6SfRiJ0sKlYS9828otYB4RgzQ/LN0abQ KEnyJjSEPgHD8fXFEeqLTDiyGcmmVLAuEgvgO1Dmx9FibOVRGwAnTQt0gSma9BoO 9bH6Qh5Da4szTw7byf5/845bmQ5m8w8yEvUZvOd8FqD7xU1Gc3pwxTKD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFliGS1qZMJs6eJdVgh0GymAn/+YMB8GA1UdIwQY MBaAFC++tbU4CcCrHk4BfbS/UHiBWuZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMt ODcwMDA3ODU1MmEzLzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMtODcwMDA3ODU1MmEz LzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8A2jNHv zUyIA7IruRhFTda13bQbzGA+fQypsY4N4E+xTFYWC1yc1Z/ed//IDbOBdX7ei3ha 2Q3Q98GreRnES47sRtC0t1IuSlWH/BKkVO0+TfB/pbYqA6nbMRCF6e2pp2iEd8oH fluED3Z67OTlKj3pRFMmPDDOsPt7+bCjvRgcrzuUghb5ReCVA25KMaVq+inXXt2x XBhRoVi9mff/X1gTXrVLwVkeDHf/CEoCQ8f4IdYndIGM39aMPcb2iiNDEnEyAjCH 0mlogVRCFGxzgf6zCU13TQftIcKSgtYtlhzJ6nOC7JcifGR9bJw/rtBwgenoJ8IO QE51Ud8aQdYAkQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:51 2025 by rpki-client