This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json) Hash identifier: RUUX4Dmrrivo9yhTD8BuuLpK26B9TWlt2XWPjQD9zI0= Subject key identifier: 7C:22:5E:9B:6C:94:37:FA:D6:49:EA:B4:9B:B1:6E:23:44:DB:4B:EB Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6 Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6 Certificate serial: 019B3042A9709511789F6A01D2DF5FBCCBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 07:00:33 +0000 Manifest this update: Thu 18 Dec 2025 07:00:33 +0000 Manifest next update: Fri 19 Dec 2025 07:00:33 +0000 Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: ia0aA8ixvmOnNjsnq3ABQGxrfmurZ5CoW4Hw+HbqI9I=) 2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:a9:70:95:11:78:9f:6a:01:d2:df:5f:bc:cb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6 Validity Not Before: Dec 18 07:00:33 2025 GMT Not After : Dec 19 07:00:33 2025 GMT Subject: CN=7c225e9b6c9437fad649eab49bb16e2344db4beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:fd:91:da:c3:34:fd:13:3c:2a:8b:2b:a7: c3:98:ca:00:a5:0c:2b:5a:6a:4c:99:23:3d:2c:39: 86:3e:d7:19:6b:5a:30:79:a1:0f:28:96:04:c0:73: 51:15:83:f7:13:50:45:81:96:d2:22:ee:e0:7d:09: 2e:79:9a:6e:69:13:2f:75:1a:6d:29:8b:06:e1:53: 1a:b8:b8:32:a4:55:8c:f4:76:b8:c9:70:78:c7:39: ab:6f:3b:d6:c9:96:46:be:f7:86:4b:ea:7a:88:a7: 0d:82:b4:9e:07:ea:43:75:af:0f:b5:7f:f8:84:ce: 28:74:78:12:04:77:78:16:61:fb:6b:73:5c:82:47: 6c:08:0f:0f:9b:15:9e:09:f4:71:14:ce:8e:9c:1b: e8:e6:64:16:5a:b7:72:19:2f:a2:33:16:cf:31:37: 92:4f:8b:09:70:31:1a:ea:aa:d0:d3:83:6f:c2:62: 1c:89:89:12:4a:dd:0e:c3:c0:60:d2:75:a8:36:ac: 64:26:76:c7:b7:a7:88:53:32:bb:22:f6:08:3e:a6: 43:91:86:ad:14:4c:20:fa:c4:53:dd:84:5a:3d:3c: 0f:b7:58:be:d7:01:3b:b9:af:97:f9:72:c9:b1:1d: 23:44:60:1c:25:99:5b:96:c5:6c:4e:42:c1:91:1b: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:5E:9B:6C:94:37:FA:D6:49:EA:B4:9B:B1:6E:23:44:DB:4B:EB X509v3 Authority Key Identifier: keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9f:f4:2d:66:c2:fa:7d:9b:59:ec:d3:4e:d7:46:23:f9:d2: e8:eb:a7:55:ee:95:e5:79:32:87:99:90:4b:92:fb:57:55:56: 20:fa:ff:b8:4c:b3:36:9c:82:06:7b:8a:b7:d8:ef:49:1e:1c: f4:69:1f:7a:9d:f8:d9:6c:59:27:43:d6:54:1d:25:a7:f2:7e: 7c:de:4b:7e:4d:f9:41:16:5c:c2:c1:92:b2:1d:fb:bb:c2:fe: 67:ea:03:2c:f3:2b:78:fc:f2:ac:f8:1f:b7:77:44:bc:65:5b: a4:88:8d:b3:be:6b:13:dc:21:2c:75:02:a7:b4:8d:26:7a:23: 95:1a:6e:c2:49:14:6f:9b:d8:8c:40:ba:93:52:d5:e0:b2:1c: 6d:af:00:9d:bb:d0:af:91:56:6d:b9:9d:01:8c:d1:2e:49:5c: 44:63:eb:df:c2:bf:45:a0:5b:b9:3e:f7:ef:17:ee:d5:a7:aa: d2:9a:11:3d:b6:f6:a7:73:c9:71:5d:01:c6:e6:28:7b:dc:57: 1a:eb:a5:98:b5:b0:13:5c:36:4e:b3:4f:82:6b:56:25:67:63: ab:3f:92:9c:bc:54:ca:37:ab:c6:94:f0:c3:80:2d:80:99:bf: 53:79:42:60:80:5c:f8:c9:cf:69:a5:93:ec:b2:f7:59:2f:31: 25:07:e2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQqlwlRF4n2oB0t9fvMviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjAwZDI5MWQ0ODIzODM1YWYxMDNhYWQzOWVkZTA1YmQx MmM5YjYwHhcNMjUxMjE4MDcwMDMzWhcNMjUxMjE5MDcwMDMzWjAzMTEwLwYDVQQD Eyg3YzIyNWU5YjZjOTQzN2ZhZDY0OWVhYjQ5YmIxNmUyMzQ0ZGI0YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mz9kdrDNP0TPCqLK6fDmMoApQwr WmpMmSM9LDmGPtcZa1oweaEPKJYEwHNRFYP3E1BFgZbSIu7gfQkueZpuaRMvdRpt KYsG4VMauLgypFWM9Ha4yXB4xzmrbzvWyZZGvveGS+p6iKcNgrSeB+pDda8PtX/4 hM4odHgSBHd4FmH7a3NcgkdsCA8PmxWeCfRxFM6OnBvo5mQWWrdyGS+iMxbPMTeS T4sJcDEa6qrQ04NvwmIciYkSSt0Ow8Bg0nWoNqxkJnbHt6eIUzK7IvYIPqZDkYat FEwg+sRT3YRaPTwPt1i+1wE7ua+X+XLJsR0jRGAcJZlblsVsTkLBkRta6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwiXptslDf61knqtJuxbiNE20vrMB8GA1UdIwQY MBaAFC9gDSkdSCODWvEDqtOe3gW9Esm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjIt Y2JiZjc2ZjM1MzNhLzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjItY2JiZjc2ZjM1MzNh LzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ/0LWbC +n2bWezTTtdGI/nS6OunVe6V5Xkyh5mQS5L7V1VWIPr/uEyzNpyCBnuKt9jvSR4c 9Gkfep342WxZJ0PWVB0lp/J+fN5Lfk35QRZcwsGSsh37u8L+Z+oDLPMrePzyrPgf t3dEvGVbpIiNs75rE9whLHUCp7SNJnojlRpuwkkUb5vYjEC6k1LV4LIcba8AnbvQ r5FWbbmdAYzRLklcRGPr38K/RaBbuT737xfu1aeq0poRPbb2p3PJcV0BxuYoe9xX GuulmLWwE1w2TrNPgmtWJWdjqz+SnLxUyjerxpTww4AtgJm/U3lCYIBc+MnPaaWT 7LL3WS8xJQfiYA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:43:02 2025 by rpki-client