This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json) Hash identifier: e8qquiLRMYQ6+8WqTX6031tYJhTAPjXSHe8HuVZBDDw= Subject key identifier: 26:08:C3:4A:AD:7C:60:01:BC:C0:90:A5:FC:95:D5:3A:55:18:AA:14 Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Certificate serial: 019AF12DE65E3BBE9BCF33F23B2ED27AAE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft Manifest number: 06BE Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=) 2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: erTWSWAWiuezLOQYYwOKsCFyIi0C2sEfdkIbVARbyng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e6:5e:3b:be:9b:cf:33:f2:3b:2e:d2:7a:ae:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=2608c34aad7c6001bcc090a5fc95d53a5518aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:ff:ac:d8:f7:1e:cf:d2:18:5b:55:9e:83: 5c:97:42:e7:3e:4e:87:67:6d:91:ac:55:9a:83:7a: 6a:5f:a8:1f:d6:33:81:37:68:8d:8f:72:af:72:b4: 08:2b:30:30:d6:51:08:65:b9:79:ba:66:2a:12:4f: 68:91:fe:8f:75:65:5d:c8:c4:d8:7d:11:9d:cf:a6: a9:88:e9:66:4c:76:f3:f0:80:d3:ef:de:a0:68:f6: 15:f8:cf:ee:3c:62:2d:de:93:a0:35:b9:80:5f:19: ca:f1:ec:b1:72:25:55:4d:b7:87:c5:a0:95:03:6d: 91:6d:37:74:f8:73:00:58:47:9a:42:a4:bc:69:bd: e2:bb:57:9f:c6:c4:bf:49:76:80:19:85:27:0d:85: bf:9a:76:9d:48:66:68:e7:77:c6:1d:c9:cf:86:95: 82:95:37:a6:1a:09:46:a3:cb:6c:b5:96:e7:98:a2: b7:a5:27:b6:17:6b:55:13:9e:78:2b:96:cd:ee:4d: 6d:b3:b7:73:ca:c2:9a:7c:e4:9a:d3:31:92:7c:e6: 74:fa:c6:63:bf:00:f8:39:a8:7f:3a:6a:a4:c3:ea: 15:bf:b3:ff:5f:5e:03:0c:22:d8:ed:15:b1:e6:3b: f7:b6:3e:9b:9e:94:64:c7:25:08:b6:55:45:1d:88: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:08:C3:4A:AD:7C:60:01:BC:C0:90:A5:FC:95:D5:3A:55:18:AA:14 X509v3 Authority Key Identifier: keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d7:de:f8:2f:6d:91:57:26:ed:63:fc:7b:21:b4:b3:78:d1: e6:01:42:8e:e0:f5:e2:1b:6b:1a:66:cb:45:35:96:87:62:0f: 35:9c:e0:66:ff:1a:47:13:8f:64:30:30:56:dc:8b:0b:2a:00: 3b:57:f4:7f:04:a6:5a:ca:a4:3b:87:23:33:4f:17:49:9d:a8: b4:00:ec:ce:c7:3e:a5:df:b1:a6:37:d7:63:3c:8b:4e:ef:06: 2c:71:cd:25:38:95:60:e2:58:62:77:31:29:5e:97:c6:22:96: 2a:53:7a:ee:dd:89:8b:2c:ce:87:ea:d8:f8:ba:97:a6:c8:63: 3d:bd:a1:38:72:ab:06:f9:53:31:5b:51:6f:f1:d4:34:a9:16: a8:4e:8c:ca:5a:ac:46:54:0b:c9:64:32:e1:cf:ad:5f:2d:7b: 8b:39:a6:2c:35:ef:28:35:92:79:2c:85:56:05:08:67:34:ad: 56:02:6a:1f:4c:d1:a8:12:54:26:ea:07:21:19:92:b4:40:37: 7e:8f:d2:bc:72:d2:9f:ef:72:37:ea:9d:a3:aa:86:8a:16:a5: 47:a4:16:3e:1a:e2:23:88:76:c6:0e:5c:0a:6c:68:ef:f6:45: 9c:d5:5d:57:73:80:b1:7f:74:e3:e7:e7:2e:66:ac:c2:29:8c: a6:87:8a:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeZeO76bzzPyOy7Seq4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYWU0MTJjZmZhOGNiNWNmYjkzYmIzMWFiNWU5ODkwMzg3 ODRkN2YwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EygyNjA4YzM0YWFkN2M2MDAxYmNjMDkwYTVmYzk1ZDUzYTU1MThhYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25n/rNj3Hs/SGFtVnoNcl0LnPk6H Z22RrFWag3pqX6gf1jOBN2iNj3KvcrQIKzAw1lEIZbl5umYqEk9okf6PdWVdyMTY fRGdz6apiOlmTHbz8IDT796gaPYV+M/uPGIt3pOgNbmAXxnK8eyxciVVTbeHxaCV A22RbTd0+HMAWEeaQqS8ab3iu1efxsS/SXaAGYUnDYW/mnadSGZo53fGHcnPhpWC lTemGglGo8tstZbnmKK3pSe2F2tVE554K5bN7k1ts7dzysKafOSa0zGSfOZ0+sZj vwD4Oah/Omqkw+oVv7P/X14DDCLY7RWx5jv3tj6bnpRkxyUItlVFHYgEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYIw0qtfGABvMCQpfyV1TpVGKoUMB8GA1UdIwQY MBaAFC+uQSz/qMtc+5O7MatemJA4eE1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2Mt ODMwYjIyZGQyZGVhLzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2MtODMwYjIyZGQyZGVh LzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9fe+C9t kVcm7WP8eyG0s3jR5gFCjuD14htrGmbLRTWWh2IPNZzgZv8aRxOPZDAwVtyLCyoA O1f0fwSmWsqkO4cjM08XSZ2otADszsc+pd+xpjfXYzyLTu8GLHHNJTiVYOJYYncx KV6XxiKWKlN67t2JiyzOh+rY+LqXpshjPb2hOHKrBvlTMVtRb/HUNKkWqE6Mylqs RlQLyWQy4c+tXy17izmmLDXvKDWSeSyFVgUIZzStVgJqH0zRqBJUJuoHIRmStEA3 fo/SvHLSn+9yN+qdo6qGihalR6QWPhriI4h2xg5cCmxo7/ZFnNVdV3OAsX904+fn LmaswimMpoeK+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:08 2025 by rpki-client