This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json) Hash identifier: LK2rEfthWOhEJbLGQ/Flx9HcCvEIdYfYcn0ZBoXCGjE= Subject key identifier: 36:54:E8:F9:74:21:36:F7:A0:93:E3:3A:FF:43:9C:04:73:C6:DB:50 Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Certificate serial: 019AF12D8E7D3CE512FC3A1F3A0A363E2CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: k2+P9sbYIzhpOS1NW5U+XALqQ/nud8EGcKpYIIzOWxw=) 2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8e:7d:3c:e5:12:fc:3a:1f:3a:0a:36:3e:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=3654e8f9742136f7a093e33aff439c0473c6db50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:bc:f2:98:71:f5:b9:81:d6:8c:1e:26:13: 12:91:d4:80:f1:3c:19:56:54:d2:8b:bd:d1:73:fe: b7:6e:24:5e:de:7e:8d:46:81:09:f2:3f:6e:c8:73: b5:66:e3:18:6d:96:1f:9b:e1:9d:84:a8:77:64:26: 1a:75:97:5c:52:fa:3f:d9:10:b9:79:84:28:cd:2f: 28:a0:e1:85:c5:75:c5:3f:10:33:4d:02:3a:13:a8: 87:d6:ea:2b:fd:4f:b3:2e:b1:61:ae:45:d2:35:f0: bd:8a:03:07:55:50:4a:4f:19:97:4a:c6:de:26:9b: 27:d3:93:1f:14:a6:ef:a0:33:c6:b2:ae:d0:b2:e2: 62:24:97:2c:37:6b:a3:dd:a4:fa:b1:33:70:0f:1f: 9d:1f:cf:03:1c:52:09:70:31:5d:56:ac:0a:04:39: 97:e6:59:54:7e:a9:3f:ce:ee:6d:e1:67:bb:c3:b2: c1:69:39:1b:ce:0e:a8:37:ff:14:80:4f:5b:fb:85: f6:c0:75:6d:e7:8c:18:84:02:8f:98:69:0b:b8:e5: a6:40:63:f8:4a:d7:ac:55:94:3f:03:6d:6f:c2:67: bd:08:33:f8:55:d4:a9:75:7c:6d:db:8b:06:15:08: 7b:f9:ce:0b:55:1a:d3:6e:b4:ab:1b:54:4a:89:45: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:E8:F9:74:21:36:F7:A0:93:E3:3A:FF:43:9C:04:73:C6:DB:50 X509v3 Authority Key Identifier: keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4c:95:66:dd:da:18:13:62:cd:6f:ad:c8:db:21:e3:88:53: 13:cd:34:93:11:73:d5:97:60:05:da:ae:cc:a0:48:b6:eb:e3: 4c:cd:07:36:a5:00:7c:15:a9:50:e8:fc:0e:05:69:b3:a3:82: 97:32:16:b7:eb:f3:83:f0:71:ce:0e:e1:15:57:34:65:2e:aa: 84:26:51:d8:49:ae:8b:10:8e:62:f1:a0:bb:d2:e5:cb:4e:f9: 5f:42:fb:ba:a1:bc:cf:b1:00:b6:d5:27:ee:56:e1:d3:3d:28: c3:3b:fe:4a:0c:cd:a5:0f:9c:85:87:58:f8:31:66:11:54:36: 91:53:24:69:ca:9f:88:2c:18:7e:ed:a0:58:8f:ec:52:45:47: 8a:68:09:87:71:44:d0:c2:6a:28:96:8d:b9:5c:e8:9b:51:40: f6:54:82:ec:52:2e:c1:32:c1:ad:77:7d:6c:c2:eb:e8:6e:4e: b9:8b:f2:dd:39:de:1f:39:c6:2a:ee:d5:39:c4:53:67:4d:42: 35:10:d4:76:07:d2:63:60:60:67:59:13:cd:d5:64:8e:f6:9e: f7:38:91:a7:94:ed:bb:54:ff:1d:0e:4a:93:95:c4:d8:64:cf: 7a:5b:50:38:a8:5d:ae:b4:46:59:72:b3:15:fb:a2:f8:9e:bc: d9:03:b9:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY59POUS/DofOgo2Piz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk OGQzMmIwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD EygzNjU0ZThmOTc0MjEzNmY3YTA5M2UzM2FmZjQzOWMwNDczYzZkYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgW88phx9bmB1oweJhMSkdSA8TwZ VlTSi73Rc/63biRe3n6NRoEJ8j9uyHO1ZuMYbZYfm+GdhKh3ZCYadZdcUvo/2RC5 eYQozS8ooOGFxXXFPxAzTQI6E6iH1uor/U+zLrFhrkXSNfC9igMHVVBKTxmXSsbe Jpsn05MfFKbvoDPGsq7QsuJiJJcsN2uj3aT6sTNwDx+dH88DHFIJcDFdVqwKBDmX 5llUfqk/zu5t4We7w7LBaTkbzg6oN/8UgE9b+4X2wHVt54wYhAKPmGkLuOWmQGP4 StesVZQ/A21vwme9CDP4VdSpdXxt24sGFQh7+c4LVRrTbrSrG1RKiUXJHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZU6Pl0ITb3oJPjOv9DnARzxttQMB8GA1UdIwQY MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0yVZt3a GBNizW+tyNsh44hTE800kxFz1ZdgBdquzKBItuvjTM0HNqUAfBWpUOj8DgVps6OC lzIWt+vzg/Bxzg7hFVc0ZS6qhCZR2EmuixCOYvGgu9Lly075X0L7uqG8z7EAttUn 7lbh0z0owzv+SgzNpQ+chYdY+DFmEVQ2kVMkacqfiCwYfu2gWI/sUkVHimgJh3FE 0MJqKJaNuVzom1FA9lSC7FIuwTLBrXd9bMLr6G5OuYvy3TneHznGKu7VOcRTZ01C NRDUdgfSY2BgZ1kTzdVkjvae9ziRp5Ttu1T/HQ5Kk5XE2GTPeltQOKhdrrRGWXKz Ffui+J682QO5vA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:08 2025 by rpki-client