This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft File: L6dldTzv6BbTiyUDeclXZqlvBtc.mft (raw, json) Hash identifier: eOmZxXkGknfQHIMx3/wFhMs5E7XCmI3s0zjA4YZ9amc= Subject key identifier: 40:C6:61:51:5E:96:24:A5:09:AF:6E:ED:B7:2C:1D:68:38:83:1E:8B Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7 Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7 Certificate serial: 019AF209872A7C01C8FFC61E22BF18804F29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft Manifest number: 1398 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: L6dldTzv6BbTiyUDeclXZqlvBtc.crl (hash: pSFxlsaGOPzDnyPhxXiG+BYOReP0zXmj74iiqN1JTok=) 2: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (hash: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:87:2a:7c:01:c8:ff:c6:1e:22:bf:18:80:4f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=40c661515e9624a509af6eedb72c1d6838831e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:86:4e:dd:b4:bb:11:56:4c:68:4d:f8:a6: cc:1d:71:37:92:c6:89:aa:30:19:ab:24:73:f4:7a: ec:c4:aa:ea:ac:b6:5b:ff:0f:2c:59:da:d2:55:cd: 69:8b:c6:57:27:de:f2:d1:d5:7c:b2:9a:12:03:27: 5e:44:59:f0:33:1d:44:60:c2:ef:71:c5:ce:f6:5f: 72:24:90:a8:d1:0e:3f:4d:a9:17:d0:50:17:a8:ba: ab:7c:5a:b9:c7:a0:f7:a4:92:8a:8d:ca:63:75:d8: 62:2a:72:26:f6:6f:7a:a8:07:2e:81:17:c1:1a:e2: 37:fb:7c:1c:4e:85:a2:83:22:49:ce:b1:a5:d7:30: 25:e1:e5:d7:5d:d6:06:64:52:dc:5a:08:a6:ed:ea: 27:ea:89:89:e6:c7:00:f2:58:34:29:e8:f0:0f:f3: a8:65:f0:11:8c:1c:52:c4:fd:20:f0:96:f5:4d:b4: e3:f5:31:8a:ae:45:1a:75:68:9f:3e:45:b1:1c:7f: 66:53:5e:58:3e:a5:da:88:ad:e8:1a:d9:03:d5:14: 4e:13:cb:58:a7:b5:43:99:95:c8:e6:b1:ac:e8:f8: df:ca:51:f7:63:92:4e:d8:89:4f:ba:aa:29:ab:bf: 0a:b9:cd:d1:98:4d:eb:cc:56:dd:83:2c:08:89:26: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:61:51:5E:96:24:A5:09:AF:6E:ED:B7:2C:1D:68:38:83:1E:8B X509v3 Authority Key Identifier: keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ae:c5:c4:3c:11:4f:29:6b:cb:45:1e:c8:fb:73:5d:81:fd: 66:11:cc:58:3c:e1:67:3f:0a:88:43:b8:9d:52:2f:15:70:f1: 2f:b3:48:e2:de:41:d5:40:78:4f:bd:8b:d8:a9:95:55:27:58: df:2e:01:f0:5b:a5:a4:b4:b6:c8:18:fa:17:c5:51:13:cd:d0: bc:a2:b8:4d:ad:fd:f3:b9:2a:0e:6f:14:83:25:32:f2:a5:a0: a9:f6:e8:99:e2:db:1b:c8:da:82:04:ba:4b:bd:13:43:d4:32: 5a:e3:c5:2f:27:1b:f6:d5:ef:27:74:08:b9:39:7e:71:9a:f9: ad:3c:27:f2:7e:8f:bf:9a:4f:fb:6d:7b:9d:8e:d6:06:79:07: 0c:10:3e:30:f6:47:ed:b5:99:2d:3c:11:e9:af:c9:e0:97:58: 42:d2:c6:d5:6c:21:40:87:46:c6:93:de:b8:34:98:28:16:6c: b1:f4:5a:f5:71:c0:99:60:99:7f:68:6a:91:99:8b:ee:32:20: 35:46:95:eb:8f:90:ad:8d:1d:45:3c:78:53:3d:31:1a:b5:c8: 52:02:63:66:2c:0e:66:a6:7d:db:02:33:71:13:20:48:bd:51: 12:48:97:ad:8a:39:67:a7:2b:91:b2:7d:6e:7b:71:39:2a:58: ba:33:81:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYcqfAHI/8YeIr8YgE8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTc2NTc1M2NlZmU4MTZkMzhiMjUwMzc5Yzk1NzY2YTk2 ZjA2ZDcwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg0MGM2NjE1MTVlOTYyNGE1MDlhZjZlZWRiNzJjMWQ2ODM4ODMxZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj2GTt20uxFWTGhN+KbMHXE3ksaJ qjAZqyRz9HrsxKrqrLZb/w8sWdrSVc1pi8ZXJ97y0dV8spoSAydeRFnwMx1EYMLv ccXO9l9yJJCo0Q4/TakX0FAXqLqrfFq5x6D3pJKKjcpjddhiKnIm9m96qAcugRfB GuI3+3wcToWigyJJzrGl1zAl4eXXXdYGZFLcWgim7eon6omJ5scA8lg0KejwD/Oo ZfARjBxSxP0g8Jb1TbTj9TGKrkUadWifPkWxHH9mU15YPqXaiK3oGtkD1RROE8tY p7VDmZXI5rGs6PjfylH3Y5JO2IlPuqopq78Kuc3RmE3rzFbdgywIiSbt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDGYVFeliSlCa9u7bcsHWg4gx6LMB8GA1UdIwQY MBaAFC+nZXU87+gW04slA3nJV2apbwbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTIt MWZjNjY0NmQxZTc3LzEvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNmQ3N2MtYTEwYS00N2FiLWI1NTItMWZjNjY0NmQxZTc3 LzEvTDZkbGRUenY2QmJUaXlVRGVjbFhacWx2QnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja7FxDwR Tylry0UeyPtzXYH9ZhHMWDzhZz8KiEO4nVIvFXDxL7NI4t5B1UB4T72L2KmVVSdY 3y4B8FulpLS2yBj6F8VRE83QvKK4Ta3987kqDm8UgyUy8qWgqfbomeLbG8jaggS6 S70TQ9QyWuPFLycb9tXvJ3QIuTl+cZr5rTwn8n6Pv5pP+217nY7WBnkHDBA+MPZH 7bWZLTwR6a/J4JdYQtLG1WwhQIdGxpPeuDSYKBZssfRa9XHAmWCZf2hqkZmL7jIg NUaV64+QrY0dRTx4Uz0xGrXIUgJjZiwOZqZ92wIzcRMgSL1REkiXrYo5Z6crkbJ9 bntxOSpYujOBlw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:06 2025 by rpki-client