This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json) Hash identifier: Nxtzm2MzZhurWm94njfboZTrbikv0VgnIR8u6SLDDHg= Subject key identifier: 8B:74:6A:8B:51:AB:05:21:5C:AF:6D:FE:95:55:FA:80:A3:94:73:4D Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Certificate serial: 019AF12E8A4DBC20C33F2FA6310D73B9E161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: 3XEcaaPkhAGXpLLU7rq5SGkv1XKRZiYQaiR2pK7qQjo=) 2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8a:4d:bc:20:c3:3f:2f:a6:31:0d:73:b9:e1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=8b746a8b51ab05215caf6dfe9555fa80a394734d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:a5:ea:66:27:f9:58:c6:7a:84:07:74:5b: c4:65:8f:7b:52:01:1b:72:a4:ab:2a:ee:df:a2:0d: 56:53:ed:2c:63:06:ba:6d:37:f8:e5:bb:90:40:64: c8:1f:d5:eb:eb:cc:fc:0d:18:8a:92:08:73:d7:36: 9a:4c:2d:c1:3b:ca:f9:7c:9a:9d:46:4d:1b:e5:f1: 66:47:ce:6c:45:9d:20:79:17:5a:87:ab:c0:11:a6: 8a:cb:46:36:d3:8c:27:52:65:a6:42:01:e4:f8:76: f6:7d:88:88:92:86:14:c2:24:82:71:3c:30:d8:eb: de:c2:ca:1f:ac:3d:84:cb:83:ca:a9:da:91:b1:d5: 7a:8e:2c:a7:30:55:46:cd:57:ac:f6:4c:fb:be:cd: dc:08:aa:9b:aa:51:e1:f7:1c:d3:59:1e:41:4f:60: 46:eb:99:0c:f3:76:e0:21:5a:ae:24:43:bc:ba:3e: 03:ed:2b:a5:ee:90:b9:11:a1:08:1b:42:e6:e0:dd: db:f9:a2:d4:51:ec:aa:2d:bb:e8:2d:38:10:7c:c6: 1e:94:2b:73:aa:0c:f6:4c:db:b9:52:02:ed:3f:95: f2:89:05:ed:d7:ac:cd:ad:12:f8:f9:50:7d:af:2a: 2c:d7:ce:1a:c2:86:60:7f:bf:3d:d6:f8:1f:7c:c3: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:74:6A:8B:51:AB:05:21:5C:AF:6D:FE:95:55:FA:80:A3:94:73:4D X509v3 Authority Key Identifier: keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:16:60:56:5c:d4:43:c3:1c:c5:d1:b9:cb:c2:a3:00:6f: 5a:40:7f:08:90:87:c6:f3:b1:94:0d:7a:b7:9d:84:d1:c4:57: 4b:34:a9:4c:a0:11:ad:61:cb:84:af:d8:2c:7c:7e:8d:2d:7e: 4a:b7:a8:ca:b3:f5:8b:54:ee:e1:a9:87:8d:fe:f0:06:f8:2f: ea:34:f1:64:a6:d6:21:fc:9f:e4:83:70:ae:1d:da:1a:e2:39: cc:07:19:8d:cf:82:d6:51:b0:eb:71:df:bd:c1:f5:a6:cf:ba: 91:b9:1c:e5:25:db:e1:f6:86:2c:fc:08:ce:30:f7:76:85:90: 43:da:65:8c:8c:bb:37:8f:01:09:78:13:c4:5e:24:05:90:d5: 14:f9:25:4a:e8:d8:4c:91:4d:ea:7b:ff:89:00:a7:25:72:e2: 45:c8:68:64:c9:e1:8a:ee:69:07:ba:40:63:bb:9b:47:25:f0: de:a0:ba:e2:e0:07:bf:8c:ea:9b:d9:6b:af:80:e8:17:42:90: 23:9f:b9:82:ed:52:25:23:a8:c3:85:64:1d:4a:e5:59:f7:56: 86:7f:e0:a5:09:22:0f:16:b8:db:14:70:5d:48:fc:b6:4b:76: 28:1d:fc:28:be:d3:8b:ee:8f:37:a9:03:17:41:70:06:45:11: f6:99:9b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLopNvCDDPy+mMQ1zueFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTE3YmY4MGVlMWUyZTcwZGIzZWEwNWRjMTZmMzA0ZTcw OTBjZjQwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD Eyg4Yjc0NmE4YjUxYWIwNTIxNWNhZjZkZmU5NTU1ZmE4MGEzOTQ3MzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub6l6mYn+VjGeoQHdFvEZY97UgEb cqSrKu7fog1WU+0sYwa6bTf45buQQGTIH9Xr68z8DRiKkghz1zaaTC3BO8r5fJqd Rk0b5fFmR85sRZ0geRdah6vAEaaKy0Y204wnUmWmQgHk+Hb2fYiIkoYUwiSCcTww 2OvewsofrD2Ey4PKqdqRsdV6jiynMFVGzVes9kz7vs3cCKqbqlHh9xzTWR5BT2BG 65kM83bgIVquJEO8uj4D7Sul7pC5EaEIG0Lm4N3b+aLUUeyqLbvoLTgQfMYelCtz qgz2TNu5UgLtP5XyiQXt16zNrRL4+VB9ryos184awoZgf7891vgffMNgJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt0aotRqwUhXK9t/pVV+oCjlHNNMB8GA1UdIwQY MBaAFC/he/gO4eLnDbPqBdwW8wTnCQz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMt MjRiMzU3MmE4M2JiLzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMtMjRiMzU3MmE4M2Ji LzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlQWYFZc 1EPDHMXRucvCowBvWkB/CJCHxvOxlA16t52E0cRXSzSpTKARrWHLhK/YLHx+jS1+ SreoyrP1i1Tu4amHjf7wBvgv6jTxZKbWIfyf5INwrh3aGuI5zAcZjc+C1lGw63Hf vcH1ps+6kbkc5SXb4faGLPwIzjD3doWQQ9pljIy7N48BCXgTxF4kBZDVFPklSujY TJFN6nv/iQCnJXLiRchoZMnhiu5pB7pAY7ubRyXw3qC64uAHv4zqm9lrr4DoF0KQ I5+5gu1SJSOow4VkHUrlWfdWhn/gpQkiDxa42xRwXUj8tkt2KB38KL7Ti+6PN6kD F0FwBkUR9pmbtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:27 2025 by rpki-client