This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: vFjVxaZA1rDtjvqoDi8a/VS4USsMOx/1il4RW0yRtV4= Subject key identifier: DC:FF:36:9A:59:09:76:D9:25:3C:5F:95:BA:65:8B:08:3B:1B:31:52 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B3BD8EDEF0701E75E89D6C1C2D7BFDAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 1553 Signing time: Sat 20 Dec 2025 13:00:30 +0000 Manifest this update: Sat 20 Dec 2025 13:00:30 +0000 Manifest next update: Sun 21 Dec 2025 13:00:30 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: cwTu6TEiVf5DnYYGu7QBXSaxFr5+0mDDYjeGCcDrd8s=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) 11: xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa (hash: 4OPLheoTg5k7mp/nUmmdqHwXsQWi3MUcdPRsarIm3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ed:ef:07:01:e7:5e:89:d6:c1:c2:d7:bf:da:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Dec 20 13:00:30 2025 GMT Not After : Dec 21 13:00:30 2025 GMT Subject: CN=dcff369a590976d9253c5f95ba658b083b1b3152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:e4:ff:df:1c:b7:fc:7f:1c:34:1a:43:c0: f8:87:48:1e:68:ca:0c:a5:de:ab:8f:54:18:f2:5d: 9d:71:47:de:19:35:c0:da:82:be:ed:86:01:61:8f: 0c:8c:a8:e6:87:24:2c:68:df:c0:a5:f7:e5:50:07: e5:0f:29:b2:63:f6:53:ca:88:4e:d0:c1:59:9b:bf: cf:e2:0e:98:4f:cc:4a:13:86:46:e8:f4:2a:b9:42: 31:a3:ca:f6:61:e7:4b:92:ce:82:15:eb:eb:4b:32: ef:42:dc:18:8f:b2:ff:f1:1a:1b:ea:61:4d:34:6a: 8a:a3:d8:5f:37:79:0e:b1:6d:74:83:bd:12:eb:1b: c8:73:e9:50:85:f6:d5:96:cc:58:44:e4:45:8a:47: 15:3d:cc:b5:14:8e:1c:05:73:3f:bc:3f:35:e2:81: b5:58:40:b3:47:74:4f:ff:76:f2:e5:de:6b:7f:ad: f3:03:83:9b:62:5d:e8:26:ab:3d:29:2c:23:79:b3: 3d:62:d8:69:fd:68:32:87:ac:4d:6d:fc:9a:64:32: b5:43:89:65:7d:a6:86:5e:ec:e6:a8:74:d7:10:c8: ee:4f:f8:7d:83:6f:ff:db:9c:6a:e3:a5:9f:ad:e0: 01:b2:1d:8a:de:fd:9f:20:44:82:63:f5:a9:de:8d: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FF:36:9A:59:09:76:D9:25:3C:5F:95:BA:65:8B:08:3B:1B:31:52 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e8:db:e1:d6:a4:1e:18:02:db:ba:76:da:10:fa:3c:26:0b: 5b:b6:1f:81:48:47:2c:ce:e3:50:5b:23:d4:8e:52:80:db:f6: 19:ef:a7:2b:0a:89:a2:71:ca:fb:11:7e:b8:3b:4d:6f:ed:b7: f2:6b:6c:bc:78:74:a4:70:9b:33:8b:70:9d:e7:7b:d2:8b:fa: e9:9b:ce:5d:ca:d8:4c:fa:db:6e:6e:4a:41:7e:63:ca:f7:d9: da:72:10:8c:a1:b1:97:0e:81:17:fc:bc:88:f5:8a:50:93:51: 80:1f:3d:56:7c:84:a5:f4:15:78:96:0e:f8:03:33:4c:b1:80: 82:c9:80:d2:22:31:54:14:d8:f9:6d:30:5e:9f:b0:5f:4a:99: fd:23:b2:36:6f:1a:3d:34:a6:d5:71:8f:e9:be:fe:d2:25:a6: 9e:5d:64:6e:ef:9e:42:f5:e6:3d:d9:86:0d:55:c6:f9:11:8c: 7e:d3:40:83:5a:76:f6:5e:af:68:ad:1a:c9:f6:6b:a9:38:dd: 4a:a4:88:71:5e:f0:4e:f5:57:c8:62:a7:e8:97:bb:70:9b:ff: f7:5c:84:ff:09:f3:9c:b0:06:2e:b7:17:84:dc:a7:eb:2e:8a: 4d:74:63:f1:da:ee:2c:7d:7a:1c:bc:6d:fb:02:5b:8b:ab:6f: 9c:b8:82:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72O3vBwHnXonWwcLXv9qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMjIwMTMwMDMwWhcNMjUxMjIxMTMwMDMwWjAzMTEwLwYDVQQD EyhkY2ZmMzY5YTU5MDk3NmQ5MjUzYzVmOTViYTY1OGIwODNiMWIzMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyvk/98ct/x/HDQaQ8D4h0geaMoM pd6rj1QY8l2dcUfeGTXA2oK+7YYBYY8MjKjmhyQsaN/ApfflUAflDymyY/ZTyohO 0MFZm7/P4g6YT8xKE4ZG6PQquUIxo8r2YedLks6CFevrSzLvQtwYj7L/8Rob6mFN NGqKo9hfN3kOsW10g70S6xvIc+lQhfbVlsxYRORFikcVPcy1FI4cBXM/vD814oG1 WECzR3RP/3by5d5rf63zA4ObYl3oJqs9KSwjebM9Ythp/Wgyh6xNbfyaZDK1Q4ll faaGXuzmqHTXEMjuT/h9g2//25xq46WfreABsh2K3v2fIESCY/Wp3o3wpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz/NppZCXbZJTxflbpliwg7GzFSMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQejb4dak HhgC27p22hD6PCYLW7YfgUhHLM7jUFsj1I5SgNv2Ge+nKwqJonHK+xF+uDtNb+23 8mtsvHh0pHCbM4twned70ov66ZvOXcrYTPrbbm5KQX5jyvfZ2nIQjKGxlw6BF/y8 iPWKUJNRgB89VnyEpfQVeJYO+AMzTLGAgsmA0iIxVBTY+W0wXp+wX0qZ/SOyNm8a PTSm1XGP6b7+0iWmnl1kbu+eQvXmPdmGDVXG+RGMftNAg1p29l6vaK0ayfZrqTjd SqSIcV7wTvVXyGKn6Je7cJv/91yE/wnznLAGLrcXhNyn6y6KTXRj8druLH16HLxt +wJbi6tvnLiC3g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:45 2025 by rpki-client