This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json) Hash identifier: fRrBjwwFQIBeJglNJM8slp8zXfkHsNfLTBMEJb4sQIU= Subject key identifier: 8D:21:76:38:17:27:3A:9B:BD:6F:D5:CC:91:11:BE:29:C8:B3:DF:98 Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d Certificate serial: 019B21E331CB1D077396E40A97AED544728B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft Manifest number: 0DD5 Signing time: Mon 15 Dec 2025 12:01:36 +0000 Manifest this update: Mon 15 Dec 2025 12:01:36 +0000 Manifest next update: Tue 16 Dec 2025 12:01:36 +0000 Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: PrMN4hAwPR9Xj9SVGkX+xlSCYHM0ZY92+I3m2koJ8mw=) 2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:31:cb:1d:07:73:96:e4:0a:97:ae:d5:44:72:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d Validity Not Before: Dec 15 12:01:36 2025 GMT Not After : Dec 16 12:01:36 2025 GMT Subject: CN=8d21763817273a9bbd6fd5cc9111be29c8b3df98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:17:8e:dd:56:37:8c:e1:57:ef:1b:69:59: ec:35:06:c5:65:3b:ea:6d:56:30:f7:e7:7b:59:35: 9f:76:7d:64:93:cf:33:59:a9:eb:95:27:7f:18:45: 99:f8:12:04:09:3c:38:a8:b5:d5:a1:80:49:85:da: 8d:ab:58:c9:37:da:c7:f1:66:d9:59:6c:dc:63:1a: 89:7c:e2:af:55:41:04:37:6b:df:22:24:06:ef:25: 0c:3c:21:7c:d2:d1:c7:28:14:ac:e3:1a:b7:3c:91: a6:eb:7c:b9:49:c0:03:f1:d4:13:69:c8:26:2d:1a: fe:5a:79:55:a2:bc:84:0a:36:06:86:3a:5d:4d:34: 44:4c:7a:cc:6f:4b:7f:91:ca:d7:61:14:c5:3c:7b: 27:60:8f:e4:2b:81:e6:54:12:23:6f:0a:7e:60:9b: ac:cd:ca:7c:79:5b:51:d1:a5:49:e0:1e:e8:20:ff: 9d:5a:de:3a:54:23:55:43:90:da:b7:35:10:47:37: 5b:8e:b5:9d:67:26:31:14:69:8f:81:04:af:ec:d5: e9:4f:5e:ed:96:c0:da:12:4b:04:a0:a1:d1:c5:71: 92:45:39:cf:ec:f1:88:5d:de:fe:0e:aa:db:eb:90: 80:6e:b4:dc:02:de:04:0c:fe:73:d3:44:78:ac:61: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:21:76:38:17:27:3A:9B:BD:6F:D5:CC:91:11:BE:29:C8:B3:DF:98 X509v3 Authority Key Identifier: keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e2:d8:c8:74:d0:8d:6f:82:21:2e:10:b7:48:a9:1d:7f:51: ab:df:df:a7:41:9b:cb:f9:29:2a:a3:f0:4c:31:f9:57:e0:97: e6:0f:38:6c:ef:98:36:e6:24:c7:49:bc:af:5e:ea:61:02:df: f5:3a:14:1c:9b:db:d9:d4:df:f3:da:d9:d8:e7:3e:99:2b:42: 63:0a:00:2c:25:6a:c6:c4:a1:9f:57:6a:a2:0e:cc:31:9e:3c: 7d:c1:f5:af:51:a6:87:a6:81:e1:9c:b7:ca:73:5c:fb:22:c9: e9:e7:0e:20:b0:72:2b:4e:32:cc:12:c4:85:46:17:02:6c:68: f8:e0:b7:a3:57:32:ef:a9:62:52:af:3d:c9:fb:dd:11:b2:22: ea:cc:26:7d:40:cc:e8:e7:15:43:72:37:77:3c:7b:37:e8:7a: a1:f5:0d:9a:1b:ff:8e:4c:f5:55:42:b8:ce:fd:55:ca:0e:cc: ca:aa:d6:0a:5c:63:c3:5a:38:16:16:52:c8:cf:e2:a6:ee:07: 8e:c4:04:f9:a5:07:de:fd:9f:8c:41:f6:f5:d7:57:7f:48:73: 4d:f3:e6:0b:fd:a8:98:67:e7:d1:6f:70:b4:b4:a2:09:03:0a: f0:4c:3e:7b:cd:10:57:5c:9a:43:4b:ca:9d:5d:58:1d:af:ca: b3:68:68:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4zHLHQdzluQKl67VRHKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQzYzdlOWM3N2Y5YTg4OTQ5MDU2NTBkN2Y1YTQzOWEw NzI2NWQwHhcNMjUxMjE1MTIwMTM2WhcNMjUxMjE2MTIwMTM2WjAzMTEwLwYDVQQD Eyg4ZDIxNzYzODE3MjczYTliYmQ2ZmQ1Y2M5MTExYmUyOWM4YjNkZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux0Xjt1WN4zhV+8baVnsNQbFZTvq bVYw9+d7WTWfdn1kk88zWanrlSd/GEWZ+BIECTw4qLXVoYBJhdqNq1jJN9rH8WbZ WWzcYxqJfOKvVUEEN2vfIiQG7yUMPCF80tHHKBSs4xq3PJGm63y5ScAD8dQTacgm LRr+WnlVoryECjYGhjpdTTRETHrMb0t/kcrXYRTFPHsnYI/kK4HmVBIjbwp+YJus zcp8eVtR0aVJ4B7oIP+dWt46VCNVQ5DatzUQRzdbjrWdZyYxFGmPgQSv7NXpT17t lsDaEksEoKHRxXGSRTnP7PGIXd7+Dqrb65CAbrTcAt4EDP5z00R4rGE7bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0hdjgXJzqbvW/VzJERvinIs9+YMB8GA1UdIwQY MBaAFC+9PH6cd/moiUkFZQ1/WkOaByZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYt NWRjYmJkZTM1ZGNkLzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYtNWRjYmJkZTM1ZGNk LzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+LYyHTQ jW+CIS4Qt0ipHX9Rq9/fp0Gby/kpKqPwTDH5V+CX5g84bO+YNuYkx0m8r17qYQLf 9ToUHJvb2dTf89rZ2Oc+mStCYwoALCVqxsShn1dqog7MMZ48fcH1r1Gmh6aB4Zy3 ynNc+yLJ6ecOILByK04yzBLEhUYXAmxo+OC3o1cy76liUq89yfvdEbIi6swmfUDM 6OcVQ3I3dzx7N+h6ofUNmhv/jkz1VUK4zv1Vyg7MyqrWClxjw1o4FhZSyM/ipu4H jsQE+aUH3v2fjEH29ddXf0hzTfPmC/2omGfn0W9wtLSiCQMK8Ew+e80QV1yaQ0vK nV1YHa/Ks2hoFg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:14:26 2025 by rpki-client