This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json) Hash identifier: SSQqkU4GxrrwqUlYpT8mMvmdN3au20gQofW5of2tCY8= Subject key identifier: BA:02:9D:EE:CB:63:A5:32:5B:4A:F4:36:D3:F2:5D:22:85:58:E0:68 Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150 Certificate serial: 019B42EE944BF4D908A9224CA09BA1D2508F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 22:01:30 +0000 Manifest this update: Sun 21 Dec 2025 22:01:30 +0000 Manifest next update: Mon 22 Dec 2025 22:01:30 +0000 Files and hashes: 1: 2Ern7XpI7xVTQ3CUwnW69GXo5Eg.roa (hash: DdH3QDSIQvtC4AyWFmCb4yynqcvOBrRuTl5/+XJCiVs=) 2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 4W4MXorAwdf8nNWdhwJaKyVM07DhSsA/aGD9+dXn4Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:94:4b:f4:d9:08:a9:22:4c:a0:9b:a1:d2:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc20be6167890247303214197658ca7c9676150 Validity Not Before: Dec 21 22:01:30 2025 GMT Not After : Dec 22 22:01:30 2025 GMT Subject: CN=ba029deecb63a5325b4af436d3f25d228558e068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:6e:69:3f:29:1c:23:5b:e8:86:98:e3:a3: b5:85:9c:99:92:cf:23:f0:29:9d:6f:5b:b3:c5:27: 8c:79:f2:63:46:8d:f8:fb:58:80:fb:50:c1:cf:68: 95:4c:11:f5:ff:9f:7f:70:f0:b5:5d:18:55:97:b6: 8c:94:33:8c:38:40:1f:9b:34:db:dd:42:07:79:14: a7:59:d0:ab:32:fa:75:ea:36:27:8c:b3:7d:79:95: 18:5b:7b:5a:c6:ec:34:12:37:c9:3b:ec:64:f8:f7: b9:16:a9:02:dd:ae:69:d8:65:f2:81:83:27:ca:93: c2:e3:36:47:c7:82:65:3d:33:8e:87:4f:41:51:d3: ce:b6:dd:cf:cf:99:fe:62:47:63:dd:2c:f2:89:51: 8f:e3:8a:f8:15:e5:2b:4c:65:cb:05:20:32:63:75: d8:46:6b:43:bc:b4:8f:72:f6:ee:40:32:78:e7:20: a0:26:b0:e9:81:29:da:ab:95:28:a7:0a:0d:8d:bd: 0b:7e:15:fa:d9:09:27:3e:82:f2:90:97:13:bc:33: 89:2d:28:9b:57:93:e9:e4:53:29:3c:4f:86:65:02: 2c:6a:f9:60:14:87:53:cb:2c:5b:fa:18:6f:5e:19: 3c:d1:d5:d7:55:a4:28:a7:95:9b:69:bc:00:af:81: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:9D:EE:CB:63:A5:32:5B:4A:F4:36:D3:F2:5D:22:85:58:E0:68 X509v3 Authority Key Identifier: keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e4:d2:bd:33:e8:1e:fb:00:33:aa:8f:57:d6:42:9d:34:0c: 43:9a:a5:8c:ff:26:75:3d:98:1a:4c:02:7f:67:b5:76:f4:5c: d3:11:37:09:49:06:f4:4d:56:30:83:2c:1b:e0:50:9a:c5:2f: 8b:bc:d1:38:dc:ba:54:8b:77:72:43:8f:88:cb:53:f8:e1:dc: a7:48:78:d9:ff:aa:4d:37:dc:bb:31:81:a9:09:d3:be:5f:04: 76:98:36:a2:ad:53:7b:8f:e5:03:36:8f:47:97:2a:c5:5a:10: 67:d0:dd:5d:e9:d3:a2:9b:a4:38:a0:38:fa:86:5a:4b:f7:d0: cf:86:88:05:8f:7e:9c:72:c3:11:1b:7a:de:61:fd:12:1e:f8: f8:0e:1e:b3:44:f9:e2:24:33:c8:56:f7:06:91:22:3f:49:16: 37:87:dd:6d:4f:81:56:23:2f:5f:25:d9:22:e1:23:82:77:8e: 79:c4:0d:5c:c6:e8:92:99:83:1f:19:63:da:75:2c:0f:ff:58: 8e:fd:51:e0:a1:9c:88:08:ce:07:0f:5f:58:81:24:ef:50:3f: 09:6e:b8:1e:b9:5d:05:fa:ba:5b:7a:0e:af:db:d9:1f:c3:7c: 9d:f8:12:41:c5:33:3c:5b:66:9b:00:54:5e:1b:58:5f:9d:53: 8d:56:14:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7pRL9NkIqSJMoJuh0lCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2 NzYxNTAwHhcNMjUxMjIxMjIwMTMwWhcNMjUxMjIyMjIwMTMwWjAzMTEwLwYDVQQD EyhiYTAyOWRlZWNiNjNhNTMyNWI0YWY0MzZkM2YyNWQyMjg1NThlMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz15uaT8pHCNb6IaY46O1hZyZks8j 8Cmdb1uzxSeMefJjRo34+1iA+1DBz2iVTBH1/59/cPC1XRhVl7aMlDOMOEAfmzTb 3UIHeRSnWdCrMvp16jYnjLN9eZUYW3taxuw0EjfJO+xk+Pe5FqkC3a5p2GXygYMn ypPC4zZHx4JlPTOOh09BUdPOtt3Pz5n+Ykdj3SzyiVGP44r4FeUrTGXLBSAyY3XY RmtDvLSPcvbuQDJ45yCgJrDpgSnaq5UopwoNjb0LfhX62QknPoLykJcTvDOJLSib V5Pp5FMpPE+GZQIsavlgFIdTyyxb+hhvXhk80dXXVaQop5WbabwAr4E2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoCne7LY6UyW0r0NtPyXSKFWOBoMB8GA1UdIwQY MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+TSvTPo HvsAM6qPV9ZCnTQMQ5qljP8mdT2YGkwCf2e1dvRc0xE3CUkG9E1WMIMsG+BQmsUv i7zRONy6VIt3ckOPiMtT+OHcp0h42f+qTTfcuzGBqQnTvl8Edpg2oq1Te4/lAzaP R5cqxVoQZ9DdXenTopukOKA4+oZaS/fQz4aIBY9+nHLDERt63mH9Eh74+A4es0T5 4iQzyFb3BpEiP0kWN4fdbU+BViMvXyXZIuEjgneOecQNXMbokpmDHxlj2nUsD/9Y jv1R4KGciAjOBw9fWIEk71A/CW64HrldBfq6W3oOr9vZH8N8nfgSQcUzPFtmmwBU XhtYX51TjVYUZw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:29 2025 by rpki-client