This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json) Hash identifier: SwjqiKCH1Kd5Nd8EsWNqzJ3ho08pEets4qgCMk9vuoQ= Subject key identifier: FC:5D:30:20:98:9B:A3:CD:79:F7:D0:D2:D9:C3:94:FF:AB:35:70:60 Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c Certificate serial: 019AF208C5174125680A1B790CF06B8C4685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft Manifest number: 149D Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: 8N8tPUzx3bHbFGzOTYzifPWJ2xj9u2XTl0t6RciDgSg=) 2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:17:41:25:68:0a:1b:79:0c:f0:6b:8c:46:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=fc5d3020989ba3cd79f7d0d2d9c394ffab357060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:bd:5f:15:93:d3:77:7e:f6:e1:55:24:91: 23:9b:42:53:f9:24:13:46:2d:9b:5e:a9:07:9b:f2: 0b:c0:47:a5:ba:30:3f:f6:07:80:6c:e0:b2:30:ee: b1:b4:bd:0c:97:60:b0:ce:fc:27:a1:c9:f7:3a:b3: 58:5d:e6:f6:24:c8:28:c2:88:92:db:77:2a:4c:79: c4:02:56:98:59:07:dc:0d:f1:50:66:0b:af:83:ba: 49:ee:58:38:56:ba:91:7a:13:ee:18:3d:85:77:ef: a8:d6:12:20:21:77:c8:71:17:0c:f1:4d:4a:8d:f0: b1:6f:73:2b:02:31:b9:36:6d:08:65:14:f5:f4:8c: 3e:91:33:00:ca:af:80:13:dd:fe:8e:b4:b3:e8:35: 21:a8:4c:87:b2:cc:99:44:ea:df:c8:dc:08:ea:91: f0:98:b1:7f:d1:20:fe:5a:27:9c:1f:37:2e:ff:2e: 7a:53:6b:0c:50:8d:19:76:37:91:f5:b6:d9:a5:cf: 75:e2:3a:7b:5e:33:45:78:7c:43:1d:93:1d:49:a2: a7:23:94:94:77:8f:7f:e2:3d:15:36:c8:15:97:ad: 0c:80:3e:76:c6:83:16:1a:41:51:7e:7e:6f:82:ba: 8b:2c:a2:80:a8:08:bd:22:70:ed:af:a3:a8:43:f3: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5D:30:20:98:9B:A3:CD:79:F7:D0:D2:D9:C3:94:FF:AB:35:70:60 X509v3 Authority Key Identifier: keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e9:13:ff:88:39:5c:26:71:5e:7b:63:2d:83:57:c9:17:7e: d9:02:10:36:a0:67:a1:97:be:c0:34:61:dc:40:47:21:a5:61: 85:68:d2:91:e3:06:4f:89:09:eb:fc:e1:78:59:74:88:e7:45: ed:c3:d7:29:c2:b7:74:ec:a1:74:0d:6a:86:3f:20:f8:31:af: 62:f9:0e:c6:96:dc:1a:cc:2b:da:d6:6e:ed:89:3d:a4:00:d5: 69:cb:d8:fa:a5:b6:4c:89:4f:82:80:9b:a2:44:48:bd:63:3d: db:32:02:d9:c3:ed:2b:7f:81:bf:01:f5:22:ef:ff:a9:b0:e2: 9a:3f:72:c3:e5:3d:51:8e:ca:27:53:9c:8c:bc:57:7c:d7:4b: 21:93:82:78:97:5d:72:17:46:82:60:0e:7d:0b:4f:35:e4:a9: 46:45:ee:50:ff:26:73:41:6a:43:4d:29:72:68:16:ef:cf:2d: 0a:2d:6c:c4:0d:c6:f3:69:b5:4e:f1:3c:0f:88:11:b1:27:57: c1:13:9d:a9:87:d3:26:a5:b6:a0:1a:a4:ea:ca:3a:68:a7:30: 2d:74:bc:f6:30:a0:0d:66:53:ec:56:b6:19:d5:ef:9c:00:7d: d0:3a:39:40:d3:f3:3a:94:a3:bb:a6:85:30:f7:02:33:c8:64: 2a:e3:9e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMUXQSVoCht5DPBrjEaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTIwZDk5MTJiM2E3MjhiOTQ4MTgxODhlZjNlM2U1N2Y4 ZDNmOWMwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhmYzVkMzAyMDk4OWJhM2NkNzlmN2QwZDJkOWMzOTRmZmFiMzU3MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKe9XxWT03d+9uFVJJEjm0JT+SQT Ri2bXqkHm/ILwEelujA/9geAbOCyMO6xtL0Ml2Cwzvwnocn3OrNYXeb2JMgowoiS 23cqTHnEAlaYWQfcDfFQZguvg7pJ7lg4VrqRehPuGD2Fd++o1hIgIXfIcRcM8U1K jfCxb3MrAjG5Nm0IZRT19Iw+kTMAyq+AE93+jrSz6DUhqEyHssyZROrfyNwI6pHw mLF/0SD+WiecHzcu/y56U2sMUI0ZdjeR9bbZpc914jp7XjNFeHxDHZMdSaKnI5SU d49/4j0VNsgVl60MgD52xoMWGkFRfn5vgrqLLKKAqAi9InDtr6OoQ/PCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxdMCCYm6PNeffQ0tnDlP+rNXBgMB8GA1UdIwQY MBaAFC+SDZkSs6couUgYGI7z4+V/jT+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDIt OWMzMDAwMjQ1Njc2LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDItOWMzMDAwMjQ1Njc2 LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASekT/4g5 XCZxXntjLYNXyRd+2QIQNqBnoZe+wDRh3EBHIaVhhWjSkeMGT4kJ6/zheFl0iOdF 7cPXKcK3dOyhdA1qhj8g+DGvYvkOxpbcGswr2tZu7Yk9pADVacvY+qW2TIlPgoCb okRIvWM92zIC2cPtK3+BvwH1Iu//qbDimj9yw+U9UY7KJ1OcjLxXfNdLIZOCeJdd chdGgmAOfQtPNeSpRkXuUP8mc0FqQ00pcmgW788tCi1sxA3G82m1TvE8D4gRsSdX wROdqYfTJqW2oBqk6so6aKcwLXS89jCgDWZT7Fa2GdXvnAB90Do5QNPzOpSju6aF MPcCM8hkKuOeIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:22 2025 by rpki-client