This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json) Hash identifier: eOdYr3cx3dhviF5hDvWM5cRKCxEJ5O4nBKRWbTCMtwU= Subject key identifier: 1A:21:96:5E:69:B8:02:60:FE:C7:67:37:67:3F:B9:7B:23:47:13:59 Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Certificate serial: 019AF3521EBEAEC4B665A5E3BACA56EE7D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft Manifest number: 1462 Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=) 2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: joa5qKt86pdbYy6zLJDcwZfOX7VtzMHK8leOrEULkS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1e:be:ae:c4:b6:65:a5:e3:ba:ca:56:ee:7d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=1a21965e69b80260fec76737673fb97b23471359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:43:e8:2b:6f:b4:e7:d9:16:d4:cd:86:d2: a1:34:a9:ad:fd:91:5b:c7:16:5c:fe:46:71:1a:7e: 1c:e0:81:72:eb:5a:43:27:61:68:b0:f7:93:51:4f: fe:b6:64:a5:5b:59:17:5f:0d:68:da:ee:35:c2:53: 30:f2:4c:2a:06:e0:5d:e0:49:03:54:b5:78:3a:41: 77:47:e4:96:37:16:3a:7d:b4:4e:a3:5f:22:50:e0: 70:d5:36:3f:ff:13:12:50:82:32:47:22:a9:9b:96: f0:63:0c:ee:18:11:ac:7a:b2:f2:8f:03:c1:8e:03: 80:dd:ac:3d:18:1e:00:60:10:0f:42:6b:13:b0:ea: b2:aa:67:8b:7e:75:02:38:8d:b6:39:a4:06:50:94: 51:20:d8:19:dc:94:ae:b1:78:4d:f3:11:f4:ae:a0: 7f:e8:5f:20:3d:92:57:f4:ab:bf:27:87:23:f0:5a: 2d:10:c6:91:5d:26:e9:c6:e9:cf:7d:49:8b:c8:8f: b7:7c:83:95:a2:b7:d5:63:b3:ec:56:eb:e8:7a:e2: 84:25:0e:e5:d3:fe:9b:29:8d:f6:5d:07:f4:66:30: c1:2e:43:bc:07:0f:e6:50:1e:ff:ee:4e:8b:33:ca: ed:84:53:46:f1:9b:c1:23:2b:c7:b3:42:e5:a0:b1: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:96:5E:69:B8:02:60:FE:C7:67:37:67:3F:B9:7B:23:47:13:59 X509v3 Authority Key Identifier: keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4c:39:92:16:3d:3d:6f:d3:63:28:ce:86:98:c1:5b:4a:74: 6d:64:31:16:76:63:f9:f4:28:81:28:0e:08:94:e7:88:c9:1a: 57:ab:b0:c3:39:64:9e:54:13:01:e2:f3:6d:ba:87:fd:06:91: 11:40:d3:79:4c:56:bb:af:9f:6f:5f:5f:eb:bb:e0:30:5d:b7: 4c:13:1d:b8:34:8a:e5:c4:ed:3a:d7:02:c0:c2:68:41:02:49: 24:0e:ba:77:8e:0e:83:15:c8:e4:38:d3:c4:6c:eb:34:ba:f2: 78:00:10:b1:df:7f:ce:46:6e:bd:7c:73:b5:65:47:bb:dc:c4: fe:ad:a2:ed:a9:68:d9:8b:ef:41:51:b1:58:8d:73:d1:8c:d1: 80:fa:dc:ce:50:15:42:a4:98:6a:42:02:a2:68:77:5d:bb:70: 9a:52:35:82:ee:76:2b:7d:86:15:1a:37:0c:f2:0c:42:a1:0c: 63:b6:f1:98:47:2a:47:10:4a:8c:7b:46:ee:a7:c6:dd:57:79: 46:8b:26:55:64:ce:fd:36:b4:7e:11:49:f0:1a:00:43:f1:6f: 94:e4:7f:5f:08:a2:7d:dd:7b:fa:20:ad:6f:5c:5e:e0:13:1e: fb:5e:23:15:68:89:ee:5b:4f:d7:ed:43:63:45:2b:19:d8:d3: 33:f4:e2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh6+rsS2ZaXjuspW7n0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGY5NGU0MGM5OWUxOWEzMjIzYTI5MzVkOGVjOTRlM2Q5 MjcwYmIwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD EygxYTIxOTY1ZTY5YjgwMjYwZmVjNzY3Mzc2NzNmYjk3YjIzNDcxMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHlD6CtvtOfZFtTNhtKhNKmt/ZFb xxZc/kZxGn4c4IFy61pDJ2FosPeTUU/+tmSlW1kXXw1o2u41wlMw8kwqBuBd4EkD VLV4OkF3R+SWNxY6fbROo18iUOBw1TY//xMSUIIyRyKpm5bwYwzuGBGserLyjwPB jgOA3aw9GB4AYBAPQmsTsOqyqmeLfnUCOI22OaQGUJRRINgZ3JSusXhN8xH0rqB/ 6F8gPZJX9Ku/J4cj8FotEMaRXSbpxunPfUmLyI+3fIOVorfVY7PsVuvoeuKEJQ7l 0/6bKY32XQf0ZjDBLkO8Bw/mUB7/7k6LM8rthFNG8ZvBIyvHs0LloLHE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBohll5puAJg/sdnN2c/uXsjRxNZMB8GA1UdIwQY MBaAFC9PlOQMmeGaMiOik12OyU49knC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQt MDhlMDBkYTQwNDQ0LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQtMDhlMDBkYTQwNDQ0 LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkw5khY9 PW/TYyjOhpjBW0p0bWQxFnZj+fQogSgOCJTniMkaV6uwwzlknlQTAeLzbbqH/QaR EUDTeUxWu6+fb19f67vgMF23TBMduDSK5cTtOtcCwMJoQQJJJA66d44OgxXI5DjT xGzrNLryeAAQsd9/zkZuvXxztWVHu9zE/q2i7alo2YvvQVGxWI1z0YzRgPrczlAV QqSYakIComh3XbtwmlI1gu52K32GFRo3DPIMQqEMY7bxmEcqRxBKjHtG7qfG3Vd5 RosmVWTO/Ta0fhFJ8BoAQ/FvlOR/Xwiifd17+iCtb1xe4BMe+14jFWiJ7ltP1+1D Y0UrGdjTM/TiqA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:19 2025 by rpki-client