This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json) Hash identifier: Lbn2anabDCiRxy3gnwkipC/5WzlEzwdsteXr7dZkRf4= Subject key identifier: DF:8B:F7:FC:98:CA:DD:E4:4C:15:15:87:77:92:6A:7A:88:AE:77:D3 Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Certificate serial: 019AF08856EC2A0E2D8EE43304491951812D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft Manifest number: 0A1A Signing time: Fri 05 Dec 2025 22:00:58 +0000 Manifest this update: Fri 05 Dec 2025 22:00:58 +0000 Manifest next update: Sat 06 Dec 2025 22:00:58 +0000 Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: 86of69rB5tbOoX4D7TWg16qs5BqDJzX3hEbAi7KE0ZA=) 2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:56:ec:2a:0e:2d:8e:e4:33:04:49:19:51:81:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Validity Not Before: Dec 5 22:00:58 2025 GMT Not After : Dec 6 22:00:58 2025 GMT Subject: CN=df8bf7fc98cadde44c15158777926a7a88ae77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:84:b3:19:43:c8:39:c8:29:c4:bd:4b:d6: da:d6:0d:f7:fb:0d:48:1d:a7:69:17:c1:c3:57:c3: 82:30:39:7d:a6:07:dd:1b:af:e0:03:f8:bb:b9:40: 19:2d:45:4e:76:07:aa:54:7b:00:dc:23:f5:4e:dc: bc:db:f5:d4:54:9e:c5:4c:a7:b6:40:42:ea:24:ff: 21:29:22:29:30:7f:f7:51:4e:55:f5:82:f0:ef:b6: 04:39:68:42:54:dd:b9:b1:2a:ab:65:f6:c1:e5:f3: 42:82:d7:a8:41:6a:ca:72:1b:17:a6:2e:03:17:f6: 96:5b:1c:db:b1:17:d4:22:e4:06:5f:15:42:b6:22: e6:ad:c2:7c:48:5e:bb:6f:5e:89:d0:6a:35:ee:e4: 62:41:e6:60:fb:d0:a0:c7:45:9e:99:4d:b5:b7:28: e1:a3:60:6d:38:af:b7:f1:a2:32:40:25:20:69:91: e0:08:fd:b1:e5:31:95:90:76:7f:22:dd:a3:5a:2f: 0d:e1:c9:62:f5:44:c0:16:c4:ca:ff:c0:69:27:5b: 48:b4:b1:a7:f8:6f:d8:f6:21:0e:47:a9:31:e5:ea: 76:13:da:dc:b3:a8:4f:1c:2b:b8:b2:d7:33:14:10: 68:40:4a:a7:46:c7:ad:1b:4d:77:d0:ef:a8:09:ff: 47:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:F7:FC:98:CA:DD:E4:4C:15:15:87:77:92:6A:7A:88:AE:77:D3 X509v3 Authority Key Identifier: keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:75:73:d5:9f:00:96:fe:ed:b6:22:62:12:9d:90:88:31: 4c:3f:a0:2d:a2:29:6c:90:c7:48:3d:ed:4a:28:60:3c:42:13: 65:d8:3e:26:45:96:98:3c:33:b3:5a:02:03:37:ab:ef:2e:97: 30:54:c5:94:7c:f1:a4:5f:18:1d:e1:a4:80:91:ad:67:88:1f: df:1e:0f:1e:e4:16:72:8d:6c:7c:37:2e:e6:ac:c4:0e:4e:cc: c5:7a:10:10:04:25:d7:e1:da:14:c2:bd:31:f9:1f:c4:ee:19: 58:29:89:77:d4:36:62:ac:35:7d:1a:18:c0:3e:30:3c:a9:92: 04:4d:48:35:d2:18:ac:f3:53:a8:53:1f:4e:33:28:93:97:ce: 52:cb:23:2c:6c:89:ee:e0:6d:e0:b6:84:37:5d:90:d5:84:90: d9:7c:75:17:54:dc:8c:82:a7:f2:24:68:eb:5e:63:90:24:81: 3a:0d:1d:84:8b:d2:dd:b1:56:3e:39:f9:e7:44:c1:58:4e:b6: 4c:ac:85:75:5a:ba:f3:7f:3e:0c:00:13:67:57:25:c6:e2:3c: c5:e5:57:6e:ed:1f:1a:72:ea:9e:83:3f:a9:8e:88:5a:7c:b2: cb:30:de:2b:ae:b3:15:a7:76:24:89:44:99:cd:86:60:9e:1c: db:26:37:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFbsKg4tjuQzBEkZUYEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmJkOWRlOGQ4OTUyNmM1YTQ5YTc2NmMxZjQ4NWYwOWY1 YTkxNjYwHhcNMjUxMjA1MjIwMDU4WhcNMjUxMjA2MjIwMDU4WjAzMTEwLwYDVQQD EyhkZjhiZjdmYzk4Y2FkZGU0NGMxNTE1ODc3NzkyNmE3YTg4YWU3N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt+EsxlDyDnIKcS9S9ba1g33+w1I HadpF8HDV8OCMDl9pgfdG6/gA/i7uUAZLUVOdgeqVHsA3CP1Tty82/XUVJ7FTKe2 QELqJP8hKSIpMH/3UU5V9YLw77YEOWhCVN25sSqrZfbB5fNCgteoQWrKchsXpi4D F/aWWxzbsRfUIuQGXxVCtiLmrcJ8SF67b16J0Go17uRiQeZg+9Cgx0WemU21tyjh o2BtOK+38aIyQCUgaZHgCP2x5TGVkHZ/It2jWi8N4cli9UTAFsTK/8BpJ1tItLGn +G/Y9iEOR6kx5ep2E9rcs6hPHCu4stczFBBoQEqnRsetG0130O+oCf9H4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+L9/yYyt3kTBUVh3eSanqIrnfTMB8GA1UdIwQY MBaAFC/72d6NiVJsWkmnZsH0hfCfWpFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUt MWZjMWU3M2YwNjA3LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUtMWZjMWU3M2YwNjA3 LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDV1c9Wf AJb+7bYiYhKdkIgxTD+gLaIpbJDHSD3tSihgPEITZdg+JkWWmDwzs1oCAzer7y6X MFTFlHzxpF8YHeGkgJGtZ4gf3x4PHuQWco1sfDcu5qzEDk7MxXoQEAQl1+HaFMK9 MfkfxO4ZWCmJd9Q2Yqw1fRoYwD4wPKmSBE1INdIYrPNTqFMfTjMok5fOUssjLGyJ 7uBt4LaEN12Q1YSQ2Xx1F1TcjIKn8iRo615jkCSBOg0dhIvS3bFWPjn550TBWE62 TKyFdVq6838+DAATZ1clxuI8xeVXbu0fGnLqnoM/qY6IWnyyyzDeK66zFad2JIlE mc2GYJ4c2yY3Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:14 2025 by rpki-client