This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft File: L761tTgJwKseTgF9tL9QeIFa5mo.mft (raw, json) Hash identifier: XQAEfzP6STJ8fy+tGep4apWjIP1w9knVKAUnCyd/yQQ= Subject key identifier: D4:76:65:B4:3B:0D:58:C9:09:F9:C9:D9:FB:5B:86:F7:5F:F8:FC:C3 Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A Certificate issuer: /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Certificate serial: 019B3D9087D5A9500FCA77E36E8DCA4A548C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft Manifest number: 023E Signing time: Sat 20 Dec 2025 21:00:40 +0000 Manifest this update: Sat 20 Dec 2025 21:00:40 +0000 Manifest next update: Sun 21 Dec 2025 21:00:40 +0000 Files and hashes: 1: L761tTgJwKseTgF9tL9QeIFa5mo.crl (hash: dxD9cVRyWb1Pv0K+p83gYLMovoG3uYwIRS5v+a6tvQs=) 2: bi2rgr1mwihMTviNCzdJhqMEHIE.roa (hash: 9YBEOHgs2y2rTJyOfEqp4CwAwfBA0dewuMGVkGf2YyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:87:d5:a9:50:0f:ca:77:e3:6e:8d:ca:4a:54:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a Validity Not Before: Dec 20 21:00:40 2025 GMT Not After : Dec 21 21:00:40 2025 GMT Subject: CN=d47665b43b0d58c909f9c9d9fb5b86f75ff8fcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:82:08:f8:48:26:b2:71:48:f4:d7:99:b4: e7:49:66:f6:d3:8c:7a:35:aa:1d:89:47:db:e3:65: 1b:94:6e:30:45:72:70:ef:32:72:2d:60:ef:9f:3a: 61:fc:61:26:42:d2:cf:93:0c:df:c0:52:4c:a8:62: 59:21:0e:a0:9d:9c:f9:61:2a:11:c8:c2:f4:42:33: 71:24:08:62:b2:df:73:c8:6e:f2:7a:65:62:f8:5e: fa:e0:ef:b9:eb:3b:a3:bd:3d:8d:ed:32:45:2e:65: d5:fd:c1:bf:2f:00:13:ef:3c:82:54:3d:f5:e7:84: a0:84:56:d0:10:d6:af:6f:36:44:05:ee:28:a1:3c: 91:71:37:ad:3f:5b:31:4a:bc:d7:8b:82:2d:2c:bf: 36:81:92:42:6b:ec:3c:cc:30:3c:5f:15:a1:c1:81: e7:04:2e:de:1b:9a:fa:63:68:99:3a:0e:b6:b1:9f: ca:7f:e1:35:22:be:8c:cf:3b:c1:79:7a:55:fa:0e: 8f:4d:36:0c:e2:35:33:26:53:ab:96:9c:7e:45:eb: 9c:33:0c:64:0d:d8:33:d4:c7:26:1d:32:b0:2f:c9: 26:6c:1e:a4:82:54:62:48:7b:9b:8d:1c:52:b8:32: a7:99:92:38:84:37:57:eb:64:5a:3c:00:86:ca:e4: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:65:B4:3B:0D:58:C9:09:F9:C9:D9:FB:5B:86:F7:5F:F8:FC:C3 X509v3 Authority Key Identifier: keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:00:fb:25:e9:34:56:fe:8e:79:bc:01:49:a3:8b:98:dd:be: 2b:aa:51:10:74:3d:50:60:3e:c8:98:74:aa:c0:13:f7:c3:b5: 47:de:cf:4d:f1:31:b4:e7:46:ef:87:f4:cc:c1:ee:d2:36:f1: ce:b8:9d:77:df:6d:60:81:b1:f4:fa:cf:bb:df:db:b2:61:9a: 98:5e:dd:ab:2d:4d:47:0e:98:d4:e4:4d:86:6c:98:e9:d2:aa: ff:51:67:29:49:27:42:ff:61:63:6f:76:73:38:ae:2c:7a:21: 1e:b5:20:c8:08:0a:63:06:d1:f0:d4:e8:4e:63:dc:35:53:68: 73:73:cf:7d:a8:93:dd:3e:06:e8:10:3f:8a:8d:2f:13:9b:ff: 93:ff:48:69:53:4b:fd:77:2c:58:04:82:4b:91:60:bc:ac:e0: f6:38:8b:e5:09:e4:60:be:8c:6a:77:3a:d9:d9:9c:fb:b9:91: ee:b3:5a:7e:d9:b0:ff:a9:7e:17:2a:91:a8:ca:5c:37:76:bd: 1c:f1:ac:36:9f:13:46:96:18:04:e9:67:5c:41:4b:17:5a:16: ac:5d:35:4c:29:4d:41:59:3e:69:28:44:6d:b0:37:3c:31:23: d4:76:8e:fc:33:83:27:d9:ff:af:6e:99:1a:26:71:9f:18:99: 02:ea:22:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIfVqVAPynfjbo3KSlSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmViNWI1MzgwOWMwYWIxZTRlMDE3ZGI0YmY1MDc4ODE1 YWU2NmEwHhcNMjUxMjIwMjEwMDQwWhcNMjUxMjIxMjEwMDQwWjAzMTEwLwYDVQQD EyhkNDc2NjViNDNiMGQ1OGM5MDlmOWM5ZDlmYjViODZmNzVmZjhmY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMOCCPhIJrJxSPTXmbTnSWb204x6 NaodiUfb42UblG4wRXJw7zJyLWDvnzph/GEmQtLPkwzfwFJMqGJZIQ6gnZz5YSoR yML0QjNxJAhist9zyG7yemVi+F764O+56zujvT2N7TJFLmXV/cG/LwAT7zyCVD31 54SghFbQENavbzZEBe4ooTyRcTetP1sxSrzXi4ItLL82gZJCa+w8zDA8XxWhwYHn BC7eG5r6Y2iZOg62sZ/Kf+E1Ir6MzzvBeXpV+g6PTTYM4jUzJlOrlpx+ReucMwxk Ddgz1McmHTKwL8kmbB6kglRiSHubjRxSuDKnmZI4hDdX62RaPACGyuTI9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR2ZbQ7DVjJCfnJ2ftbhvdf+PzDMB8GA1UdIwQY MBaAFC++tbU4CcCrHk4BfbS/UHiBWuZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMt ODcwMDA3ODU1MmEzLzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84ZjliYjgtOTBiYy00OTU4LThmOTMtODcwMDA3ODU1MmEz LzEvTDc2MXRUZ0p3S3NlVGdGOXRMOVFlSUZhNW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wD7Jek0 Vv6OebwBSaOLmN2+K6pREHQ9UGA+yJh0qsAT98O1R97PTfExtOdG74f0zMHu0jbx zridd99tYIGx9PrPu9/bsmGamF7dqy1NRw6Y1ORNhmyY6dKq/1FnKUknQv9hY292 cziuLHohHrUgyAgKYwbR8NToTmPcNVNoc3PPfaiT3T4G6BA/io0vE5v/k/9IaVNL /XcsWASCS5FgvKzg9jiL5QnkYL6Manc62dmc+7mR7rNaftmw/6l+FyqRqMpcN3a9 HPGsNp8TRpYYBOlnXEFLF1oWrF01TClNQVk+aShEbbA3PDEj1HaO/DODJ9n/r26Z GiZxnxiZAuoiWA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:34:27 2025 by rpki-client