This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json) Hash identifier: LVtpBWermyf5076ZiIY8ZfIQhWB62P4vAAeJjLBxypY= Subject key identifier: 1B:AD:9A:19:99:E8:EE:FA:4F:AB:11:14:B2:1E:95:C6:7E:B3:E9:CA Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Certificate serial: 019B3FB5F0A9C129FE17255F5733EFADB634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft Manifest number: 0A43 Signing time: Sun 21 Dec 2025 07:00:46 +0000 Manifest this update: Sun 21 Dec 2025 07:00:46 +0000 Manifest next update: Mon 22 Dec 2025 07:00:46 +0000 Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: XkVqhE8ssoLNRpfWzmshhV67SYGGez/flgyyguKNzbs=) 2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f0:a9:c1:29:fe:17:25:5f:57:33:ef:ad:b6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166 Validity Not Before: Dec 21 07:00:46 2025 GMT Not After : Dec 22 07:00:46 2025 GMT Subject: CN=1bad9a1999e8eefa4fab1114b21e95c67eb3e9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:95:39:c5:b3:9e:66:08:85:33:60:52:b7: 86:89:00:6a:bc:c8:63:d8:7c:62:dc:b1:6d:9a:e4: d7:2d:e0:7c:3e:db:52:fb:b8:cb:d7:ba:8d:33:81: 52:9e:98:ac:f5:7c:e6:e7:83:06:c8:e1:5c:06:b2: 57:ac:69:1d:4a:d0:66:81:8f:69:5d:95:8c:a4:0e: 04:3f:6e:0e:e5:53:6f:6f:6a:59:cb:1a:96:de:cc: 1f:c2:3e:22:bf:85:43:79:d7:67:0a:cd:7a:f6:89: 6d:9e:6e:11:5b:6b:e3:73:d8:51:34:e6:39:61:dd: ca:8d:0d:79:d8:df:99:c0:19:05:9a:49:1f:2c:5e: b3:6b:5c:de:cc:56:66:a2:d7:a0:b8:3f:12:9b:80: 6f:56:3b:8c:a8:e5:29:8d:17:c8:f3:0d:c3:41:14: 66:e9:d5:8a:4d:9f:96:43:38:93:d4:21:a4:18:de: e8:37:f7:e0:ef:c8:6f:ee:64:fe:c9:8b:5c:6c:fa: f8:b1:22:df:c9:18:02:4b:9c:1e:c4:5f:59:bb:4a: 09:80:28:82:4b:3c:7e:c8:a7:b8:d7:82:64:71:28: 4b:e0:42:99:a7:61:cd:54:f6:4a:56:a2:77:82:97: 60:10:42:a3:13:a2:31:ec:82:85:66:a5:bd:65:41: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AD:9A:19:99:E8:EE:FA:4F:AB:11:14:B2:1E:95:C6:7E:B3:E9:CA X509v3 Authority Key Identifier: keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7e:21:f5:1c:85:94:01:ad:b8:10:b7:57:d2:c1:67:c8:dd: 90:48:ae:5a:c1:00:b3:59:9e:7b:c4:a3:85:f1:f5:e2:71:cb: 2b:56:90:19:17:09:ef:6d:b4:34:19:60:3d:a0:07:a5:58:24: ae:e7:0b:81:31:74:b1:23:e8:e1:29:59:c2:4b:8f:8b:7f:d0: bd:c9:62:f8:d3:84:6d:bf:5c:80:1b:e6:92:ae:d4:90:99:e7: 2e:43:24:8d:e7:ba:3a:c4:60:50:bf:92:ec:e1:67:5e:83:5f: 8a:c6:58:4c:1f:7c:b2:91:3e:22:03:2e:7d:3a:f7:5a:80:37: 40:97:db:2f:43:98:91:32:ec:43:b5:60:70:e6:58:10:54:d0: ed:09:87:c4:7e:a0:bc:36:6b:f5:84:e3:e9:2e:d5:c8:11:7c: 81:69:4e:b1:00:9a:67:eb:06:10:97:9c:eb:76:50:d7:3b:cc: 0e:aa:40:68:43:95:4c:08:61:a7:86:1a:4c:a3:fa:52:2a:e9: 4e:d9:c7:70:c7:4b:d7:5f:1c:90:7b:1f:07:3c:6e:37:f0:60: 8e:38:d8:46:bf:a8:8d:b1:32:79:4a:d2:42:6d:75:f1:5b:b7: f5:15:7f:26:bb:6b:e6:3d:ea:6c:df:20:8b:f3:8d:ed:5a:c5: ac:9b:2b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfCpwSn+FyVfVzPvrbY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmJkOWRlOGQ4OTUyNmM1YTQ5YTc2NmMxZjQ4NWYwOWY1 YTkxNjYwHhcNMjUxMjIxMDcwMDQ2WhcNMjUxMjIyMDcwMDQ2WjAzMTEwLwYDVQQD EygxYmFkOWExOTk5ZThlZWZhNGZhYjExMTRiMjFlOTVjNjdlYjNlOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH6VOcWznmYIhTNgUreGiQBqvMhj 2Hxi3LFtmuTXLeB8PttS+7jL17qNM4FSnpis9Xzm54MGyOFcBrJXrGkdStBmgY9p XZWMpA4EP24O5VNvb2pZyxqW3swfwj4iv4VDeddnCs169oltnm4RW2vjc9hRNOY5 Yd3KjQ152N+ZwBkFmkkfLF6za1zezFZmoteguD8Sm4BvVjuMqOUpjRfI8w3DQRRm 6dWKTZ+WQziT1CGkGN7oN/fg78hv7mT+yYtcbPr4sSLfyRgCS5wexF9Zu0oJgCiC Szx+yKe414JkcShL4EKZp2HNVPZKVqJ3gpdgEEKjE6Ix7IKFZqW9ZUGaswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFButmhmZ6O76T6sRFLIelcZ+s+nKMB8GA1UdIwQY MBaAFC/72d6NiVJsWkmnZsH0hfCfWpFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUt MWZjMWU3M2YwNjA3LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zMjA0OWMtNjM5My00MTA2LWIzMGUtMWZjMWU3M2YwNjA3 LzEvTF92WjNvMkpVbXhhU2FkbXdmU0Y4Sjlha1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn4h9RyF lAGtuBC3V9LBZ8jdkEiuWsEAs1mee8SjhfH14nHLK1aQGRcJ7220NBlgPaAHpVgk rucLgTF0sSPo4SlZwkuPi3/Qvcli+NOEbb9cgBvmkq7UkJnnLkMkjee6OsRgUL+S 7OFnXoNfisZYTB98spE+IgMufTr3WoA3QJfbL0OYkTLsQ7VgcOZYEFTQ7QmHxH6g vDZr9YTj6S7VyBF8gWlOsQCaZ+sGEJec63ZQ1zvMDqpAaEOVTAhhp4YaTKP6Uirp TtnHcMdL118ckHsfBzxuN/BgjjjYRr+ojbEyeUrSQm118Vu39RV/Jrtr5j3qbN8g i/ON7VrFrJsrDw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:30 2025 by rpki-client