This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json) Hash identifier: Fq0h8GBG22byT1J4aVqvnW1B762BbUGaDAS92f3x0Qw= Subject key identifier: 95:04:6F:8A:85:25:CE:AD:B0:D8:18:71:91:CA:83:A1:9C:7C:E9:10 Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Certificate serial: 019AF540BA09C17E661326E93F5284627FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft Manifest number: 0731 Signing time: Sat 06 Dec 2025 20:00:50 +0000 Manifest this update: Sat 06 Dec 2025 20:00:50 +0000 Manifest next update: Sun 07 Dec 2025 20:00:50 +0000 Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: VCu5+r7Md1aa8f9ndvSMry5cjk5vrsZ/SR9I9VE5cVU=) 2: LN_2TO4-2cWGcghKrec6RsVvm3s.roa (hash: cO3Hgbh6AsMQbWDVBGe7Z58x/0lqi5Pdq2cGy4sWnEg=) 3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ba:09:c1:7e:66:13:26:e9:3f:52:84:62:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Validity Not Before: Dec 6 20:00:50 2025 GMT Not After : Dec 7 20:00:50 2025 GMT Subject: CN=95046f8a8525ceadb0d8187191ca83a19c7ce910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:c0:04:42:52:1f:c8:b2:64:15:6b:09:b9: 04:64:e1:cb:49:f0:b8:63:eb:c9:1d:03:c4:4f:dc: 27:ee:34:e6:03:eb:95:c7:76:c4:51:af:9f:68:23: 35:95:05:76:14:b5:e5:2a:81:9d:80:a4:54:4d:09: a5:cf:3d:65:0c:56:9a:45:35:c7:a9:91:3e:5c:b9: 3b:c7:ac:65:53:bf:99:b7:69:94:25:7d:22:66:ee: ba:a6:37:43:00:25:49:ae:35:47:a0:63:21:f0:5a: ee:23:28:4d:44:5b:e6:e1:8f:c7:7d:d0:7a:c2:c7: 46:a0:5e:a9:6f:a3:7e:77:a4:6e:d1:a0:86:45:9b: 6b:c6:45:52:42:a6:d8:14:78:bf:c5:44:65:38:4d: 49:6a:8a:45:26:45:70:a8:e7:16:a2:69:71:91:72: 61:cb:a3:0b:27:35:0e:4a:3f:47:1a:c6:ea:53:9e: a1:41:90:52:5d:d3:d8:e2:4b:b4:01:57:ad:08:2a: 7e:61:12:26:8c:1a:9d:6f:42:3e:1a:d2:28:d1:93: 4c:76:3c:02:21:34:aa:da:b3:f9:c5:9c:89:fa:1a: 9b:6f:61:e8:e9:81:e6:f4:bb:25:bc:13:50:8b:06: 25:3b:87:34:18:c1:bf:6e:45:a4:ea:aa:e7:4d:30: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:6F:8A:85:25:CE:AD:B0:D8:18:71:91:CA:83:A1:9C:7C:E9:10 X509v3 Authority Key Identifier: keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ba:fd:72:ff:03:7c:8b:d6:e0:65:16:43:de:4a:25:dd:23: 3f:02:94:1d:1f:36:94:b7:6e:94:4e:b1:54:35:56:4d:fd:55: 71:46:dc:9b:8f:dc:60:db:cc:8a:c8:ad:4e:58:5a:60:7b:dd: 61:9c:04:49:e6:90:45:1c:76:3a:62:c5:db:ab:a3:32:5f:ee: 2c:36:ff:60:14:f1:36:bf:a4:95:14:89:78:54:be:83:61:80: 28:02:42:bb:98:94:25:d2:07:37:b5:a5:ed:f1:1e:aa:3b:3f: 52:ce:83:b5:8b:ff:50:ac:da:75:ac:34:ec:5e:48:64:19:59: 66:7a:37:8f:4e:a4:0b:72:95:25:a8:86:0f:83:8b:c4:3a:15: 59:19:6e:93:f1:15:f6:78:e8:bc:b9:1e:5a:4d:ed:65:18:28: e6:56:d2:71:5a:78:09:bd:a1:7d:54:4b:9f:72:ed:60:04:81: 15:a6:a2:0d:8d:d1:d8:26:f9:f7:44:f5:1d:6a:8a:47:b4:a6: 30:5b:8d:e1:7f:d4:43:d4:fa:87:c8:24:c5:fd:53:05:89:f8: 64:08:fe:e3:31:d2:73:79:4c:4a:a8:e7:b9:f1:47:fd:22:1f: 53:c2:c8:58:a2:f0:d4:98:3d:7f:ee:76:b0:a6:b6:8e:1c:e8: e8:93:d7:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLoJwX5mEybpP1KEYn/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi OTczNDgwHhcNMjUxMjA2MjAwMDUwWhcNMjUxMjA3MjAwMDUwWjAzMTEwLwYDVQQD Eyg5NTA0NmY4YTg1MjVjZWFkYjBkODE4NzE5MWNhODNhMTljN2NlOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyHABEJSH8iyZBVrCbkEZOHLSfC4 Y+vJHQPET9wn7jTmA+uVx3bEUa+faCM1lQV2FLXlKoGdgKRUTQmlzz1lDFaaRTXH qZE+XLk7x6xlU7+Zt2mUJX0iZu66pjdDACVJrjVHoGMh8FruIyhNRFvm4Y/HfdB6 wsdGoF6pb6N+d6Ru0aCGRZtrxkVSQqbYFHi/xURlOE1JaopFJkVwqOcWomlxkXJh y6MLJzUOSj9HGsbqU56hQZBSXdPY4ku0AVetCCp+YRImjBqdb0I+GtIo0ZNMdjwC ITSq2rP5xZyJ+hqbb2Ho6YHm9LslvBNQiwYlO4c0GMG/bkWk6qrnTTC6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUEb4qFJc6tsNgYcZHKg6GcfOkQMB8GA1UdIwQY MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt YjJiNzk2MmMyZDgxLzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbr9cv8D fIvW4GUWQ95KJd0jPwKUHR82lLdulE6xVDVWTf1VcUbcm4/cYNvMisitTlhaYHvd YZwESeaQRRx2OmLF26ujMl/uLDb/YBTxNr+klRSJeFS+g2GAKAJCu5iUJdIHN7Wl 7fEeqjs/Us6DtYv/UKzadaw07F5IZBlZZno3j06kC3KVJaiGD4OLxDoVWRluk/EV 9njovLkeWk3tZRgo5lbScVp4Cb2hfVRLn3LtYASBFaaiDY3R2Cb590T1HWqKR7Sm MFuN4X/UQ9T6h8gkxf1TBYn4ZAj+4zHSc3lMSqjnufFH/SIfU8LIWKLw1Jg9f+52 sKa2jhzo6JPXVQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:52:43 2025 by rpki-client