This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json) Hash identifier: ICCCeSwNbuz1ukISK0GP4x9neoMm2IoFGg2yeNmU7LA= Subject key identifier: 73:5D:CD:23:1C:90:C2:D5:43:DE:6A:D7:41:30:93:56:55:9F:2A:1B Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Certificate serial: 019B38A1CEDCA7C7094FE4B0A71C1FBAC000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:01:26 +0000 Manifest this update: Fri 19 Dec 2025 22:01:26 +0000 Manifest next update: Sat 20 Dec 2025 22:01:26 +0000 Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: 8T0RroEpiKfuaT+n5PNd8m0f9tSGtZE1+ydPgRagKFk=) 2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:ce:dc:a7:c7:09:4f:e4:b0:a7:1c:1f:ba:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Validity Not Before: Dec 19 22:01:26 2025 GMT Not After : Dec 20 22:01:26 2025 GMT Subject: CN=735dcd231c90c2d543de6ad741309356559f2a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:b7:31:dc:b1:e9:23:01:74:90:85:fe:3f: ab:e1:1a:47:6f:b2:84:19:2b:9a:5f:bc:fb:14:bf: 1e:f5:6b:88:9f:ac:5d:15:06:8b:c7:35:09:45:3a: e0:2e:b4:20:2c:44:f2:e0:42:98:bd:dc:44:30:f1: 6c:f6:d7:91:10:37:b2:29:73:b6:4e:38:9f:1c:b5: e2:9c:8e:47:d9:77:4f:fe:59:b0:e0:86:69:b1:24: 5e:77:06:3e:35:e5:65:a1:8f:24:27:64:29:c5:de: 48:56:e9:1f:b4:1a:cc:d0:70:27:ab:36:3f:29:40: 8f:11:1e:fe:ce:2b:04:18:48:ab:13:11:04:10:5c: 84:a3:32:12:0d:bf:7f:e3:29:07:b2:d6:59:47:78: 9d:25:6d:c8:a1:2b:2d:c9:54:1b:db:02:b1:56:53: eb:6c:ae:30:4d:ea:a1:5e:1c:28:7d:08:de:d0:eb: f3:e2:02:72:b0:0f:bf:49:11:f0:7b:03:56:56:0e: 2d:a6:96:e7:12:90:65:43:8f:ad:9f:c3:f5:c4:3f: 3a:21:6e:51:12:f7:cb:be:7e:b3:46:e9:e5:3d:3f: 23:af:66:63:5f:3d:99:d4:75:1b:86:f2:99:01:39: 14:d3:80:1b:6d:b3:45:f3:bd:3f:86:b7:53:7b:96: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5D:CD:23:1C:90:C2:D5:43:DE:6A:D7:41:30:93:56:55:9F:2A:1B X509v3 Authority Key Identifier: keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:36:dc:a4:f5:35:2a:74:ed:d5:2f:fd:ff:b8:74:b8:eb:cb: 24:1c:8e:37:54:18:45:b1:08:73:ab:80:4c:42:27:07:b0:ba: 29:73:a0:be:54:95:5a:ff:42:79:eb:6a:c1:6b:39:95:b9:b8: 2b:49:19:7b:8e:61:5d:f1:cf:85:9e:9a:c0:3b:16:20:06:b5: a8:b0:3b:f1:20:65:58:38:c0:2a:97:60:5b:0a:36:2c:c6:94: 55:94:64:17:d7:54:ea:73:90:86:75:a4:62:f5:5e:18:49:13: 91:57:e6:90:09:c2:76:38:1b:91:2e:c1:31:10:17:71:f8:ed: b7:e4:7c:7d:26:6a:49:f5:f9:26:6b:48:55:67:bb:82:25:5c: d7:a9:c2:30:d0:1d:f2:20:28:87:8e:86:10:a7:34:79:5b:b9: a8:90:eb:3c:48:21:38:9f:02:68:f6:9f:da:d8:6d:f4:0b:4a: c5:db:72:2c:26:79:5a:29:1d:4e:06:e6:2f:b4:a8:2d:e4:e5: ad:33:d1:72:1c:57:d3:2e:6b:90:19:60:04:f9:ff:82:f2:97: ad:6a:7e:d9:0e:22:f2:86:c8:12:ba:9f:8f:e0:e4:2c:b9:a7: 87:49:a7:2b:15:d7:2a:dd:25:25:a2:82:30:6f:3e:83:5c:ed: 15:76:6d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oc7cp8cJT+SwpxwfusAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk OGQzMmIwHhcNMjUxMjE5MjIwMTI2WhcNMjUxMjIwMjIwMTI2WjAzMTEwLwYDVQQD Eyg3MzVkY2QyMzFjOTBjMmQ1NDNkZTZhZDc0MTMwOTM1NjU1OWYyYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0C3Mdyx6SMBdJCF/j+r4RpHb7KE GSuaX7z7FL8e9WuIn6xdFQaLxzUJRTrgLrQgLETy4EKYvdxEMPFs9teREDeyKXO2 TjifHLXinI5H2XdP/lmw4IZpsSRedwY+NeVloY8kJ2Qpxd5IVukftBrM0HAnqzY/ KUCPER7+zisEGEirExEEEFyEozISDb9/4ykHstZZR3idJW3IoSstyVQb2wKxVlPr bK4wTeqhXhwofQje0Ovz4gJysA+/SRHwewNWVg4tppbnEpBlQ4+tn8P1xD86IW5R EvfLvn6zRunlPT8jr2ZjXz2Z1HUbhvKZATkU04AbbbNF870/hrdTe5a93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNdzSMckMLVQ95q10Ewk1ZVnyobMB8GA1UdIwQY MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDbcpPU1 KnTt1S/9/7h0uOvLJByON1QYRbEIc6uATEInB7C6KXOgvlSVWv9CeetqwWs5lbm4 K0kZe45hXfHPhZ6awDsWIAa1qLA78SBlWDjAKpdgWwo2LMaUVZRkF9dU6nOQhnWk YvVeGEkTkVfmkAnCdjgbkS7BMRAXcfjtt+R8fSZqSfX5JmtIVWe7giVc16nCMNAd 8iAoh46GEKc0eVu5qJDrPEghOJ8CaPaf2tht9AtKxdtyLCZ5WikdTgbmL7SoLeTl rTPRchxX0y5rkBlgBPn/gvKXrWp+2Q4i8obIErqfj+DkLLmnh0mnKxXXKt0lJaKC MG8+g1ztFXZt6w== -----END CERTIFICATE-----Generated at Sat Dec 20 04:23:30 2025 by rpki-client