This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json) Hash identifier: uagyLnbkqV4yUEEP/+DsjEYNruwbA2zRRzeKAzdudsQ= Subject key identifier: B2:B5:F8:7D:91:29:A1:0E:AA:3B:E1:20:0C:2F:43:12:62:D3:A6:E6 Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Certificate serial: 019B46CB151C7B909D6591F42B32F276976C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft Manifest number: 083B Signing time: Mon 22 Dec 2025 16:01:12 +0000 Manifest this update: Mon 22 Dec 2025 16:01:12 +0000 Manifest next update: Tue 23 Dec 2025 16:01:12 +0000 Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: 4kHmSWWTtOwqHfgskzADtHA4IKT/CFP9aQlbV55s09Y=) 2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:15:1c:7b:90:9d:65:91:f4:2b:32:f2:76:97:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Validity Not Before: Dec 22 16:01:12 2025 GMT Not After : Dec 23 16:01:12 2025 GMT Subject: CN=b2b5f87d9129a10eaa3be1200c2f431262d3a6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:1c:10:ed:e4:04:16:de:f4:44:ee:71:36: bd:90:7f:ba:7b:a2:0a:ec:38:5c:ae:4a:f1:af:8d: 21:f2:d7:e5:ec:d9:b2:e2:05:fd:47:54:bb:e5:64: 55:b7:9b:49:34:2c:46:ac:7e:1f:21:0d:ee:24:3d: 55:3e:66:03:99:d8:82:fb:f7:21:2b:da:87:b0:0f: be:10:cd:86:9e:e2:fc:ce:35:d7:1f:af:59:63:28: b8:23:82:33:57:20:6f:56:eb:61:b9:93:0d:44:f4: 0a:76:b0:2a:39:63:fa:86:26:8d:b5:d3:c1:c1:e9: c9:4e:7c:f1:a9:71:ff:4b:30:f1:e4:da:1c:51:3f: 0c:01:93:20:1a:bf:e8:d6:8b:c0:e6:2d:b3:12:50: 51:96:f7:81:16:14:39:37:b9:3f:44:63:4d:ad:cb: d0:c5:3c:5e:a5:27:80:1b:02:48:5c:86:f9:5c:7f: 80:9e:68:e6:7a:77:ef:a2:08:c5:d3:e8:07:f4:88: ad:0a:13:37:64:b8:1e:b8:0e:38:c9:5d:9d:de:1a: 3d:f7:05:4f:30:69:d0:18:77:64:a9:ed:79:4e:4b: d7:4e:28:50:8d:ce:11:8f:03:cf:64:2d:4b:3b:5c: 8a:2e:57:e7:97:45:9d:1c:02:9a:82:ec:6d:b4:3f: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:F8:7D:91:29:A1:0E:AA:3B:E1:20:0C:2F:43:12:62:D3:A6:E6 X509v3 Authority Key Identifier: keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:30:bc:8e:91:b2:2d:6c:d7:c0:2b:93:d2:18:dc:6b:b5:29: 90:9d:bb:54:91:ac:f5:ac:e7:cd:27:5a:ad:00:de:1b:36:11: 7a:1b:b4:5d:73:03:28:57:61:0e:55:00:1b:57:af:8a:cf:cb: 2e:01:2e:de:14:cc:c7:0c:5b:81:83:04:08:d8:d8:61:29:70: c5:ec:b4:e8:ea:39:3d:f7:85:8b:4a:dd:59:03:b1:2c:88:24: 95:f0:38:5a:c5:5f:e9:06:ca:4e:06:bb:c9:cf:88:b1:05:1e: f0:45:6d:5d:14:15:05:8e:26:fc:77:fd:e0:17:e3:ed:6c:c4: ff:32:29:df:d7:53:96:25:86:ee:23:ab:02:36:d6:b0:ef:fe: f7:2b:1f:ff:4e:14:b4:9b:44:77:b9:3a:b8:d3:a5:d1:d0:6a: fb:1e:d0:08:1d:e8:f5:45:c2:bb:0a:87:01:b0:45:6e:3e:15: 95:49:ac:2f:07:67:e0:f2:f2:f0:3c:b5:3d:da:1b:3e:a8:89: eb:b7:c7:8e:0d:aa:6f:09:0b:e2:3a:09:2c:db:71:98:7e:49: 15:99:cf:3b:74:63:57:fc:71:ee:1b:4f:51:08:73:cd:12:23: 84:33:a7:48:14:6a:15:68:f6:8f:6f:0b:b6:3e:2a:f1:84:fa: 91:9e:32:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyxUce5CdZZH0KzLydpdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1 ZjI5YTQwHhcNMjUxMjIyMTYwMTEyWhcNMjUxMjIzMTYwMTEyWjAzMTEwLwYDVQQD EyhiMmI1Zjg3ZDkxMjlhMTBlYWEzYmUxMjAwYzJmNDMxMjYyZDNhNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wIcEO3kBBbe9ETucTa9kH+6e6IK 7Dhcrkrxr40h8tfl7Nmy4gX9R1S75WRVt5tJNCxGrH4fIQ3uJD1VPmYDmdiC+/ch K9qHsA++EM2GnuL8zjXXH69ZYyi4I4IzVyBvVuthuZMNRPQKdrAqOWP6hiaNtdPB wenJTnzxqXH/SzDx5NocUT8MAZMgGr/o1ovA5i2zElBRlveBFhQ5N7k/RGNNrcvQ xTxepSeAGwJIXIb5XH+AnmjmenfvogjF0+gH9IitChM3ZLgeuA44yV2d3ho99wVP MGnQGHdkqe15TkvXTihQjc4RjwPPZC1LO1yKLlfnl0WdHAKaguxttD+FSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK1+H2RKaEOqjvhIAwvQxJi06bmMB8GA1UdIwQY MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDC8jpGy LWzXwCuT0hjca7UpkJ27VJGs9aznzSdarQDeGzYRehu0XXMDKFdhDlUAG1evis/L LgEu3hTMxwxbgYMECNjYYSlwxey06Oo5PfeFi0rdWQOxLIgklfA4WsVf6QbKTga7 yc+IsQUe8EVtXRQVBY4m/Hf94Bfj7WzE/zIp39dTliWG7iOrAjbWsO/+9ysf/04U tJtEd7k6uNOl0dBq+x7QCB3o9UXCuwqHAbBFbj4VlUmsLwdn4PLy8Dy1PdobPqiJ 67fHjg2qbwkL4joJLNtxmH5JFZnPO3RjV/xx7htPUQhzzRIjhDOnSBRqFWj2j28L tj4q8YT6kZ4ydg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:30:59 2025 by rpki-client