This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json) Hash identifier: M623csx+UiGHwWTHC6ob1rQ7phgp+uZpYC5khPiAiho= Subject key identifier: 65:DB:AA:CF:5D:07:D1:32:EC:21:1B:DC:69:5E:CF:98:CA:BC:7F:E3 Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019B3D91151266C3733430D6B4DC8EAC62CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft Manifest number: 089D Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Jh6gGZOO2oETgse/FBjjPp3CHaDceVTVqhBbrJGdsF4=) 2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=) 3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=) 4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:15:12:66:c3:73:34:30:d6:b4:dc:8e:ac:62:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=65dbaacf5d07d132ec211bdc695ecf98cabc7fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:db:26:40:8d:cd:f7:b8:5d:43:c1:e2:42: c4:5e:e9:61:5c:77:3e:9e:a5:99:7d:81:ff:d9:b7: c9:1d:94:47:fd:95:bc:e7:5a:43:1a:4e:97:d5:ae: 86:a4:30:c9:ad:c6:91:60:58:61:1d:00:a0:1b:45: 8d:98:3b:8f:a7:64:94:ac:0f:bf:d5:04:11:18:94: 59:2d:5b:44:de:5f:96:cf:5a:fd:5c:99:a5:d9:c8: 3c:e6:6b:9b:ec:da:24:1e:35:6b:89:0f:27:b0:71: 21:b1:d6:49:9b:11:5a:2b:cb:5c:f8:b2:95:f8:2f: de:7f:bb:b3:06:24:e2:0a:4d:f1:0b:4e:19:7a:6b: 17:f3:e0:a4:fa:bb:99:cd:ca:b1:22:00:f8:9b:1e: 8a:1a:77:49:27:b5:4e:24:40:6b:cd:7d:79:5a:79: e0:32:61:60:97:4e:af:63:c1:02:3e:18:ab:4c:30: 12:b0:31:43:52:a6:f1:e4:44:4d:2b:36:62:71:ba: e8:a3:37:86:bd:63:e4:69:30:18:4d:45:21:b0:3e: ca:41:fc:ac:49:86:10:4c:98:63:12:60:82:ed:4b: 67:33:2b:c6:26:35:14:b3:35:51:95:26:43:e3:03: b6:6e:4b:ab:fa:be:c0:6c:1b:54:23:7f:1b:d1:09: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DB:AA:CF:5D:07:D1:32:EC:21:1B:DC:69:5E:CF:98:CA:BC:7F:E3 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a4:bf:c0:bd:61:81:38:1a:42:df:4c:43:24:4f:94:86:69: 41:59:8e:a4:b7:7d:cb:18:2d:61:ce:96:be:bd:fb:a8:02:a9: 50:0b:db:44:a8:3f:90:1f:b7:2b:38:6b:0d:51:65:6c:f2:c6: 45:34:8c:10:31:12:f0:bf:c0:99:89:05:e0:f6:74:ec:10:b6: ac:c8:cb:2c:db:06:11:87:3a:d8:e4:7a:d4:0d:90:93:82:d4: f5:37:a5:00:68:92:0b:d2:ee:2e:08:71:80:dc:91:03:04:95: ee:4f:e7:1b:b0:a3:f4:b9:09:40:37:f2:e0:f2:c4:b0:6f:46: c1:9f:4f:f0:20:43:d8:ef:a7:b3:b4:9f:ce:54:b1:67:d1:43: 3c:76:06:8b:c7:15:23:b4:f0:74:74:ef:ef:ce:46:7f:45:23: aa:64:64:86:9c:78:40:cf:ff:94:9c:2d:0a:4f:8a:a9:58:97: ee:9f:d1:0c:e1:db:c0:61:e4:91:32:44:fd:b9:98:d3:b9:ca: 41:34:be:58:38:0b:97:f7:a9:5f:89:b5:73:7d:a0:8d:93:a8: 55:b9:bc:c7:16:3f:5a:80:86:a5:34:9c:1e:88:fc:42:ae:4c: 2b:b7:c6:a3:53:5f:d5:39:cb:88:35:dd:97:ae:a0:bb:da:8f: 16:d0:c6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRUSZsNzNDDWtNyOrGLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD Eyg2NWRiYWFjZjVkMDdkMTMyZWMyMTFiZGM2OTVlY2Y5OGNhYmM3ZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16jbJkCNzfe4XUPB4kLEXulhXHc+ nqWZfYH/2bfJHZRH/ZW851pDGk6X1a6GpDDJrcaRYFhhHQCgG0WNmDuPp2SUrA+/ 1QQRGJRZLVtE3l+Wz1r9XJml2cg85mub7NokHjVriQ8nsHEhsdZJmxFaK8tc+LKV +C/ef7uzBiTiCk3xC04ZemsX8+Ck+ruZzcqxIgD4mx6KGndJJ7VOJEBrzX15Wnng MmFgl06vY8ECPhirTDASsDFDUqbx5ERNKzZicbroozeGvWPkaTAYTUUhsD7KQfys SYYQTJhjEmCC7UtnMyvGJjUUszVRlSZD4wO2bkur+r7AbBtUI38b0QnYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXbqs9dB9Ey7CEb3Glez5jKvH/jMB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6S/wL1h gTgaQt9MQyRPlIZpQVmOpLd9yxgtYc6Wvr37qAKpUAvbRKg/kB+3KzhrDVFlbPLG RTSMEDES8L/AmYkF4PZ07BC2rMjLLNsGEYc62OR61A2Qk4LU9TelAGiSC9LuLghx gNyRAwSV7k/nG7Cj9LkJQDfy4PLEsG9GwZ9P8CBD2O+ns7SfzlSxZ9FDPHYGi8cV I7TwdHTv785Gf0UjqmRkhpx4QM//lJwtCk+KqViX7p/RDOHbwGHkkTJE/bmY07nK QTS+WDgLl/epX4m1c32gjZOoVbm8xxY/WoCGpTScHoj8Qq5MK7fGo1Nf1TnLiDXd l66gu9qPFtDGpg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:23 2025 by rpki-client