This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft File: L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json) Hash identifier: qkLqGCJcJ81jUe357K6QqRhMeYyOjas3izweYUAmjZk= Subject key identifier: 09:E3:CF:22:AE:F1:85:C7:CC:70:E5:B0:61:42:15:4E:19:74:32:49 Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f Certificate serial: 019AF49C5F9C63B7865B9E6FA839D6932D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft Manifest number: 107E Signing time: Sat 06 Dec 2025 17:01:19 +0000 Manifest this update: Sat 06 Dec 2025 17:01:19 +0000 Manifest next update: Sun 07 Dec 2025 17:01:19 +0000 Files and hashes: 1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=) 2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: ipHgBcVovqpvDA5urgHzdTJnSYhR9pLRtFkTHVBlNwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5f:9c:63:b7:86:5b:9e:6f:a8:39:d6:93:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f Validity Not Before: Dec 6 17:01:19 2025 GMT Not After : Dec 7 17:01:19 2025 GMT Subject: CN=09e3cf22aef185c7cc70e5b06142154e19743249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:eb:3d:11:7f:c6:70:94:9b:d3:51:93:26: 4a:2f:ef:9e:37:6a:67:1f:5a:c2:0e:56:49:d1:2b: 4b:bb:a5:33:b3:b9:3c:e3:97:95:c2:f0:4c:5d:3b: 15:85:ba:54:c9:02:d7:37:3c:66:56:1b:0d:e1:e0: a8:90:4a:89:0c:8e:de:19:5b:b1:41:17:2c:7c:a6: 08:84:c4:b1:25:e2:4d:47:e8:39:5d:4b:53:82:6e: f7:3c:7d:96:62:aa:14:29:7c:96:6b:dd:a4:54:d6: a7:44:7a:6f:8c:19:9a:c4:41:02:fc:d8:92:61:8d: b9:fe:75:12:57:8a:ce:41:04:00:ba:71:4b:9b:08: 12:d6:4d:f6:87:8e:fd:43:da:ce:f4:15:00:2a:fd: 70:68:36:60:a5:01:0a:22:1a:22:ee:84:04:d3:8b: 24:8b:6b:f8:fc:35:d8:58:56:41:7f:ed:f3:c9:03: c0:c6:eb:66:af:9e:95:24:98:f8:2f:bf:ef:3f:66: 1d:70:9e:e4:61:ae:3d:d2:1f:b4:44:ce:8d:95:a9: 1a:86:78:04:ee:9e:b6:ca:ff:89:ef:3f:7d:05:5b: bb:72:a1:2f:ea:93:49:a8:0b:e8:12:29:3c:a0:cf: 48:d3:d5:e7:3f:1d:67:5d:53:a9:50:c5:9c:3b:a3: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E3:CF:22:AE:F1:85:C7:CC:70:E5:B0:61:42:15:4E:19:74:32:49 X509v3 Authority Key Identifier: keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:f7:17:c6:6f:41:d0:df:24:b1:e8:d6:6c:f8:89:e9:7e: 58:c7:8e:cc:72:99:5a:06:ea:09:e3:cc:c4:4f:a0:eb:33:e0: 05:51:b9:41:a9:70:89:45:e4:b0:ba:d4:c2:a1:0e:d1:ea:b1: 87:48:d8:39:7f:45:ee:28:37:a0:ff:04:95:27:49:db:d6:90: 10:d1:b3:08:71:22:82:bf:fb:16:da:75:90:7d:da:fb:da:cf: 4a:fb:fe:d5:4d:f2:a2:bd:57:05:06:98:fe:8f:03:54:50:80: 15:bb:97:da:c6:59:bb:df:86:ea:d5:8e:c0:2a:8e:c4:d8:f7: 07:59:87:e7:87:cd:37:33:14:0f:0d:5d:02:ef:b7:4c:bc:75: ae:d1:4c:d1:a2:47:93:11:b4:f5:26:49:44:f5:91:f1:e7:2c: 99:9f:f8:11:66:a2:4e:d1:48:66:a6:93:f7:24:14:1f:af:72: 99:5f:90:e4:9d:20:85:4f:0e:13:5e:0e:5a:84:ff:60:ce:6b: 17:b0:20:f0:55:36:22:a7:86:5a:e1:e5:ea:d2:59:ea:bf:8f: 0e:1c:4e:01:5b:dc:7b:f4:9c:41:90:12:04:bf:78:c6:90:b4: 0b:c9:4d:e2:ad:c9:e2:df:4a:9b:9a:70:ab:4e:15:d5:e2:24: 6b:f1:29:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nF+cY7eGW55vqDnWky1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy YWI0M2YwHhcNMjUxMjA2MTcwMTE5WhcNMjUxMjA3MTcwMTE5WjAzMTEwLwYDVQQD EygwOWUzY2YyMmFlZjE4NWM3Y2M3MGU1YjA2MTQyMTU0ZTE5NzQzMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDrrPRF/xnCUm9NRkyZKL++eN2pn H1rCDlZJ0StLu6Uzs7k845eVwvBMXTsVhbpUyQLXNzxmVhsN4eCokEqJDI7eGVux QRcsfKYIhMSxJeJNR+g5XUtTgm73PH2WYqoUKXyWa92kVNanRHpvjBmaxEEC/NiS YY25/nUSV4rOQQQAunFLmwgS1k32h479Q9rO9BUAKv1waDZgpQEKIhoi7oQE04sk i2v4/DXYWFZBf+3zyQPAxutmr56VJJj4L7/vP2YdcJ7kYa490h+0RM6NlakahngE 7p62yv+J7z99BVu7cqEv6pNJqAvoEik8oM9I09XnPx1nXVOpUMWcO6NyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnjzyKu8YXHzHDlsGFCFU4ZdDJJMB8GA1UdIwQY MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt OTVkNjBiM2U0NmNjLzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcb3F8Zv QdDfJLHo1mz4iel+WMeOzHKZWgbqCePMxE+g6zPgBVG5QalwiUXksLrUwqEO0eqx h0jYOX9F7ig3oP8ElSdJ29aQENGzCHEigr/7Ftp1kH3a+9rPSvv+1U3yor1XBQaY /o8DVFCAFbuX2sZZu9+G6tWOwCqOxNj3B1mH54fNNzMUDw1dAu+3TLx1rtFM0aJH kxG09SZJRPWR8ecsmZ/4EWaiTtFIZqaT9yQUH69ymV+Q5J0ghU8OE14OWoT/YM5r F7Ag8FU2IqeGWuHl6tJZ6r+PDhxOAVvce/ScQZASBL94xpC0C8lN4q3J4t9Km5pw q04V1eIka/EpQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:32 2025 by rpki-client