This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json) Hash identifier: 79mBbcfxl6dYGO2rGro2MKlPtD7K/ZuwoiFE09W+uAs= Subject key identifier: 74:19:E0:81:09:62:F9:42:62:0D:54:4C:98:A6:3E:3F:49:FA:E8:81 Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019B3CB4DA0728047C961A5C65C68A898098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft Manifest number: 05CF Signing time: Sat 20 Dec 2025 17:00:43 +0000 Manifest this update: Sat 20 Dec 2025 17:00:43 +0000 Manifest next update: Sun 21 Dec 2025 17:00:43 +0000 Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: gsZzTqDrKke7UL/UY/NeNrTiKcX8SY+ADzDaou8Kz0o=) 2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=) 3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=) 4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:da:07:28:04:7c:96:1a:5c:65:c6:8a:89:80:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Dec 20 17:00:43 2025 GMT Not After : Dec 21 17:00:43 2025 GMT Subject: CN=7419e0810962f942620d544c98a63e3f49fae881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:8e:1b:dc:fc:c5:63:ab:c4:49:1e:d6:79: 35:e1:58:ce:a0:35:15:a1:dc:22:3b:ec:08:fa:4d: 2b:a3:b3:63:75:fc:f1:0a:13:fa:b6:f5:f5:80:ba: f6:50:3f:d2:92:ff:ff:68:15:b8:f7:fe:49:1f:63: 95:ef:ce:e7:50:68:3d:fc:f5:8d:c6:48:2b:af:32: f8:e2:a9:33:69:5c:dc:75:16:24:03:96:8a:dd:5e: 1c:a8:bb:a6:ad:72:84:a0:fa:ed:be:99:f9:9b:e2: bd:18:34:04:a7:4f:fa:c5:a0:6b:0c:8b:4d:6d:dc: ce:60:9a:17:2c:21:99:be:df:75:dc:b7:1e:fe:b0: 60:7c:38:de:00:8d:b7:ed:9c:76:dc:03:93:99:8b: 0b:6d:a1:f8:7b:2c:5c:a3:ac:6a:11:62:21:77:c3: 13:39:11:de:bf:ca:6a:1e:d2:b2:fd:da:cc:7b:c9: d9:f4:15:25:1b:ea:42:d1:67:45:55:43:76:ad:2c: e8:a0:4b:77:18:38:c3:cb:c3:e7:90:42:8a:ff:3e: a3:96:15:2d:ce:48:18:0e:2e:9b:ba:62:5e:93:24: 5a:ae:b0:86:d9:ed:59:d3:89:07:c4:53:69:7f:d2: 0e:7f:d8:6e:99:63:58:e3:94:9b:47:5f:18:70:ce: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:19:E0:81:09:62:F9:42:62:0D:54:4C:98:A6:3E:3F:49:FA:E8:81 X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7c:50:2c:f2:13:d9:97:40:9f:5a:ac:4b:35:5b:6f:27:40: 20:e7:28:53:6a:f2:8f:c5:af:89:3d:a0:12:6d:9a:a7:97:41: 7c:dc:23:0a:e9:84:f2:41:b5:bf:d2:22:68:cc:d2:87:6e:43: ee:31:45:b6:26:13:c9:88:58:70:ea:c6:dc:f4:c8:44:10:e9: 28:bf:e1:b9:15:75:1d:37:fe:2e:64:63:b8:96:b6:71:dd:0a: 29:6a:75:83:d2:99:f5:9f:25:cd:8b:a6:a2:73:74:8c:f5:ce: cf:86:a2:39:8f:06:2f:6a:22:8e:44:b3:7d:99:f5:e0:17:31: 5a:2a:79:0d:59:a0:05:ad:84:2e:d3:e6:a6:a2:6d:e9:ba:ad: 47:f4:7e:1e:19:ba:07:f2:2d:01:a9:e1:8e:f8:13:05:cf:c0: 49:a1:27:f4:dd:36:6a:2e:fb:2d:2c:cb:c3:e0:5e:5a:45:43: a2:82:61:44:b4:1d:ff:17:2c:b7:72:2a:36:8f:54:84:2c:3c: 5c:bf:0e:f7:c5:55:21:68:29:7a:16:85:ac:1a:5c:d3:57:f4: 5d:30:37:74:d6:13:72:ba:1c:a9:83:68:d2:a4:1a:78:dd:83: ca:53:83:ef:32:8b:7e:d6:8c:eb:d2:4d:8d:7f:05:59:4c:ce: c9:a5:9a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNoHKAR8lhpcZcaKiYCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjUxMjIwMTcwMDQzWhcNMjUxMjIxMTcwMDQzWjAzMTEwLwYDVQQD Eyg3NDE5ZTA4MTA5NjJmOTQyNjIwZDU0NGM5OGE2M2UzZjQ5ZmFlODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFCOG9z8xWOrxEke1nk14VjOoDUV odwiO+wI+k0ro7NjdfzxChP6tvX1gLr2UD/Skv//aBW49/5JH2OV787nUGg9/PWN xkgrrzL44qkzaVzcdRYkA5aK3V4cqLumrXKEoPrtvpn5m+K9GDQEp0/6xaBrDItN bdzOYJoXLCGZvt913Lce/rBgfDjeAI237Zx23AOTmYsLbaH4eyxco6xqEWIhd8MT ORHev8pqHtKy/drMe8nZ9BUlG+pC0WdFVUN2rSzooEt3GDjDy8PnkEKK/z6jlhUt zkgYDi6bumJekyRarrCG2e1Z04kHxFNpf9IOf9humWNY45SbR18YcM5GHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQZ4IEJYvlCYg1UTJimPj9J+uiBMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHxQLPIT 2ZdAn1qsSzVbbydAIOcoU2ryj8WviT2gEm2ap5dBfNwjCumE8kG1v9IiaMzSh25D 7jFFtiYTyYhYcOrG3PTIRBDpKL/huRV1HTf+LmRjuJa2cd0KKWp1g9KZ9Z8lzYum onN0jPXOz4aiOY8GL2oijkSzfZn14BcxWip5DVmgBa2ELtPmpqJt6bqtR/R+Hhm6 B/ItAanhjvgTBc/ASaEn9N02ai77LSzLw+BeWkVDooJhRLQd/xcst3IqNo9UhCw8 XL8O98VVIWgpehaFrBpc01f0XTA3dNYTcrocqYNo0qQaeN2DylOD7zKLftaM69JN jX8FWUzOyaWasg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:51 2025 by rpki-client