This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json) Hash identifier: HkuXBsWIoEXQnjkk+8qgbeP3UVbf3zwQhYF2pIUQ8sM= Subject key identifier: FF:EC:41:CF:16:AB:39:BF:17:72:73:2F:FA:C2:A2:30:18:69:A9:78 Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Certificate serial: 019AF23FDA07D966E3B4E274B9AAD0145DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft Manifest number: 127F Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: STqpPyaVR9HL/Rkk/beRTiRDzBpuJnGewOHGAXigaWk=) 2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:da:07:d9:66:e3:b4:e2:74:b9:aa:d0:14:5d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=ffec41cf16ab39bf1772732ffac2a2301869a978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:5a:bc:04:ac:3f:9a:61:04:cf:57:29:0c: 2e:d2:ab:aa:12:fa:06:5a:3e:8e:10:28:8b:29:be: 12:bb:9c:1e:ee:ad:1c:68:3a:8e:c7:cc:11:7a:6d: fb:c7:50:e7:3f:ab:a6:f9:fb:63:1a:3b:dd:f1:53: 87:19:98:cd:ef:f0:04:40:fd:d7:16:84:2e:3e:87: 83:dc:33:db:e1:2b:00:26:17:92:32:0e:41:07:05: 72:c6:bc:f0:de:3b:61:71:f8:b9:d9:b7:a4:e7:78: ca:98:3f:3e:5a:cb:4f:9f:cc:ab:42:fc:ce:70:58: 47:5b:60:22:47:cc:80:a4:7e:4e:ff:3e:27:a9:a6: b0:cd:e1:e2:07:f1:b0:cb:a2:08:b8:da:94:f0:e1: 3e:4f:ca:c3:c1:c0:e6:1e:34:10:ce:0d:8b:0f:e2: b7:99:86:b8:65:bb:eb:7a:a3:54:a9:2f:d1:cb:22: d1:28:aa:f3:9f:87:52:49:36:87:a5:54:c5:e7:f2: 58:ec:ab:2b:18:8d:f1:a9:59:14:ea:af:cc:48:5e: b0:ae:8f:9c:f6:4b:49:c0:91:5d:81:95:25:f2:41: f8:9c:0c:df:e5:ea:d8:83:ae:d0:a8:70:6a:b4:18: 70:22:19:1f:a9:b3:fa:4d:29:e9:42:0a:29:10:9b: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:41:CF:16:AB:39:BF:17:72:73:2F:FA:C2:A2:30:18:69:A9:78 X509v3 Authority Key Identifier: keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:62:d4:f2:16:bc:bc:d0:df:2e:d1:f7:06:41:9a:5a:64:7b: 69:04:af:03:66:b5:ea:6c:7a:ae:d7:7b:ae:1c:31:42:7b:04: 96:37:eb:2f:b0:8a:15:51:22:7e:aa:93:2e:3b:ff:6a:af:cc: 8c:da:63:8f:2c:f6:8a:98:cd:50:57:a0:cf:a4:ae:9b:38:60: 9e:ac:04:e8:83:79:50:96:ff:08:60:7e:6c:48:97:78:73:6a: 2c:7e:c2:b2:52:11:31:83:7d:5c:a5:ff:69:ae:5b:40:bc:57: 16:67:10:49:49:b3:64:54:01:4d:1c:61:fb:be:f0:07:7a:90: 6a:cb:ae:c7:c7:c5:33:3d:bc:a1:a8:c7:68:bf:c0:38:2f:3c: 98:a1:e6:8d:89:5b:ea:1d:fd:70:81:ec:7d:b2:01:a8:cc:9d: eb:0e:32:e5:49:a8:97:cb:53:fe:e4:49:9e:06:86:f4:36:a5: d5:e5:3b:a3:41:17:39:52:3d:90:62:ba:5b:22:4f:68:94:b1: 79:29:f5:3f:b5:92:ca:49:91:b3:20:84:b9:88:cb:46:ee:90: d3:77:79:55:32:29:29:fa:10:5b:99:40:ca:78:56:1d:c9:7c: a2:9d:94:0f:7d:0f:b4:65:bc:89:c8:ce:23:62:be:a3:4a:c7: c2:95:9f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9oH2WbjtOJ0uarQFF3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1 MGJjYTMwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhmZmVjNDFjZjE2YWIzOWJmMTc3MjczMmZmYWMyYTIzMDE4NjlhOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiFavASsP5phBM9XKQwu0quqEvoG Wj6OECiLKb4Su5we7q0caDqOx8wRem37x1DnP6um+ftjGjvd8VOHGZjN7/AEQP3X FoQuPoeD3DPb4SsAJheSMg5BBwVyxrzw3jthcfi52bek53jKmD8+WstPn8yrQvzO cFhHW2AiR8yApH5O/z4nqaawzeHiB/Gwy6IIuNqU8OE+T8rDwcDmHjQQzg2LD+K3 mYa4ZbvreqNUqS/RyyLRKKrzn4dSSTaHpVTF5/JY7KsrGI3xqVkU6q/MSF6wro+c 9ktJwJFdgZUl8kH4nAzf5erYg67QqHBqtBhwIhkfqbP6TSnpQgopEJueuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/sQc8Wqzm/F3JzL/rCojAYaal4MB8GA1UdIwQY MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGLU8ha8 vNDfLtH3BkGaWmR7aQSvA2a16mx6rtd7rhwxQnsEljfrL7CKFVEifqqTLjv/aq/M jNpjjyz2ipjNUFegz6SumzhgnqwE6IN5UJb/CGB+bEiXeHNqLH7CslIRMYN9XKX/ aa5bQLxXFmcQSUmzZFQBTRxh+77wB3qQasuux8fFMz28oajHaL/AOC88mKHmjYlb 6h39cIHsfbIBqMyd6w4y5Umol8tT/uRJngaG9Dal1eU7o0EXOVI9kGK6WyJPaJSx eSn1P7WSykmRsyCEuYjLRu6Q03d5VTIpKfoQW5lAynhWHcl8op2UD30PtGW8icjO I2K+o0rHwpWfzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:11 2025 by rpki-client