This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json) Hash identifier: uAeGw4FLeZzlmi744Z57z4qELNr8Up4j4uNgAjzCrpA= Subject key identifier: BC:06:E5:19:5A:79:26:57:D0:68:20:D1:78:F7:BE:19:2A:5A:5C:5E Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Certificate serial: 019AF3F7B34FB1558A48EADD1252363B7462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft Manifest number: 0774 Signing time: Sat 06 Dec 2025 14:01:27 +0000 Manifest this update: Sat 06 Dec 2025 14:01:27 +0000 Manifest next update: Sun 07 Dec 2025 14:01:27 +0000 Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: FHpSOb3ju5Vq4WSvtoiTjsC/FiMDcZG/Nh/8mzmA4E8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b3:4f:b1:55:8a:48:ea:dd:12:52:36:3b:74:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Validity Not Before: Dec 6 14:01:27 2025 GMT Not After : Dec 7 14:01:27 2025 GMT Subject: CN=bc06e5195a792657d06820d178f7be192a5a5c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:e6:00:23:2d:a9:0a:89:c4:33:66:24:3c: 58:e4:e4:67:83:23:8a:49:ac:38:fc:9d:f4:e1:a2: 10:cb:37:f9:03:03:fd:1b:bc:c3:80:e5:f0:2b:78: d9:15:39:d6:9c:1b:41:a8:fd:4c:6f:17:a4:fb:68: 0a:68:71:56:c2:42:9c:1e:7a:c0:13:51:49:bd:ba: 83:15:a8:62:f2:f9:1e:71:a0:28:2d:27:ef:0b:9a: 7d:56:ad:08:65:be:25:9d:c6:ed:52:76:29:9c:a6: 0c:9a:96:f4:c8:94:75:5f:2d:db:67:f4:4e:1a:36: 14:49:b0:0d:b2:b6:20:f5:49:bc:df:c9:ad:64:8a: db:51:4b:d7:4a:7e:6a:0a:77:f4:50:10:bd:4b:b1: af:01:5e:19:de:3b:8b:93:6e:f8:6c:81:00:78:f7: 63:a8:0f:15:6b:e7:a0:af:d7:0e:9b:b8:00:7b:91: 28:9e:e5:e3:29:4b:5f:38:4d:98:93:a0:35:44:b6: 7c:1f:93:00:93:a0:f9:9d:9e:26:54:19:5f:2d:02: 8e:66:a0:f3:9f:48:11:0a:8e:d4:b7:29:d7:76:2e: 4c:73:be:69:c9:5c:47:33:b0:d3:5f:6a:76:72:9b: 21:6c:d9:0a:fa:39:ed:16:3b:f9:56:a7:a3:f8:6a: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:E5:19:5A:79:26:57:D0:68:20:D1:78:F7:BE:19:2A:5A:5C:5E X509v3 Authority Key Identifier: keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6c:39:41:a5:00:97:fe:6d:6d:e8:83:2d:ce:59:27:81:3b: f5:ba:e4:da:59:31:f6:f9:ca:f3:dc:79:b0:8f:ec:ff:dc:3c: 0d:8e:a7:05:89:32:fe:7d:35:0f:3e:d7:9d:c2:09:33:8e:0c: 15:b8:25:1e:29:31:5f:0a:8a:60:3b:64:66:e1:d9:51:4d:12: 17:42:5d:e9:5e:08:61:60:d1:20:96:41:9c:bd:a6:6a:13:19: c2:5c:aa:74:2e:3d:1a:2f:ed:ec:42:b3:17:58:d1:df:a2:3a: ba:e9:e8:fe:97:0e:01:e0:a8:f0:14:57:fb:31:0b:c6:1c:12: d3:86:b7:47:1c:d9:36:5b:35:25:64:2e:15:8d:06:a6:ae:38: 24:3c:6e:7c:67:66:6a:a5:84:7d:6b:52:ec:37:f6:60:f3:da: 1c:0a:db:37:a8:3d:48:ca:d3:5c:34:0e:24:08:03:60:94:91: fd:d1:74:bb:ab:8b:ab:7e:56:c4:40:2a:9a:2e:1e:ef:2f:58: 99:58:60:48:be:3f:ce:63:6d:04:86:27:8e:d8:af:aa:a1:2c: 50:93:ba:74:bc:0a:55:4b:83:14:18:90:21:e3:95:2d:4b:5e: de:0b:08:55:ea:43:41:2c:3c:19:92:23:a1:fc:81:7d:54:47: 2d:32:c5:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97NPsVWKSOrdElI2O3RiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi YWIxYjYwHhcNMjUxMjA2MTQwMTI3WhcNMjUxMjA3MTQwMTI3WjAzMTEwLwYDVQQD EyhiYzA2ZTUxOTVhNzkyNjU3ZDA2ODIwZDE3OGY3YmUxOTJhNWE1YzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q3mACMtqQqJxDNmJDxY5ORngyOK Saw4/J304aIQyzf5AwP9G7zDgOXwK3jZFTnWnBtBqP1Mbxek+2gKaHFWwkKcHnrA E1FJvbqDFahi8vkecaAoLSfvC5p9Vq0IZb4lncbtUnYpnKYMmpb0yJR1Xy3bZ/RO GjYUSbANsrYg9Um838mtZIrbUUvXSn5qCnf0UBC9S7GvAV4Z3juLk274bIEAePdj qA8Va+egr9cOm7gAe5EonuXjKUtfOE2Yk6A1RLZ8H5MAk6D5nZ4mVBlfLQKOZqDz n0gRCo7UtynXdi5Mc75pyVxHM7DTX2p2cpshbNkK+jntFjv5Vqej+GoPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwG5RlaeSZX0Ggg0Xj3vhkqWlxeMB8GA1UdIwQY MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2w5QaUA l/5tbeiDLc5ZJ4E79brk2lkx9vnK89x5sI/s/9w8DY6nBYky/n01Dz7XncIJM44M FbglHikxXwqKYDtkZuHZUU0SF0Jd6V4IYWDRIJZBnL2mahMZwlyqdC49Gi/t7EKz F1jR36I6uuno/pcOAeCo8BRX+zELxhwS04a3RxzZNls1JWQuFY0Gpq44JDxufGdm aqWEfWtS7Df2YPPaHArbN6g9SMrTXDQOJAgDYJSR/dF0u6uLq35WxEAqmi4e7y9Y mVhgSL4/zmNtBIYnjtivqqEsUJO6dLwKVUuDFBiQIeOVLUte3gsIVepDQSw8GZIj ofyBfVRHLTLF6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:59 2025 by rpki-client