This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json) Hash identifier: njdbPWsNt4/QBtOtzOYMHdyLWgmEHHbWTStHm4yfXZI= Subject key identifier: 52:01:27:3B:E3:D3:E9:B4:3C:D7:D8:DD:B0:40:EA:DC:08:D0:B6:98 Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Certificate serial: 019B72911399FFBA5D8570B16FD4A6B8DC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft Manifest number: 179F Signing time: Wed 31 Dec 2025 04:01:08 +0000 Manifest this update: Wed 31 Dec 2025 04:01:08 +0000 Manifest next update: Thu 01 Jan 2026 04:01:08 +0000 Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: qFr/sjij0/YATo1lLHrxeYCcCdKbdm2uVpJNpT/mKBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:13:99:ff:ba:5d:85:70:b1:6f:d4:a6:b8:dc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Validity Not Before: Dec 31 04:01:08 2025 GMT Not After : Jan 1 04:01:08 2026 GMT Subject: CN=5201273be3d3e9b43cd7d8ddb040eadc08d0b698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:69:3e:a0:f1:92:86:69:15:e0:21:a0:70: cb:c6:85:b2:16:c9:d8:2b:1b:e6:5d:50:6a:3e:81: f6:12:8c:b0:61:2a:6f:c3:96:f6:c6:de:0f:8a:be: d7:09:55:05:5b:45:ef:2b:dc:c9:81:4e:af:0c:61: 27:a6:82:d4:28:64:4c:44:b0:62:03:a5:a8:cc:3c: b8:42:e1:5a:a7:eb:c9:f3:58:da:ab:b9:25:66:5f: f4:92:55:96:5d:9b:42:99:27:8c:ef:2e:4c:b0:44: 1b:36:82:e9:c4:f9:b5:d7:3a:48:b0:34:b7:19:d0: 81:5d:44:c5:10:3b:7c:80:48:16:2f:be:b6:ec:4b: d2:b3:8f:03:ba:0f:6e:c0:55:5d:75:2f:5f:3c:db: ec:5f:23:45:93:b7:ed:d6:f9:01:2f:00:bc:7f:80: a7:4d:1b:7a:a3:14:32:97:cb:4d:78:28:7e:9e:6d: a1:cd:92:34:bf:63:e8:e1:99:37:f3:8d:d6:75:c6: 00:24:36:54:90:50:e7:1b:7c:19:a8:61:bf:47:20: 22:bb:55:61:ed:ff:59:46:48:14:c6:77:b1:04:e7: 86:20:f6:b0:49:79:4d:e0:13:dc:07:98:06:c5:eb: 1b:97:23:04:8e:5b:f4:04:42:d7:1d:10:3e:75:be: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:27:3B:E3:D3:E9:B4:3C:D7:D8:DD:B0:40:EA:DC:08:D0:B6:98 X509v3 Authority Key Identifier: keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:35:4e:a5:5a:55:f1:4f:60:9e:c3:70:a8:4f:6b:bc:57:87: a4:d9:0e:1b:9f:4f:77:30:57:9d:08:d3:a9:ae:3a:7a:33:75: 8b:be:4a:ba:cc:fc:96:ab:36:23:b1:d1:5d:cb:4e:df:91:8a: b4:8c:94:36:9d:4c:33:88:c6:cb:20:5c:bf:a0:bc:d3:69:cc: 38:b2:a3:37:cc:9e:fa:24:89:54:e1:41:18:3c:d7:52:e7:59: 09:8a:98:2a:7f:4b:c6:93:cd:c7:14:d1:45:f2:29:b0:44:fb: 44:af:f5:79:2a:12:bc:f9:6b:e5:33:98:9a:28:db:85:0b:ba: fd:12:ab:d8:00:a5:a5:15:0c:9f:fa:b4:40:11:f0:c5:ae:36: 36:bf:3f:ac:f0:1c:ec:e4:df:3f:35:7c:b0:2d:48:5f:de:a8: 67:2b:3a:99:7e:4f:f0:c8:ce:ef:3d:91:c1:e7:63:50:71:59: af:23:7b:c3:4d:6c:2b:f2:7f:bd:46:02:9e:29:94:50:47:14: d2:56:9e:bb:94:f5:27:fe:1f:21:51:e1:da:6f:1b:fe:c9:b6: a3:26:3f:d2:4e:a3:33:47:1d:58:22:53:0f:38:de:0e:54:94: 12:78:a5:1e:72:5e:a3:92:d9:85:19:51:fb:48:e8:c9:cc:0c: ff:cc:f6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykROZ/7pdhXCxb9SmuNxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm MGYxMjAwHhcNMjUxMjMxMDQwMTA4WhcNMjYwMTAxMDQwMTA4WjAzMTEwLwYDVQQD Eyg1MjAxMjczYmUzZDNlOWI0M2NkN2Q4ZGRiMDQwZWFkYzA4ZDBiNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeNpPqDxkoZpFeAhoHDLxoWyFsnY KxvmXVBqPoH2EoywYSpvw5b2xt4Pir7XCVUFW0XvK9zJgU6vDGEnpoLUKGRMRLBi A6WozDy4QuFap+vJ81jaq7klZl/0klWWXZtCmSeM7y5MsEQbNoLpxPm11zpIsDS3 GdCBXUTFEDt8gEgWL7627EvSs48Dug9uwFVddS9fPNvsXyNFk7ft1vkBLwC8f4Cn TRt6oxQyl8tNeCh+nm2hzZI0v2Po4Zk3843WdcYAJDZUkFDnG3wZqGG/RyAiu1Vh 7f9ZRkgUxnexBOeGIPawSXlN4BPcB5gGxesblyMEjlv0BELXHRA+db4afQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIBJzvj0+m0PNfY3bBA6twI0LaYMB8GA1UdIwQY MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1 LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTVOpVpV 8U9gnsNwqE9rvFeHpNkOG59PdzBXnQjTqa46ejN1i75Kusz8lqs2I7HRXctO35GK tIyUNp1MM4jGyyBcv6C802nMOLKjN8ye+iSJVOFBGDzXUudZCYqYKn9LxpPNxxTR RfIpsET7RK/1eSoSvPlr5TOYmijbhQu6/RKr2AClpRUMn/q0QBHwxa42Nr8/rPAc 7OTfPzV8sC1IX96oZys6mX5P8MjO7z2RwedjUHFZryN7w01sK/J/vUYCnimUUEcU 0laeu5T1J/4fIVHh2m8b/sm2oyY/0k6jM0cdWCJTDzjeDlSUEnilHnJeo5LZhRlR +0joycwM/8z2hg== -----END CERTIFICATE-----Generated at Wed Dec 31 07:25:20 2025 by rpki-client