This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: IDFgOladc6B9bOzRrYxEFGABbWOdyafbRl6apK2e4hM= Subject key identifier: 85:1D:41:4E:1D:42:A1:5B:1F:E6:B3:B9:81:06:B4:50:6A:B7:67:58 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B71EB8B6A78266CBBE1A58A5E66575AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 156F Signing time: Wed 31 Dec 2025 01:00:20 +0000 Manifest this update: Wed 31 Dec 2025 01:00:20 +0000 Manifest next update: Thu 01 Jan 2026 01:00:20 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: ppUcPXeqsjhJSCrcK0R6pVzZDuVbPs79XzyqkFA5JNQ=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) 11: xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa (hash: 4OPLheoTg5k7mp/nUmmdqHwXsQWi3MUcdPRsarIm3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 01:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:8b:6a:78:26:6c:bb:e1:a5:8a:5e:66:57:5a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Dec 31 01:00:20 2025 GMT Not After : Jan 1 01:00:20 2026 GMT Subject: CN=851d414e1d42a15b1fe6b3b98106b4506ab76758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:f3:95:e7:33:4a:fe:78:77:d3:5d:8a:50: 8d:7f:ec:0b:74:16:9a:5e:2d:d2:c0:d3:12:b8:ec: e9:d5:d0:8a:1f:25:aa:26:ad:3c:48:77:11:53:78: 8e:ce:11:40:fc:0c:f2:05:f8:61:ba:21:3f:77:df: 1b:a8:b4:06:e2:d7:0a:68:e8:20:61:7d:00:c9:87: 93:d3:fc:4d:f4:e5:9b:18:5c:07:19:59:40:1b:55: 5e:eb:70:c1:ce:15:4c:ce:e0:74:27:70:95:a6:5d: f8:2b:09:36:b8:0c:43:d3:00:d6:eb:75:f7:f9:7b: 65:0a:d4:9f:87:29:0c:e5:53:e6:f6:a3:51:83:8b: 3c:17:5c:27:07:0d:66:7b:6d:b5:7b:01:f1:5e:6f: 34:b5:ef:ac:e8:c1:62:41:20:07:fa:60:ab:d5:ca: ec:e7:52:e5:95:b6:ae:fe:8a:33:ae:38:b6:88:b6: eb:a9:73:cb:54:a5:60:3b:24:32:ce:30:0e:da:f4: c1:ce:e7:44:6d:4f:b1:25:9f:d4:f8:38:b5:6e:e4: d0:9d:03:64:71:de:a3:02:23:28:84:2c:62:ae:fd: 6b:02:bf:fe:d2:24:61:c3:92:3c:79:c3:65:ed:96: ad:63:73:7f:fc:bb:e4:0d:00:6e:51:cf:63:71:14: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1D:41:4E:1D:42:A1:5B:1F:E6:B3:B9:81:06:B4:50:6A:B7:67:58 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8d:ba:12:86:18:37:b9:f2:b6:51:65:54:b1:bf:5d:3c:35: 13:ff:ea:e3:00:c3:45:59:a8:b6:fa:56:7b:70:83:f9:7d:92: cc:b1:90:90:16:e9:db:14:23:a6:62:d6:01:42:d4:de:7c:94: f4:92:69:13:7f:f0:f0:4d:30:48:64:a8:3d:a2:2b:65:58:49: a9:7a:6e:ce:1c:8e:2a:9e:8a:3a:ca:d3:f6:1c:b0:f0:fa:5b: 7f:7b:a3:6d:c5:c4:8c:93:ac:67:6c:bb:47:cf:59:e8:32:06: 62:73:8c:34:95:c6:75:ee:1c:11:c3:3c:0a:52:1f:7f:73:81: 6e:2c:b8:0a:31:e6:5f:1b:28:53:83:ac:fb:b7:ae:39:68:6a: 9f:f7:07:af:90:4b:e6:78:86:79:16:45:41:b9:88:4f:b1:a0: fc:db:cc:4d:6f:df:fa:bb:3a:67:6b:3d:5a:0a:73:f7:53:fd: 10:03:ac:ee:32:24:b0:0a:75:47:00:45:82:e1:6e:42:eb:f5: 76:46:77:9c:16:fa:ec:8c:91:a5:36:01:f2:4e:83:69:4f:d6: 77:47:f6:c2:60:e1:0b:28:b0:b1:5b:5f:c9:31:78:44:7b:30: 98:43:cd:2c:ea:d7:67:f4:c5:be:d5:61:e9:89:31:cc:a3:0a: eb:27:ea:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx64tqeCZsu+Glil5mV1r1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMjMxMDEwMDIwWhcNMjYwMTAxMDEwMDIwWjAzMTEwLwYDVQQD Eyg4NTFkNDE0ZTFkNDJhMTViMWZlNmIzYjk4MTA2YjQ1MDZhYjc2NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqejzleczSv54d9NdilCNf+wLdBaa Xi3SwNMSuOzp1dCKHyWqJq08SHcRU3iOzhFA/AzyBfhhuiE/d98bqLQG4tcKaOgg YX0AyYeT0/xN9OWbGFwHGVlAG1Ve63DBzhVMzuB0J3CVpl34Kwk2uAxD0wDW63X3 +XtlCtSfhykM5VPm9qNRg4s8F1wnBw1me221ewHxXm80te+s6MFiQSAH+mCr1crs 51Lllbau/oozrji2iLbrqXPLVKVgOyQyzjAO2vTBzudEbU+xJZ/U+Di1buTQnQNk cd6jAiMohCxirv1rAr/+0iRhw5I8ecNl7ZatY3N//LvkDQBuUc9jcRToWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUdQU4dQqFbH+azuYEGtFBqt2dYMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATY26EoYY N7nytlFlVLG/XTw1E//q4wDDRVmotvpWe3CD+X2SzLGQkBbp2xQjpmLWAULU3nyU 9JJpE3/w8E0wSGSoPaIrZVhJqXpuzhyOKp6KOsrT9hyw8Ppbf3ujbcXEjJOsZ2y7 R89Z6DIGYnOMNJXGde4cEcM8ClIff3OBbiy4CjHmXxsoU4Os+7euOWhqn/cHr5BL 5niGeRZFQbmIT7Gg/NvMTW/f+rs6Z2s9Wgpz91P9EAOs7jIksAp1RwBFguFuQuv1 dkZ3nBb67IyRpTYB8k6DaU/Wd0f2wmDhCyiwsVtfyTF4RHswmEPNLOrXZ/TFvtVh 6YkxzKMK6yfqyA== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:28 2025 by rpki-client