This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json) Hash identifier: Dwkb7ZXumAlrsS23DoVqlSBr5XIQm590H5tQ1wtkVJk= Subject key identifier: BF:F3:A0:56:CA:68:0C:E7:B5:7B:B5:44:84:72:65:7B:3B:32:1C:54 Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Certificate serial: 019B6DA1789FA231B1C5921AC1F26417E2F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft Manifest number: 0E55 Signing time: Tue 30 Dec 2025 05:00:57 +0000 Manifest this update: Tue 30 Dec 2025 05:00:57 +0000 Manifest next update: Wed 31 Dec 2025 05:00:57 +0000 Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=) 2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: zbgugb/lX+Hv56zFAm0MNHJaFvDOXmErU+NZvp9usck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:78:9f:a2:31:b1:c5:92:1a:c1:f2:64:17:e2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8 Validity Not Before: Dec 30 05:00:57 2025 GMT Not After : Dec 31 05:00:57 2025 GMT Subject: CN=bff3a056ca680ce7b57bb5448472657b3b321c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:24:ce:9c:08:ab:20:03:2b:05:04:f4:c8: 03:a5:bc:2f:dc:05:8c:f6:4e:38:6d:c2:81:a8:42: 33:50:e0:c4:22:b5:83:6f:55:a2:27:0a:97:dd:ee: ad:1d:af:a3:bc:e2:9b:c8:f9:cc:42:ad:41:8e:c9: 4e:6d:cd:0b:8b:ce:82:40:7e:fe:de:a0:a2:72:0c: 9f:6a:9b:4b:3b:63:d7:e7:70:7e:8b:da:22:2a:29: 65:ab:50:45:5b:e4:99:f6:2b:d8:72:21:ce:31:9a: 2a:80:c3:89:d0:2f:70:18:cd:6c:b1:b9:8e:fe:b8: a1:13:15:36:07:e1:5f:a6:a2:17:9d:e3:f9:3e:7e: 91:cc:93:04:6d:46:2c:78:3c:ce:63:85:d3:e5:ec: c8:10:34:2e:8d:76:bd:ae:d6:e8:7a:e0:04:50:3b: 27:f9:41:35:c1:05:65:6f:0b:ea:8a:ca:82:0f:32: 20:e7:38:52:22:3b:52:4e:3d:6e:4d:60:7a:a2:e0: e3:f9:fa:92:ce:7a:98:25:c2:f2:43:c5:4f:76:75: 67:c7:c6:7e:e0:7f:27:b8:3d:83:ca:9a:fa:df:33: f5:f4:29:3c:af:5b:53:38:b9:c4:94:c2:a1:55:49: 11:11:e7:6f:50:2a:5f:71:80:20:b5:6a:3f:11:e5: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:A0:56:CA:68:0C:E7:B5:7B:B5:44:84:72:65:7B:3B:32:1C:54 X509v3 Authority Key Identifier: keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:c0:fc:45:e1:c6:d9:92:bb:a0:28:cf:b6:68:e4:13:01: e4:00:78:a0:8e:c1:10:7d:72:7a:01:14:09:ca:12:9b:15:8b: 2b:8f:b1:47:37:d5:98:79:22:56:7c:85:bd:e6:5d:f2:fe:95: da:0e:bc:b4:2b:91:6b:d6:81:00:c1:45:3a:1d:1c:82:b0:7e: 1a:9c:d9:b6:b7:11:a7:4f:35:a9:a4:46:cf:49:57:7e:c7:73: c8:37:11:8e:d0:ed:c5:88:1c:b6:92:d1:eb:e6:d4:10:9e:45: 2a:b3:1d:94:af:2b:68:e4:d4:55:6a:cf:6e:13:e8:e9:2e:ad: 1c:3a:b6:59:70:7b:11:8c:41:d7:11:13:61:bd:1b:16:3a:b2: 57:2f:97:ac:3c:f0:21:25:82:89:65:d8:f9:65:a8:e3:00:f1: db:0a:73:6f:30:7d:59:2c:2b:79:d0:fd:51:c3:bb:3d:c2:79: 1e:ff:3c:43:e3:5d:db:51:71:ab:95:11:70:7e:2f:07:db:87: fb:16:7e:b3:9c:ea:da:28:e8:29:dc:9f:b6:f2:df:e0:c6:a5: 3d:59:63:3e:ad:b3:b6:dc:75:7b:5a:64:9d:e5:d5:80:c7:48: ad:6b:b0:c0:11:9a:b5:1d:73:91:d1:07:a7:cf:38:dc:21:d7: 46:33:99:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoXifojGxxZIawfJkF+L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGU1MTIyNTY5ZGU1MmNkNTBhZWM3OTM0OTRiZjFjZTdj MjVmYzgwHhcNMjUxMjMwMDUwMDU3WhcNMjUxMjMxMDUwMDU3WjAzMTEwLwYDVQQD EyhiZmYzYTA1NmNhNjgwY2U3YjU3YmI1NDQ4NDcyNjU3YjNiMzIxYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEUkzpwIqyADKwUE9MgDpbwv3AWM 9k44bcKBqEIzUODEIrWDb1WiJwqX3e6tHa+jvOKbyPnMQq1BjslObc0Li86CQH7+ 3qCicgyfaptLO2PX53B+i9oiKillq1BFW+SZ9ivYciHOMZoqgMOJ0C9wGM1ssbmO /rihExU2B+FfpqIXneP5Pn6RzJMEbUYseDzOY4XT5ezIEDQujXa9rtboeuAEUDsn +UE1wQVlbwvqisqCDzIg5zhSIjtSTj1uTWB6ouDj+fqSznqYJcLyQ8VPdnVnx8Z+ 4H8nuD2Dypr63zP19Ck8r1tTOLnElMKhVUkREedvUCpfcYAgtWo/EeUnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/zoFbKaAzntXu1RIRyZXs7MhxUMB8GA1UdIwQY MBaAFC+OUSJWneUs1QrseTSUvxznwl/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2Et ODY4OGIxZTUzNTcxLzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2EtODY4OGIxZTUzNTcx LzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIPA/EXh xtmSu6Aoz7Zo5BMB5AB4oI7BEH1yegEUCcoSmxWLK4+xRzfVmHkiVnyFveZd8v6V 2g68tCuRa9aBAMFFOh0cgrB+GpzZtrcRp081qaRGz0lXfsdzyDcRjtDtxYgctpLR 6+bUEJ5FKrMdlK8raOTUVWrPbhPo6S6tHDq2WXB7EYxB1xETYb0bFjqyVy+XrDzw ISWCiWXY+WWo4wDx2wpzbzB9WSwredD9UcO7PcJ5Hv88Q+Nd21Fxq5URcH4vB9uH +xZ+s5zq2ijoKdyftvLf4MalPVljPq2zttx1e1pkneXVgMdIrWuwwBGatR1zkdEH p8843CHXRjOZuA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:11:24 2025 by rpki-client