This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json) Hash identifier: VgJLW/wEDAvix1wiYOlo5UMUwdQKw5SW1C99L1w17qg= Subject key identifier: 67:77:64:80:CA:93:41:23:1F:91:7A:32:14:F6:66:76:DE:26:D6:7F Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Certificate serial: 019AF4659F45AAF03E9857A922513DC1FF43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: zEbuc8sUB1J3RlplFedb4c4Wgnbnb7/GbBayCle+moU=) 2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9f:45:aa:f0:3e:98:57:a9:22:51:3d:c1:ff:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=67776480ca9341231f917a3214f66676de26d67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:88:7e:38:d2:d1:6e:bb:d6:3d:3e:15:bb: a0:e2:fa:54:88:d6:44:06:f9:5f:ab:4a:92:b7:cf: c8:73:fe:a8:30:76:dc:70:38:bd:ce:8a:2b:a6:a5: 6c:96:34:90:c7:36:6b:d4:9d:c2:00:b1:8c:6f:42: 1f:fb:32:5b:6a:67:c5:eb:e9:05:d2:f8:6c:bd:34: 8a:c5:b6:5e:a1:71:4a:99:7a:51:e5:9f:57:72:04: 33:d5:bc:d1:49:3d:c8:d6:c0:18:e5:1d:7d:0a:da: 0f:77:7d:e0:8f:7e:8a:99:5f:df:b1:b5:22:c7:77: 16:c4:cf:f7:e6:0d:97:6e:83:b1:39:4e:4b:89:f0: b1:bb:63:b9:e8:c4:2b:b0:54:f3:74:d5:79:c7:e9: 1a:7d:d5:c4:45:51:da:4d:6e:99:8c:d9:81:67:c1: e1:df:e6:a5:de:c8:aa:a3:3a:e8:92:82:fc:79:51: 10:18:63:09:c8:8e:3a:a4:71:ac:6d:c8:64:85:3c: ce:78:13:06:88:57:1d:5d:6f:d3:be:7d:03:6c:e4: 19:8a:87:de:00:ae:03:86:e5:f9:2e:23:3a:30:ce: 0a:c3:c8:1f:8c:4e:73:52:9c:24:55:6b:d9:48:7d: e6:65:9d:ad:f5:69:1c:12:8d:f2:60:19:2c:30:87: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:64:80:CA:93:41:23:1F:91:7A:32:14:F6:66:76:DE:26:D6:7F X509v3 Authority Key Identifier: keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:16:c8:19:4c:57:a0:09:17:c0:81:05:bb:e2:72:07:34: a0:2e:b3:c3:70:f3:e2:ea:a7:77:50:89:95:85:80:3f:a0:51: 1f:55:e2:c6:f8:1d:2d:20:ca:34:b0:8d:9d:20:3d:82:fc:ff: fd:82:d0:bc:4e:a5:8f:a3:b8:85:dd:64:74:f9:e6:d6:1e:28: 28:7a:37:99:00:9c:83:16:7d:81:24:93:cb:b2:28:64:bc:27: 42:31:10:85:fb:be:37:d1:92:d7:97:33:0c:7c:43:6f:8b:df: 24:8e:d8:c0:20:de:f0:2b:d1:d5:37:5a:1c:6a:e4:2d:e4:2d: f6:81:a9:ea:3b:8b:9f:60:cc:a8:cf:29:6f:b0:22:71:39:ac: 44:5d:78:c4:cd:cd:93:92:a4:92:a6:9e:34:be:53:99:d3:be: ab:d7:11:58:ac:cf:b0:d2:cb:2b:42:ca:9a:c2:46:6a:ee:d6: 5b:fa:24:37:57:29:d3:db:da:10:d3:3f:72:54:9e:0a:b1:7b: 1a:d9:c4:9f:f0:73:a8:0b:c0:3d:b9:bb:30:5b:0f:8d:89:00: 78:0d:ad:28:e8:94:23:99:79:97:14:15:9e:f3:d2:77:ff:08: 6a:4b:a0:60:17:df:c1:eb:71:1a:39:fb:d3:21:e7:da:e4:0c: 34:4f:e7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZ9FqvA+mFepIlE9wf9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmYwN2NlYWQwNmE0ZjgxMTU0NzYwMGJhYzAyZmFmMGNj MDg0YzkwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD Eyg2Nzc3NjQ4MGNhOTM0MTIzMWY5MTdhMzIxNGY2NjY3NmRlMjZkNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEKIfjjS0W671j0+Fbug4vpUiNZE Bvlfq0qSt8/Ic/6oMHbccDi9zoorpqVsljSQxzZr1J3CALGMb0If+zJbamfF6+kF 0vhsvTSKxbZeoXFKmXpR5Z9XcgQz1bzRST3I1sAY5R19CtoPd33gj36KmV/fsbUi x3cWxM/35g2XboOxOU5LifCxu2O56MQrsFTzdNV5x+kafdXERVHaTW6ZjNmBZ8Hh 3+al3siqozrokoL8eVEQGGMJyI46pHGsbchkhTzOeBMGiFcdXW/Tvn0DbOQZiofe AK4DhuX5LiM6MM4Kw8gfjE5zUpwkVWvZSH3mZZ2t9WkcEo3yYBksMIe2iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd3ZIDKk0EjH5F6MhT2ZnbeJtZ/MB8GA1UdIwQY MBaAFC9vB86tBqT4EVR2ALrAL68MwITJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAt MDQ3Y2JjMzEwY2NiLzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAtMDQ3Y2JjMzEwY2Ni LzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHoWyBlM V6AJF8CBBbvicgc0oC6zw3Dz4uqnd1CJlYWAP6BRH1XixvgdLSDKNLCNnSA9gvz/ /YLQvE6lj6O4hd1kdPnm1h4oKHo3mQCcgxZ9gSSTy7IoZLwnQjEQhfu+N9GS15cz DHxDb4vfJI7YwCDe8CvR1TdaHGrkLeQt9oGp6juLn2DMqM8pb7AicTmsRF14xM3N k5KkkqaeNL5TmdO+q9cRWKzPsNLLK0LKmsJGau7WW/okN1cp09vaENM/clSeCrF7 GtnEn/BzqAvAPbm7MFsPjYkAeA2tKOiUI5l5lxQVnvPSd/8IakugYBffwetxGjn7 0yHn2uQMNE/nNA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:30 2025 by rpki-client