This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json) Hash identifier: tUJ0xteMon+XtEj63UUsg4CeANOTTEv4nKjfMPS7fi8= Subject key identifier: 14:4E:A0:5D:32:70:DD:04:34:F9:AE:86:28:A7:66:45:9D:68:1D:F9 Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905 Certificate serial: 019AF163E9E4C28A7C59450D0BBD2CCE82DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=) 2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: xQFeAhBWxWl+XwvDxwojP2L6wfCb0Am2Rpd4y01H978=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e9:e4:c2:8a:7c:59:45:0d:0b:bd:2c:ce:82:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=144ea05d3270dd0434f9ae8628a766459d681df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:6b:a4:e7:9d:32:d6:1e:60:bc:f2:81:7f: 9d:b4:46:d7:88:23:dd:c7:98:3b:37:6d:c0:7d:31: 8e:b3:5c:f7:a5:7c:93:b2:a3:ba:d2:b1:8b:d2:d1: 0a:db:b2:d4:9d:08:34:23:85:75:f0:d5:ae:0b:06: 3f:f9:6f:bd:cb:e0:f0:8c:e1:6b:21:2b:af:86:c4: d7:24:ed:fc:1f:2d:05:e4:9d:52:c7:00:a3:47:d5: f3:d6:df:f2:db:99:2b:f1:77:dc:d5:1c:5f:4a:53: 72:95:fc:f6:34:94:4d:2e:04:53:3d:90:d3:83:9f: d2:89:04:81:4e:f3:48:bc:d8:a0:2f:69:90:31:a6: 53:09:38:10:9b:fd:c1:b2:ae:43:38:93:e0:de:bc: 09:71:39:30:d9:26:73:98:00:c5:22:8b:9b:22:9f: 3c:06:7e:e3:da:00:a3:a1:1f:07:02:cf:fe:39:c5: 89:ec:2b:96:14:3a:cc:a1:b0:b4:de:b0:18:be:cf: 09:4f:53:da:29:2d:36:f3:24:c2:5f:0f:e6:80:bb: ce:8e:86:80:68:a5:d1:63:a4:68:c3:a7:99:c5:94: 4b:77:8f:ed:35:c3:6c:30:12:2f:30:e1:4d:36:94: d4:7c:a1:54:89:c6:7c:e2:fe:ba:9f:d0:a3:ab:f9: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:A0:5D:32:70:DD:04:34:F9:AE:86:28:A7:66:45:9D:68:1D:F9 X509v3 Authority Key Identifier: keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5d:1f:3d:c5:3b:19:c4:8e:c3:57:86:f9:a5:9b:b7:73:92: fe:e3:3f:2e:f1:b3:f6:e1:da:f4:f3:3f:6e:6c:98:af:92:1c: 09:49:39:d0:ef:13:88:48:a4:98:91:26:70:b1:fb:65:3c:91: 43:f7:fc:35:4b:02:88:a6:e3:c7:01:de:59:be:dd:01:d1:0b: 9c:70:07:a9:aa:5e:08:3c:c2:25:b9:bc:2c:44:1b:8a:f5:4a: 20:31:89:67:f4:a9:7f:62:67:98:a3:75:2a:dd:6a:1e:6a:ad: 5b:29:81:81:d7:de:c2:2a:a0:05:58:27:b5:b3:6f:d6:e7:52: b1:ab:07:d8:01:74:d4:0c:e1:d5:6d:ec:bc:1f:52:7c:00:28: c5:44:08:01:2d:da:56:ed:57:70:07:94:23:19:b2:56:34:08: a7:1f:b9:64:23:f5:54:d3:fb:4a:fb:d2:e1:f9:f3:1f:ce:95: 2d:cc:7f:3d:3b:aa:7e:34:e3:9d:05:0a:b4:2b:b7:df:08:61: 78:4b:32:44:33:b7:60:09:98:f6:50:18:22:57:d6:8c:e0:a7: a4:c4:94:7b:18:39:e2:cf:11:5b:3b:b7:bb:02:94:76:50:d4: 60:b4:7c:38:c7:e7:65:02:b7:2c:17:a4:48:30:47:72:77:45: c9:a5:9f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+nkwop8WUUNC70szoLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl YmU5MDUwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EygxNDRlYTA1ZDMyNzBkZDA0MzRmOWFlODYyOGE3NjY0NTlkNjgxZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytxrpOedMtYeYLzygX+dtEbXiCPd x5g7N23AfTGOs1z3pXyTsqO60rGL0tEK27LUnQg0I4V18NWuCwY/+W+9y+DwjOFr ISuvhsTXJO38Hy0F5J1SxwCjR9Xz1t/y25kr8Xfc1RxfSlNylfz2NJRNLgRTPZDT g5/SiQSBTvNIvNigL2mQMaZTCTgQm/3Bsq5DOJPg3rwJcTkw2SZzmADFIoubIp88 Bn7j2gCjoR8HAs/+OcWJ7CuWFDrMobC03rAYvs8JT1PaKS028yTCXw/mgLvOjoaA aKXRY6Row6eZxZRLd4/tNcNsMBIvMOFNNpTUfKFUicZ84v66n9Cjq/lckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBROoF0ycN0ENPmuhiinZkWdaB35MB8GA1UdIwQY MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4 LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL10fPcU7 GcSOw1eG+aWbt3OS/uM/LvGz9uHa9PM/bmyYr5IcCUk50O8TiEikmJEmcLH7ZTyR Q/f8NUsCiKbjxwHeWb7dAdELnHAHqapeCDzCJbm8LEQbivVKIDGJZ/Spf2JnmKN1 Kt1qHmqtWymBgdfewiqgBVgntbNv1udSsasH2AF01Azh1W3svB9SfAAoxUQIAS3a Vu1XcAeUIxmyVjQIpx+5ZCP1VNP7SvvS4fnzH86VLcx/PTuqfjTjnQUKtCu33whh eEsyRDO3YAmY9lAYIlfWjOCnpMSUexg54s8RWzu3uwKUdlDUYLR8OMfnZQK3LBek SDBHcndFyaWf9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:39 2025 by rpki-client