This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json) Hash identifier: UbS4wOSonlfNaRe6QTNVD5L1nBj4gHmAKLX00Wjt85Q= Subject key identifier: B2:24:83:02:90:0C:E1:C2:E8:A1:13:23:AC:07:FC:09:EE:F9:1C:1C Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Certificate serial: 019AF3C02E03B344B5873FDEF17007D182F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft Manifest number: 0810 Signing time: Sat 06 Dec 2025 13:00:49 +0000 Manifest this update: Sat 06 Dec 2025 13:00:49 +0000 Manifest next update: Sun 07 Dec 2025 13:00:49 +0000 Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: lDzhgYBp5Th/tvs5Buy+wRPvPa8ofPaOChyo7yG/ZC4=) 2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:2e:03:b3:44:b5:87:3f:de:f1:70:07:d1:82:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Validity Not Before: Dec 6 13:00:49 2025 GMT Not After : Dec 7 13:00:49 2025 GMT Subject: CN=b2248302900ce1c2e8a11323ac07fc09eef91c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:7c:84:a5:72:5e:b3:33:45:41:74:34:9c: 0f:40:16:06:34:1f:2d:0d:f0:92:63:2b:a9:c7:64: ec:ed:3a:40:5e:47:15:28:4a:97:6d:43:3c:6a:71: 15:58:90:c3:37:4b:8f:f4:67:fc:9a:07:1d:5e:7d: 84:60:4e:e8:f9:e1:4f:b3:13:bc:e9:17:e8:b8:47: 19:97:0b:04:1d:98:74:de:90:ca:61:79:9e:69:65: ec:b0:a8:08:85:21:01:c2:96:d6:70:42:a1:ec:1b: 0d:25:7e:0d:1d:8b:65:c2:21:03:3c:0d:d9:1f:b5: f8:20:1d:04:af:db:97:92:cf:a3:20:7b:4c:96:f3: 2e:62:df:72:c2:5a:0d:f4:0c:f6:3c:a2:8f:7a:67: f4:a8:b0:e3:86:3c:4a:0e:68:69:89:02:cd:ed:e0: 17:e6:31:66:74:35:a5:a2:ca:bd:1b:6c:78:5d:dc: 7c:41:28:4b:90:97:51:29:92:df:fe:f6:2c:7d:3a: 73:f8:c5:04:4e:61:8c:ea:39:15:55:66:0f:3f:53: c6:9c:bf:c3:68:5c:c5:26:16:cb:44:71:96:3e:2c: 62:6a:2c:69:ba:49:a9:5a:19:9c:5e:34:39:ea:b0: d2:d9:99:0b:8f:73:27:5f:07:dd:86:b3:39:ff:13: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:83:02:90:0C:E1:C2:E8:A1:13:23:AC:07:FC:09:EE:F9:1C:1C X509v3 Authority Key Identifier: keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:27:e8:25:42:82:c8:65:18:d8:e5:58:ff:48:d3:77:37:05: 6c:6a:ca:52:60:e3:69:10:b7:03:de:a5:11:21:fd:70:3b:ae: bf:08:c6:29:41:85:2d:e0:cd:37:f0:61:22:b2:96:4c:95:5b: b9:b9:ea:aa:c8:21:03:d2:65:05:38:9b:50:ef:4e:62:a3:6f: d4:c5:04:41:cd:44:6a:d1:f2:56:89:50:ae:4b:e1:a4:aa:2c: fd:68:fd:4f:02:58:0f:7c:66:64:86:31:70:06:bf:f4:6f:d4: 2d:41:d3:d8:9f:03:a9:07:71:4d:b2:e1:9b:4a:f4:9c:d0:52: c0:2e:5f:42:2e:ee:2f:27:6d:f4:ff:bf:dc:0f:d0:96:5f:5e: 39:66:07:da:05:de:ae:2e:b1:95:e3:59:45:53:f1:5b:f6:32: 4e:4f:35:30:ed:5d:98:03:e3:70:e0:83:bf:62:19:2c:91:57: 28:00:a8:e1:20:d1:88:69:a1:dd:b7:c0:65:68:48:33:04:71: dd:cd:4b:23:e0:ac:7f:4d:0c:54:53:06:47:a7:b8:3f:2b:f0: 88:31:44:44:8a:c1:90:3b:6e:02:5f:cc:51:6f:10:80:5f:ae: de:59:af:17:64:8b:9f:64:1a:aa:e7:a7:e0:0a:f6:2b:84:08: 42:d1:24:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwC4Ds0S1hz/e8XAH0YLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1 ZjI5YTQwHhcNMjUxMjA2MTMwMDQ5WhcNMjUxMjA3MTMwMDQ5WjAzMTEwLwYDVQQD EyhiMjI0ODMwMjkwMGNlMWMyZThhMTEzMjNhYzA3ZmMwOWVlZjkxYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2t8hKVyXrMzRUF0NJwPQBYGNB8t DfCSYyupx2Ts7TpAXkcVKEqXbUM8anEVWJDDN0uP9Gf8mgcdXn2EYE7o+eFPsxO8 6RfouEcZlwsEHZh03pDKYXmeaWXssKgIhSEBwpbWcEKh7BsNJX4NHYtlwiEDPA3Z H7X4IB0Er9uXks+jIHtMlvMuYt9ywloN9Az2PKKPemf0qLDjhjxKDmhpiQLN7eAX 5jFmdDWlosq9G2x4Xdx8QShLkJdRKZLf/vYsfTpz+MUETmGM6jkVVWYPP1PGnL/D aFzFJhbLRHGWPixiaixpukmpWhmcXjQ56rDS2ZkLj3MnXwfdhrM5/xOVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIkgwKQDOHC6KETI6wH/Anu+RwcMB8GA1UdIwQY MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVifoJUKC yGUY2OVY/0jTdzcFbGrKUmDjaRC3A96lESH9cDuuvwjGKUGFLeDNN/BhIrKWTJVb ubnqqsghA9JlBTibUO9OYqNv1MUEQc1EatHyVolQrkvhpKos/Wj9TwJYD3xmZIYx cAa/9G/ULUHT2J8DqQdxTbLhm0r0nNBSwC5fQi7uLydt9P+/3A/Qll9eOWYH2gXe ri6xleNZRVPxW/YyTk81MO1dmAPjcOCDv2IZLJFXKACo4SDRiGmh3bfAZWhIMwRx 3c1LI+Csf00MVFMGR6e4PyvwiDFERIrBkDtuAl/MUW8QgF+u3lmvF2SLn2Qaquen 4Ar2K4QIQtEkqA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:49 2025 by rpki-client