This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json) Hash identifier: rcYkZphfMOI7QxkAtMTNpRCwrolJ16S1PehAIDCjOdg= Subject key identifier: B6:1A:6F:7B:C6:47:25:BD:6C:8A:F7:40:3C:47:08:C0:80:BB:C8:63 Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Certificate serial: 019AF208B149DDF47C9F2805DAFC68A2D10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft Manifest number: 0D34 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=) 2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: A7G8rLuFmdOWDO/f5KW7RPTPiepp8lA2jDKNjJPI2WM=) 3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:49:dd:f4:7c:9f:28:05:da:fc:68:a2:d1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=b61a6f7bc64725bd6c8af7403c4708c080bbc863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:7d:3d:a8:ab:ac:53:09:13:c5:d6:06:17: 83:de:27:b1:c9:8d:88:bc:3d:3b:10:b2:9b:11:99: c9:c6:37:74:f4:14:2b:c2:d4:79:4f:1c:8f:9d:14: 09:0a:6f:d9:aa:4d:75:ba:f8:49:32:34:d2:7c:12: ae:33:b4:16:dd:03:9e:7e:e2:ad:5a:02:de:8a:2c: df:84:e0:84:0f:4f:c1:ec:ab:f7:db:dc:79:57:39: ac:1b:fa:33:0e:40:98:8d:2b:92:f7:e6:df:c9:cd: ad:db:94:b4:45:ce:88:5d:85:9d:be:a5:1b:57:77: 10:07:1a:01:54:ab:25:22:30:81:45:7b:de:12:7f: df:df:8d:8c:60:87:98:af:2b:4d:63:86:7a:26:b6: bc:62:01:a9:2d:24:67:59:51:a4:9b:b0:f9:95:6b: d8:5f:e5:a5:40:e5:cd:74:15:16:9b:53:1a:2b:80: ae:8e:37:da:73:ed:32:76:f5:c9:73:75:8e:7a:e0: 9a:4e:77:c5:d7:43:ef:08:74:da:a0:42:2f:5e:3f: c4:8f:47:e4:cd:e3:5a:ef:a2:9a:c6:48:fa:e5:41: d7:8f:39:28:05:80:d9:ca:4f:56:91:46:61:ec:9b: 66:b8:80:21:51:bd:a8:42:58:dc:eb:34:ec:10:31: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:6F:7B:C6:47:25:BD:6C:8A:F7:40:3C:47:08:C0:80:BB:C8:63 X509v3 Authority Key Identifier: keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:03:03:bf:51:30:59:4c:0c:3a:8b:15:28:7a:6f:f7:98:cd: 2a:07:7c:e0:76:8f:57:f5:97:47:d9:92:a2:5a:e1:a8:1c:63: 60:55:cd:0e:05:6a:66:a7:2b:d7:d3:57:8f:36:43:46:85:c4: 60:c0:c0:d3:c3:91:db:87:27:a9:b8:11:d2:f5:f0:7e:c6:8a: 51:60:c5:48:77:04:b5:f0:bf:65:aa:03:09:08:54:11:2b:84: f6:09:c9:17:93:77:62:15:f1:83:83:73:11:75:a2:ba:79:de: c9:c3:ae:69:29:61:0e:9a:60:c5:73:8b:b9:e5:93:7c:ba:df: ee:7d:c1:9e:9e:5d:83:41:52:bf:9e:23:64:0d:29:ba:e9:2a: ad:19:41:5a:92:7e:a9:b6:da:b8:3d:25:24:7d:0d:5b:48:95: 16:60:73:e3:91:6a:dd:77:48:fc:90:3b:3b:05:d1:ec:31:fe: bd:a4:75:9f:a9:2a:92:d4:0b:68:bf:81:39:52:a4:77:7b:07: 57:ee:8b:9a:ab:e9:9c:36:9f:23:f5:c8:0c:03:0d:fb:78:ca: 36:a7:57:41:75:f7:5d:5b:c3:0f:2b:c2:d0:1e:2a:c6:13:80: 31:38:66:5f:56:78:7f:36:51:6c:99:3f:5b:e7:79:8a:1d:2f: d3:74:10:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLFJ3fR8nygF2vxootEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi MWRkNDYwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EyhiNjFhNmY3YmM2NDcyNWJkNmM4YWY3NDAzYzQ3MDhjMDgwYmJjODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol19PairrFMJE8XWBheD3iexyY2I vD07ELKbEZnJxjd09BQrwtR5TxyPnRQJCm/Zqk11uvhJMjTSfBKuM7QW3QOefuKt WgLeiizfhOCED0/B7Kv329x5VzmsG/ozDkCYjSuS9+bfyc2t25S0Rc6IXYWdvqUb V3cQBxoBVKslIjCBRXveEn/f342MYIeYrytNY4Z6Jra8YgGpLSRnWVGkm7D5lWvY X+WlQOXNdBUWm1MaK4Cujjfac+0ydvXJc3WOeuCaTnfF10PvCHTaoEIvXj/Ej0fk zeNa76Kaxkj65UHXjzkoBYDZyk9WkUZh7JtmuIAhUb2oQljc6zTsEDEKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYab3vGRyW9bIr3QDxHCMCAu8hjMB8GA1UdIwQY MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt MTAxNDRjMWJjYWZjLzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQMDv1Ew WUwMOosVKHpv95jNKgd84HaPV/WXR9mSolrhqBxjYFXNDgVqZqcr19NXjzZDRoXE YMDA08OR24cnqbgR0vXwfsaKUWDFSHcEtfC/ZaoDCQhUESuE9gnJF5N3YhXxg4Nz EXWiunneycOuaSlhDppgxXOLueWTfLrf7n3Bnp5dg0FSv54jZA0puukqrRlBWpJ+ qbbauD0lJH0NW0iVFmBz45Fq3XdI/JA7OwXR7DH+vaR1n6kqktQLaL+BOVKkd3sH V+6LmqvpnDafI/XIDAMN+3jKNqdXQXX3XVvDDyvC0B4qxhOAMThmX1Z4fzZRbJk/ W+d5ih0v03QQLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:04 2025 by rpki-client