This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json) Hash identifier: V386io9rBHf4jFFMtYuUSCRulqQeRrn6G77DZyHVC+c= Subject key identifier: 15:7C:03:39:D4:AF:69:E2:85:DB:EE:0A:66:51:A4:4A:B1:31:04:E9 Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Certificate serial: 019B3D22D44A6FA337C81A19B409C4A2DC18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft Manifest number: 0EE5 Signing time: Sat 20 Dec 2025 19:00:51 +0000 Manifest this update: Sat 20 Dec 2025 19:00:51 +0000 Manifest next update: Sun 21 Dec 2025 19:00:51 +0000 Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: H92vvIn8h8ii7L3ynG2wQfIaYhqC99csGrn6WbrbimI=) 2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=) 3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:d4:4a:6f:a3:37:c8:1a:19:b4:09:c4:a2:dc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Validity Not Before: Dec 20 19:00:51 2025 GMT Not After : Dec 21 19:00:51 2025 GMT Subject: CN=157c0339d4af69e285dbee0a6651a44ab13104e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:08:aa:a1:dc:df:47:f1:4d:ad:1b:17:5d: c6:58:a3:f6:d0:f0:83:35:5d:93:f0:e5:ff:25:a7: 77:3d:4a:5c:b3:63:74:1d:44:bc:64:02:de:5c:e6: a5:c0:cb:89:e7:e4:6f:02:11:c1:20:34:db:c7:56: da:97:76:3d:a0:bc:d3:42:46:48:bd:33:16:31:73: 42:5b:0f:9c:21:6c:cf:80:0c:f2:fb:d4:59:c2:f5: 9c:cc:03:23:4f:bd:5d:b3:63:e6:37:46:5e:38:82: 69:09:e2:5a:9b:57:c9:3a:3a:e8:21:48:d7:4c:c3: 56:a8:fc:73:2c:4d:eb:71:69:b6:e4:3c:06:61:09: 80:f2:8a:a7:54:1a:2c:d4:e3:15:a8:72:96:7c:48: de:9f:cf:2f:58:ac:a6:53:53:6d:0f:42:61:c4:3a: 65:5d:b8:de:c5:29:e7:ba:cc:74:61:91:68:67:5d: d5:80:49:c3:66:bb:1a:17:56:89:0d:c6:d3:34:11: 59:81:1d:54:42:21:c7:6e:ba:c8:4a:35:97:f9:46: 65:8b:f1:96:bf:7c:98:71:5b:d3:d7:17:52:04:88: 23:0d:75:1a:e4:f7:cc:b6:37:e8:44:2b:f1:c6:8d: 77:4f:da:8b:0a:cb:55:27:68:47:3d:d0:45:f9:03: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:03:39:D4:AF:69:E2:85:DB:EE:0A:66:51:A4:4A:B1:31:04:E9 X509v3 Authority Key Identifier: keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fb:43:f6:53:a6:23:a3:d6:71:7b:fb:88:a2:e6:bd:bf:df: 43:ab:73:1f:a7:a3:fd:fa:84:85:89:fa:71:57:90:39:37:8a: 22:95:16:6f:4a:a1:38:cf:ba:e8:c8:bd:f1:4e:85:ca:e0:f0: c6:bc:35:85:65:a1:f7:d1:8f:cd:84:d7:4b:1c:1e:1b:53:4b: f5:a6:65:2e:ac:8a:c2:00:82:c1:4e:88:e5:f5:ca:53:5e:88: 71:4e:dd:27:07:a7:91:2b:dd:31:32:4c:a2:d9:ba:77:25:fc: b5:17:c0:b7:e6:f6:ab:a4:af:d6:0c:e0:8c:22:02:1c:8b:91: cc:d3:3a:0a:98:ba:75:c7:6d:bc:e7:07:a5:74:24:7c:9f:d0: ce:18:15:54:8d:b1:5c:41:4f:db:7c:50:34:96:fe:5f:59:a9: 37:ef:31:9c:0c:57:a5:27:d3:06:00:7a:1d:58:4b:0f:89:10: d7:93:be:79:39:2d:18:6c:e5:1b:ae:3d:fd:de:fc:9a:f4:4b: 59:9b:98:f8:0e:e1:09:c4:12:26:8b:72:bd:64:34:f6:3c:81: 16:d6:8e:d3:dc:13:57:85:51:df:26:e8:a3:8a:ad:74:b4:2b: d2:61:e2:53:04:d0:7a:8b:15:6e:e5:16:7c:a0:9d:d9:d4:21: b8:79:9f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9ItRKb6M3yBoZtAnEotwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk ZTgxODkwHhcNMjUxMjIwMTkwMDUxWhcNMjUxMjIxMTkwMDUxWjAzMTEwLwYDVQQD EygxNTdjMDMzOWQ0YWY2OWUyODVkYmVlMGE2NjUxYTQ0YWIxMzEwNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFQIqqHc30fxTa0bF13GWKP20PCD NV2T8OX/Jad3PUpcs2N0HUS8ZALeXOalwMuJ5+RvAhHBIDTbx1bal3Y9oLzTQkZI vTMWMXNCWw+cIWzPgAzy+9RZwvWczAMjT71ds2PmN0ZeOIJpCeJam1fJOjroIUjX TMNWqPxzLE3rcWm25DwGYQmA8oqnVBos1OMVqHKWfEjen88vWKymU1NtD0JhxDpl XbjexSnnusx0YZFoZ13VgEnDZrsaF1aJDcbTNBFZgR1UQiHHbrrISjWX+UZli/GW v3yYcVvT1xdSBIgjDXUa5PfMtjfoRCvxxo13T9qLCstVJ2hHPdBF+QPuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV8AznUr2nihdvuCmZRpEqxMQTpMB8GA1UdIwQY MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPtD9lOm I6PWcXv7iKLmvb/fQ6tzH6ej/fqEhYn6cVeQOTeKIpUWb0qhOM+66Mi98U6FyuDw xrw1hWWh99GPzYTXSxweG1NL9aZlLqyKwgCCwU6I5fXKU16IcU7dJwenkSvdMTJM otm6dyX8tRfAt+b2q6Sv1gzgjCICHIuRzNM6Cpi6dcdtvOcHpXQkfJ/QzhgVVI2x XEFP23xQNJb+X1mpN+8xnAxXpSfTBgB6HVhLD4kQ15O+eTktGGzlG649/d78mvRL WZuY+A7hCcQSJotyvWQ09jyBFtaO09wTV4VR3yboo4qtdLQr0mHiUwTQeosVbuUW fKCd2dQhuHmfPw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:14 2025 by rpki-client