This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json) Hash identifier: OU/8Y8Qly3i48e3chgkvdlMu1uzaJ1rrl6YprTxaAfQ= Subject key identifier: 60:7A:6E:9A:53:A1:ED:96:D8:4F:96:94:A9:00:A0:7B:23:66:B9:8D Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Certificate serial: 019AF5412243CE10C2C5E5CF568C3D075DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 20:01:17 +0000 Manifest this update: Sat 06 Dec 2025 20:01:17 +0000 Manifest next update: Sun 07 Dec 2025 20:01:17 +0000 Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=) 2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: bweNKYLRHobUKTywBGYC87ApSZARZ+zQEd9jk5XeV68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:22:43:ce:10:c2:c5:e5:cf:56:8c:3d:07:5d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Validity Not Before: Dec 6 20:01:17 2025 GMT Not After : Dec 7 20:01:17 2025 GMT Subject: CN=607a6e9a53a1ed96d84f9694a900a07b2366b98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:79:81:64:56:b1:68:61:58:87:1c:0d:16: 66:e2:52:6c:70:c4:cf:0b:24:e9:c2:ea:29:23:26: 01:10:0a:27:4b:e0:62:97:2b:06:49:43:ec:63:67: f1:5d:23:db:8c:10:80:25:77:97:e9:89:6f:77:d8: 65:76:04:1a:8e:27:cc:48:5f:93:52:4c:83:7e:28: 74:84:5f:dd:d0:f9:68:5c:b3:9e:b7:8c:52:09:71: 0b:a6:2f:e2:bb:ba:55:58:e4:0e:98:c0:c0:4d:5c: 9a:ca:e9:31:a5:df:df:65:c1:12:78:90:a5:d8:2f: b9:e1:7f:af:a1:c0:62:38:7d:9c:e5:91:32:68:05: 82:2f:a9:a2:0e:0d:d7:2c:c6:7c:7c:e6:95:f3:1c: a3:b8:12:6e:4d:10:96:92:46:a8:9a:62:38:7f:50: 37:0c:54:b5:ce:ab:4a:b7:e8:20:91:6f:5a:a4:23: 7e:c6:c3:46:0c:d5:69:a6:f7:44:1b:f5:36:2a:de: cb:85:67:26:2b:a0:9d:99:8f:55:b8:23:91:a7:14: de:ad:94:0b:6d:b5:98:f2:b8:e7:df:fd:82:d5:d6: 40:c5:03:98:d5:65:7f:d8:c5:80:b4:af:5c:7c:c7: d2:1c:05:9e:f5:1b:6c:b0:70:6e:86:bd:50:bf:53: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7A:6E:9A:53:A1:ED:96:D8:4F:96:94:A9:00:A0:7B:23:66:B9:8D X509v3 Authority Key Identifier: keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:85:4e:92:a3:86:0d:11:10:7d:56:6c:85:0f:db:49:53:e0: aa:c5:8c:55:22:18:88:2c:ac:c4:a4:ec:fa:43:4a:de:a9:bc: 59:6e:e9:71:f4:33:cf:7f:2f:86:37:e5:26:a8:89:2f:4d:6c: 0d:fc:be:68:ce:b0:32:cc:67:a1:1e:68:8b:58:47:4f:23:8d: dd:19:41:a0:b6:d7:8e:59:f9:db:7f:80:db:f4:0d:07:01:25: 93:5f:29:01:5d:75:e5:89:78:d4:ed:db:7a:96:e7:20:62:70: 41:71:bc:1b:42:51:52:80:fd:da:39:6e:b4:f8:16:e1:6b:0e: 63:4a:d6:62:9f:2e:90:c6:81:d8:32:d9:c6:dc:c1:45:aa:2e: 02:56:b0:dd:3b:96:ae:39:2e:55:86:e7:d5:95:88:d1:77:9e: d7:36:bb:77:57:7f:9a:a0:ae:14:a2:12:e9:a1:63:79:66:6a: b6:ed:9d:25:2c:8f:53:19:79:20:db:f4:fc:75:80:af:30:2c: 52:70:b1:c7:03:67:4c:07:cc:0d:b7:0b:4a:68:68:a8:d3:39: dd:c6:64:9a:71:56:5b:f0:4c:82:53:f4:6a:1a:4f:6d:97:0c: 48:4b:c8:22:9a:e7:ab:04:0e:33:8e:86:ad:f6:a3:8e:9f:ef: 32:14:ed:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSJDzhDCxeXPVow9B13TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy NTEyM2YwHhcNMjUxMjA2MjAwMTE3WhcNMjUxMjA3MjAwMTE3WjAzMTEwLwYDVQQD Eyg2MDdhNmU5YTUzYTFlZDk2ZDg0Zjk2OTRhOTAwYTA3YjIzNjZiOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOt5gWRWsWhhWIccDRZm4lJscMTP CyTpwuopIyYBEAonS+BilysGSUPsY2fxXSPbjBCAJXeX6Ylvd9hldgQajifMSF+T UkyDfih0hF/d0PloXLOet4xSCXELpi/iu7pVWOQOmMDATVyayukxpd/fZcESeJCl 2C+54X+vocBiOH2c5ZEyaAWCL6miDg3XLMZ8fOaV8xyjuBJuTRCWkkaommI4f1A3 DFS1zqtKt+ggkW9apCN+xsNGDNVppvdEG/U2Kt7LhWcmK6CdmY9VuCORpxTerZQL bbWY8rjn3/2C1dZAxQOY1WV/2MWAtK9cfMfSHAWe9RtssHBuhr1Qv1MpLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB6bppToe2W2E+WlKkAoHsjZrmNMB8GA1UdIwQY MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt ODk3ODMzMTdlYTI5LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5 LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4VOkqOG DREQfVZshQ/bSVPgqsWMVSIYiCysxKTs+kNK3qm8WW7pcfQzz38vhjflJqiJL01s Dfy+aM6wMsxnoR5oi1hHTyON3RlBoLbXjln523+A2/QNBwElk18pAV115Yl41O3b epbnIGJwQXG8G0JRUoD92jlutPgW4WsOY0rWYp8ukMaB2DLZxtzBRaouAlaw3TuW rjkuVYbn1ZWI0Xee1za7d1d/mqCuFKIS6aFjeWZqtu2dJSyPUxl5INv0/HWArzAs UnCxxwNnTAfMDbcLSmhoqNM53cZkmnFWW/BMglP0ahpPbZcMSEvIIprnqwQOM46G rfajjp/vMhTttA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:00 2025 by rpki-client