This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft File: L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json) Hash identifier: sF6c9qH8Le9Dve8H89CsCP+207pkvxDiPuTbQDSRM/U= Subject key identifier: B2:7F:5E:A1:B9:2D:42:87:BD:FE:73:F2:EC:C9:06:D2:9C:08:19:69 Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f Certificate serial: 019B3C10839876DBF03B4F4F7FCBECB83929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft Manifest number: 10A3 Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=) 2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: i1XVYm7akNPLrvVIjT+3cBQieLbV/xSSY2YesidK02Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:83:98:76:db:f0:3b:4f:4f:7f:cb:ec:b8:39:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=b27f5ea1b92d4287bdfe73f2ecc906d29c081969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:b1:14:08:a9:c0:2f:55:0b:7c:b7:b3:b4: a0:a0:86:d6:45:61:f4:91:1c:e6:05:9a:ee:48:11: 75:4d:a6:56:d1:32:de:d2:24:74:d5:70:c8:e5:2f: 60:1b:de:b1:ec:e6:95:b0:e4:6b:81:14:69:95:ba: 18:e6:16:c4:db:67:c8:85:8e:87:f9:15:d5:c7:e1: 71:96:7b:c0:8b:28:55:d5:63:36:bc:81:22:fb:bf: 0b:8d:4f:53:25:99:0d:32:21:b8:61:39:f8:ce:d1: 09:f6:f2:0f:27:98:d8:92:74:76:f7:92:3f:25:de: 3d:fd:d9:55:64:aa:07:9e:ff:a2:99:4b:f1:f8:7c: 89:a3:fe:29:42:46:5f:6d:26:bd:12:0b:9c:c6:3e: 81:73:39:36:26:e3:31:d5:b7:87:1f:8f:dd:9b:e5: 6c:22:d8:52:c1:6a:21:4e:7e:d5:01:a0:77:fe:11: e6:f0:f6:39:35:e4:2f:5e:eb:be:fa:db:e8:fa:d8: 6e:b9:8b:27:ee:0f:12:a3:c1:20:70:61:8b:24:95: 8b:62:1a:0d:c4:26:be:72:df:05:a3:ef:4d:8e:5c: 8e:74:ad:92:6e:fc:c8:a2:96:ec:f7:d8:e7:bd:79: 6b:a4:90:b9:3e:e0:46:68:2e:37:5d:24:77:16:ea: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:5E:A1:B9:2D:42:87:BD:FE:73:F2:EC:C9:06:D2:9C:08:19:69 X509v3 Authority Key Identifier: keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:17:89:ae:e5:21:52:a5:fd:18:08:1b:76:dd:38:e3:6d:df: fb:9e:e4:16:75:1b:c5:a0:20:b1:8d:62:bd:f5:e5:97:f5:64: 70:ce:ad:ee:3d:e2:5e:69:72:8d:c9:98:0a:91:fd:86:ef:7f: 05:59:b3:12:eb:f2:4e:53:8a:63:26:f2:56:06:46:e3:79:3a: 8f:01:48:44:3d:2a:b4:f2:82:2a:7f:55:a1:fb:25:69:3d:2f: 17:28:0e:9e:0d:79:2c:54:20:f5:a5:a0:12:08:1c:f1:d6:60: fc:86:05:c8:12:4a:a3:9d:de:22:76:b8:83:b5:18:64:85:53: d4:03:30:c8:3c:31:9a:13:fd:f7:9f:43:fe:86:15:a6:90:26: b9:3d:94:57:f1:30:81:c0:78:72:0f:60:06:c3:54:a5:2d:70: 02:8f:a3:07:d0:4c:b0:c1:0c:87:2e:46:a3:e7:44:41:8a:69: ed:aa:82:1f:2c:a7:cd:75:97:9a:85:10:1f:bd:6e:38:58:2d: 9e:a1:30:31:fd:44:62:3f:e6:e0:fe:99:ca:a8:79:9b:d0:84: 8c:ca:41:d0:ff:7c:9d:cc:d6:2b:e7:53:6e:46:56:b2:d0:9b: cf:95:8b:7c:07:d4:2a:32:ef:de:b2:59:ee:a2:79:66:d6:a2: 16:69:d4:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIOYdtvwO09Pf8vsuDkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjU0MzZhYzUwMzgzMzJlNzAzYWRiYmVmZjU4MTRkYjgy YWI0M2YwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD EyhiMjdmNWVhMWI5MmQ0Mjg3YmRmZTczZjJlY2M5MDZkMjljMDgxOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJSxFAipwC9VC3y3s7SgoIbWRWH0 kRzmBZruSBF1TaZW0TLe0iR01XDI5S9gG96x7OaVsORrgRRplboY5hbE22fIhY6H +RXVx+FxlnvAiyhV1WM2vIEi+78LjU9TJZkNMiG4YTn4ztEJ9vIPJ5jYknR295I/ Jd49/dlVZKoHnv+imUvx+HyJo/4pQkZfbSa9Egucxj6Bczk2JuMx1beHH4/dm+Vs IthSwWohTn7VAaB3/hHm8PY5NeQvXuu++tvo+thuuYsn7g8So8EgcGGLJJWLYhoN xCa+ct8Fo+9NjlyOdK2SbvzIopbs99jnvXlrpJC5PuBGaC43XSR3FuotcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ/XqG5LUKHvf5z8uzJBtKcCBlpMB8GA1UdIwQY MBaAFC9lQ2rFA4My5wOtu+/1gU24KrQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEt OTVkNjBiM2U0NmNjLzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjNjNzktZDYwZi00YjEyLTgxMzEtOTVkNjBiM2U0NmNj LzEvTDJWRGFzVURnekxuQTYyNzdfV0JUYmdxdEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBeJruUh UqX9GAgbdt04423f+57kFnUbxaAgsY1ivfXll/VkcM6t7j3iXmlyjcmYCpH9hu9/ BVmzEuvyTlOKYybyVgZG43k6jwFIRD0qtPKCKn9VofslaT0vFygOng15LFQg9aWg Eggc8dZg/IYFyBJKo53eIna4g7UYZIVT1AMwyDwxmhP9959D/oYVppAmuT2UV/Ew gcB4cg9gBsNUpS1wAo+jB9BMsMEMhy5Go+dEQYpp7aqCHyynzXWXmoUQH71uOFgt nqEwMf1EYj/m4P6Zyqh5m9CEjMpB0P98nczWK+dTbkZWstCbz5WLfAfUKjLv3rJZ 7qJ5ZtaiFmnUSg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:43 2025 by rpki-client