This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json) Hash identifier: 1tYSAtOkMBH2ZxZ+sRRK+3PvXHBaoYQEyuk6e7DYmTQ= Subject key identifier: E0:0E:28:A2:21:18:0C:23:3C:7E:98:DE:66:DA:1E:6B:4F:79:46:81 Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Certificate serial: 019B3F486FD2C8F136EDC6AE20B2E774A4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft Manifest number: 079B Signing time: Sun 21 Dec 2025 05:01:10 +0000 Manifest this update: Sun 21 Dec 2025 05:01:10 +0000 Manifest next update: Mon 22 Dec 2025 05:01:10 +0000 Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: KpuVQXznRbEKkufp2yVwwK+JfOQ5gl019IZ2LEt3dr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:6f:d2:c8:f1:36:ed:c6:ae:20:b2:e7:74:a4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Validity Not Before: Dec 21 05:01:10 2025 GMT Not After : Dec 22 05:01:10 2025 GMT Subject: CN=e00e28a221180c233c7e98de66da1e6b4f794681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:20:5b:8c:a2:04:17:b4:ae:85:21:02:f8: 57:43:a8:87:09:95:0a:84:96:6a:99:37:ce:47:6e: ad:aa:31:3e:cc:d7:e1:18:d9:5b:d4:f2:2d:55:aa: 5a:1e:94:ac:f5:16:33:ee:53:49:94:72:3d:d4:da: 4a:2a:1b:bd:38:8c:c1:18:58:24:f6:af:81:9b:84: 88:63:e3:98:a1:06:57:85:e8:cf:bd:93:7c:bc:c7: 5e:3a:01:27:b3:7a:24:6e:4b:45:f1:68:3b:b5:b8: fa:f3:08:10:a7:a0:7d:44:54:57:7d:af:3d:8e:c4: d2:e8:7d:e7:5e:6e:17:08:2e:22:97:37:cb:05:60: 9b:2f:9e:aa:88:12:93:46:5f:4a:4f:bb:06:39:54: c6:5e:96:ac:2a:e1:b3:16:2e:94:b1:32:ec:f9:8a: 8e:d8:c4:6b:43:6a:d1:c5:65:b9:c7:c2:d7:5b:d7: 36:51:07:e1:68:df:ef:3d:42:09:0c:7e:3a:a2:85: c8:6d:86:0a:63:55:31:82:4d:e3:e5:d2:61:c4:d3: 4b:05:ce:45:2f:fa:62:cf:77:c9:fb:92:84:43:97: d2:53:c3:08:cc:d9:0d:12:5c:01:64:bc:66:5a:56: 5e:89:5e:16:69:a9:c5:a4:95:9b:1d:dc:b3:79:91: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:28:A2:21:18:0C:23:3C:7E:98:DE:66:DA:1E:6B:4F:79:46:81 X509v3 Authority Key Identifier: keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:09:63:89:28:75:25:03:4a:fc:77:d0:74:5b:0a:fe:da: c8:11:aa:ed:dd:b5:79:d4:a4:c7:c8:23:f7:0f:36:9c:76:7d: 76:22:c9:26:5b:89:22:3f:29:5c:ec:72:7b:31:46:9d:ec:f5: 74:8b:2c:fe:ec:77:31:e2:4b:3e:6c:b0:ad:33:70:e4:f9:e1: dd:bc:be:97:80:e6:5c:33:db:ac:4c:9d:b6:25:7c:4e:3e:c6: c6:5f:5d:b9:b1:d0:f6:62:f0:88:8b:2b:0a:41:65:4a:44:86: a6:8a:a9:81:55:fc:06:8b:0a:32:23:1f:c3:67:e7:bc:f8:80: 68:21:d2:48:4c:4a:39:8a:de:fb:41:6e:d8:af:df:9f:48:e9: 8b:15:98:2c:f2:94:51:8c:53:ec:ba:70:2e:75:a2:6d:f5:39: 22:6d:7d:e5:98:4a:85:fa:02:b8:d9:89:11:21:13:0f:d4:7c: 6b:a7:bd:c5:79:92:11:56:e4:ea:c4:da:cc:6e:47:5a:d9:01: a8:2b:ec:8b:4b:77:7d:1e:8b:13:a7:26:b8:dc:98:3f:f1:0a: 7a:d8:4b:81:5b:4c:17:b5:ab:59:16:47:fb:ed:07:2d:31:d5: 09:a6:06:3d:a7:1e:de:de:fe:9b:2d:9b:a2:3e:64:94:1d:cc: 0a:00:f7:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SG/SyPE27cauILLndKTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi YWIxYjYwHhcNMjUxMjIxMDUwMTEwWhcNMjUxMjIyMDUwMTEwWjAzMTEwLwYDVQQD EyhlMDBlMjhhMjIxMTgwYzIzM2M3ZTk4ZGU2NmRhMWU2YjRmNzk0NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7wgW4yiBBe0roUhAvhXQ6iHCZUK hJZqmTfOR26tqjE+zNfhGNlb1PItVapaHpSs9RYz7lNJlHI91NpKKhu9OIzBGFgk 9q+Bm4SIY+OYoQZXhejPvZN8vMdeOgEns3okbktF8Wg7tbj68wgQp6B9RFRXfa89 jsTS6H3nXm4XCC4ilzfLBWCbL56qiBKTRl9KT7sGOVTGXpasKuGzFi6UsTLs+YqO 2MRrQ2rRxWW5x8LXW9c2UQfhaN/vPUIJDH46ooXIbYYKY1Uxgk3j5dJhxNNLBc5F L/piz3fJ+5KEQ5fSU8MIzNkNElwBZLxmWlZeiV4WaanFpJWbHdyzeZGocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAOKKIhGAwjPH6Y3mbaHmtPeUaBMB8GA1UdIwQY MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBoJY4ko dSUDSvx30HRbCv7ayBGq7d21edSkx8gj9w82nHZ9diLJJluJIj8pXOxyezFGnez1 dIss/ux3MeJLPmywrTNw5Pnh3by+l4DmXDPbrEydtiV8Tj7Gxl9dubHQ9mLwiIsr CkFlSkSGpoqpgVX8BosKMiMfw2fnvPiAaCHSSExKOYre+0Fu2K/fn0jpixWYLPKU UYxT7LpwLnWibfU5Im195ZhKhfoCuNmJESETD9R8a6e9xXmSEVbk6sTazG5HWtkB qCvsi0t3fR6LE6cmuNyYP/EKethLgVtMF7WrWRZH++0HLTHVCaYGPace3t7+my2b oj5klB3MCgD3lg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:41 2025 by rpki-client