This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json) Hash identifier: Gc0bTH/NUGgnjkru2tDkky4NSG/oVNqUt6EPl6sw3Bw= Subject key identifier: 40:BF:25:44:EE:4C:C0:6E:2D:4C:E8:BE:48:AF:50:0A:77:FE:09:97 Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Certificate serial: 019AF31C58576D6AC146790325597B263B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: J1YNqatt5VCoOLA+BjfdY4RKXhATeopgH+5LUF9On/M=) 2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:58:57:6d:6a:c1:46:79:03:25:59:7b:26:3b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=40bf2544ee4cc06e2d4ce8be48af500a77fe0997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:06:4d:23:10:2a:b3:a1:b9:ed:c7:ca:77:9e: 23:82:1f:31:02:d3:54:dd:22:2c:0b:07:82:ab:c2: 14:0f:84:cc:ce:20:ce:1a:6b:69:cd:2b:8b:4a:9e: f2:30:4e:0d:05:a0:b5:2e:ad:81:ec:dc:e2:db:a3: dd:12:93:96:b0:f1:98:e0:12:a4:d6:4e:b7:cf:5b: 68:13:e2:63:f4:25:89:54:ab:fa:3e:76:e5:28:87: 94:07:d4:ca:8f:09:70:0f:ff:bf:6a:1e:55:ef:c7: 3b:e4:46:6c:0e:eb:f4:bd:66:f0:47:b0:f7:f0:81: 4d:d4:8c:0c:2d:bc:f2:e3:7e:ed:5c:4d:73:9b:67: 36:c6:c5:23:cb:19:ac:49:9e:8a:f0:27:b7:54:7f: d3:93:4f:b8:e0:47:5b:f4:d9:57:78:d3:76:6a:e7: 9b:c5:01:5c:b6:56:9c:fe:91:7a:a1:33:c5:4d:98: a2:d0:0f:dd:4a:6d:66:22:dc:66:77:72:07:20:5c: f5:07:97:af:b8:dc:80:07:2e:47:63:d5:f7:31:6f: 5b:46:75:81:1c:c7:c7:e7:15:07:7d:d7:0a:28:54: 82:25:46:ca:37:c8:6b:99:0e:15:71:37:95:50:13: 3d:65:00:a3:51:0b:6f:92:39:5e:76:ac:23:1f:e5: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:25:44:EE:4C:C0:6E:2D:4C:E8:BE:48:AF:50:0A:77:FE:09:97 X509v3 Authority Key Identifier: keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fe:15:e3:bd:b2:ed:13:76:fa:a3:69:c1:a4:66:6b:97:ed: 59:67:a5:37:c2:d8:0f:a6:d4:6b:08:83:75:ef:aa:1d:e2:5f: e9:04:58:13:c1:d3:7f:86:ec:27:3f:cd:c2:d6:6c:4a:64:10: 5c:c9:2f:c7:9a:2f:2f:54:db:91:ae:7e:87:9d:ca:15:18:ed: 3e:8e:d6:b9:51:c9:ab:bb:6f:87:0a:67:da:5c:69:b2:4b:13: 5b:68:c3:fc:39:78:7c:f1:16:35:b8:2f:85:e1:e8:e5:59:b1: 0a:99:e7:52:38:00:aa:e0:9e:4e:1f:91:b3:f9:08:fd:cd:5c: ab:81:07:fc:95:4a:d3:b4:db:3f:0b:3e:f3:aa:09:a4:db:da: 2a:ce:1e:13:69:0e:0b:15:98:d3:dc:9a:75:86:59:fc:b1:f4: b7:e1:9e:4d:87:10:91:fc:89:51:f0:e5:0d:3e:9b:6c:ef:da: 00:f2:a2:cb:5f:47:1e:5e:8d:bb:5f:27:93:8f:13:80:f4:b0: c6:7d:22:a1:aa:2e:0b:c0:94:da:1e:e3:dd:14:c8:1c:04:be: 03:e7:9a:45:3d:53:e2:b0:92:06:f8:ba:c6:ae:f9:9c:f7:53: ae:81:50:85:02:41:36:6a:e6:d7:41:60:7c:b7:24:68:6b:90: b5:dc:ce:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFhXbWrBRnkDJVl7JjsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm YWFiYWMwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD Eyg0MGJmMjU0NGVlNGNjMDZlMmQ0Y2U4YmU0OGFmNTAwYTc3ZmUwOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQZNIxAqs6G57cfKd54jgh8xAtNU 3SIsCweCq8IUD4TMziDOGmtpzSuLSp7yME4NBaC1Lq2B7Nzi26PdEpOWsPGY4BKk 1k63z1toE+Jj9CWJVKv6PnblKIeUB9TKjwlwD/+/ah5V78c75EZsDuv0vWbwR7D3 8IFN1IwMLbzy437tXE1zm2c2xsUjyxmsSZ6K8Ce3VH/Tk0+44Edb9NlXeNN2aueb xQFctlac/pF6oTPFTZii0A/dSm1mItxmd3IHIFz1B5evuNyABy5HY9X3MW9bRnWB HMfH5xUHfdcKKFSCJUbKN8hrmQ4VcTeVUBM9ZQCjUQtvkjledqwjH+XrXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC/JUTuTMBuLUzovkivUAp3/gmXMB8GA1UdIwQY MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf4V472y 7RN2+qNpwaRma5ftWWelN8LYD6bUawiDde+qHeJf6QRYE8HTf4bsJz/NwtZsSmQQ XMkvx5ovL1Tbka5+h53KFRjtPo7WuVHJq7tvhwpn2lxpsksTW2jD/Dl4fPEWNbgv heHo5VmxCpnnUjgAquCeTh+Rs/kI/c1cq4EH/JVK07TbPws+86oJpNvaKs4eE2kO CxWY09yadYZZ/LH0t+GeTYcQkfyJUfDlDT6bbO/aAPKiy19HHl6Nu18nk48TgPSw xn0ioaouC8CU2h7j3RTIHAS+A+eaRT1T4rCSBvi6xq75nPdTroFQhQJBNmrm10Fg fLckaGuQtdzOwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:09 2025 by rpki-client