This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json) Hash identifier: z9aQhlZtnB4H35o2pwq8dxk+cEh8wojI9lqIMM8ktmw= Subject key identifier: 00:43:2A:5F:D0:F0:B7:54:75:7E:90:2A:82:25:24:FA:D7:BE:F3:FB Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Certificate serial: 019AF27709B0017D6538758EDFFDB372DFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft Manifest number: 0EB4 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=) 2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: qnWnNI+KWj9NPKw7Qbc7rAqD40ES1dmXo4iGO4KSqeA=) 3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:09:b0:01:7d:65:38:75:8e:df:fd:b3:72:df:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=00432a5fd0f0b754757e902a822524fad7bef3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:7c:4d:bc:4b:68:11:6f:b9:1b:00:2e:fd: 65:e0:31:21:82:66:e3:1f:ed:82:42:ad:aa:44:b4: 40:7f:49:b2:b3:59:f4:4d:39:20:ae:d8:ba:86:a0: 93:c8:1a:65:ee:96:f3:de:5e:76:b5:99:60:ae:22: 75:b8:df:2d:90:ca:f8:18:22:89:9b:66:83:17:5a: 7d:c8:db:d3:79:07:11:af:be:70:7c:63:81:18:f5: 40:45:00:c0:0a:0b:1c:6b:5c:f5:51:ee:a4:8c:e1: 7c:a1:cc:ef:00:56:7f:21:f8:9a:3a:f0:cb:0c:fa: b6:c8:72:61:e2:26:63:3d:8c:c6:a5:54:10:55:3b: 8e:22:44:1a:45:67:18:1f:97:7f:f5:73:fb:4e:c5: f5:c8:7c:01:d8:62:a8:b6:01:4d:41:ac:3d:69:2a: d0:83:71:de:31:c1:d9:9a:f3:d6:5b:20:7e:d8:aa: 78:17:33:34:c9:55:ed:d1:fe:d2:c9:27:e4:cd:5f: e4:5a:af:64:ac:6f:fc:fd:80:51:41:e1:23:c0:b2: fd:65:16:be:1f:56:0d:45:85:fc:13:d2:c2:ef:21: 2b:23:97:14:be:01:8b:de:c8:ae:0e:ce:d4:f9:3c: 65:17:17:59:a2:ea:5f:88:61:5d:7f:79:79:3f:69: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:43:2A:5F:D0:F0:B7:54:75:7E:90:2A:82:25:24:FA:D7:BE:F3:FB X509v3 Authority Key Identifier: keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:96:94:6f:0f:17:38:68:be:ae:58:82:b3:10:0e:b4:77:b1: 49:42:5f:61:b4:19:09:8f:7b:f0:a0:d4:3c:fd:20:94:e1:4d: 2a:42:48:16:05:81:87:86:89:5f:28:72:e1:08:bc:f3:03:63: 54:83:94:99:2f:13:ef:de:3f:a3:2c:e6:57:90:bb:43:f1:0a: 00:dc:87:99:97:8b:08:af:56:0d:2b:ac:d4:1e:64:d9:dd:86: 42:a8:c8:98:76:92:54:63:03:e7:a7:68:3a:30:b1:f6:73:ee: 4f:94:16:ba:c6:f8:eb:8c:0b:57:30:9d:28:c9:72:27:f8:29: bb:c4:50:90:25:12:20:5e:22:54:3f:29:54:db:9c:df:39:27: 96:b3:19:34:a8:b9:9e:ce:30:37:4b:99:a7:15:5f:a2:78:dc: 3d:9c:25:89:29:bb:ee:da:f5:c2:e0:22:9f:e8:64:11:ce:8e: 06:cf:8a:89:d8:10:cc:84:12:9c:cf:d1:03:4a:d5:9d:8b:56: ac:ca:90:59:d8:88:2e:f7:45:02:53:74:e3:12:2c:83:84:a8: 61:65:f8:5e:ee:6b:20:53:ff:e3:6d:dc:85:ab:7e:95:ca:f2: 35:ad:76:cc:54:91:9d:fc:8d:6a:e4:b0:cc:47:28:36:99:d2: e6:93:5e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwmwAX1lOHWO3/2zct/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmU2MjM3OGJiNTgwYWY0ZWQ3MGJmYTM1YWJjODQwOTQ1 ZDc4MDMwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EygwMDQzMmE1ZmQwZjBiNzU0NzU3ZTkwMmE4MjI1MjRmYWQ3YmVmM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsV8TbxLaBFvuRsALv1l4DEhgmbj H+2CQq2qRLRAf0mys1n0TTkgrti6hqCTyBpl7pbz3l52tZlgriJ1uN8tkMr4GCKJ m2aDF1p9yNvTeQcRr75wfGOBGPVARQDACgsca1z1Ue6kjOF8oczvAFZ/IfiaOvDL DPq2yHJh4iZjPYzGpVQQVTuOIkQaRWcYH5d/9XP7TsX1yHwB2GKotgFNQaw9aSrQ g3HeMcHZmvPWWyB+2Kp4FzM0yVXt0f7SySfkzV/kWq9krG/8/YBRQeEjwLL9ZRa+ H1YNRYX8E9LC7yErI5cUvgGL3siuDs7U+TxlFxdZoupfiGFdf3l5P2nh0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABDKl/Q8LdUdX6QKoIlJPrXvvP7MB8GA1UdIwQY MBaAFPy+YjeLtYCvTtcL+jWryECUXXgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3Mzkt ZGY1NmVjNjcwZGU3LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3MzktZGY1NmVjNjcwZGU3 LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZaUbw8X OGi+rliCsxAOtHexSUJfYbQZCY978KDUPP0glOFNKkJIFgWBh4aJXyhy4Qi88wNj VIOUmS8T794/oyzmV5C7Q/EKANyHmZeLCK9WDSus1B5k2d2GQqjImHaSVGMD56do OjCx9nPuT5QWusb464wLVzCdKMlyJ/gpu8RQkCUSIF4iVD8pVNuc3zknlrMZNKi5 ns4wN0uZpxVfonjcPZwliSm77tr1wuAin+hkEc6OBs+KidgQzIQSnM/RA0rVnYtW rMqQWdiILvdFAlN04xIsg4SoYWX4Xu5rIFP/423chat+lcryNa12zFSRnfyNauSw zEcoNpnS5pNehg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:16 2025 by rpki-client