This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json) Hash identifier: i7mXt4myX+9cfpR1XL651jw0WSJxrswf7+N9xQFNQhc= Subject key identifier: CD:5D:65:B6:3C:D0:DF:4D:67:CC:2B:01:12:07:2D:55:37:E7:B6:33 Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Certificate serial: 019AF27710CBA5ACFAF509194FE2A26FCACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft Manifest number: 015D Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=) 2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: t6dl4ZzmtRXsawgac7Xi0T9PdKWDwcW2HQ9WJsit7ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:cb:a5:ac:fa:f5:09:19:4f:e2:a2:6f:ca:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=cd5d65b63cd0df4d67cc2b0112072d5537e7b633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:0e:8a:8a:5b:bd:73:c7:d0:c4:4f:0c:5f: 54:53:56:7d:23:cc:12:e0:15:2e:d4:47:f9:37:6e: 37:b9:fa:f0:82:24:7d:53:88:7d:53:58:95:e0:df: fe:c0:0d:d1:49:9c:c0:60:f2:db:08:97:38:f7:6f: 32:93:c1:00:b3:cc:8a:45:af:b9:2a:48:52:a9:88: aa:42:52:4b:f6:6a:db:c2:55:4b:e6:07:56:c4:eb: 24:0a:5d:e7:99:3c:74:0f:fa:73:60:e0:2c:fd:3c: 15:16:5e:14:fc:dd:fe:2e:fb:89:da:e7:ca:1f:3d: 3c:25:f7:81:65:19:e4:b2:24:9b:32:56:f2:3a:93: ad:0b:06:d5:77:b7:70:20:4f:a2:8a:af:5d:4e:fc: f4:0d:9f:6b:e1:ad:4f:eb:12:06:ed:3d:65:46:a6: 81:4c:f3:22:dd:87:48:ef:12:72:e4:3f:b5:9f:02: 41:f2:96:17:6b:45:7f:ee:74:40:dc:8e:60:ea:68: 2f:3a:d6:21:08:07:11:73:c9:f1:49:c8:a6:9b:f1: 55:71:6a:da:99:74:ec:cb:c7:ee:19:bb:cb:66:59: ab:a0:32:f5:c6:ad:4d:d7:9b:d8:f8:cc:5c:2b:50: 04:5e:f5:a6:4f:f3:d2:be:5e:62:07:e1:01:af:f1: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5D:65:B6:3C:D0:DF:4D:67:CC:2B:01:12:07:2D:55:37:E7:B6:33 X509v3 Authority Key Identifier: keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d3:6d:1e:6b:90:59:e2:03:a9:11:0c:ac:74:ca:7c:0f:35: e2:a3:4f:6b:78:fc:d3:64:9c:ef:6d:b9:ab:32:d3:d2:0e:8c: f5:61:42:b1:0b:a4:0e:00:01:b6:e0:ab:b5:d3:3d:d8:a4:fc: 63:57:66:36:9e:ff:17:af:19:0d:1e:2d:41:67:9b:85:23:c7: a2:fb:da:8d:76:db:3f:f3:27:f9:c1:b9:c9:5e:45:d4:e1:9a: ec:6c:1a:60:d3:76:9d:2e:92:0f:a1:59:87:35:9c:a0:8b:b0: ac:b2:d7:11:65:0e:bc:42:89:f3:89:64:2f:71:87:5a:41:5c: 3d:f4:d5:66:e0:5c:78:b2:98:23:0e:cf:61:f0:27:de:9f:bb: 18:31:b1:fc:a6:ae:53:1b:bf:b8:48:17:9f:3a:ac:11:25:4b: 8e:ff:bc:12:37:54:3c:9f:a0:e8:57:6f:45:09:07:1f:8c:40: 08:f8:f5:5d:eb:a6:c3:0f:83:b8:f5:3c:8e:13:5a:1e:c9:31: b9:fc:c7:70:7d:4b:fc:25:38:9a:b2:94:31:57:4d:bb:c6:e5: b6:32:2f:d7:13:49:1a:87:b8:c1:ba:10:a3:ce:9f:9e:6b:47: 83:58:be:64:f9:86:26:bc:0b:86:9c:22:2e:bf:48:fd:d5:d6: 95:13:21:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxDLpaz69QkZT+Kib8rNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk OTc4ZWEwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhjZDVkNjViNjNjZDBkZjRkNjdjYzJiMDExMjA3MmQ1NTM3ZTdiNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTEOiopbvXPH0MRPDF9UU1Z9I8wS 4BUu1Ef5N243ufrwgiR9U4h9U1iV4N/+wA3RSZzAYPLbCJc4928yk8EAs8yKRa+5 KkhSqYiqQlJL9mrbwlVL5gdWxOskCl3nmTx0D/pzYOAs/TwVFl4U/N3+LvuJ2ufK Hz08JfeBZRnksiSbMlbyOpOtCwbVd7dwIE+iiq9dTvz0DZ9r4a1P6xIG7T1lRqaB TPMi3YdI7xJy5D+1nwJB8pYXa0V/7nRA3I5g6mgvOtYhCAcRc8nxScimm/FVcWra mXTsy8fuGbvLZlmroDL1xq1N15vY+MxcK1AEXvWmT/PSvl5iB+EBr/GG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1dZbY80N9NZ8wrARIHLVU357YzMB8GA1UdIwQY MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNNtHmuQ WeIDqREMrHTKfA814qNPa3j802Sc7225qzLT0g6M9WFCsQukDgABtuCrtdM92KT8 Y1dmNp7/F68ZDR4tQWebhSPHovvajXbbP/Mn+cG5yV5F1OGa7GwaYNN2nS6SD6FZ hzWcoIuwrLLXEWUOvEKJ84lkL3GHWkFcPfTVZuBceLKYIw7PYfAn3p+7GDGx/Kau Uxu/uEgXnzqsESVLjv+8EjdUPJ+g6FdvRQkHH4xACPj1Xeumww+DuPU8jhNaHskx ufzHcH1L/CU4mrKUMVdNu8bltjIv1xNJGoe4wboQo86fnmtHg1i+ZPmGJrwLhpwi Lr9I/dXWlRMh1w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:45 2025 by rpki-client