This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json) Hash identifier: /yWrkfKnSy2qYMsUAv0u4SJTerYocEMy2LavsXypi8M= Subject key identifier: 19:83:EB:25:D3:D2:C6:ED:54:2D:36:F1:44:19:18:38:B9:FD:87:BF Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Certificate serial: 019AF23F70427E15665C13A0E4292F4A5BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft Manifest number: 0B64 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: M7FqPTPrLBo0rDoFrCf4Cs4WmdhjsNgJE1nMtr4adIw=) 2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:42:7e:15:66:5c:13:a0:e4:29:2f:4a:5b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=1983eb25d3d2c6ed542d36f144191838b9fd87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:e0:14:c4:08:2a:33:e2:28:4c:88:b7:3b: 75:2f:f3:d0:e1:e3:d2:33:8f:b0:b7:bf:5f:32:d2: 97:97:ca:67:32:05:dd:a6:8e:4a:e1:d0:7d:1e:89: f4:4a:37:21:bd:5a:9d:60:c6:ca:0e:c7:27:b3:9d: c7:5b:76:05:ce:bf:29:5c:0a:ef:a1:cb:ea:6c:f1: 44:e8:79:88:1e:1d:d1:f1:8d:87:d8:3a:77:03:53: 1e:c8:c6:15:c7:d0:76:f0:32:ad:af:82:d3:07:43: da:0e:80:92:ec:c4:30:fe:7b:0e:eb:35:2a:7f:21: d8:48:75:6c:0b:9a:aa:48:db:24:51:cf:f2:32:78: 63:8b:d9:c8:b8:12:70:04:99:ff:3d:03:77:43:56: 58:ad:d0:b9:b9:37:92:88:11:b7:7e:67:5d:ab:ce: 70:15:09:46:be:6d:38:6c:63:b7:07:ef:d3:27:c6: a7:ac:bb:25:0c:c2:55:d6:cb:7e:41:14:9a:af:ae: c3:53:c9:90:09:de:03:37:59:66:eb:99:ca:1c:91: f0:96:8d:1d:dd:ee:e6:da:83:2d:43:50:38:a2:e8: 4c:a1:87:0a:6a:11:d6:fd:3f:49:bf:f2:70:bf:34: 73:36:81:f6:dd:9e:0b:a0:b1:c3:e5:53:44:c4:19: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:EB:25:D3:D2:C6:ED:54:2D:36:F1:44:19:18:38:B9:FD:87:BF X509v3 Authority Key Identifier: keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:16:a4:80:5e:96:09:64:c7:0b:85:90:db:ae:f1:38:98:f3: 3a:f2:5f:e1:bb:2d:a8:d9:e7:c2:29:f4:1b:ca:e3:e2:20:07: e6:71:79:54:66:d8:02:37:33:42:ae:92:0d:2f:c9:a1:ec:d0: bf:50:c9:a8:c2:bf:3f:5c:9a:d2:ba:41:c7:89:08:e2:60:7f: 38:30:dc:fb:9b:54:63:2f:03:af:0d:51:a3:46:5e:27:7b:7b: d3:bc:59:31:0f:04:14:fc:ff:a6:0f:22:76:7c:ca:b6:94:bf: c8:11:8b:05:68:79:41:ec:35:55:90:8d:79:88:ec:a5:29:cd: 2a:f7:eb:8b:ab:ca:20:a2:f3:cf:4f:c0:02:60:d3:ff:35:17: 5d:a4:83:8f:8c:61:1f:60:fc:50:c1:f6:da:dc:0f:0b:e1:23: 8c:ca:c8:0a:75:ce:80:81:f7:96:f4:42:7a:fb:81:a6:96:63: c8:a2:d2:b3:7e:d1:81:95:be:40:79:6d:a2:10:e1:c6:f6:ef: a4:91:9d:6f:55:c0:ea:b5:88:f8:1b:24:30:78:84:aa:cd:c3: cd:c1:72:47:ca:3e:7f:a1:40:1c:b0:98:00:5d:71:07:90:fb: 51:ed:77:11:03:c9:d5:36:d2:d7:57:cd:ce:98:0f:e8:81:24: c4:86:69:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3BCfhVmXBOg5CkvSlvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj MTZhODUwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EygxOTgzZWIyNWQzZDJjNmVkNTQyZDM2ZjE0NDE5MTgzOGI5ZmQ4N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutngFMQIKjPiKEyItzt1L/PQ4ePS M4+wt79fMtKXl8pnMgXdpo5K4dB9Hon0SjchvVqdYMbKDscns53HW3YFzr8pXArv ocvqbPFE6HmIHh3R8Y2H2Dp3A1MeyMYVx9B28DKtr4LTB0PaDoCS7MQw/nsO6zUq fyHYSHVsC5qqSNskUc/yMnhji9nIuBJwBJn/PQN3Q1ZYrdC5uTeSiBG3fmddq85w FQlGvm04bGO3B+/TJ8anrLslDMJV1st+QRSar67DU8mQCd4DN1lm65nKHJHwlo0d 3e7m2oMtQ1A4ouhMoYcKahHW/T9Jv/JwvzRzNoH23Z4LoLHD5VNExBn5BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmD6yXT0sbtVC028UQZGDi5/Ye/MB8GA1UdIwQY MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt YzNiYjg0NzYwMGNkLzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxakgF6W CWTHC4WQ267xOJjzOvJf4bstqNnnwin0G8rj4iAH5nF5VGbYAjczQq6SDS/JoezQ v1DJqMK/P1ya0rpBx4kI4mB/ODDc+5tUYy8Drw1Ro0ZeJ3t707xZMQ8EFPz/pg8i dnzKtpS/yBGLBWh5Qew1VZCNeYjspSnNKvfri6vKIKLzz0/AAmDT/zUXXaSDj4xh H2D8UMH22twPC+EjjMrICnXOgIH3lvRCevuBppZjyKLSs37RgZW+QHltohDhxvbv pJGdb1XA6rWI+BskMHiEqs3DzcFyR8o+f6FAHLCYAF1xB5D7Ue13EQPJ1TbS11fN zpgP6IEkxIZpTA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:15 2025 by rpki-client