This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json) Hash identifier: NFdSvxIWhEyNhoBguZjxCuNDLEws+81FcJF7ATOPrCk= Subject key identifier: 69:42:49:46:39:80:10:0D:3F:93:FC:23:F8:E0:80:74:83:2E:50:0D Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a Certificate serial: 019B6EB4A8B82C83CD628D980F0E7942CD5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft Manifest number: 0F11 Signing time: Tue 30 Dec 2025 10:01:31 +0000 Manifest this update: Tue 30 Dec 2025 10:01:31 +0000 Manifest next update: Wed 31 Dec 2025 10:01:31 +0000 Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: Sod9s0iZOzOMBX7t5maptbCT0wpvx/9jnE6CI4iXHGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:a8:b8:2c:83:cd:62:8d:98:0f:0e:79:42:cd:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a Validity Not Before: Dec 30 10:01:31 2025 GMT Not After : Dec 31 10:01:31 2025 GMT Subject: CN=694249463980100d3f93fc23f8e08074832e500d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:04:bd:ec:ff:bd:7c:e9:92:49:1c:9a:5e: 05:b0:a0:2c:b5:dc:7e:b8:95:62:5d:3c:0b:9c:e0: 2c:be:0f:25:cf:90:50:7d:6d:d3:36:cf:b6:62:cd: 6d:15:be:d0:93:a3:6c:89:f7:0e:19:37:42:3f:51: 36:15:ea:22:32:77:11:8d:2e:6d:1f:14:b4:92:47: 84:5a:ec:f7:b6:a2:ec:f9:dd:89:f4:97:dd:eb:78: 1a:7f:4b:cf:dd:d6:21:b8:76:cc:b6:a3:5f:9c:4c: f1:15:d9:2b:0e:29:e9:92:5b:97:44:58:71:25:8e: ed:a2:93:e8:c7:7f:7e:78:63:1d:3d:5e:32:4f:dc: 1c:6f:97:33:83:96:89:32:ba:fa:06:6d:c5:72:50: f1:d1:a2:1c:7f:26:d6:73:d2:7d:48:6a:51:0a:da: 11:c5:4f:c0:2f:7d:27:28:b5:71:0f:2e:92:b2:9e: a4:aa:65:50:48:09:13:52:11:bb:51:e4:22:9f:0b: f6:a2:00:c0:fe:eb:3d:ba:51:30:72:9a:e4:98:6b: 81:eb:b4:32:c9:c3:b9:f6:4f:ff:79:cc:71:77:5b: 19:42:a7:e6:43:69:25:49:c8:04:b8:52:17:a9:4d: 94:08:e1:f1:46:e5:b9:56:92:dc:e0:20:f0:36:18: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:49:46:39:80:10:0D:3F:93:FC:23:F8:E0:80:74:83:2E:50:0D X509v3 Authority Key Identifier: keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:15:ed:2d:63:e8:c3:f5:04:6a:85:43:34:1b:86:20:5d:08: a1:d4:87:f0:3b:9e:f1:73:d6:b6:3d:5c:36:76:80:70:63:8f: ff:38:ae:b3:42:89:12:5f:f1:e4:d3:6c:ce:4f:77:41:a0:d3: 30:de:bc:e8:62:03:13:c0:75:d6:00:35:17:22:0e:f2:99:a9: bb:8f:71:31:13:fe:99:58:5e:67:67:33:1d:65:9a:66:c3:eb: b8:77:18:6e:ad:b0:c8:0c:54:92:97:16:ab:0f:5f:52:2f:fe: 52:6d:24:f0:75:82:f2:6a:ef:b0:dc:6c:d6:04:29:b0:54:d1: 7b:2c:7b:18:f8:f0:f9:de:10:14:4d:fc:d6:87:9f:24:ee:ec: 4c:57:30:af:28:08:87:e7:45:37:02:0f:db:b6:f1:e1:70:73: cb:a3:92:fc:c5:38:fb:2d:27:24:47:b9:d6:b9:a8:3e:89:a6: f9:7f:bd:23:5c:ab:e6:44:17:b6:19:84:ac:e3:5b:da:b9:2e: 85:b7:34:8e:d0:f4:d1:25:b0:58:3d:fb:cf:63:91:fe:22:f0: 44:01:09:71:03:66:c1:24:21:f7:f3:92:be:7e:91:ce:57:b3: af:8c:b4:2f:a6:6c:6d:b3:05:ac:c8:f6:e9:b8:b8:6b:33:df: bf:27:89:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutKi4LIPNYo2YDw55Qs1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YWU4YmQzMzI0OWNmMWVkNWYwZDQzOTgxNDdlZmQzMmQy NTQyMWEwHhcNMjUxMjMwMTAwMTMxWhcNMjUxMjMxMTAwMTMxWjAzMTEwLwYDVQQD Eyg2OTQyNDk0NjM5ODAxMDBkM2Y5M2ZjMjNmOGUwODA3NDgzMmU1MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBYEvez/vXzpkkkcml4FsKAstdx+ uJViXTwLnOAsvg8lz5BQfW3TNs+2Ys1tFb7Qk6NsifcOGTdCP1E2FeoiMncRjS5t HxS0kkeEWuz3tqLs+d2J9Jfd63gaf0vP3dYhuHbMtqNfnEzxFdkrDinpkluXRFhx JY7topPox39+eGMdPV4yT9wcb5czg5aJMrr6Bm3FclDx0aIcfybWc9J9SGpRCtoR xU/AL30nKLVxDy6Ssp6kqmVQSAkTUhG7UeQinwv2ogDA/us9ulEwcprkmGuB67Qy ycO59k//ecxxd1sZQqfmQ2klScgEuFIXqU2UCOHxRuW5VpLc4CDwNhgsUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlCSUY5gBANP5P8I/jggHSDLlANMB8GA1UdIwQY MBaAFJWui9MySc8e1fDUOYFH79MtJUIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUt OGZmYmQ2YzczYmY1LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUtOGZmYmQ2YzczYmY1 LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhXtLWPo w/UEaoVDNBuGIF0IodSH8Due8XPWtj1cNnaAcGOP/zius0KJEl/x5NNszk93QaDT MN686GIDE8B11gA1FyIO8pmpu49xMRP+mVheZ2czHWWaZsPruHcYbq2wyAxUkpcW qw9fUi/+Um0k8HWC8mrvsNxs1gQpsFTReyx7GPjw+d4QFE381oefJO7sTFcwrygI h+dFNwIP27bx4XBzy6OS/MU4+y0nJEe51rmoPomm+X+9I1yr5kQXthmErONb2rku hbc0jtD00SWwWD37z2OR/iLwRAEJcQNmwSQh9/OSvn6Rzlezr4y0L6ZsbbMFrMj2 6bi4azPfvyeJuA== -----END CERTIFICATE-----Generated at Tue Dec 30 15:01:16 2025 by rpki-client