This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json) Hash identifier: Z3Ptwdl6A5gXGydi6dc7xWxPQ8vQ9oeIzhTeyDeWI2E= Subject key identifier: 10:16:91:3C:6E:10:58:F7:63:9B:C7:8C:5E:4C:16:AB:9C:2D:BD:4E Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1 Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1 Certificate serial: 019AF12EC6336900E3EAD957A0C33DAEAA8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=) 2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: 6PDS2cgwyifLiGabjQEg1rc6rIguFZm1+qsYyHSwHFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c6:33:69:00:e3:ea:d9:57:a0:c3:3d:ae:aa:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=1016913c6e1058f7639bc78c5e4c16ab9c2dbd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:0c:49:c6:be:ce:00:c3:f9:8b:7d:55:a6: 08:af:11:ee:62:7d:b7:dd:c2:f8:3a:1d:4d:47:44: f8:f5:cd:2e:51:c9:cd:5f:20:7b:50:09:d5:5b:7c: 2c:cb:4a:9a:b9:11:d5:c5:b4:0a:8e:9d:59:9f:ae: 0f:a3:0a:23:a0:18:06:54:48:2d:a3:56:e5:89:94: f1:df:4a:bd:d1:c0:dd:1f:e9:71:01:53:58:e9:a4: 68:57:d5:de:02:a9:47:7f:58:20:f4:25:ca:f5:11: 03:cc:72:df:67:a3:69:39:a9:30:d1:84:f9:c8:6c: a8:41:39:77:8f:75:76:5f:7f:af:c2:af:3b:67:6a: f7:eb:2c:e1:23:1c:0d:92:bf:80:00:84:24:3d:5c: 2e:a9:0e:38:ac:25:57:34:cf:25:98:8e:f8:a9:22: 18:5d:fe:95:75:94:c6:38:16:0a:da:ae:51:8a:33: 17:60:73:40:26:59:1a:8d:73:6b:3a:cd:dc:fe:c0: 40:45:dd:99:bd:dc:90:f0:d4:95:86:55:5c:f8:05: 7d:4a:ff:a7:fa:da:65:7b:6f:26:88:9a:7a:4e:3f: 44:48:00:cd:bb:1d:de:07:48:91:41:1f:8c:59:87: 00:9a:80:ae:a0:de:9c:99:83:b6:d2:79:42:02:70: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:91:3C:6E:10:58:F7:63:9B:C7:8C:5E:4C:16:AB:9C:2D:BD:4E X509v3 Authority Key Identifier: keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b6:ce:e4:45:f7:a5:a0:9c:77:8e:2b:97:d9:ab:7a:5a:8e: e7:1c:94:f0:cd:a1:4a:33:15:b8:55:3f:e9:d7:7e:4c:4b:c5: f2:46:b3:a4:7e:fa:27:ff:36:37:9a:6d:fc:ec:44:88:da:ab: 1a:e3:4e:3a:60:c0:61:8d:14:b9:58:8e:0a:3a:2d:1c:07:4d: d1:05:c5:15:a5:39:1d:94:3b:62:d9:70:33:bf:78:99:b4:80: 68:f2:a4:2b:d1:49:8d:74:50:43:a6:1a:2f:5c:75:8a:af:79: 5e:ef:c5:75:27:4f:29:8c:98:e5:eb:2b:ba:ca:57:a2:27:6b: 84:d5:ee:15:c8:f1:88:01:16:dd:f8:61:59:5a:f3:8f:50:6d: aa:47:51:72:03:53:1a:d3:d7:b7:d5:2d:1b:bd:b0:86:8c:32: f4:3b:73:58:60:db:24:6d:0e:63:b9:9e:c6:cc:45:fa:0e:62: 83:43:0a:af:63:61:21:e6:f1:d3:9a:68:80:7f:13:64:2a:4c: 12:eb:61:3d:71:4e:02:95:c9:55:5a:e5:3f:b5:b2:b4:10:07: 41:8c:cc:c6:3a:51:70:d0:4d:24:ca:84:7e:5f:de:f1:29:46: 53:bc:af:b5:a0:63:2a:5d:f1:cb:80:fb:a5:9a:05:b6:ba:00: 14:4b:96:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsYzaQDj6tlXoMM9rqqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NmJhNjIyOWM0NTlkNzY5NWQzNTI5YjEyMDdlMmMyOWIw ODQyYjEwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EygxMDE2OTEzYzZlMTA1OGY3NjM5YmM3OGM1ZTRjMTZhYjljMmRiZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s0MSca+zgDD+Yt9VaYIrxHuYn23 3cL4Oh1NR0T49c0uUcnNXyB7UAnVW3wsy0qauRHVxbQKjp1Zn64PowojoBgGVEgt o1bliZTx30q90cDdH+lxAVNY6aRoV9XeAqlHf1gg9CXK9REDzHLfZ6NpOakw0YT5 yGyoQTl3j3V2X3+vwq87Z2r36yzhIxwNkr+AAIQkPVwuqQ44rCVXNM8lmI74qSIY Xf6VdZTGOBYK2q5RijMXYHNAJlkajXNrOs3c/sBARd2ZvdyQ8NSVhlVc+AV9Sv+n +tple28miJp6Tj9ESADNux3eB0iRQR+MWYcAmoCuoN6cmYO20nlCAnDT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAWkTxuEFj3Y5vHjF5MFqucLb1OMB8GA1UdIwQY MBaAFJdrpiKcRZ12ldNSmxIH4sKbCEKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjIt YzhlZTQ2NjQ4ZGJmLzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjItYzhlZTQ2NjQ4ZGJm LzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrbO5EX3 paCcd44rl9mrelqO5xyU8M2hSjMVuFU/6dd+TEvF8kazpH76J/82N5pt/OxEiNqr GuNOOmDAYY0UuViOCjotHAdN0QXFFaU5HZQ7YtlwM794mbSAaPKkK9FJjXRQQ6Ya L1x1iq95Xu/FdSdPKYyY5esruspXoidrhNXuFcjxiAEW3fhhWVrzj1BtqkdRcgNT GtPXt9UtG72whowy9DtzWGDbJG0OY7mexsxF+g5ig0MKr2NhIebx05pogH8TZCpM EuthPXFOApXJVVrlP7WytBAHQYzMxjpRcNBNJMqEfl/e8SlGU7yvtaBjKl3xy4D7 pZoFtroAFEuWtA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:56 2025 by rpki-client