This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft File: L6dldTzv6BbTiyUDeclXZqlvBtc.mft (raw, json) Hash identifier: ZmTNEAxiWl+3bwBQypZY/hatUbRLdM2SK4SvFKYDuJY= Subject key identifier: 91:79:57:E1:43:45:BB:76:5E:92:82:C2:3B:59:A6:CD:1C:57:BC:4C Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7 Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7 Certificate serial: 019B243E96352CF85C43749AA8FE13865BE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft Manifest number: 13B2 Signing time: Mon 15 Dec 2025 23:00:39 +0000 Manifest this update: Mon 15 Dec 2025 23:00:39 +0000 Manifest next update: Tue 16 Dec 2025 23:00:39 +0000 Files and hashes: 1: L6dldTzv6BbTiyUDeclXZqlvBtc.crl (hash: TbFKLE94PTEwrLK6uVMKolThwpawCzyC6tKv3+FASkU=) 2: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (hash: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:96:35:2c:f8:5c:43:74:9a:a8:fe:13:86:5b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7 Validity Not Before: Dec 15 23:00:39 2025 GMT Not After : Dec 16 23:00:39 2025 GMT Subject: CN=917957e14345bb765e9282c23b59a6cd1c57bc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:c5:55:51:36:90:7e:19:ed:39:34:c4:38: ea:f8:75:d0:3a:85:b4:d2:eb:35:b5:33:b4:ec:66: 6e:6a:f2:f1:58:ca:d2:22:0a:63:58:d7:f9:df:db: 33:a2:dc:be:aa:62:ae:98:02:82:76:6e:c1:f9:88: 14:d7:ec:ed:02:a9:f9:a1:31:71:10:28:3b:8e:5a: e0:42:d8:b1:af:f0:55:8f:87:4c:a3:c5:fd:24:62: 7d:5b:57:69:44:c0:21:cb:28:fd:93:be:dc:0e:dc: cd:92:2a:b8:91:48:1a:c2:eb:2d:3f:2c:28:3b:bd: 4b:51:b3:50:bc:0c:a4:f7:e6:21:10:04:3e:de:a0: 19:ff:b9:44:7a:eb:c5:41:9c:b7:98:81:23:5a:a8: 37:8c:3a:bb:52:7f:3f:43:f3:e2:bd:70:98:7d:8e: 9f:b1:8f:99:5a:bf:e5:c8:c5:2c:2b:fb:fc:2b:a0: 1f:03:bc:69:ae:e1:7d:b7:97:d4:c9:1b:af:1b:a6: fb:79:cd:d6:96:09:a3:90:65:49:99:f6:d6:13:0c: 49:9f:e1:a9:53:f6:61:24:8f:10:f0:99:05:35:28: 6d:6c:95:8f:c0:98:97:1e:dc:a1:20:cf:ed:51:a2: 63:9b:a6:38:8c:74:6a:0a:a3:ed:25:0b:9c:05:7f: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:79:57:E1:43:45:BB:76:5E:92:82:C2:3B:59:A6:CD:1C:57:BC:4C X509v3 Authority Key Identifier: keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:54:57:ee:27:5a:ff:d1:49:c3:60:e4:d0:05:28:59:bc:2b: 5a:f4:0b:16:40:a9:ae:1c:fb:11:91:48:62:b1:e4:9d:b9:c0: 1f:d0:47:d4:9a:0b:9d:f9:85:52:b2:0d:5a:5a:3e:c0:cf:cb: c6:3c:ce:a4:c4:bb:84:02:15:d7:d1:ce:d9:e5:3e:c9:8d:20: 2d:09:41:1b:c7:1d:e3:d9:6b:06:05:74:99:cc:2f:09:77:7c: 57:02:61:82:99:d2:b7:a9:03:70:90:51:3e:7d:ed:b0:dd:ef: f7:54:10:ee:67:31:ad:c2:66:39:20:53:a0:42:fd:ad:fb:f2: 01:d0:d1:7d:74:8a:fe:8a:9c:e2:e6:ef:33:1a:96:b7:49:84: 0e:e2:ce:be:f4:d7:ad:61:06:f6:09:78:12:ba:b3:72:d2:2f: 12:f9:a8:75:16:9c:17:89:7c:e6:9c:b3:57:1a:41:ad:86:13: b9:b0:f4:aa:62:9c:58:b5:65:85:23:07:41:e7:c1:43:3e:e7: 46:da:6f:5e:0b:1a:61:a9:e2:91:10:9d:77:40:48:11:21:94: 10:60:47:ec:9a:a8:42:93:2a:f3:88:42:49:18:00:e2:0c:38: 20:94:59:08:70:02:d0:f8:65:8a:84:78:bf:ec:d8:4e:5e:8b: 28:48:b3:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPpY1LPhcQ3SaqP4ThlvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTc2NTc1M2NlZmU4MTZkMzhiMjUwMzc5Yzk1NzY2YTk2 ZjA2ZDcwHhcNMjUxMjE1MjMwMDM5WhcNMjUxMjE2MjMwMDM5WjAzMTEwLwYDVQQD Eyg5MTc5NTdlMTQzNDViYjc2NWU5MjgyYzIzYjU5YTZjZDFjNTdiYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSHFVVE2kH4Z7Tk0xDjq+HXQOoW0 0us1tTO07GZuavLxWMrSIgpjWNf539szoty+qmKumAKCdm7B+YgU1+ztAqn5oTFx ECg7jlrgQtixr/BVj4dMo8X9JGJ9W1dpRMAhyyj9k77cDtzNkiq4kUgawustPywo O71LUbNQvAyk9+YhEAQ+3qAZ/7lEeuvFQZy3mIEjWqg3jDq7Un8/Q/PivXCYfY6f sY+ZWr/lyMUsK/v8K6AfA7xpruF9t5fUyRuvG6b7ec3WlgmjkGVJmfbWEwxJn+Gp U/ZhJI8Q8JkFNShtbJWPwJiXHtyhIM/tUaJjm6Y4jHRqCqPtJQucBX8BLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF5V+FDRbt2XpKCwjtZps0cV7xMMB8GA1UdIwQY MBaAFC+nZXU87+gW04slA3nJV2apbwbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTIt MWZjNjY0NmQxZTc3LzEvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTItMWZjNjY0NmQxZTc3 LzEvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVRX7ida /9FJw2Dk0AUoWbwrWvQLFkCprhz7EZFIYrHknbnAH9BH1JoLnfmFUrINWlo+wM/L xjzOpMS7hAIV19HO2eU+yY0gLQlBG8cd49lrBgV0mcwvCXd8VwJhgpnSt6kDcJBR Pn3tsN3v91QQ7mcxrcJmOSBToEL9rfvyAdDRfXSK/oqc4ubvMxqWt0mEDuLOvvTX rWEG9gl4ErqzctIvEvmodRacF4l85pyzVxpBrYYTubD0qmKcWLVlhSMHQefBQz7n RtpvXgsaYanikRCdd0BIESGUEGBH7JqoQpMq84hCSRgA4gw4IJRZCHAC0PhlioR4 v+zYTl6LKEizAw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:55 2025 by rpki-client