This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft File: Le43b1HIyKVVUo1MFesfTKOZxJE.mft (raw, json) Hash identifier: DchsXozh6EdhHfFgyWWl76ymfcd7oPzg+fIqnqWQWcQ= Subject key identifier: C6:94:E9:42:92:EC:52:38:C2:02:86:0F:4D:AE:4D:E9:20:5F:A3:1B Authority key identifier: 2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91 Certificate issuer: /CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491 Certificate serial: 019AF50BC3CD53527DD48DC6572092F2C762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:03:00 +0000 Manifest this update: Sat 06 Dec 2025 19:03:00 +0000 Manifest next update: Sun 07 Dec 2025 19:03:00 +0000 Files and hashes: 1: Le43b1HIyKVVUo1MFesfTKOZxJE.crl (hash: rUTeSTynlqM2892x3xfrNuG59EQBahQto8FLuxi1sLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c3:cd:53:52:7d:d4:8d:c6:57:20:92:f2:c7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee376f51c8c8a555528d4c15eb1f4ca399c491 Validity Not Before: Dec 6 19:03:00 2025 GMT Not After : Dec 7 19:03:00 2025 GMT Subject: CN=c694e94292ec5238c202860f4dae4de9205fa31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:6f:4b:d5:f9:49:31:a6:4d:59:76:96:8c: a8:1f:da:7b:e3:2b:17:80:d4:a6:0b:5d:23:38:c6: b7:a0:11:97:b9:b8:09:a7:e0:83:4e:e1:c2:b9:b9: b3:65:fd:63:98:8f:77:a8:84:b7:a4:97:fb:9b:71: 76:9b:6b:c8:d9:5f:78:c0:c9:ed:bf:29:cb:7c:68: 1d:d2:f0:78:ee:7a:ac:07:6c:0d:08:b2:33:ab:08: 71:33:74:1b:75:7a:67:e1:09:39:8d:a3:1e:6d:35: 8f:ea:f3:bc:79:3a:df:5e:cb:ac:96:0a:e9:48:b8: ab:92:53:77:ac:9a:b9:d6:0e:3c:f0:80:19:f5:7e: fe:a4:51:f9:37:b1:bd:2c:5a:e9:49:22:af:82:44: 3d:1a:6b:bb:b4:15:c1:d6:2b:b7:da:50:53:91:ed: 31:8f:49:d4:8b:3b:6a:21:a1:ce:43:fc:30:7e:fa: fb:08:25:0b:7b:79:fe:e8:aa:8a:ec:f3:c2:15:19: f5:64:cc:46:30:f1:48:28:de:20:55:94:b1:cd:f7: 60:96:03:28:c9:42:86:ce:43:a8:7c:44:4f:80:4e: 29:46:46:5c:58:ad:0b:22:f5:b0:2e:61:17:d8:4c: 10:5c:62:1c:7d:7a:bd:11:3c:e9:2c:50:51:3f:6e: 68:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:94:E9:42:92:EC:52:38:C2:02:86:0F:4D:AE:4D:E9:20:5F:A3:1B X509v3 Authority Key Identifier: keyid:2D:EE:37:6F:51:C8:C8:A5:55:52:8D:4C:15:EB:1F:4C:A3:99:C4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Le43b1HIyKVVUo1MFesfTKOZxJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3be097-28f4-49e8-ad25-ff5cbdac5845/1/Le43b1HIyKVVUo1MFesfTKOZxJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e8:17:3a:ed:c0:7e:9d:41:70:44:87:14:c2:51:85:24:eb: 44:1f:c4:34:a0:d8:dd:8d:05:14:33:99:58:41:98:27:f9:fa: 63:76:ee:a3:05:c0:ac:e4:f1:84:bc:55:89:89:61:53:60:39: 1c:ae:03:10:03:ac:35:2a:05:f7:80:a4:b3:b2:cd:0c:7e:22: 81:64:cd:0a:d8:57:2f:d8:8c:0e:1c:a2:77:11:c1:81:f5:97: e0:60:bc:8c:62:be:a2:f8:1a:a4:2b:56:f9:67:fd:0e:28:d1: f0:48:bc:ef:a6:c7:e0:1b:f1:91:89:69:db:1e:38:43:dd:e6: e1:6f:76:6a:17:c8:31:90:31:79:8e:1a:c7:08:88:95:84:cb: d6:6b:21:b6:47:55:09:77:45:7a:50:63:81:77:f8:56:eb:79: 05:20:0f:2b:5c:b0:cb:bf:ec:21:f6:77:6d:cf:df:4d:bf:15: 21:72:73:64:7b:58:a2:11:45:0e:33:1e:9b:6a:91:29:2f:1e: 61:52:21:d4:fd:60:c7:3e:8e:ff:0c:75:ca:1b:5d:b3:e3:0c: 58:02:8e:e2:14:0b:5c:71:6e:0a:bb:2e:4d:d7:00:b4:38:73: 3a:66:14:c3:45:c1:00:0f:13:cc:38:35:53:a6:00:e2:5b:93: 60:99:f8:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8PNU1J91I3GVyCS8sdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZWUzNzZmNTFjOGM4YTU1NTUyOGQ0YzE1ZWIxZjRjYTM5 OWM0OTEwHhcNMjUxMjA2MTkwMzAwWhcNMjUxMjA3MTkwMzAwWjAzMTEwLwYDVQQD EyhjNjk0ZTk0MjkyZWM1MjM4YzIwMjg2MGY0ZGFlNGRlOTIwNWZhMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3NvS9X5STGmTVl2loyoH9p74ysX gNSmC10jOMa3oBGXubgJp+CDTuHCubmzZf1jmI93qIS3pJf7m3F2m2vI2V94wMnt vynLfGgd0vB47nqsB2wNCLIzqwhxM3QbdXpn4Qk5jaMebTWP6vO8eTrfXsuslgrp SLirklN3rJq51g488IAZ9X7+pFH5N7G9LFrpSSKvgkQ9Gmu7tBXB1iu32lBTke0x j0nUiztqIaHOQ/wwfvr7CCULe3n+6KqK7PPCFRn1ZMxGMPFIKN4gVZSxzfdglgMo yUKGzkOofERPgE4pRkZcWK0LIvWwLmEX2EwQXGIcfXq9ETzpLFBRP25oCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaU6UKS7FI4wgKGD02uTekgX6MbMB8GA1UdIwQY MBaAFC3uN29RyMilVVKNTBXrH0yjmcSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmUwOTctMjhmNC00OWU4LWFkMjUt ZmY1Y2JkYWM1ODQ1LzEvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zYmUwOTctMjhmNC00OWU4LWFkMjUtZmY1Y2JkYWM1ODQ1 LzEvTGU0M2IxSEl5S1ZWVW8xTUZlc2ZUS09aeEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhugXOu3A fp1BcESHFMJRhSTrRB/ENKDY3Y0FFDOZWEGYJ/n6Y3buowXArOTxhLxViYlhU2A5 HK4DEAOsNSoF94Cks7LNDH4igWTNCthXL9iMDhyidxHBgfWX4GC8jGK+ovgapCtW +Wf9DijR8Ei876bH4BvxkYlp2x44Q93m4W92ahfIMZAxeY4axwiIlYTL1mshtkdV CXdFelBjgXf4Vut5BSAPK1ywy7/sIfZ3bc/fTb8VIXJzZHtYohFFDjMem2qRKS8e YVIh1P1gxz6O/wx1yhtds+MMWAKO4hQLXHFuCrsuTdcAtDhzOmYUw0XBAA8TzDg1 U6YA4luTYJn4Dw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:01 2025 by rpki-client