This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json) Hash identifier: AkstmGzkCAHxeAQ+xU5PcErV49OztRT1SNPqbufW0os= Subject key identifier: 28:B7:3F:AF:FC:73:E0:F5:BD:51:BE:BA:4F:C2:F4:A6:8C:DF:1B:35 Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Certificate serial: 019B698DF499870FDB38CFFA789D659B45ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft Manifest number: 084D Signing time: Mon 29 Dec 2025 10:01:09 +0000 Manifest this update: Mon 29 Dec 2025 10:01:09 +0000 Manifest next update: Tue 30 Dec 2025 10:01:09 +0000 Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: ak3bjz9QaINrwrkqKbg/XxKG6pE9+DZxl5n1Ru0TRgQ=) 2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:f4:99:87:0f:db:38:cf:fa:78:9d:65:9b:45:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4 Validity Not Before: Dec 29 10:01:09 2025 GMT Not After : Dec 30 10:01:09 2025 GMT Subject: CN=28b73faffc73e0f5bd51beba4fc2f4a68cdf1b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:8c:be:40:f8:f9:9c:32:d3:e9:bd:41:64: 1e:32:1a:fb:1c:3d:e5:7d:58:bc:e2:bf:ac:76:b3: 5d:50:94:7c:6d:aa:06:9d:79:b5:bd:ad:c7:34:46: f4:42:13:31:5d:f7:d6:a9:76:1c:ce:c8:c2:65:5c: 76:2f:91:d3:89:66:ea:63:ed:ef:6f:a6:30:45:f7: 00:aa:d8:2d:2c:8b:2a:91:6b:06:e1:be:0a:30:d1: 6b:5c:8b:f3:ed:17:b9:ec:5f:3e:06:ba:37:39:01: 34:14:3c:48:2b:9e:c1:f0:3b:03:20:67:67:dc:3d: 5d:35:74:3a:51:36:64:96:9f:0b:b0:3f:7e:4f:f8: 9d:d8:e3:7e:09:2d:4c:ca:3e:83:fb:62:fe:94:85: 3c:ad:b4:de:20:ee:01:23:c2:0b:9f:12:7c:34:19: 8d:f2:3a:34:20:f3:8a:49:88:18:5d:d2:65:19:21: 5b:42:79:72:2b:0f:47:ce:fc:33:24:21:14:85:35: f8:09:d0:6b:55:8d:f7:bf:fa:41:f2:a0:c7:a0:61: a6:2d:44:92:ac:d8:44:bd:eb:c5:dc:73:9b:ab:1b: 89:c3:0d:ff:9d:fd:2b:c6:70:2d:bd:2a:a7:51:fd: b2:63:bd:da:36:a1:85:f4:66:58:a3:76:6f:11:e7: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:3F:AF:FC:73:E0:F5:BD:51:BE:BA:4F:C2:F4:A6:8C:DF:1B:35 X509v3 Authority Key Identifier: keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:44:fa:e8:ca:3a:01:b5:2e:95:61:3a:7f:95:c3:db:0f:dc: 9e:e2:7c:1e:5e:c5:e2:7f:f9:89:cf:85:68:69:6a:a3:6a:c2: bc:fd:2e:6b:2c:c6:42:0b:3c:5b:01:c0:76:8e:4a:85:62:fb: 22:29:81:a9:62:88:c3:0f:1d:36:31:c0:7c:bc:bc:b2:2b:a9: 7f:b9:eb:98:b1:7f:c8:ca:3a:f1:a5:d2:d2:3e:b2:fd:1f:ce: 7a:e7:84:48:8e:cb:fc:1d:7e:2f:1f:36:58:6f:66:81:9b:13: 6d:8a:81:c3:2c:a5:8e:4c:3a:58:27:2d:fd:ea:86:40:28:ac: 2b:07:e9:ed:73:18:87:1c:de:0d:58:3b:5f:77:d7:ba:9a:79: d1:35:4b:3b:12:c1:e2:3b:44:94:0d:1d:0e:52:c1:04:45:3c: 0d:cd:56:9b:d7:06:ff:5e:45:e3:e6:56:36:30:5f:91:a9:a3: 44:fe:44:be:99:80:f8:3e:ef:c9:9c:39:c2:46:46:22:05:5a: e6:0e:d1:5c:c6:83:6e:da:44:a6:50:03:87:72:fb:99:28:c6: d1:34:83:65:da:46:88:54:5d:9c:c7:65:96:83:b2:65:93:ff: c4:50:6f:3f:fe:e3:e5:15:3f:9f:a6:07:88:d5:8a:f8:8f:97: ff:d2:9a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjfSZhw/bOM/6eJ1lm0XtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1 ZjI5YTQwHhcNMjUxMjI5MTAwMTA5WhcNMjUxMjMwMTAwMTA5WjAzMTEwLwYDVQQD EygyOGI3M2ZhZmZjNzNlMGY1YmQ1MWJlYmE0ZmMyZjRhNjhjZGYxYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8eMvkD4+Zwy0+m9QWQeMhr7HD3l fVi84r+sdrNdUJR8baoGnXm1va3HNEb0QhMxXffWqXYczsjCZVx2L5HTiWbqY+3v b6YwRfcAqtgtLIsqkWsG4b4KMNFrXIvz7Re57F8+Bro3OQE0FDxIK57B8DsDIGdn 3D1dNXQ6UTZklp8LsD9+T/id2ON+CS1Myj6D+2L+lIU8rbTeIO4BI8ILnxJ8NBmN 8jo0IPOKSYgYXdJlGSFbQnlyKw9HzvwzJCEUhTX4CdBrVY33v/pB8qDHoGGmLUSS rNhEvevF3HObqxuJww3/nf0rxnAtvSqnUf2yY73aNqGF9GZYo3ZvEedx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi3P6/8c+D1vVG+uk/C9KaM3xs1MB8GA1UdIwQY MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUT66Mo6 AbUulWE6f5XD2w/cnuJ8Hl7F4n/5ic+FaGlqo2rCvP0uayzGQgs8WwHAdo5KhWL7 IimBqWKIww8dNjHAfLy8siupf7nrmLF/yMo68aXS0j6y/R/OeueESI7L/B1+Lx82 WG9mgZsTbYqBwyyljkw6WCct/eqGQCisKwfp7XMYhxzeDVg7X3fXupp50TVLOxLB 4jtElA0dDlLBBEU8Dc1Wm9cG/15F4+ZWNjBfkamjRP5EvpmA+D7vyZw5wkZGIgVa 5g7RXMaDbtpEplADh3L7mSjG0TSDZdpGiFRdnMdlloOyZZP/xFBvP/7j5RU/n6YH iNWK+I+X/9Ka9Q== -----END CERTIFICATE-----Generated at Mon Dec 29 16:18:52 2025 by rpki-client