This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json) Hash identifier: OrsO7soNJZM2+5MAOHZvoXvxPgVnhO2SHhGaAU5HLKU= Subject key identifier: A6:D5:A1:01:DE:57:E0:EF:77:74:D8:72:DA:CF:DD:EE:F3:F9:04:5C Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Certificate serial: 019AF208BF8B72B130DE2E77C23137CFD1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft Manifest number: 0E15 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=) 2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: ztGNPpbTKLNYPYmAxX0KIzrB0tbLx+IR+M/ay0TsUns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:8b:72:b1:30:de:2e:77:c2:31:37:cf:d1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=a6d5a101de57e0ef7774d872dacfddeef3f9045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:47:53:8f:1e:26:c7:b4:25:3e:c0:eb:7d: b1:64:81:ae:ae:ef:17:40:57:a3:f9:45:7b:f7:5c: 61:78:29:ef:22:db:3c:3c:e9:9e:a5:64:1c:8b:58: 27:ad:17:8d:d8:84:5a:4e:0e:a6:9a:81:ed:15:e2: 8e:7c:24:cd:05:a0:e1:22:af:df:c8:9f:43:a1:9f: ff:5f:23:83:29:bd:13:cf:51:e2:5a:51:6c:01:18: 4d:db:ca:64:77:d4:37:54:35:46:99:7a:c9:92:f2: 9e:e4:08:42:9a:77:91:9f:7a:f8:19:93:84:26:f7: b1:4d:9a:07:9a:f6:b2:b0:cb:7a:36:18:2e:15:03: f9:9c:85:a0:59:cc:2e:4a:1f:76:23:4c:5e:df:38: c3:66:f1:23:4d:dd:a0:55:ca:44:cd:1e:92:d6:e7: 28:83:0a:b4:dc:55:0f:d0:d3:10:fd:2e:19:8c:23: 9b:8e:61:2e:84:e6:d7:fc:90:78:16:d5:9e:d0:fc: 9b:d6:c0:74:64:96:37:b0:83:20:f6:2a:39:b3:ab: df:94:77:4b:29:45:93:3a:01:49:be:6d:9f:84:25: c6:b9:7b:ba:4f:86:44:31:c9:fb:cb:54:21:e2:a4: 85:e8:5a:54:c2:b0:fc:40:dc:fe:5c:36:f2:4f:25: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:A1:01:DE:57:E0:EF:77:74:D8:72:DA:CF:DD:EE:F3:F9:04:5C X509v3 Authority Key Identifier: keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7a:99:e1:b1:43:eb:07:98:cb:77:91:ec:c9:e2:99:78:25: b4:3f:76:3f:e9:96:35:3b:31:20:9e:4a:50:7f:30:fb:20:e2: 23:2c:7e:3b:83:ea:bb:f0:a7:5d:b0:1c:93:95:f4:c7:0c:47: e5:b7:bd:99:03:7d:b5:a9:3f:c3:e5:b4:7b:c8:1a:19:6f:60: dd:44:c0:0c:60:bb:68:93:b7:ca:f8:af:57:37:61:06:11:e7: 92:89:87:3f:b3:49:bf:e7:01:fe:96:0e:38:9a:46:50:f7:6d: 71:82:68:44:78:42:24:a8:ac:87:6f:2e:bb:a8:c6:c3:5a:e4: ed:34:f4:ca:75:d5:e1:a8:e4:97:c2:98:b4:c1:e8:4c:3a:a9: d4:4c:1e:fe:03:fa:13:33:b5:6e:2a:c4:44:01:a8:26:10:70: 97:fc:8a:a3:b0:e3:c4:76:2e:90:07:1d:b7:46:cf:68:ea:c8: 7d:e5:6b:db:26:75:c3:0e:69:f9:ac:e1:b0:87:75:a6:ca:9b: b5:1c:80:e5:1a:8a:cc:e5:76:e3:86:3e:d2:a9:51:3b:f1:7c: 4f:62:6c:e7:14:6b:5e:e6:61:44:55:e5:f4:57:e2:46:bf:6e: fa:0e:c8:4c:ae:fa:e7:25:1f:50:1f:c4:86:32:75:81:bb:19: 2a:ed:bf:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL+LcrEw3i53wjE3z9GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGU1MTIyNTY5ZGU1MmNkNTBhZWM3OTM0OTRiZjFjZTdj MjVmYzgwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EyhhNmQ1YTEwMWRlNTdlMGVmNzc3NGQ4NzJkYWNmZGRlZWYzZjkwNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ZHU48eJse0JT7A632xZIGuru8X QFej+UV791xheCnvIts8POmepWQci1gnrReN2IRaTg6mmoHtFeKOfCTNBaDhIq/f yJ9DoZ//XyODKb0Tz1HiWlFsARhN28pkd9Q3VDVGmXrJkvKe5AhCmneRn3r4GZOE JvexTZoHmvaysMt6NhguFQP5nIWgWcwuSh92I0xe3zjDZvEjTd2gVcpEzR6S1uco gwq03FUP0NMQ/S4ZjCObjmEuhObX/JB4FtWe0Pyb1sB0ZJY3sIMg9io5s6vflHdL KUWTOgFJvm2fhCXGuXu6T4ZEMcn7y1Qh4qSF6FpUwrD8QNz+XDbyTyXjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbVoQHeV+Dvd3TYctrP3e7z+QRcMB8GA1UdIwQY MBaAFC+OUSJWneUs1QrseTSUvxznwl/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2Et ODY4OGIxZTUzNTcxLzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2EtODY4OGIxZTUzNTcx LzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3qZ4bFD 6weYy3eR7MnimXgltD92P+mWNTsxIJ5KUH8w+yDiIyx+O4Pqu/CnXbAck5X0xwxH 5be9mQN9tak/w+W0e8gaGW9g3UTADGC7aJO3yvivVzdhBhHnkomHP7NJv+cB/pYO OJpGUPdtcYJoRHhCJKish28uu6jGw1rk7TT0ynXV4ajkl8KYtMHoTDqp1Ewe/gP6 EzO1birERAGoJhBwl/yKo7DjxHYukAcdt0bPaOrIfeVr2yZ1ww5p+azhsId1psqb tRyA5RqKzOV244Y+0qlRO/F8T2Js5xRrXuZhRFXl9FfiRr9u+g7ITK765yUfUB/E hjJ1gbsZKu2/bA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:34 2025 by rpki-client