This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft File: L74q18xpqV46gHH7M9-a96N5kos.mft (raw, json) Hash identifier: nuQcmwWviIHP/xqZSpxOp3n66sZkW0gSTmu2s7W597Y= Subject key identifier: 91:52:B1:D5:E4:0F:97:21:15:95:11:F1:37:5F:35:13:BF:B1:29:4A Authority key identifier: 2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B Certificate issuer: /CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b Certificate serial: 019AF19B87F083564CC272DDCC32438DF7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft Manifest number: 1703 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: IDDlMwm9-5ZOz6KG-dVFSUnj-U8.roa (hash: 1Nd8bcLLvnAmE61D+G0tQnrMjss8Eoxbsm1iIYgXgB4=) 2: L74q18xpqV46gHH7M9-a96N5kos.crl (hash: LcJOiy2Nnbb3v4Y1W9dGY6+KVTreb1pptxxuQN7v5VY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:87:f0:83:56:4c:c2:72:dd:cc:32:43:8d:f7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbe2ad7cc69a95e3a8071fb33df9af7a379928b Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=9152b1d5e40f9721159511f1375f3513bfb1294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:09:63:f9:2e:ca:d5:59:94:36:3d:90:de: cc:36:28:f5:32:c7:ac:6f:6c:e0:35:6c:8b:52:f6: 4f:99:16:d9:12:1a:66:19:51:a3:87:a9:5d:94:53: 7a:60:7f:09:51:3d:ab:77:d3:99:80:28:c3:0d:3e: 33:5b:9f:6d:d8:ae:12:56:5c:f0:b1:e6:10:92:48: 24:cc:cb:b8:6c:3d:af:7e:38:9f:93:8a:db:c0:46: 13:d5:87:09:ae:0b:af:58:43:d8:d4:8b:50:0d:07: 55:e6:a9:7d:ce:30:84:39:f2:86:02:f7:1a:82:8b: cd:f7:ef:26:2c:fa:3f:de:01:8f:a1:bb:a4:a3:bf: dc:ab:ca:d2:a7:6f:52:3f:48:97:fe:d2:9d:eb:39: ac:7d:0f:ba:46:52:e5:fb:27:aa:73:06:44:36:c6: 44:50:83:53:68:80:69:b7:71:ae:a6:cf:93:c9:61: 01:09:11:b9:b1:0c:1e:4f:16:38:c8:47:d6:1d:94: a1:02:95:8a:22:57:09:96:77:e0:07:b9:0e:94:66: 1b:b1:dc:14:b7:ae:6e:ec:45:31:24:62:3b:db:5e: 9a:cb:45:51:4c:dd:38:fa:26:39:a2:cf:f1:38:14: c7:51:46:d8:a1:6f:89:8d:f9:d7:c7:ac:5e:70:be: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:B1:D5:E4:0F:97:21:15:95:11:F1:37:5F:35:13:BF:B1:29:4A X509v3 Authority Key Identifier: keyid:2F:BE:2A:D7:CC:69:A9:5E:3A:80:71:FB:33:DF:9A:F7:A3:79:92:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L74q18xpqV46gHH7M9-a96N5kos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ad6954-af32-4996-bb69-2ed9f1cc2b0d/1/L74q18xpqV46gHH7M9-a96N5kos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:35:a3:b5:84:91:17:ce:2b:c9:8f:c4:c2:52:89:a4:c0: a1:26:95:fd:0c:91:4c:5f:8d:b1:7b:54:83:ae:20:c7:44:8a: 5c:ed:27:ce:79:6a:82:fc:08:14:89:63:8f:9d:94:b7:ab:2d: 89:2e:ba:ad:2d:bf:95:5a:aa:ec:23:b9:2b:98:e3:4c:f9:78: b7:8b:4b:b3:5b:81:73:2e:5a:35:ce:40:2e:e1:15:70:9b:8e: f8:0f:8d:08:24:32:8b:8e:01:9c:40:d4:bb:d2:da:22:64:fc: 56:c2:06:47:1a:ca:f6:a0:0d:21:d6:36:9d:65:aa:ef:46:79: 2e:17:6b:ac:48:f0:db:4c:df:fd:c7:9a:14:17:18:5c:33:34: d9:8c:a1:47:f9:e6:0f:d8:9e:e7:a7:ba:d7:f2:05:7d:88:61: b0:4e:75:58:fa:14:5b:17:ad:d3:79:41:6d:95:d1:22:e2:f5: 0a:06:71:37:9d:ca:47:12:66:64:31:e6:3c:61:46:c5:9b:1b: a9:19:7e:00:7e:24:93:0e:d7:c2:5e:bd:81:a6:de:3e:ad:64: ec:21:82:d1:87:42:01:7b:b6:fb:a0:79:61:21:34:8e:da:8a: 4c:8f:bf:6a:45:36:de:68:62:fd:6b:6b:15:53:65:56:e8:88: d7:52:ca:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4fwg1ZMwnLdzDJDjfflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmUyYWQ3Y2M2OWE5NWUzYTgwNzFmYjMzZGY5YWY3YTM3 OTkyOGIwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD Eyg5MTUyYjFkNWU0MGY5NzIxMTU5NTExZjEzNzVmMzUxM2JmYjEyOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OgJY/kuytVZlDY9kN7MNij1Mses b2zgNWyLUvZPmRbZEhpmGVGjh6ldlFN6YH8JUT2rd9OZgCjDDT4zW59t2K4SVlzw seYQkkgkzMu4bD2vfjifk4rbwEYT1YcJrguvWEPY1ItQDQdV5ql9zjCEOfKGAvca govN9+8mLPo/3gGPobuko7/cq8rSp29SP0iX/tKd6zmsfQ+6RlLl+yeqcwZENsZE UINTaIBpt3Gups+TyWEBCRG5sQweTxY4yEfWHZShApWKIlcJlnfgB7kOlGYbsdwU t65u7EUxJGI7216ay0VRTN04+iY5os/xOBTHUUbYoW+JjfnXx6xecL47gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFSsdXkD5chFZUR8TdfNRO/sSlKMB8GA1UdIwQY MBaAFC++KtfMaaleOoBx+zPfmvejeZKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hZDY5NTQtYWYzMi00OTk2LWJiNjkt MmVkOWYxY2MyYjBkLzEvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hZDY5NTQtYWYzMi00OTk2LWJiNjktMmVkOWYxY2MyYjBk LzEvTDc0cTE4eHBxVjQ2Z0hIN005LWE5Nk41a29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb701o7WE kRfOK8mPxMJSiaTAoSaV/QyRTF+NsXtUg64gx0SKXO0nznlqgvwIFIljj52Ut6st iS66rS2/lVqq7CO5K5jjTPl4t4tLs1uBcy5aNc5ALuEVcJuO+A+NCCQyi44BnEDU u9LaImT8VsIGRxrK9qANIdY2nWWq70Z5LhdrrEjw20zf/ceaFBcYXDM02YyhR/nm D9ie56e61/IFfYhhsE51WPoUWxet03lBbZXRIuL1CgZxN53KRxJmZDHmPGFGxZsb qRl+AH4kkw7Xwl69gabePq1k7CGC0YdCAXu2+6B5YSE0jtqKTI+/akU23mhi/Wtr FVNlVuiI11LKRg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:30 2025 by rpki-client