This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json) Hash identifier: tLOXSuekwxvZsNcYKLvlA8gkq8MZAObNhRiqwmjW8Gs= Subject key identifier: DA:6B:68:9E:27:B4:37:79:AC:73:BA:96:51:51:7E:1D:00:D6:EA:BC Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Certificate serial: 019AF208ECF7C92BB53A6ACEE51FABA1EF6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: rN4d385TZLPNW4kdBgOWmg18TkFJOchNlQRQ6y+relc=) 2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ec:f7:c9:2b:b5:3a:6a:ce:e5:1f:ab:a1:ef:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=da6b689e27b43779ac73ba9651517e1d00d6eabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:27:eb:5b:8a:7e:e3:44:92:3a:91:aa:3c: 7b:b8:2e:36:9d:df:c1:d6:e2:fd:95:05:c1:05:d9: 80:45:d8:93:5c:cf:23:df:bc:dd:c2:c3:5f:0b:71: 25:fb:dc:6d:e6:55:60:a5:76:8d:6a:d8:34:40:fd: ef:ea:39:24:72:c7:a0:63:57:6f:09:5e:a8:c5:ff: c2:85:0c:4d:10:52:5e:72:3b:c4:ed:17:0f:ae:be: 34:80:06:6e:e4:b9:54:86:b2:83:1e:fb:87:67:c0: 41:8c:e0:a3:28:dd:fb:39:bb:83:47:c1:33:01:be: fe:8e:37:b9:f3:f9:22:87:85:6c:cf:8d:ae:3a:8e: 5a:63:f3:40:b0:7a:31:f9:6f:4d:37:2e:52:d1:8d: 1d:6f:17:ba:af:b7:07:20:86:63:d2:dd:55:29:4e: a2:1e:5d:4b:19:8b:79:f4:9a:48:e9:02:5d:73:29: 0e:a7:2a:ed:10:fe:95:f8:b6:5c:c4:b2:6d:3b:a0: 24:0f:dd:1b:b3:37:24:6c:ff:49:da:ae:a1:e7:8e: a4:a5:da:78:19:72:98:99:d1:31:c6:8b:1f:13:38: 36:cf:6d:17:3f:10:cb:c9:47:3a:09:9f:13:cf:6f: da:a9:19:ef:9c:fb:37:bd:fe:14:69:32:18:2d:1d: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6B:68:9E:27:B4:37:79:AC:73:BA:96:51:51:7E:1D:00:D6:EA:BC X509v3 Authority Key Identifier: keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ce:5d:0e:c4:d7:7f:25:ce:b2:ec:56:32:25:6c:f6:1f:4a: 5f:74:42:7a:69:bb:ad:fd:c9:94:59:d9:f4:49:96:dc:97:5a: 34:15:42:71:a0:ac:7b:fa:15:f6:f3:12:38:4c:51:2d:14:77: 93:60:25:1a:57:59:36:4b:57:ff:79:3a:fa:51:f8:22:c1:da: 5a:0c:c2:2f:17:b5:7f:01:f6:7a:5a:b9:46:79:ac:ee:b4:47: 18:60:b5:4f:2d:8d:f8:20:e9:20:7b:a3:47:1e:2f:68:b1:5c: 5c:28:55:1a:78:10:09:94:3b:a0:94:9d:d7:48:a0:bf:ce:07: e5:bd:2e:a9:7e:e6:ff:c1:5a:83:28:19:82:3d:10:ce:7a:0a: 28:cc:2d:d5:91:7f:85:f5:84:73:d5:c2:6e:3c:2d:00:be:47: b6:aa:a0:66:2f:ca:a1:18:fd:e3:ec:fa:0e:52:6e:81:b3:6e: 21:e9:51:f8:ea:a5:b5:35:88:2a:f3:1d:a8:8a:ba:a2:9a:77: 0d:58:aa:3d:7d:f9:ac:ad:66:d4:a4:fe:2e:2d:80:80:01:3a: 63:f5:0b:44:b5:eb:c7:ee:9a:ab:9b:fb:5d:ef:7c:0a:36:a4: 35:91:cf:a9:b4:80:2b:c4:42:5e:1e:06:7f:42:56:fd:83:17: 61:b1:f3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOz3ySu1OmrO5R+roe9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2 ZDk4MjEwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EyhkYTZiNjg5ZTI3YjQzNzc5YWM3M2JhOTY1MTUxN2UxZDAwZDZlYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVAn61uKfuNEkjqRqjx7uC42nd/B 1uL9lQXBBdmARdiTXM8j37zdwsNfC3El+9xt5lVgpXaNatg0QP3v6jkkcsegY1dv CV6oxf/ChQxNEFJecjvE7RcPrr40gAZu5LlUhrKDHvuHZ8BBjOCjKN37ObuDR8Ez Ab7+jje58/kih4Vsz42uOo5aY/NAsHox+W9NNy5S0Y0dbxe6r7cHIIZj0t1VKU6i Hl1LGYt59JpI6QJdcykOpyrtEP6V+LZcxLJtO6AkD90bszckbP9J2q6h546kpdp4 GXKYmdExxosfEzg2z20XPxDLyUc6CZ8Tz2/aqRnvnPs3vf4UaTIYLR3EOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpraJ4ntDd5rHO6llFRfh0A1uq8MB8GA1UdIwQY MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt ZDlhMTA0NDA0YWFmLzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGc5dDsTX fyXOsuxWMiVs9h9KX3RCemm7rf3JlFnZ9EmW3JdaNBVCcaCse/oV9vMSOExRLRR3 k2AlGldZNktX/3k6+lH4IsHaWgzCLxe1fwH2elq5Rnms7rRHGGC1Ty2N+CDpIHuj Rx4vaLFcXChVGngQCZQ7oJSd10igv84H5b0uqX7m/8FagygZgj0QznoKKMwt1ZF/ hfWEc9XCbjwtAL5HtqqgZi/KoRj94+z6DlJugbNuIelR+OqltTWIKvMdqIq6opp3 DViqPX35rK1m1KT+Li2AgAE6Y/ULRLXrx+6aq5v7Xe98CjakNZHPqbSAK8RCXh4G f0JW/YMXYbHzsA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:43 2025 by rpki-client