This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json) Hash identifier: 9b2TSnafO4QgviKXuvy3snrU2vCCGhbdc/dPm46/o1g= Subject key identifier: 3B:F8:DC:22:10:B3:B8:93:CC:A7:7A:77:44:1D:DD:59:68:D7:1C:0E Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019AF16416349688339ECA032BB067647412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft Manifest number: 05A8 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: nYqQ8uupWcVCHkz8IfBy07RFPwxQ+Xs5IJcPoArSYbM=) 2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=) 3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=) 4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:16:34:96:88:33:9e:ca:03:2b:b0:67:64:74:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=3bf8dc2210b3b893cca77a77441ddd5968d71c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:5e:4c:c8:28:74:92:ae:56:66:73:26:96: 38:5b:62:24:1a:35:48:a7:f6:60:46:6f:62:81:25: 74:24:72:58:1c:ea:2b:0f:13:62:4e:b3:3c:0a:3b: 0a:e7:aa:f0:71:1c:c2:e8:2c:b7:97:29:90:0b:89: 21:7a:37:1e:48:45:59:f1:9c:f3:7b:b7:69:43:9a: 75:a3:ae:c0:8a:cb:47:79:2d:87:1f:bb:5b:52:98: be:f9:25:36:b5:10:d2:b7:f7:3c:25:64:80:ef:a7: 55:a4:43:4c:87:e8:02:96:74:6e:fa:41:f5:f8:1a: e4:1d:3b:c4:31:29:ea:7b:3b:e8:58:73:70:ae:c7: 11:b3:c7:e9:10:84:d4:94:62:29:b4:18:f3:7e:27: 12:cf:a5:77:32:8a:db:c4:9b:a0:e9:8a:f2:d3:35: e1:03:47:1f:b4:2e:d4:0c:71:3d:80:2d:b3:ba:d9: 9c:af:83:33:dd:c7:03:3d:db:e0:49:06:9b:28:28: ff:7c:4d:f3:bf:21:44:88:2e:08:88:03:0b:63:c4: 84:77:46:a0:2d:f4:dd:5d:09:85:4a:a4:42:ab:8b: 04:e3:a7:4e:3e:22:8f:e1:4b:3f:ae:a8:17:c4:2d: e7:92:60:b5:47:86:76:9b:75:4a:61:ba:67:76:27: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F8:DC:22:10:B3:B8:93:CC:A7:7A:77:44:1D:DD:59:68:D7:1C:0E X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:35:4d:22:9e:90:4d:6f:c7:18:2f:0c:81:07:7a:7d:d0:4b: 9e:6c:40:d1:a8:f2:fd:28:2d:3a:a1:0a:a3:10:83:7f:d7:31: c3:9f:a0:cf:f1:34:43:d3:e6:de:a8:79:bd:01:e5:76:93:75: 9d:f2:7d:f7:ee:95:df:7d:dc:32:7b:5b:52:85:69:92:23:da: c8:a9:07:da:1f:e7:40:a6:d9:b9:61:e8:b9:1d:3f:56:af:de: df:ff:75:07:fd:ce:5b:bf:04:c2:96:7d:24:3b:cd:01:da:14: 95:d9:5b:25:25:a7:45:f9:e9:6b:88:a9:1a:86:ba:27:09:10: d0:a5:d9:4e:00:8e:67:74:36:8a:04:af:8f:83:b6:76:0e:cb: b7:f7:25:bb:18:f9:99:e9:6d:4d:8b:42:35:78:f3:74:a1:48: 0f:59:eb:60:09:80:18:9b:8a:87:88:a2:4d:83:a8:5b:14:f9: 9c:42:2b:80:46:2a:a0:a4:c4:f8:55:9d:50:1c:6f:60:10:5f: 0b:f4:20:33:bb:86:3a:53:0f:75:cc:b6:81:8d:c9:be:20:e8: fe:ad:39:3e:b8:85:a9:0d:49:3c:45:a9:6e:41:b0:8b:a4:56: c9:ac:97:38:5f:b3:e2:94:9d:c3:21:d4:74:68:6a:28:1c:51: 17:72:72:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBY0logznsoDK7BnZHQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EygzYmY4ZGMyMjEwYjNiODkzY2NhNzdhNzc0NDFkZGQ1OTY4ZDcxYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY1eTMgodJKuVmZzJpY4W2IkGjVI p/ZgRm9igSV0JHJYHOorDxNiTrM8CjsK56rwcRzC6Cy3lymQC4khejceSEVZ8Zzz e7dpQ5p1o67AistHeS2HH7tbUpi++SU2tRDSt/c8JWSA76dVpENMh+gClnRu+kH1 +BrkHTvEMSnqezvoWHNwrscRs8fpEITUlGIptBjzficSz6V3MorbxJug6Yry0zXh A0cftC7UDHE9gC2zutmcr4Mz3ccDPdvgSQabKCj/fE3zvyFEiC4IiAMLY8SEd0ag LfTdXQmFSqRCq4sE46dOPiKP4Us/rqgXxC3nkmC1R4Z2m3VKYbpndidjJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv43CIQs7iTzKd6d0Qd3Vlo1xwOMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzVNIp6Q TW/HGC8MgQd6fdBLnmxA0ajy/SgtOqEKoxCDf9cxw5+gz/E0Q9Pm3qh5vQHldpN1 nfJ99+6V333cMntbUoVpkiPayKkH2h/nQKbZuWHouR0/Vq/e3/91B/3OW78EwpZ9 JDvNAdoUldlbJSWnRfnpa4ipGoa6JwkQ0KXZTgCOZ3Q2igSvj4O2dg7Lt/cluxj5 meltTYtCNXjzdKFID1nrYAmAGJuKh4iiTYOoWxT5nEIrgEYqoKTE+FWdUBxvYBBf C/QgM7uGOlMPdcy2gY3JviDo/q05PriFqQ1JPEWpbkGwi6RWyayXOF+z4pSdwyHU dGhqKBxRF3JyTA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:23 2025 by rpki-client