This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json) Hash identifier: fQAquElYHRzK8gTCqCae/lmfK5JMYbFznMRmoGfSS1I= Subject key identifier: 4F:B2:B0:60:90:DD:3B:82:50:8F:81:26:EE:FB:AB:AE:F2:47:A0:28 Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019AF23FF8991863A6625A6991EC5FA56CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft Manifest number: 0876 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Fc0ORItRbCbUCwNoR2+axioFKJLuDudts40rfTj8gwE=) 2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=) 3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=) 4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f8:99:18:63:a6:62:5a:69:91:ec:5f:a5:6c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=4fb2b06090dd3b82508f8126eefbabaef247a028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:77:b6:5e:f9:f8:40:4d:2d:9a:44:ed:dd: 12:3f:93:9b:39:c0:2b:c4:d5:ef:b2:d7:83:c7:c0: be:65:5a:62:a1:b8:8a:15:e6:1e:47:8b:5a:7f:2b: 9e:7f:3e:12:3b:9a:75:0a:c7:31:63:84:c1:67:86: a0:dd:a0:ec:e5:e9:53:51:0b:e7:eb:bc:46:ed:a7: a1:59:63:e0:2b:cd:49:cf:fd:94:ff:3a:f4:e3:78: 11:91:9c:42:c1:a2:f9:f0:f2:d3:44:68:10:af:69: 0f:b0:86:99:0c:1a:8d:d2:17:2b:eb:f6:7d:e3:7b: e8:1e:a8:df:70:8e:4b:43:57:49:2e:87:60:5f:f6: c2:b6:3e:4b:98:e4:75:5b:9a:36:55:dd:33:bf:34: 6d:09:fe:05:53:5f:fa:49:e7:2a:4d:c1:3f:3c:08: de:1c:0e:8c:c3:4e:0f:6c:c2:6e:4d:a0:f7:de:23: ca:fc:dc:30:7b:c0:c6:4b:d3:4c:ae:db:c5:d8:9e: dd:7a:dc:83:a8:95:48:a3:41:ec:e6:e5:bd:27:e1: fa:a5:97:c0:17:6d:86:81:35:89:22:c3:92:14:7a: c5:c8:e6:12:7f:8f:8d:6b:7b:a6:8e:53:84:03:3f: 37:00:d1:d7:7c:04:39:a5:11:13:64:96:45:ef:31: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B2:B0:60:90:DD:3B:82:50:8F:81:26:EE:FB:AB:AE:F2:47:A0:28 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:62:61:7c:55:dd:68:eb:8b:e1:97:ed:59:12:2a:6e:ca:67: 55:54:ee:e2:b5:66:c5:9c:72:3d:39:37:ed:70:e8:52:52:ef: b9:c8:c1:bb:2b:3d:fd:50:1b:bc:2c:98:b7:51:af:0b:b8:6b: 91:26:bf:84:f1:fa:8c:4f:e7:3c:3c:9a:96:fc:a0:44:c2:e5: e9:f4:a2:d5:4e:8e:15:9e:a3:7b:3a:48:69:62:d7:18:1f:2e: 28:32:7f:0f:20:c8:1b:ea:c0:2d:af:03:e3:a5:9b:a2:7b:04: 2a:fb:0b:54:70:7c:d7:3d:d2:c5:91:39:81:cc:87:01:d7:8c: fd:02:0e:f2:61:3e:5d:ad:ce:c5:43:93:bd:b2:2b:fc:88:40: 21:15:77:cb:5d:6c:e5:2b:0e:2d:00:d1:83:5a:f2:0f:04:30: 42:86:8b:b8:a5:3b:fe:4a:32:a9:8d:ab:c3:00:fd:aa:d7:01: 53:4d:d7:f0:b8:85:19:79:54:32:cc:6e:de:58:6e:de:44:53: 0e:53:70:db:39:a9:da:6e:c5:80:8b:7b:67:fd:8b:fe:da:1c: c3:05:00:03:fa:42:f1:93:35:c8:49:e9:60:e9:3b:ab:15:59: 37:27:e3:8c:ce:29:76:84:59:2c:d4:a4:1d:df:5c:61:97:e4: 7e:e8:3f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/iZGGOmYlppkexfpWypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD Eyg0ZmIyYjA2MDkwZGQzYjgyNTA4ZjgxMjZlZWZiYWJhZWYyNDdhMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XN3tl75+EBNLZpE7d0SP5ObOcAr xNXvsteDx8C+ZVpiobiKFeYeR4tafyuefz4SO5p1CscxY4TBZ4ag3aDs5elTUQvn 67xG7aehWWPgK81Jz/2U/zr043gRkZxCwaL58PLTRGgQr2kPsIaZDBqN0hcr6/Z9 43voHqjfcI5LQ1dJLodgX/bCtj5LmOR1W5o2Vd0zvzRtCf4FU1/6SecqTcE/PAje HA6Mw04PbMJuTaD33iPK/Nwwe8DGS9NMrtvF2J7detyDqJVIo0Hs5uW9J+H6pZfA F22GgTWJIsOSFHrFyOYSf4+Na3umjlOEAz83ANHXfAQ5pRETZJZF7zG5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+ysGCQ3TuCUI+BJu77q67yR6AoMB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2JhfFXd aOuL4ZftWRIqbspnVVTu4rVmxZxyPTk37XDoUlLvucjBuys9/VAbvCyYt1GvC7hr kSa/hPH6jE/nPDyalvygRMLl6fSi1U6OFZ6jezpIaWLXGB8uKDJ/DyDIG+rALa8D 46WbonsEKvsLVHB81z3SxZE5gcyHAdeM/QIO8mE+Xa3OxUOTvbIr/IhAIRV3y11s 5SsOLQDRg1ryDwQwQoaLuKU7/koyqY2rwwD9qtcBU03X8LiFGXlUMsxu3lhu3kRT DlNw2zmp2m7FgIt7Z/2L/tocwwUAA/pC8ZM1yEnpYOk7qxVZNyfjjM4pdoRZLNSk Hd9cYZfkfug/cg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:16 2025 by rpki-client