This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json) Hash identifier: cOJbibhYqOEORAwSHyvOC2tJMzJEDPy+PdTNVazMfHc= Subject key identifier: 85:5A:A5:B5:1F:44:08:4E:91:4C:53:FF:17:13:DB:6C:7E:23:92:59 Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05 Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05 Certificate serial: 019B4E84FBB89406874780169E0292FFE0F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 04:01:36 +0000 Manifest this update: Wed 24 Dec 2025 04:01:36 +0000 Manifest next update: Thu 25 Dec 2025 04:01:36 +0000 Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: 57KVdns67sg1RM4l31YpOlXLc+2mTePJoH8TsHDppso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:fb:b8:94:06:87:47:80:16:9e:02:92:ff:e0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05 Validity Not Before: Dec 24 04:01:36 2025 GMT Not After : Dec 25 04:01:36 2025 GMT Subject: CN=855aa5b51f44084e914c53ff1713db6c7e239259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:9d:04:0d:14:1e:62:53:f7:cd:21:1f:a2: 02:3e:de:64:f2:94:ac:44:c4:2d:1e:34:d5:60:08: f7:6a:4d:53:b3:bd:98:05:68:db:bc:db:3d:a6:71: 06:c7:a3:a8:8f:51:35:48:b5:89:e3:1c:93:d3:82: 7a:6b:7f:da:c0:2a:7b:a7:29:92:32:aa:73:63:87: c9:c0:71:9c:6a:c8:b7:1a:47:03:6f:f8:dd:9b:98: dd:fe:b3:d2:7d:5a:fd:3b:a8:52:cf:11:29:3e:41: 8f:27:54:ae:bd:26:e9:85:ed:f0:05:a7:96:bf:b3: 70:9b:28:33:2e:18:7f:c4:c7:c6:0d:2d:61:c8:c2: 63:e7:ee:03:4a:d4:81:e0:05:a2:69:75:fd:70:c0: f6:f0:54:b0:06:a5:52:a5:f8:32:76:3f:05:2c:c2: ea:9b:6a:a8:f7:91:35:76:8f:f2:2c:5e:92:2d:fe: 22:b1:b7:7e:3f:26:f5:d2:9a:8f:59:30:dd:1c:c3: 53:fc:1f:82:d1:f1:c6:57:04:fc:30:f9:a3:a0:ba: d1:3d:e4:80:fd:cb:7a:5b:1a:1d:92:2c:94:a3:de: 75:88:5c:71:69:60:8b:4b:0d:cd:2d:2d:fd:db:6a: 75:7f:ca:4f:44:1c:ad:a6:37:05:ef:a4:4b:7f:ed: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:A5:B5:1F:44:08:4E:91:4C:53:FF:17:13:DB:6C:7E:23:92:59 X509v3 Authority Key Identifier: keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:fc:77:0b:bb:cb:07:f5:96:c2:67:47:a6:0c:75:c8:1b:22: 27:29:39:8c:f6:b7:52:53:af:4d:60:85:39:b0:26:b3:88:e2: 72:15:6f:ba:82:f7:20:ad:ff:bb:e5:21:38:df:0b:64:c9:22: f7:61:ed:64:a6:61:9d:cc:94:c4:a8:48:ab:a5:8c:ab:d6:10: 66:be:d0:45:2c:51:45:f7:d0:c7:56:00:f4:2c:cc:06:03:93: 7a:f3:30:77:9d:05:ba:a5:37:4e:81:67:58:2a:6e:21:23:6f: 9a:a6:ef:69:57:e6:a1:7a:5f:ab:7e:4b:4b:47:6e:1e:d3:5e: d5:e0:23:90:96:1a:bb:bd:72:ef:0c:ff:0e:fb:08:0c:3e:dd: 8d:4d:ca:db:97:b2:ab:8a:40:5f:11:36:e2:50:84:4a:19:25: c4:8a:30:d6:4c:2c:33:09:b3:16:9f:6b:bb:56:81:ae:c6:04: 1a:ff:4d:84:aa:77:7f:f3:93:d5:cb:57:8a:83:f8:c0:f1:2a: c6:41:c2:2f:81:7e:79:ef:37:06:c9:85:d7:a5:78:76:34:98: 3f:f7:bf:83:80:c9:d1:77:92:74:e8:b8:2a:c2:2f:74:f6:be: 43:34:dd:fb:94:fb:23:78:93:9c:a4:32:60:7c:77:3c:6f:83: 79:d4:e7:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhPu4lAaHR4AWngKS/+DzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzU0NTU5MTkzZmU4MDNkMjg3NGQ2OThmMzQyOTI4Zjc2 MzJhMDUwHhcNMjUxMjI0MDQwMTM2WhcNMjUxMjI1MDQwMTM2WjAzMTEwLwYDVQQD Eyg4NTVhYTViNTFmNDQwODRlOTE0YzUzZmYxNzEzZGI2YzdlMjM5MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+2dBA0UHmJT980hH6ICPt5k8pSs RMQtHjTVYAj3ak1Ts72YBWjbvNs9pnEGx6Ooj1E1SLWJ4xyT04J6a3/awCp7pymS MqpzY4fJwHGcasi3GkcDb/jdm5jd/rPSfVr9O6hSzxEpPkGPJ1SuvSbphe3wBaeW v7NwmygzLhh/xMfGDS1hyMJj5+4DStSB4AWiaXX9cMD28FSwBqVSpfgydj8FLMLq m2qo95E1do/yLF6SLf4isbd+Pyb10pqPWTDdHMNT/B+C0fHGVwT8MPmjoLrRPeSA /ct6WxodkiyUo951iFxxaWCLSw3NLS3922p1f8pPRBytpjcF76RLf+0gBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVapbUfRAhOkUxT/xcT22x+I5JZMB8GA1UdIwQY MBaAFC/FRVkZP+gD0odNaY80KSj3YyoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wODQyZTMtOTA4ZC00MTFhLTliNjkt ZjIwY2M3OThjYjFkLzEvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wODQyZTMtOTA4ZC00MTFhLTliNjktZjIwY2M3OThjYjFk LzEvTDhWRldSa182QVBTaDAxcGp6UXBLUGRqS2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vx3C7vL B/WWwmdHpgx1yBsiJyk5jPa3UlOvTWCFObAms4jichVvuoL3IK3/u+UhON8LZMki 92HtZKZhncyUxKhIq6WMq9YQZr7QRSxRRffQx1YA9CzMBgOTevMwd50FuqU3ToFn WCpuISNvmqbvaVfmoXpfq35LS0duHtNe1eAjkJYau71y7wz/DvsIDD7djU3K25ey q4pAXxE24lCEShklxIow1kwsMwmzFp9ru1aBrsYEGv9NhKp3f/OT1ctXioP4wPEq xkHCL4F+ee83BsmF16V4djSYP/e/g4DJ0XeSdOi4KsIvdPa+QzTd+5T7I3iTnKQy YHx3PG+DedTnxw== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:14 2025 by rpki-client