This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json) Hash identifier: N9nPm2Z5o6vmn4zuN9eOpn6NdfdCElEwUJJrI/PP8sY= Subject key identifier: 51:BE:AC:53:D7:42:9D:9B:44:76:60:D1:7A:21:F0:D7:B1:F0:10:BA Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Certificate serial: 019B443900F46C14CFD987D73FFF27C46B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:02:24 +0000 Manifest this update: Mon 22 Dec 2025 04:02:24 +0000 Manifest next update: Tue 23 Dec 2025 04:02:24 +0000 Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: Tj62Lx6rjXGHol2IjGcWoh4xENuwb5DRo+ZaRc5HTtk=) 2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:00:f4:6c:14:cf:d9:87:d7:3f:ff:27:c4:6b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b Validity Not Before: Dec 22 04:02:24 2025 GMT Not After : Dec 23 04:02:24 2025 GMT Subject: CN=51beac53d7429d9b447660d17a21f0d7b1f010ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:ea:30:27:f4:3e:d7:02:5b:17:fb:b5:67: 19:c1:45:4b:e3:e6:a7:41:6f:0e:c7:5f:77:fd:c1: b3:5a:57:6d:27:9a:a2:a3:91:57:93:79:6c:5a:31: 3d:7b:fc:ab:3a:81:80:e6:b4:63:6c:da:9e:20:02: dc:fb:b5:83:0b:8a:a9:ba:87:4c:e2:4d:5a:b1:1d: 1f:4f:6a:71:ae:b8:43:d0:cc:68:22:c5:62:db:55: d8:ba:a3:da:e7:d3:1a:e2:47:85:3a:ce:b6:6d:53: 77:b5:43:ca:89:35:5a:b8:7b:c0:76:f8:b1:6d:b0: de:a5:4b:33:56:5b:02:a9:79:92:2f:39:36:8c:1b: 26:bd:7c:45:e1:5e:3d:a1:64:5d:0c:d3:52:36:bf: ff:fd:bd:43:5f:7e:7f:d5:a1:38:61:0f:15:4a:8a: c7:bf:16:d0:3e:b8:6c:54:39:18:0a:43:f8:1b:df: f0:7d:21:6c:99:20:d8:2d:30:b8:c7:14:1d:5b:6d: 52:82:b1:9a:47:bf:2d:4a:32:64:e7:ac:a4:11:4f: 65:95:40:93:34:6c:67:f3:50:8f:cb:af:61:e6:5c: 16:09:5e:d4:1b:c0:b5:eb:5c:c7:99:c4:45:aa:89: f7:14:d8:03:10:10:0b:9c:31:f7:50:14:d3:b1:82: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BE:AC:53:D7:42:9D:9B:44:76:60:D1:7A:21:F0:D7:B1:F0:10:BA X509v3 Authority Key Identifier: keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:29:45:d9:99:b0:45:8d:9a:b0:ac:76:98:14:5c:6f:80:ba: 15:cb:89:6b:5c:6c:49:31:b0:b4:ca:35:d6:cd:4e:a8:11:c8: 27:8e:1d:9a:5f:04:a2:cd:e2:64:c4:ad:5c:de:36:cc:be:a1: 25:02:43:c7:3e:f0:fc:f8:f0:26:4d:84:77:4b:0e:b5:dd:5b: fb:8c:0f:4e:d5:21:16:4a:ea:9f:8c:fa:ab:4b:6c:a3:e3:58: 9d:f8:66:74:d6:5a:b8:3b:57:40:38:d9:6f:b1:13:09:c3:a7: 18:12:86:09:60:e0:0d:81:75:a4:d9:8c:82:8e:36:00:e0:9b: d8:e6:84:4c:6e:39:99:34:98:e9:f6:a2:21:06:e7:35:f5:bf: e4:86:b1:12:c8:07:51:a0:cd:b3:55:59:19:e6:69:c5:74:71: cb:28:a5:95:aa:e9:3f:b5:39:7e:f1:da:aa:c3:9b:27:7b:82: ed:87:45:18:d8:ff:a7:bd:a2:ac:b4:37:f7:48:4d:c1:3c:30: 16:11:64:ea:5a:9b:63:fb:67:d2:dc:bc:d9:0e:ef:d8:1a:67: cc:51:9f:0e:18:d7:93:fe:81:38:fc:3b:5a:6d:2b:d9:dc:bd: 6f:52:63:48:37:c3:35:a1:61:42:1b:7e:cd:df:52:d7:ec:24: 35:87:21:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQD0bBTP2YfXP/8nxGtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk OGQzMmIwHhcNMjUxMjIyMDQwMjI0WhcNMjUxMjIzMDQwMjI0WjAzMTEwLwYDVQQD Eyg1MWJlYWM1M2Q3NDI5ZDliNDQ3NjYwZDE3YTIxZjBkN2IxZjAxMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtnqMCf0PtcCWxf7tWcZwUVL4+an QW8Ox193/cGzWldtJ5qio5FXk3lsWjE9e/yrOoGA5rRjbNqeIALc+7WDC4qpuodM 4k1asR0fT2pxrrhD0MxoIsVi21XYuqPa59Ma4keFOs62bVN3tUPKiTVauHvAdvix bbDepUszVlsCqXmSLzk2jBsmvXxF4V49oWRdDNNSNr///b1DX35/1aE4YQ8VSorH vxbQPrhsVDkYCkP4G9/wfSFsmSDYLTC4xxQdW21SgrGaR78tSjJk56ykEU9llUCT NGxn81CPy69h5lwWCV7UG8C161zHmcRFqon3FNgDEBALnDH3UBTTsYKOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG+rFPXQp2bRHZg0Xoh8Nex8BC6MB8GA1UdIwQY MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiClF2Zmw RY2asKx2mBRcb4C6FcuJa1xsSTGwtMo11s1OqBHIJ44dml8Eos3iZMStXN42zL6h JQJDxz7w/PjwJk2Ed0sOtd1b+4wPTtUhFkrqn4z6q0tso+NYnfhmdNZauDtXQDjZ b7ETCcOnGBKGCWDgDYF1pNmMgo42AOCb2OaETG45mTSY6faiIQbnNfW/5IaxEsgH UaDNs1VZGeZpxXRxyyillarpP7U5fvHaqsObJ3uC7YdFGNj/p72irLQ390hNwTww FhFk6lqbY/tn0ty82Q7v2BpnzFGfDhjXk/6BOPw7Wm0r2dy9b1JjSDfDNaFhQht+ zd9S1+wkNYchrA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:48 2025 by rpki-client