This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json) Hash identifier: GuFl4cwe3AV+Notcwh1WpyEDEShgbfIlhP48lpqbZX8= Subject key identifier: 99:90:66:7A:92:42:47:FB:63:13:5C:30:89:91:39:3C:6D:81:32:BC Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37 Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337 Certificate serial: 019AF27685C48FBDA9DEE470B85FEEF2D829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=) 2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: k3DC0sOrecxvB2jFnIq9wk9XMhXEbEZn/JMiwXmN4EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:85:c4:8f:bd:a9:de:e4:70:b8:5f:ee:f2:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=9990667a924247fb63135c308991393c6d8132bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:4f:65:6b:b3:55:10:bb:6b:4a:7e:98:41: f6:51:ab:fc:1b:c6:82:f5:b8:fc:3a:2e:d5:48:6a: b1:87:d9:e9:db:85:4a:28:36:a4:fd:38:91:49:05: 88:5e:57:8b:28:e3:79:fb:d3:fe:30:3a:35:db:d2: 01:ef:88:5c:5a:f6:0d:cf:3b:a3:05:ea:81:d7:6b: 30:d1:a1:e7:e5:db:fd:1a:8c:34:05:8b:21:b4:ec: ab:28:ac:28:fa:5d:9b:6c:6a:d6:09:15:34:e0:f2: eb:bf:5b:b2:c8:32:4e:54:4a:4e:2e:08:82:95:2e: 27:6d:8c:b0:af:08:7f:9f:b7:00:4e:56:4b:d1:e2: 46:02:1f:77:7c:2b:97:73:d4:ae:da:b4:e9:8b:f0: b0:8d:96:28:3c:3b:6f:53:03:d7:0f:9e:4b:17:0a: 11:e6:64:b3:ef:d8:86:14:e2:98:a5:18:0a:a8:ab: 5e:8f:63:02:07:ca:31:db:84:ba:cc:2f:dd:8c:7a: 58:e8:db:77:e3:ba:2c:29:2e:df:ef:1d:7d:3f:97: 6d:95:0d:d0:5d:32:e7:3f:fe:06:e7:1f:cc:7e:0f: 5a:14:c5:e8:dc:97:a7:66:14:0b:0c:82:b7:e6:b0: e7:ae:23:e2:10:24:5e:06:f9:cc:74:9f:b1:a9:27: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:90:66:7A:92:42:47:FB:63:13:5C:30:89:91:39:3C:6D:81:32:BC X509v3 Authority Key Identifier: keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c7:04:3b:ef:cb:2e:c1:8c:e5:9a:e3:45:73:dc:16:3e:50: 33:75:b5:77:be:02:9d:94:91:44:c8:6d:fc:77:74:3d:8f:c2: 01:9c:46:73:3a:79:38:b8:de:5b:54:25:b3:a4:e4:74:25:33: 2a:76:c0:2f:b5:79:ab:19:76:ba:c1:ac:81:e6:12:d4:82:7e: 36:49:66:0d:89:bd:fd:eb:97:ab:2c:40:72:4c:fe:a1:6d:d2: 21:8a:af:2e:07:39:cb:6a:c9:df:b3:cf:58:1a:1d:5f:47:b5: be:bf:f4:e3:43:b8:20:59:62:69:a2:1e:b9:53:a5:29:3c:f1: 50:cc:63:31:9a:98:4b:cd:c0:cc:d2:1e:32:ca:e1:fa:4b:32: c3:ba:a6:7a:c5:35:18:0c:40:ae:1a:9c:aa:b7:30:d5:e5:26: c5:6b:d1:7c:e0:78:4d:26:a5:57:a2:a9:a7:2a:5b:a4:ca:a6: 4c:c3:bd:f2:ca:45:fe:9d:d0:fd:68:90:da:85:06:58:8b:40: d8:8f:c1:67:d5:da:5d:f6:62:67:50:9a:65:e4:b1:da:82:47: d0:67:db:3b:ff:21:b5:08:2c:4d:c7:fb:41:b3:35:dc:90:ab: 13:c4:3d:54:64:36:77:fb:b0:32:36:cf:58:36:a4:f0:b7:cf: ac:8b:f7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoXEj72p3uRwuF/u8tgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjg3YTJjMzA5ZDc1NTUzYTQ2ZTEwMjU3NzVlOWFhNDFm NmIzMzcwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg5OTkwNjY3YTkyNDI0N2ZiNjMxMzVjMzA4OTkxMzkzYzZkODEzMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GNPZWuzVRC7a0p+mEH2Uav8G8aC 9bj8Oi7VSGqxh9np24VKKDak/TiRSQWIXleLKON5+9P+MDo129IB74hcWvYNzzuj BeqB12sw0aHn5dv9Gow0BYshtOyrKKwo+l2bbGrWCRU04PLrv1uyyDJOVEpOLgiC lS4nbYywrwh/n7cATlZL0eJGAh93fCuXc9Su2rTpi/CwjZYoPDtvUwPXD55LFwoR 5mSz79iGFOKYpRgKqKtej2MCB8ox24S6zC/djHpY6Nt347osKS7f7x19P5dtlQ3Q XTLnP/4G5x/Mfg9aFMXo3JenZhQLDIK35rDnriPiECReBvnMdJ+xqScLnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmQZnqSQkf7YxNcMImROTxtgTK8MB8GA1UdIwQY MBaAFC+4eiwwnXVVOkbhAld16apB9rM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt NzcxN2ViMzE5MTYwLzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw LzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8cEO+/L LsGM5ZrjRXPcFj5QM3W1d74CnZSRRMht/Hd0PY/CAZxGczp5OLjeW1Qls6TkdCUz KnbAL7V5qxl2usGsgeYS1IJ+NklmDYm9/euXqyxAckz+oW3SIYqvLgc5y2rJ37PP WBodX0e1vr/040O4IFliaaIeuVOlKTzxUMxjMZqYS83AzNIeMsrh+ksyw7qmesU1 GAxArhqcqrcw1eUmxWvRfOB4TSalV6KppypbpMqmTMO98spF/p3Q/WiQ2oUGWItA 2I/BZ9XaXfZiZ1CaZeSx2oJH0GfbO/8htQgsTcf7QbM13JCrE8Q9VGQ2d/uwMjbP WDak8LfPrIv3SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:45 2025 by rpki-client