This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json) Hash identifier: L8W9aRrDnARpvh/B8UDvbZ5OrCOysrKfIK2znkgJ+s4= Subject key identifier: 15:E0:AE:25:66:E1:53:CE:A1:7A:45:83:2F:20:6D:0C:72:D5:B4:3F Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Certificate serial: 019AF9C339FA66F51599AA7B382BE1A0C664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 17:01:52 +0000 Manifest this update: Sun 07 Dec 2025 17:01:52 +0000 Manifest next update: Mon 08 Dec 2025 17:01:52 +0000 Files and hashes: 1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: UOWbPvjx5LTndH7FRy+cCVU5fzWttwBU5Qm8Uq3Ov20=) 2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c3:39:fa:66:f5:15:99:aa:7b:38:2b:e1:a0:c6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Validity Not Before: Dec 7 17:01:52 2025 GMT Not After : Dec 8 17:01:52 2025 GMT Subject: CN=15e0ae2566e153cea17a45832f206d0c72d5b43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:3b:fa:be:c1:28:fd:e2:69:af:fc:14:0a: 1c:1b:1e:41:d5:cc:1a:38:e9:eb:5f:9e:0f:55:84: 42:55:34:b7:b6:77:1d:e6:48:ff:73:c5:c4:d1:41: ec:c3:87:57:9a:d7:8f:da:d4:56:8d:a4:b4:7a:be: 2e:bf:bd:ab:48:91:c1:81:70:e3:38:1e:ac:e3:94: 19:ff:18:1a:7e:a2:04:58:e7:de:b7:a5:db:91:c3: 26:c9:c3:c6:f2:00:11:96:17:0b:4b:20:f7:c0:4d: b7:08:35:d9:48:71:ac:67:f4:7f:3a:85:d0:34:1e: c4:7d:65:a8:95:bd:9e:49:15:94:aa:40:e7:14:65: 77:56:07:6b:87:15:ee:56:b6:45:43:6f:43:fa:38: b2:1d:7c:81:8a:6b:31:c6:95:f9:85:aa:76:63:0f: fd:b6:6c:7f:e0:00:c7:f8:71:25:a7:6b:ae:ca:6d: e6:b5:56:3b:79:ea:33:7d:27:01:33:1e:70:e2:78: 9f:39:a1:ac:6c:a8:00:75:58:d5:8d:aa:2e:c4:e2: 3a:c0:95:fc:55:cd:65:3b:0f:38:19:15:2e:51:89: c1:24:ea:65:5c:c0:ff:97:b0:4b:a5:fe:fd:4e:60: a3:18:47:4d:83:f1:b3:fe:d9:61:87:60:0b:8d:09: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:AE:25:66:E1:53:CE:A1:7A:45:83:2F:20:6D:0C:72:D5:B4:3F X509v3 Authority Key Identifier: keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0d:6e:9e:47:07:23:a7:e1:85:67:50:59:ba:04:08:28:19: 47:50:de:50:ff:6e:6d:36:2c:98:b9:a8:ef:4a:fd:43:03:a6: 4d:4a:47:65:76:3b:b8:b8:2f:f9:44:9e:d2:dd:be:87:0a:65: 22:18:3c:b7:b5:9a:27:44:55:79:02:de:4c:36:f6:e3:ca:90: 16:5b:c7:c2:c5:b2:39:4a:2f:8e:1f:44:c2:c1:7c:78:a0:a4: 2c:c2:67:3e:3c:95:49:b9:18:b1:23:df:61:b6:e1:d7:8c:8a: b7:a1:e6:45:47:cd:cb:21:dc:c0:ea:41:e1:67:d1:f8:ce:e3: a8:33:2f:a9:8e:75:56:fe:89:31:54:1d:5e:8c:45:75:0e:27: 7e:ab:cb:aa:e9:8a:5f:10:1f:71:0c:9d:05:7e:39:00:10:54: a6:20:4c:eb:62:f0:cc:be:ce:ab:f6:a4:52:c0:ff:7d:e4:b7: 25:9b:b2:24:80:a9:fa:f2:96:8b:03:bb:e5:e9:38:15:8a:07: 7e:d2:46:47:4d:f2:92:e1:3f:5b:3e:95:15:25:ad:e0:5c:7b: b6:47:b8:ca:0f:a0:25:51:34:69:31:10:85:df:e9:eb:92:b1: 6b:5a:2e:7b:46:bf:ff:bf:ee:a6:8c:49:c2:5c:cd:9d:35:1b: 07:5e:07:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5wzn6ZvUVmap7OCvhoMZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjhjZjc1NjFmY2Q2ZDc2NmI3YWFkMzFkYmY3ODVmMDI5 MTQ5ZjAwHhcNMjUxMjA3MTcwMTUyWhcNMjUxMjA4MTcwMTUyWjAzMTEwLwYDVQQD EygxNWUwYWUyNTY2ZTE1M2NlYTE3YTQ1ODMyZjIwNmQwYzcyZDViNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq007+r7BKP3iaa/8FAocGx5B1cwa OOnrX54PVYRCVTS3tncd5kj/c8XE0UHsw4dXmteP2tRWjaS0er4uv72rSJHBgXDj OB6s45QZ/xgafqIEWOfet6XbkcMmycPG8gARlhcLSyD3wE23CDXZSHGsZ/R/OoXQ NB7EfWWolb2eSRWUqkDnFGV3VgdrhxXuVrZFQ29D+jiyHXyBimsxxpX5hap2Yw/9 tmx/4ADH+HElp2uuym3mtVY7eeozfScBMx5w4nifOaGsbKgAdVjVjaouxOI6wJX8 Vc1lOw84GRUuUYnBJOplXMD/l7BLpf79TmCjGEdNg/Gz/tlhh2ALjQlYxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXgriVm4VPOoXpFgy8gbQxy1bQ/MB8GA1UdIwQY MBaAFC/4z3Vh/NbXZreq0x2/eF8CkUnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQt ZGU3M2E4MWUzNTdkLzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQtZGU3M2E4MWUzNTdk LzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ1unkcH I6fhhWdQWboECCgZR1DeUP9ubTYsmLmo70r9QwOmTUpHZXY7uLgv+USe0t2+hwpl Ihg8t7WaJ0RVeQLeTDb248qQFlvHwsWyOUovjh9EwsF8eKCkLMJnPjyVSbkYsSPf Ybbh14yKt6HmRUfNyyHcwOpB4WfR+M7jqDMvqY51Vv6JMVQdXoxFdQ4nfqvLqumK XxAfcQydBX45ABBUpiBM62LwzL7Oq/akUsD/feS3JZuyJICp+vKWiwO75ek4FYoH ftJGR03ykuE/Wz6VFSWt4Fx7tke4yg+gJVE0aTEQhd/p65Kxa1oue0a//7/upoxJ wlzNnTUbB14HcA== -----END CERTIFICATE-----Generated at Sun Dec 7 22:52:56 2025 by rpki-client