This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft File: L8tesBINBwkLEmJWxFo1KC1awKw.mft (raw, json) Hash identifier: hjPTkR6L7If3CuZhpTursW1HM2r7C26yX3C7b6kcOmA= Subject key identifier: 3E:7A:B6:84:F2:57:22:A2:83:10:78:F2:37:44:87:36:5A:FC:E6:FB Authority key identifier: 2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC Certificate issuer: /CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac Certificate serial: 019AF31CCB7591166A527883D9569FAC3D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: L8tesBINBwkLEmJWxFo1KC1awKw.crl (hash: xUYTO2BI1K4q2MxXQ8Skd4rjntKcodIxNk0QFGIxBsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cb:75:91:16:6a:52:78:83:d9:56:9f:ac:3d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=3e7ab684f25722a2831078f2374487365afce6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:17:08:2d:50:c3:d1:8f:27:a4:83:61:21: d1:bd:54:04:1d:fd:98:9e:c3:02:a7:2d:a2:fa:18: e3:00:dc:8d:7a:b9:30:46:5c:23:8f:6c:e8:fb:38: 56:80:36:8a:c3:ca:f1:d9:54:71:d6:2a:a7:ad:86: 77:bc:44:6c:5c:7e:10:2c:8f:00:57:8a:46:bf:25: 93:fb:f0:eb:85:fe:3e:d0:35:a6:db:67:e2:65:4b: f2:2d:38:04:84:d2:f8:1a:7b:3f:9c:26:2c:76:78: 73:88:d2:31:c5:36:c7:b1:69:eb:06:18:d9:26:40: 86:d7:4a:63:d6:98:06:9a:92:73:0c:c5:a4:02:82: 8e:74:e1:f7:ff:a5:f9:d1:a4:ce:83:4f:d9:94:64: 4a:a1:d2:85:c0:98:7d:eb:18:65:21:d3:ca:2f:33: 3c:53:fd:be:7c:5a:18:5e:75:71:b1:ca:75:53:fc: 5c:69:1c:01:ce:8a:7d:04:a4:d1:36:81:eb:3d:ea: 48:38:db:37:12:50:52:5b:34:21:a9:dd:bc:4e:d8: 43:c5:7b:77:ca:df:b1:8e:57:b4:02:a6:c7:f4:35: 1c:bf:e6:bc:60:4d:7f:6d:8d:54:bb:8b:4d:09:7d: d8:37:e1:93:f9:31:43:6c:f1:cd:db:f7:94:07:9b: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:B6:84:F2:57:22:A2:83:10:78:F2:37:44:87:36:5A:FC:E6:FB X509v3 Authority Key Identifier: keyid:2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a3:55:fe:f2:ec:44:86:f7:de:c1:fe:ef:73:c1:11:d4:74: 62:4b:39:01:f1:d5:09:21:85:3f:88:e2:e5:f7:5d:cd:ee:eb: cd:9d:63:2d:71:84:82:f8:ea:be:fc:ca:68:1d:8a:e5:ec:39: 83:ae:3f:78:39:1a:6e:71:36:8a:a0:40:e7:d2:d5:15:44:e1: 1b:73:d9:0c:4b:39:fb:3e:71:f7:67:86:fb:ee:c0:42:10:89: ae:79:b1:7a:4b:42:6e:ef:71:22:db:99:36:c9:4e:df:d5:bd: 25:4f:87:dd:d4:36:7a:95:2f:29:1d:29:38:df:2d:3a:a6:cc: 37:ae:45:4f:5b:46:7d:62:1f:c5:44:3d:ba:9c:00:4d:1c:a6: 61:62:de:0d:19:b1:33:3c:31:5a:ab:15:a0:17:80:af:53:53: 6e:05:69:39:27:63:4b:8a:bf:41:0a:c0:8d:e1:4f:30:22:8c: aa:e1:b4:08:cc:78:4a:de:54:08:43:12:95:14:1c:39:aa:22: 65:bf:4d:06:3c:75:db:b5:1f:da:f0:d5:a3:cf:92:b8:17:77: 42:87:56:58:7b:85:42:ec:00:6e:59:79:ad:47:39:f5:42:7b: ec:28:03:44:3b:cd:d0:43:04:10:c7:fd:a2:10:0d:f4:43:3f: a9:f9:3c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMt1kRZqUniD2VafrD18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2I1ZWIwMTIwZDA3MDkwYjEyNjI1NmM0NWEzNTI4MmQ1 YWMwYWMwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EygzZTdhYjY4NGYyNTcyMmEyODMxMDc4ZjIzNzQ0ODczNjVhZmNlNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHQXCC1Qw9GPJ6SDYSHRvVQEHf2Y nsMCpy2i+hjjANyNerkwRlwjj2zo+zhWgDaKw8rx2VRx1iqnrYZ3vERsXH4QLI8A V4pGvyWT+/Drhf4+0DWm22fiZUvyLTgEhNL4Gns/nCYsdnhziNIxxTbHsWnrBhjZ JkCG10pj1pgGmpJzDMWkAoKOdOH3/6X50aTOg0/ZlGRKodKFwJh96xhlIdPKLzM8 U/2+fFoYXnVxscp1U/xcaRwBzop9BKTRNoHrPepIONs3ElBSWzQhqd28TthDxXt3 yt+xjle0AqbH9DUcv+a8YE1/bY1Uu4tNCX3YN+GT+TFDbPHN2/eUB5tpmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD56toTyVyKigxB48jdEhzZa/Ob7MB8GA1UdIwQY MBaAFC/LXrASDQcJCxJiVsRaNSgtWsCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iYjU5MTItMTdjNy00NjA3LTk0NzIt ZTIxNTJlZGY5ZjljLzEvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iYjU5MTItMTdjNy00NjA3LTk0NzItZTIxNTJlZGY5Zjlj LzEvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKNV/vLs RIb33sH+73PBEdR0Yks5AfHVCSGFP4ji5fddze7rzZ1jLXGEgvjqvvzKaB2K5ew5 g64/eDkabnE2iqBA59LVFUThG3PZDEs5+z5x92eG++7AQhCJrnmxektCbu9xItuZ NslO39W9JU+H3dQ2epUvKR0pON8tOqbMN65FT1tGfWIfxUQ9upwATRymYWLeDRmx MzwxWqsVoBeAr1NTbgVpOSdjS4q/QQrAjeFPMCKMquG0CMx4St5UCEMSlRQcOaoi Zb9NBjx127Uf2vDVo8+SuBd3QodWWHuFQuwAbll5rUc59UJ77CgDRDvN0EMEEMf9 ohAN9EM/qfk8Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:38 2025 by rpki-client