This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json) Hash identifier: YOHN4NESvgC5U5fQp+gtE5D7vxgVfUQkHX2KZZ6S3Hw= Subject key identifier: 02:A6:12:71:3D:ED:79:EA:C0:6D:E0:B6:DE:46:AD:9B:F4:90:FB:7D Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150 Certificate serial: 019AF1D22367D9690FE1E3EA4746F84F8A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 2Ern7XpI7xVTQ3CUwnW69GXo5Eg.roa (hash: DdH3QDSIQvtC4AyWFmCb4yynqcvOBrRuTl5/+XJCiVs=) 2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: iW1qxgs6y6y6a2iZwb298xRgMM4tkP4dtS8BReLaK6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:23:67:d9:69:0f:e1:e3:ea:47:46:f8:4f:8a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc20be6167890247303214197658ca7c9676150 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=02a612713ded79eac06de0b6de46ad9bf490fb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:47:21:fe:46:11:a4:40:6f:50:ee:09:cc: 18:97:cc:b6:34:f4:e2:cf:ed:17:5e:fd:6a:14:3a: ea:05:ee:1f:90:00:15:d2:19:f6:39:d6:4b:92:4e: 11:1e:e7:36:35:ea:b8:24:7c:ff:09:70:8c:33:12: 5f:df:7d:6a:b2:10:9d:93:dc:fa:67:6c:f1:02:93: af:76:c7:d4:41:aa:63:37:9a:49:0b:35:5d:63:c4: e8:41:60:44:34:da:90:b6:e3:f8:52:7d:a6:64:07: 4f:ae:51:6c:84:31:89:b4:0f:13:c8:86:a4:cc:96: c5:e7:40:d0:0d:0b:48:d0:23:9a:95:a6:85:8b:3e: 00:e3:41:0b:c3:bc:46:7a:41:c0:78:b4:12:08:31: 9d:69:ef:f2:df:da:ae:0e:57:e1:74:d5:ec:24:76: 1d:54:2a:74:e2:ff:2e:02:8d:f9:3e:04:9e:1d:54: 1f:f6:73:58:4f:07:9c:f6:81:4a:3c:85:f4:af:82: 0f:9c:4a:cc:20:00:b6:8d:58:d9:94:ae:cb:e7:cb: 06:cc:3d:00:19:0b:a9:9b:be:41:9c:69:85:a6:8e: ab:5e:6a:e2:ee:0e:9a:eb:ea:2a:93:3f:7d:c0:27: b5:a9:12:23:f1:85:9d:a5:48:3e:1c:d5:9f:cb:80: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:12:71:3D:ED:79:EA:C0:6D:E0:B6:DE:46:AD:9B:F4:90:FB:7D X509v3 Authority Key Identifier: keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:75:46:68:80:00:9f:88:6b:ad:0c:6a:26:c7:7d:41:b5: 68:af:05:d6:cc:e2:c1:d3:c8:c7:e3:a4:14:0d:a0:79:3d:fa: c5:3d:1d:61:27:3f:50:b9:91:2d:04:44:80:82:c1:fe:b0:54: 96:c2:15:2d:35:a9:57:a1:6a:6e:b9:e2:8b:93:d9:80:c9:da: 9b:94:65:7c:b4:d7:8a:56:5f:99:3d:71:91:a7:e0:9e:cc:8f: 06:98:90:d8:0f:3f:3a:50:3d:f9:a1:85:dc:f1:1e:88:38:a2: 5e:a3:77:e1:1f:2a:6a:66:8f:1e:4a:9d:09:73:f8:29:08:53: 68:46:5d:17:f9:37:7a:ad:70:39:12:87:a3:78:bf:67:bc:80: fa:26:d8:8e:9e:68:c3:a4:d7:72:c5:a8:36:eb:38:46:44:03: 99:bc:a3:1a:90:30:62:25:11:21:f8:7c:15:0e:cc:e3:b5:bf: fe:0a:ec:ba:af:27:69:2d:41:80:9a:b2:96:83:fe:85:e8:ea: 6f:04:bf:3f:84:84:09:f4:c6:9a:ff:99:ac:37:d0:b3:5f:e9: 56:53:80:e4:6f:f1:eb:5c:ed:33:69:e1:67:1e:17:43:89:c3: 9f:77:6a:ab:82:fd:76:a6:74:bf:a1:24:62:8f:06:4a:02:d1: 95:10:a4:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iNn2WkP4ePqR0b4T4oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2 NzYxNTAwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EygwMmE2MTI3MTNkZWQ3OWVhYzA2ZGUwYjZkZTQ2YWQ5YmY0OTBmYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhVHIf5GEaRAb1DuCcwYl8y2NPTi z+0XXv1qFDrqBe4fkAAV0hn2OdZLkk4RHuc2Neq4JHz/CXCMMxJf331qshCdk9z6 Z2zxApOvdsfUQapjN5pJCzVdY8ToQWBENNqQtuP4Un2mZAdPrlFshDGJtA8TyIak zJbF50DQDQtI0COalaaFiz4A40ELw7xGekHAeLQSCDGdae/y39quDlfhdNXsJHYd VCp04v8uAo35PgSeHVQf9nNYTwec9oFKPIX0r4IPnErMIAC2jVjZlK7L58sGzD0A GQupm75BnGmFpo6rXmri7g6a6+oqkz99wCe1qRIj8YWdpUg+HNWfy4CPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKmEnE97XnqwG3gtt5GrZv0kPt9MB8GA1UdIwQY MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1R1RmiA AJ+Ia60MaibHfUG1aK8F1sziwdPIx+OkFA2geT36xT0dYSc/ULmRLQREgILB/rBU lsIVLTWpV6Fqbrnii5PZgMnam5RlfLTXilZfmT1xkafgnsyPBpiQ2A8/OlA9+aGF 3PEeiDiiXqN34R8qamaPHkqdCXP4KQhTaEZdF/k3eq1wORKHo3i/Z7yA+ibYjp5o w6TXcsWoNus4RkQDmbyjGpAwYiURIfh8FQ7M47W//grsuq8naS1BgJqyloP+hejq bwS/P4SECfTGmv+ZrDfQs1/pVlOA5G/x61ztM2nhZx4XQ4nDn3dqq4L9dqZ0v6Ek Yo8GSgLRlRCk3g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:02 2025 by rpki-client