This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft File: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft (raw, json) Hash identifier: CPE1O4hZNwJlIRKrDAaUqFopi//378aeeM3ITSHHD9w= Subject key identifier: 1A:16:1E:CF:C7:37:C5:36:9E:12:8F:9C:86:1D:03:46:A0:A0:CE:5F Authority key identifier: DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62 Certificate issuer: /CN=da5f25e8950f69e2d75b93b92f5404199e044762 Certificate serial: 019AF240274F35412C0BF22BB68BED68B3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft Manifest number: 44 Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl (hash: jwWUpwP1qsW1xktXOeegkvXzPnELDYnMml7GTlglwJQ=) 2: MGGeam7llhDq2FLJ6zvvA80CGko.roa (hash: YxemhPkHhbnVR4JIFpydLIzQBu/u0QukoPhhWFPkjhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:27:4f:35:41:2c:0b:f2:2b:b6:8b:ed:68:b3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5f25e8950f69e2d75b93b92f5404199e044762 Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=1a161ecfc737c5369e128f9c861d0346a0a0ce5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:a4:af:ae:ab:b7:3c:8b:77:72:1f:15:f2: 09:15:de:64:f2:85:3b:f4:d6:43:b8:c4:be:a5:f5: fe:4f:89:df:aa:4b:7f:a9:d1:ab:3c:d8:0f:7d:b1: 7a:94:41:81:7a:33:a0:f5:94:7c:43:c0:40:dc:ad: 78:48:86:dd:85:fd:17:fc:82:29:db:62:67:d1:f1: 40:3b:e2:d9:79:3c:0c:d6:0b:9b:81:98:3e:4a:5e: 7d:8f:c9:2d:76:23:7a:ad:a1:e5:23:b0:f2:2d:17: b2:36:3f:0c:f2:71:25:e9:90:88:a2:8e:02:39:44: 6c:f4:2e:30:c5:14:38:21:9a:74:2f:ee:2e:f7:06: 95:29:00:c4:7a:32:b4:e3:06:2a:dc:c4:8d:cd:2e: 4b:8c:76:41:cd:75:d3:53:45:8c:cb:fe:26:fa:06: 2d:c4:3e:2a:d3:9c:61:e0:fd:d3:b3:64:c5:3a:d5: bc:e5:bd:dd:1c:83:0c:04:84:e8:22:35:3e:f0:80: dd:9d:80:d9:d0:75:92:8f:61:0b:5f:2c:a7:59:da: 1d:45:2a:cb:8f:83:85:d5:16:6c:2b:f5:73:98:30: 6e:c6:73:97:db:dc:de:5a:db:04:4a:89:9a:ba:d4: d0:e5:b3:c9:dd:0d:99:c8:8f:3a:c3:24:31:4c:01: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:16:1E:CF:C7:37:C5:36:9E:12:8F:9C:86:1D:03:46:A0:A0:CE:5F X509v3 Authority Key Identifier: keyid:DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:34:5f:0e:3c:0d:8b:e8:3b:4c:e9:22:d4:65:94:41:53:27: 2e:0d:15:56:00:90:25:54:de:69:58:e5:7f:14:b7:6f:db:5c: d9:bf:9f:16:68:29:f0:70:16:64:8e:a8:1b:02:51:d4:b5:ea: a0:4b:91:69:e9:a5:94:25:0c:95:24:5c:f4:7e:31:23:98:97: ff:9b:aa:89:dc:dd:dd:92:cf:1a:23:c6:79:7b:b5:7c:f8:1c: 02:b4:65:34:d1:c9:a4:38:04:b0:d9:35:11:89:69:07:ff:30: a2:1a:42:7f:fd:47:5a:e1:c4:e0:60:e6:14:ec:dd:75:8c:41: 06:63:cf:96:c9:a2:13:a9:72:ed:ed:f3:e5:fc:84:40:db:90: ae:33:16:26:28:c8:82:af:9f:dd:0c:73:32:b8:3d:e6:f4:ad: fe:74:6e:53:3a:e1:49:35:77:14:66:33:70:23:29:60:fe:dc: f4:ef:60:52:48:76:99:3a:dc:08:5e:84:20:90:2a:be:82:10: 01:4e:1c:0e:7c:d9:f7:fb:aa:35:ca:5e:02:95:2a:3c:ac:0a: 1d:4a:5d:ba:cb:7a:dd:cf:ab:04:9f:1e:7f:05:3c:9b:52:23: 09:96:1d:28:ca:53:dd:2d:08:41:58:22:49:85:1d:34:78:9d: 6e:46:48:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCdPNUEsC/IrtovtaLOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNWYyNWU4OTUwZjY5ZTJkNzViOTNiOTJmNTQwNDE5OWUw NDQ3NjIwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD EygxYTE2MWVjZmM3MzdjNTM2OWUxMjhmOWM4NjFkMDM0NmEwYTBjZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M+kr66rtzyLd3IfFfIJFd5k8oU7 9NZDuMS+pfX+T4nfqkt/qdGrPNgPfbF6lEGBejOg9ZR8Q8BA3K14SIbdhf0X/IIp 22Jn0fFAO+LZeTwM1gubgZg+Sl59j8ktdiN6raHlI7DyLReyNj8M8nEl6ZCIoo4C OURs9C4wxRQ4IZp0L+4u9waVKQDEejK04wYq3MSNzS5LjHZBzXXTU0WMy/4m+gYt xD4q05xh4P3Ts2TFOtW85b3dHIMMBIToIjU+8IDdnYDZ0HWSj2ELXyynWdodRSrL j4OF1RZsK/VzmDBuxnOX29zeWtsESomautTQ5bPJ3Q2ZyI86wyQxTAGP1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoWHs/HN8U2nhKPnIYdA0agoM5fMB8GA1UdIwQY MBaAFNpfJeiVD2ni11uTuS9UBBmeBEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzkt ZTJhYmM2MzEwMGJiLzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzktZTJhYmM2MzEwMGJi LzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjRfDjwN i+g7TOki1GWUQVMnLg0VVgCQJVTeaVjlfxS3b9tc2b+fFmgp8HAWZI6oGwJR1LXq oEuRaemllCUMlSRc9H4xI5iX/5uqidzd3ZLPGiPGeXu1fPgcArRlNNHJpDgEsNk1 EYlpB/8wohpCf/1HWuHE4GDmFOzddYxBBmPPlsmiE6ly7e3z5fyEQNuQrjMWJijI gq+f3QxzMrg95vSt/nRuUzrhSTV3FGYzcCMpYP7c9O9gUkh2mTrcCF6EIJAqvoIQ AU4cDnzZ9/uqNcpeApUqPKwKHUpdust63c+rBJ8efwU8m1IjCZYdKMpT3S0IQVgi SYUdNHidbkZIOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:44 2025 by rpki-client