This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft File: leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json) Hash identifier: 87IHxXGxMR4zYNIsaJPGjUQKYvM06v7tX6p6cUT6lZY= Subject key identifier: 91:50:87:25:8E:77:B6:15:98:18:B4:81:CE:FD:F8:4E:8C:A9:48:25 Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A Certificate issuer: /CN=95e05b194ae1be52969a5b4104557ff042c1602a Certificate serial: 019B36451E5038E710E2CA99CC7F72700A84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft Manifest number: 05DC Signing time: Fri 19 Dec 2025 11:00:57 +0000 Manifest this update: Fri 19 Dec 2025 11:00:57 +0000 Manifest next update: Sat 20 Dec 2025 11:00:57 +0000 Files and hashes: 1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: G9SjgHpmxw4b2W8vYnN1jnjNmkgJF0es7bXi0ZA31L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:1e:50:38:e7:10:e2:ca:99:cc:7f:72:70:0a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a Validity Not Before: Dec 19 11:00:57 2025 GMT Not After : Dec 20 11:00:57 2025 GMT Subject: CN=915087258e77b6159818b481cefdf84e8ca94825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:ff:d3:aa:28:98:f6:5e:78:a1:c3:4f:0c: 1e:1e:b8:fb:8a:00:b9:da:f0:20:9a:2f:2d:09:c9: 2b:ed:fe:20:50:9c:e5:da:6d:fe:69:3e:ed:cd:d2: 5c:09:77:0d:5e:a9:28:4e:37:dc:4b:c1:45:44:20: 5c:91:cb:ae:81:67:28:73:eb:0a:4b:db:e5:68:ed: 5c:d1:40:da:ad:9a:6b:55:af:d1:73:e5:eb:83:c3: 0b:e8:34:24:e0:55:cb:2b:05:ad:3e:00:bc:6d:03: 20:8a:70:fe:a4:25:4e:bf:40:93:7b:f8:8e:8d:c2: 27:32:ac:c7:c5:80:52:74:d7:5e:8b:87:6c:05:18: b2:bd:39:75:37:0d:cc:ef:86:f8:a4:8e:eb:98:3c: 7f:13:9c:98:46:38:fb:e6:5f:1d:e2:b8:61:e8:44: 36:09:53:a6:f1:b8:9f:7d:c7:11:e2:85:05:30:fe: e6:53:33:84:4c:16:2e:9f:8e:a3:52:d3:0c:15:f4: b4:85:cd:62:d0:d9:fb:b5:09:d7:da:c7:ad:9f:80: 3a:3b:68:9f:04:fd:01:2f:12:47:22:dd:18:27:68: 44:93:8e:31:a3:ba:81:91:60:2e:a1:0e:75:4e:15: d3:85:bd:71:85:87:19:f5:af:c2:be:f2:70:9c:6b: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:50:87:25:8E:77:B6:15:98:18:B4:81:CE:FD:F8:4E:8C:A9:48:25 X509v3 Authority Key Identifier: keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c3:02:83:97:ec:06:99:ac:df:44:4d:a4:6e:d2:7a:be:13: 56:aa:31:3d:1d:15:b5:51:ed:58:61:d8:18:66:bc:53:8b:83: ee:4b:a1:2a:c6:4c:99:30:98:aa:f8:4e:30:f2:b2:ba:7c:5c: c4:91:58:b7:49:15:81:6f:2c:bb:f3:41:7f:53:a8:fb:2a:4f: dd:eb:37:87:32:7f:55:48:41:7d:f7:0e:0f:eb:6a:fa:fe:dd: fd:32:93:51:4b:25:94:c6:da:a3:82:35:dd:94:93:ef:e4:56: cd:d0:cb:48:c2:3a:aa:ab:0a:e6:6e:9d:f7:a4:5d:46:d8:1f: 3b:25:21:55:4c:1f:8d:24:c6:d3:35:ba:48:9f:9c:33:59:08: f5:6a:5c:16:ca:01:8e:d4:ff:92:77:a6:7e:f6:b5:fa:eb:bf: ee:cd:5d:9e:4f:9a:83:fe:73:db:22:2f:3a:88:b3:09:53:c9: 2d:8a:a3:56:d1:f0:e2:dd:30:39:e4:05:57:74:da:b3:27:e9: 6d:63:7c:a4:49:fc:85:c7:fc:e0:42:ec:db:19:c5:69:0c:ef: dc:83:b7:3f:3a:ca:61:68:09:88:1d:19:5b:64:29:de:43:b2: 55:ac:4f:26:7f:8f:c2:47:0e:04:2b:42:df:85:49:3a:23:ad: 74:1e:72:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RR5QOOcQ4sqZzH9ycAqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZTA1YjE5NGFlMWJlNTI5NjlhNWI0MTA0NTU3ZmYwNDJj MTYwMmEwHhcNMjUxMjE5MTEwMDU3WhcNMjUxMjIwMTEwMDU3WjAzMTEwLwYDVQQD Eyg5MTUwODcyNThlNzdiNjE1OTgxOGI0ODFjZWZkZjg0ZThjYTk0ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCz/06oomPZeeKHDTwweHrj7igC5 2vAgmi8tCckr7f4gUJzl2m3+aT7tzdJcCXcNXqkoTjfcS8FFRCBckcuugWcoc+sK S9vlaO1c0UDarZprVa/Rc+Xrg8ML6DQk4FXLKwWtPgC8bQMginD+pCVOv0CTe/iO jcInMqzHxYBSdNdei4dsBRiyvTl1Nw3M74b4pI7rmDx/E5yYRjj75l8d4rhh6EQ2 CVOm8biffccR4oUFMP7mUzOETBYun46jUtMMFfS0hc1i0Nn7tQnX2setn4A6O2if BP0BLxJHIt0YJ2hEk44xo7qBkWAuoQ51ThXThb1xhYcZ9a/CvvJwnGt1NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFQhyWOd7YVmBi0gc79+E6MqUglMB8GA1UdIwQY MBaAFJXgWxlK4b5SlppbQQRVf/BCwWAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQt ZGQxODVjNzM1NWI4LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84ZWZjMGYtYjk2OC00NmVkLTk5MjQtZGQxODVjNzM1NWI4 LzEvbGVCYkdVcmh2bEtXbWx0QkJGVl84RUxCWUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8MCg5fs Bpms30RNpG7Ser4TVqoxPR0VtVHtWGHYGGa8U4uD7kuhKsZMmTCYqvhOMPKyunxc xJFYt0kVgW8su/NBf1Oo+ypP3es3hzJ/VUhBffcOD+tq+v7d/TKTUUsllMbao4I1 3ZST7+RWzdDLSMI6qqsK5m6d96RdRtgfOyUhVUwfjSTG0zW6SJ+cM1kI9WpcFsoB jtT/knemfva1+uu/7s1dnk+ag/5z2yIvOoizCVPJLYqjVtHw4t0wOeQFV3Tasyfp bWN8pEn8hcf84ELs2xnFaQzv3IO3PzrKYWgJiB0ZW2Qp3kOyVaxPJn+PwkcOBCtC 34VJOiOtdB5ysg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:21 2025 by rpki-client