This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft File: L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json) Hash identifier: P9uevkzMX3jU+m1j6kpbl0EhpgM4dIm9Jp4jHn3Y7D4= Subject key identifier: 81:EE:32:85:2A:DC:5E:FA:97:16:5A:F2:FB:15:54:60:A0:37:68:92 Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f Certificate serial: 019B70340E1CA5AAE1F7331E6F5A4C84AEA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft Manifest number: 10BE Signing time: Tue 30 Dec 2025 17:00:18 +0000 Manifest this update: Tue 30 Dec 2025 17:00:18 +0000 Manifest next update: Wed 31 Dec 2025 17:00:18 +0000 Files and hashes: 1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=) 2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: gadBRBjV6K9Ah9sDCs2NWX1fQClL90+s+JJ9tLHu3iU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:0e:1c:a5:aa:e1:f7:33:1e:6f:5a:4c:84:ae:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f Validity Not Before: Dec 30 17:00:18 2025 GMT Not After : Dec 31 17:00:18 2025 GMT Subject: CN=81ee32852adc5efa97165af2fb155460a0376892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b0:48:3f:e4:92:e8:f9:42:7f:8e:7c:8e:d3: c7:f9:75:20:e4:42:6e:2b:21:df:d7:71:ac:e9:7b: de:9c:8e:41:01:e1:0c:3d:ea:0e:0b:ab:ca:0e:4c: 5a:b2:3a:49:ab:2e:b0:87:1d:e4:8e:45:94:93:63: c9:aa:f5:55:6f:81:8e:4b:c5:28:ef:9d:c0:ec:a0: 96:e3:1f:9a:9e:6b:1a:04:5e:77:f9:7f:aa:41:c0: 15:0f:38:83:ec:4d:0d:6a:b0:01:fe:ac:86:42:03: b9:31:da:30:20:f1:ea:a1:a6:cd:5c:f8:4d:7b:68: 75:63:d2:18:c4:15:e5:f1:60:e5:e0:07:42:75:d5: 4c:de:fd:0a:53:29:13:72:59:da:e6:5d:ee:87:42: 36:1e:a2:5c:76:2c:5c:12:a2:36:e3:0a:8d:17:ff: d7:3c:35:95:e4:13:f9:41:ae:f3:4a:43:2f:ba:db: f3:72:d7:49:32:22:91:7f:ab:c9:92:81:75:48:5e: 60:d1:30:68:ea:0c:09:98:cd:f9:d2:21:18:cf:d0: fa:61:58:a4:e5:43:37:fd:42:26:72:71:97:fe:41: 6d:e9:09:96:d5:cd:5f:96:72:42:95:94:91:f4:03: 9d:e7:61:27:67:96:86:df:8a:bb:08:46:ae:8e:63: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:32:85:2A:DC:5E:FA:97:16:5A:F2:FB:15:54:60:A0:37:68:92 X509v3 Authority Key Identifier: keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c5:59:3a:f0:ea:e3:7b:32:af:57:66:27:8b:9d:a1:8e:a2: 9b:5f:7d:c2:d3:e5:b2:a2:ef:5b:88:31:47:8e:78:61:ad:15: 9d:39:38:9b:71:ee:28:ec:46:b3:ac:8c:72:8f:8c:59:15:d1: 29:77:3b:93:7c:cf:42:3c:b0:b8:a8:f2:5c:6b:3f:76:ba:84: 79:fc:18:ff:c4:5d:8f:ad:b5:10:1e:20:18:ca:51:cd:fa:bf: 0e:40:80:86:cd:3c:6e:c8:84:2b:de:1a:8b:4c:2d:ff:5c:83: 2b:6f:f3:05:8e:d5:24:72:20:b9:0e:6b:6d:0c:62:cc:82:1d: f2:e9:db:cf:c2:92:ab:40:fe:46:68:19:f5:10:10:cb:d7:14: c3:59:7e:60:7e:e4:f1:cf:01:91:0f:17:63:0b:f0:45:ca:4b: a8:37:bd:5e:e8:dd:4d:3f:79:0a:8f:49:19:d7:d5:5d:9e:8c: 68:b5:26:2a:16:f4:0b:8e:0e:44:50:08:47:74:1c:e9:dd:fb: 40:aa:1d:7e:12:86:bf:2f:92:59:04:29:fa:24:7b:8b:a8:6f: a5:cf:72:24:d2:80:92:8f:72:84:9f:93:60:d9:29:e4:09:e7: 36:d7:3a:c5:9f:c3:d1:91:14:5e:87:41:dd:9e:cf:12:ac:fc: 78:8d:8e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNA4cparh9zMeb1pMhK6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy YWI0M2YwHhcNMjUxMjMwMTcwMDE4WhcNMjUxMjMxMTcwMDE4WjAzMTEwLwYDVQQD Eyg4MWVlMzI4NTJhZGM1ZWZhOTcxNjVhZjJmYjE1NTQ2MGEwMzc2ODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rBIP+SS6PlCf458jtPH+XUg5EJu KyHf13Gs6XvenI5BAeEMPeoOC6vKDkxasjpJqy6whx3kjkWUk2PJqvVVb4GOS8Uo 753A7KCW4x+anmsaBF53+X+qQcAVDziD7E0NarAB/qyGQgO5MdowIPHqoabNXPhN e2h1Y9IYxBXl8WDl4AdCddVM3v0KUykTclna5l3uh0I2HqJcdixcEqI24wqNF//X PDWV5BP5Qa7zSkMvutvzctdJMiKRf6vJkoF1SF5g0TBo6gwJmM350iEYz9D6YVik 5UM3/UImcnGX/kFt6QmW1c1flnJClZSR9AOd52EnZ5aG34q7CEaujmO+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHuMoUq3F76lxZa8vsVVGCgN2iSMB8GA1UdIwQY MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt OTVkNjBiM2U0NmNjLzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcVZOvDq 43syr1dmJ4udoY6im199wtPlsqLvW4gxR454Ya0VnTk4m3HuKOxGs6yMco+MWRXR KXc7k3zPQjywuKjyXGs/drqEefwY/8Rdj621EB4gGMpRzfq/DkCAhs08bsiEK94a i0wt/1yDK2/zBY7VJHIguQ5rbQxizIId8unbz8KSq0D+RmgZ9RAQy9cUw1l+YH7k 8c8BkQ8XYwvwRcpLqDe9XujdTT95Co9JGdfVXZ6MaLUmKhb0C44ORFAIR3Qc6d37 QKodfhKGvy+SWQQp+iR7i6hvpc9yJNKAko9yhJ+TYNkp5AnnNtc6xZ/D0ZEUXodB 3Z7PEqz8eI2OEA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:03:59 2025 by rpki-client