This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json) Hash identifier: veyEZ32g0PnISav8qBl1HgrYHUFYhirpk97bC4LN24w= Subject key identifier: 2F:C7:A2:6F:4A:A2:73:CC:C5:C1:15:B8:25:14:5F:C4:4F:20:60:2F Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Certificate serial: 019AF50AFB7B93B667FB2799DA2105595F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:08 +0000 Manifest this update: Sat 06 Dec 2025 19:02:08 +0000 Manifest next update: Sun 07 Dec 2025 19:02:08 +0000 Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=) 2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: QMcQJuAokhK79fQ2btF88KcBjo++wFiZ48LoQyUV1hI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:fb:7b:93:b6:67:fb:27:99:da:21:05:59:5f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03 Validity Not Before: Dec 6 19:02:08 2025 GMT Not After : Dec 7 19:02:08 2025 GMT Subject: CN=2fc7a26f4aa273ccc5c115b825145fc44f20602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:96:1a:e9:a4:5e:9b:b0:77:19:1e:d1:45: 0b:c3:50:78:63:51:ab:8b:31:43:a4:86:f8:84:b6: f5:81:9a:58:9e:1c:01:bc:75:4b:8f:ed:2d:ba:90: b2:8f:64:f8:dc:f5:1c:37:73:d5:b5:9b:c9:83:24: 7d:d6:15:b1:e4:0b:dd:3c:bf:c1:e7:06:87:69:c0: 2c:19:70:2e:c8:6b:7b:51:47:e3:9f:bf:8d:fd:66: cb:d1:a3:53:4c:fc:0e:12:e0:9e:b5:d3:ee:9e:1a: 16:fa:7b:06:db:56:26:3e:5d:93:1c:ae:1a:0a:53: bc:0c:6c:7a:c1:14:ec:c9:54:0d:a2:94:14:4c:fa: 16:a1:3e:a0:40:57:a5:a1:06:9b:57:0f:6f:e8:9d: f4:1b:b3:4f:52:65:31:2b:f4:db:3a:5f:42:0c:29: f6:8a:2d:68:22:5b:76:a4:ef:35:b8:10:a8:1c:5b: 91:bd:ee:99:48:1c:53:7c:1b:69:31:a5:d0:3c:37: 3a:09:ed:b6:1c:bf:bb:f2:23:02:1f:fd:77:d3:99: 0f:8f:cb:aa:19:4f:ee:33:99:50:f8:5b:dc:55:a5: a1:81:57:09:12:89:87:e7:ff:79:8c:d9:ef:7b:0b: b5:5e:7b:c4:32:12:4e:66:19:31:cc:37:d4:e0:fa: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:A2:6F:4A:A2:73:CC:C5:C1:15:B8:25:14:5F:C4:4F:20:60:2F X509v3 Authority Key Identifier: keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2a:d9:97:b2:2d:4d:cd:9c:82:2d:f7:ac:0f:48:6a:d4:64: 3b:47:41:52:47:55:e8:a1:de:0d:96:e7:93:46:58:98:d4:0e: da:5c:32:1e:78:e6:ca:22:fc:78:b6:41:f3:81:cb:20:f3:be: d1:91:d1:c1:3d:17:41:67:2b:73:c4:5d:da:a2:95:0f:be:be: 21:f6:31:c1:4b:87:07:1e:19:76:f1:7f:5a:61:ad:99:3c:5e: 64:cc:22:bf:d5:56:3b:0a:fa:b2:21:5c:af:3f:a8:94:c3:28: 50:ee:9d:13:82:51:b7:1e:81:93:b1:51:5d:44:d5:ef:16:6a: 01:8f:e6:5b:49:8e:53:5c:6e:46:7f:72:97:d6:69:d0:61:f5: df:77:33:fc:b2:85:5a:0f:0c:99:95:ee:c3:04:fc:de:aa:4e: 14:0c:9a:a0:0a:8c:2a:ba:b8:25:01:12:40:ec:84:6c:37:f6: 1f:c8:1f:9d:75:99:68:ee:b2:c6:b2:79:fd:2b:cf:46:79:84: 58:5f:7d:c0:6b:37:06:fb:19:bb:fa:30:e3:f8:a2:3a:1f:60: d7:1f:f0:56:b8:a4:c4:67:14:33:6b:4d:78:b9:41:16:1f:60: 25:db:ea:40:54:a8:10:a8:61:8d:09:ac:25:ef:3f:0c:4a:52: ec:03:60:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cvt7k7Zn+yeZ2iEFWV+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2E2NTkyYzBmZTM0ZmFiZWZjYzQzNzE5Mjg3Yjg0NGQ0 N2NhMDMwHhcNMjUxMjA2MTkwMjA4WhcNMjUxMjA3MTkwMjA4WjAzMTEwLwYDVQQD EygyZmM3YTI2ZjRhYTI3M2NjYzVjMTE1YjgyNTE0NWZjNDRmMjA2MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbGWGumkXpuwdxke0UULw1B4Y1Gr izFDpIb4hLb1gZpYnhwBvHVLj+0tupCyj2T43PUcN3PVtZvJgyR91hWx5AvdPL/B 5waHacAsGXAuyGt7UUfjn7+N/WbL0aNTTPwOEuCetdPunhoW+nsG21YmPl2THK4a ClO8DGx6wRTsyVQNopQUTPoWoT6gQFeloQabVw9v6J30G7NPUmUxK/TbOl9CDCn2 ii1oIlt2pO81uBCoHFuRve6ZSBxTfBtpMaXQPDc6Ce22HL+78iMCH/1305kPj8uq GU/uM5lQ+FvcVaWhgVcJEomH5/95jNnvewu1XnvEMhJOZhkxzDfU4PpyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/Hom9KonPMxcEVuCUUX8RPIGAvMB8GA1UdIwQY MBaAFC/KZZLA/jT6vvzENxkoe4RNR8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut MWVjZDk5MThiM2E2LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2 LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSrZl7It Tc2cgi33rA9IatRkO0dBUkdV6KHeDZbnk0ZYmNQO2lwyHnjmyiL8eLZB84HLIPO+ 0ZHRwT0XQWcrc8Rd2qKVD76+IfYxwUuHBx4ZdvF/WmGtmTxeZMwiv9VWOwr6siFc rz+olMMoUO6dE4JRtx6Bk7FRXUTV7xZqAY/mW0mOU1xuRn9yl9Zp0GH133cz/LKF Wg8MmZXuwwT83qpOFAyaoAqMKrq4JQESQOyEbDf2H8gfnXWZaO6yxrJ5/SvPRnmE WF99wGs3BvsZu/ow4/iiOh9g1x/wVrikxGcUM2tNeLlBFh9gJdvqQFSoEKhhjQms Je8/DEpS7ANgwg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:15 2025 by rpki-client