This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft File: L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json) Hash identifier: 9TRy8ERDcEMRkkPdD+Xr3Ds7spsuNsd3O/ebhM1FDQg= Subject key identifier: 44:11:0A:BD:3B:20:68:68:A0:8A:A0:11:C0:9D:29:C1:B3:08:AD:CD Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08 Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308 Certificate serial: 019AF35235DF752AC9EA308F5725FA720B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:42 +0000 Manifest this update: Sat 06 Dec 2025 11:00:42 +0000 Manifest next update: Sun 07 Dec 2025 11:00:42 +0000 Files and hashes: 1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: hyGZmm3ZdfF6G6C6WnywFDJdZqQwewPbXgX5ufCaHsM=) 2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:35:df:75:2a:c9:ea:30:8f:57:25:fa:72:0b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308 Validity Not Before: Dec 6 11:00:42 2025 GMT Not After : Dec 7 11:00:42 2025 GMT Subject: CN=44110abd3b206868a08aa011c09d29c1b308adcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:5c:d8:75:db:b2:b3:b4:f0:3d:39:55:5b: 54:3a:6b:b2:fd:20:a8:9b:3d:56:d9:0d:59:9e:50: a1:d6:68:55:e5:4b:c3:ed:48:57:87:f5:c2:1a:cf: cd:f8:52:15:ec:19:a6:bd:10:b8:0b:7a:03:59:49: 62:70:ec:cd:ed:c5:fb:88:4d:c6:73:0a:50:da:82: 96:02:a9:29:d8:31:05:c5:3e:35:fa:bb:2b:6f:dd: f1:99:de:76:04:c9:86:aa:78:c4:df:88:4f:38:d8: 1d:85:0e:6f:96:d3:a4:e9:5e:04:6c:1d:5b:2a:13: d1:18:f2:fb:02:1c:ed:e1:af:d9:05:ac:ee:05:a4: a4:c0:2c:4a:09:d6:23:69:7b:a1:de:49:cf:3d:ef: d7:f6:c3:d8:7c:49:17:0b:7d:1f:bc:4c:8d:ee:77: 33:9c:3d:9c:86:da:2d:de:be:d2:a5:d2:a4:27:50: f1:7f:50:da:3c:78:2e:bc:7a:2d:e9:f4:44:b3:ac: a3:2a:c0:10:c5:4e:bf:ab:8a:5b:ed:58:1b:23:10: b0:ba:5c:a2:c4:21:4b:6a:43:6c:0b:a5:29:c9:6c: 3f:62:90:69:89:73:b5:fd:98:e7:41:e9:1c:fd:57: c7:2f:c2:a5:82:78:4d:63:0c:eb:16:6b:e5:34:c6: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:11:0A:BD:3B:20:68:68:A0:8A:A0:11:C0:9D:29:C1:B3:08:AD:CD X509v3 Authority Key Identifier: keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:89:ae:e5:8b:59:bb:9e:dc:24:ac:25:6e:58:95:3b:8d:cb: 18:a8:16:f3:b9:aa:dd:03:3c:0b:e5:81:96:31:a4:83:df:b5: ec:90:04:59:54:0c:f6:45:de:5e:02:04:64:66:ad:c7:1b:80: f8:e0:94:41:3b:a3:b7:b0:9a:fd:bd:51:3f:54:6d:24:73:6b: 8c:a7:19:39:66:40:3f:80:11:68:ca:cd:89:ce:0f:ad:be:4d: 12:f4:0f:de:57:d9:d1:1d:34:5f:48:78:a4:e1:29:6f:1d:34: 07:ad:45:44:3a:25:3c:75:6a:8e:5c:bb:30:69:5f:86:09:64: 6d:04:a2:23:08:1f:11:9d:ad:10:d3:eb:4b:ab:55:bd:28:ab: d6:95:d9:33:80:8a:79:03:5d:1d:f7:17:41:ef:1c:bb:46:ad: 56:e1:30:57:ef:2a:18:27:23:ec:2d:dc:bf:29:ce:77:c1:f1: c8:39:f1:9a:88:e5:c6:c1:13:bd:e1:68:84:6c:5d:38:bc:e1: f2:5f:4e:e7:1f:74:bc:ba:a5:9f:28:fb:e3:da:1c:5c:73:7a: dd:c0:2d:e8:fd:a3:37:69:13:84:0f:81:15:ce:6b:4e:c6:bb: b3:73:e4:fe:13:0c:81:73:8d:24:32:8c:3d:85:77:51:22:76: 82:25:38:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjXfdSrJ6jCPVyX6cguIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYThlNjU3ZWVhZTA3ODNkYTE0YTNkYTJjYTc0ZGRlYzE1 ZGQzMDgwHhcNMjUxMjA2MTEwMDQyWhcNMjUxMjA3MTEwMDQyWjAzMTEwLwYDVQQD Eyg0NDExMGFiZDNiMjA2ODY4YTA4YWEwMTFjMDlkMjljMWIzMDhhZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVpc2HXbsrO08D05VVtUOmuy/SCo mz1W2Q1ZnlCh1mhV5UvD7UhXh/XCGs/N+FIV7BmmvRC4C3oDWUlicOzN7cX7iE3G cwpQ2oKWAqkp2DEFxT41+rsrb93xmd52BMmGqnjE34hPONgdhQ5vltOk6V4EbB1b KhPRGPL7Ahzt4a/ZBazuBaSkwCxKCdYjaXuh3knPPe/X9sPYfEkXC30fvEyN7ncz nD2chtot3r7SpdKkJ1Dxf1DaPHguvHot6fREs6yjKsAQxU6/q4pb7VgbIxCwulyi xCFLakNsC6UpyWw/YpBpiXO1/ZjnQekc/VfHL8KlgnhNYwzrFmvlNMY51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQRCr07IGhooIqgEcCdKcGzCK3NMB8GA1UdIwQY MBaAFC+o5lfurgeD2hSj2iynTd7BXdMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2Yt ODRhMjMzMzY5Mzg2LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2YtODRhMjMzMzY5Mzg2 LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJomu5YtZ u57cJKwlbliVO43LGKgW87mq3QM8C+WBljGkg9+17JAEWVQM9kXeXgIEZGatxxuA +OCUQTujt7Ca/b1RP1RtJHNrjKcZOWZAP4ARaMrNic4Prb5NEvQP3lfZ0R00X0h4 pOEpbx00B61FRDolPHVqjly7MGlfhglkbQSiIwgfEZ2tENPrS6tVvSir1pXZM4CK eQNdHfcXQe8cu0atVuEwV+8qGCcj7C3cvynOd8HxyDnxmojlxsETveFohGxdOLzh 8l9O5x90vLqlnyj749ocXHN63cAt6P2jN2kThA+BFc5rTsa7s3Pk/hMMgXONJDKM PYV3USJ2giU4ag== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:29 2025 by rpki-client