This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: RV026LliTupMqsRYI2CJ2sPgdYuTPu/LZxCKKgKJ8Fc= Subject key identifier: 4C:42:78:45:F1:87:2D:C4:B0:B6:CF:A8:4C:0E:F9:6A:FE:BD:0D:BF Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019AF2764A00B9A8D80312F04B5348887358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 152D Signing time: Sat 06 Dec 2025 07:00:29 +0000 Manifest this update: Sat 06 Dec 2025 07:00:29 +0000 Manifest next update: Sun 07 Dec 2025 07:00:29 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: tsXs9WkmP9Fn7yUglPHZoWV1MvQIWD++64M729/xMvA=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) 11: xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa (hash: 4OPLheoTg5k7mp/nUmmdqHwXsQWi3MUcdPRsarIm3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4a:00:b9:a8:d8:03:12:f0:4b:53:48:88:73:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Dec 6 07:00:29 2025 GMT Not After : Dec 7 07:00:29 2025 GMT Subject: CN=4c427845f1872dc4b0b6cfa84c0ef96afebd0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:a2:80:c4:0d:25:a2:36:d1:78:d7:d3:66: b6:d2:f8:c7:41:f8:6b:26:10:17:17:02:60:96:ba: 02:b0:a1:32:2b:6a:56:9f:e5:bc:0e:03:ec:e2:fb: ae:c9:38:6b:44:8c:b2:73:44:2f:bb:ab:b7:18:30: bc:0b:df:81:d1:77:06:f0:05:5c:ec:5e:94:70:00: 03:84:18:1d:83:7d:a2:5e:78:44:62:bb:56:2e:46: 68:ca:f2:f8:bc:bc:e3:cb:fa:52:c1:bc:3f:5a:5c: 7a:de:30:e0:90:27:b2:29:8b:07:29:4b:23:71:20: 0f:88:90:26:1e:c8:a1:0b:64:a3:cc:a6:34:61:c0: 3a:7f:7c:d6:51:ac:9e:5e:57:fc:45:18:53:02:a1: 2c:7e:f6:67:65:36:b9:c2:5d:09:ce:0e:a9:89:62: 63:be:c9:f0:9b:7f:6f:f3:51:b7:f6:eb:b5:29:af: 1f:a8:30:f4:b7:a7:ac:a3:3c:ec:e4:82:79:33:96: 5a:91:67:d2:f0:14:b3:ee:ae:69:01:43:34:00:90: 08:b6:a5:fb:7f:3c:f4:b0:0d:0a:33:fe:1d:06:5a: 51:6e:85:14:b4:a5:3d:a3:72:1e:4b:86:45:6b:b0: 74:6e:66:5a:e3:6e:66:89:b2:2b:f4:3b:ab:f2:c6: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:78:45:F1:87:2D:C4:B0:B6:CF:A8:4C:0E:F9:6A:FE:BD:0D:BF X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d6:cd:2b:54:0e:b3:18:4a:4e:b2:8c:3c:13:47:af:75:a4: 1d:27:b0:14:4b:96:1f:cf:ea:f2:c7:f1:4e:da:11:04:d1:1f: b3:07:9d:ab:77:20:3f:04:68:76:1e:cf:8f:61:b4:56:bc:bc: ab:bf:80:e0:a1:d3:18:20:c3:cb:2d:a6:dc:40:99:a2:94:e0: 02:72:1d:8f:2e:53:75:b5:2f:6c:36:09:33:69:ce:75:d6:77: 01:c3:63:40:88:ab:60:00:e1:36:ff:cc:56:a7:ea:1f:34:c7: 7c:ce:cd:11:14:ec:7b:72:b4:f4:05:f2:40:f3:06:f4:5a:80: 55:25:53:b8:2f:7d:9a:90:df:fb:d4:2b:9c:37:5e:8c:67:1f: e7:95:b5:05:a9:20:48:38:7a:95:da:a3:b6:02:63:a8:35:bd: c1:b5:3b:24:69:ca:69:1e:a6:31:63:9a:39:ae:a6:1a:25:18: b0:c1:e6:ee:19:8f:73:ca:6c:0c:c9:0f:c6:f4:93:47:a7:02: a4:82:5c:84:89:80:bc:44:b2:c5:94:22:09:5c:fe:d5:1c:57: c5:c5:71:eb:7d:9c:92:f8:2f:b6:b5:84:26:82:04:a2:14:79: cc:ef:cf:43:57:01:47:56:e4:76:d2:80:1d:3b:e5:92:93:16: 1b:4a:fa:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydkoAuajYAxLwS1NIiHNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMjA2MDcwMDI5WhcNMjUxMjA3MDcwMDI5WjAzMTEwLwYDVQQD Eyg0YzQyNzg0NWYxODcyZGM0YjBiNmNmYTg0YzBlZjk2YWZlYmQwZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVSigMQNJaI20XjX02a20vjHQfhr JhAXFwJglroCsKEyK2pWn+W8DgPs4vuuyThrRIyyc0Qvu6u3GDC8C9+B0XcG8AVc 7F6UcAADhBgdg32iXnhEYrtWLkZoyvL4vLzjy/pSwbw/Wlx63jDgkCeyKYsHKUsj cSAPiJAmHsihC2SjzKY0YcA6f3zWUayeXlf8RRhTAqEsfvZnZTa5wl0Jzg6piWJj vsnwm39v81G39uu1Ka8fqDD0t6esozzs5IJ5M5ZakWfS8BSz7q5pAUM0AJAItqX7 fzz0sA0KM/4dBlpRboUUtKU9o3IeS4ZFa7B0bmZa425mibIr9Dur8sYQ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExCeEXxhy3EsLbPqEwO+Wr+vQ2/MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtbNK1QO sxhKTrKMPBNHr3WkHSewFEuWH8/q8sfxTtoRBNEfswedq3cgPwRodh7Pj2G0Vry8 q7+A4KHTGCDDyy2m3ECZopTgAnIdjy5TdbUvbDYJM2nOddZ3AcNjQIirYADhNv/M VqfqHzTHfM7NERTse3K09AXyQPMG9FqAVSVTuC99mpDf+9QrnDdejGcf55W1Bakg SDh6ldqjtgJjqDW9wbU7JGnKaR6mMWOaOa6mGiUYsMHm7hmPc8psDMkPxvSTR6cC pIJchImAvESyxZQiCVz+1RxXxcVx632ckvgvtrWEJoIEohR5zO/PQ1cBR1bkdtKA HTvlkpMWG0r62Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:24 2025 by rpki-client