This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft File: L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json) Hash identifier: FxPlbpftVrs+zw39L6MqTCC1CIqv9WF4j0i56W9BUWA= Subject key identifier: EE:08:72:1E:ED:AC:2D:54:7E:37:4F:79:D9:14:15:B3:DA:91:17:B2 Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b Certificate serial: 019B42B754A05437BFE9315A44AD40F4A0B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft Manifest number: 14D1 Signing time: Sun 21 Dec 2025 21:01:09 +0000 Manifest this update: Sun 21 Dec 2025 21:01:09 +0000 Manifest next update: Mon 22 Dec 2025 21:01:09 +0000 Files and hashes: 1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: ncG7aulZCXd2h5egdYkMDsNLHbku45BDnUqLSS6JiGE=) 2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:54:a0:54:37:bf:e9:31:5a:44:ad:40:f4:a0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b Validity Not Before: Dec 21 21:01:09 2025 GMT Not After : Dec 22 21:01:09 2025 GMT Subject: CN=ee08721eedac2d547e374f79d91415b3da9117b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:56:84:3a:b4:e2:d1:ec:c2:a4:3a:4f:b4: 5a:7d:8b:f8:69:c9:d3:6b:9a:ae:76:28:e9:a4:56: 3e:d9:d1:1f:e4:2f:03:8d:45:d8:97:88:3f:d4:50: 0c:f6:1c:51:6b:88:b2:96:96:82:c6:64:5b:e0:c6: d6:ad:6e:cf:c9:7a:7c:b2:d3:d8:2c:55:87:5e:eb: 69:2f:10:04:b0:8a:06:65:ae:da:c4:3f:69:aa:95: a9:8c:c7:1b:05:b1:a7:da:73:3e:fa:03:d0:d4:cf: 08:c1:37:f8:b7:a4:2c:51:9b:aa:5d:eb:2d:42:be: f8:82:00:36:6c:2b:fe:5f:de:23:bb:10:f4:5e:46: 7c:b0:d4:e9:ab:d2:09:ec:43:18:b7:9d:6f:0a:d8: 6e:61:8a:7f:3e:79:2e:a7:c7:a4:59:ba:bc:62:ea: 2c:f1:3f:71:80:6f:e0:54:62:3d:a6:3b:36:ed:48: 07:77:80:c5:db:82:f6:e4:19:a8:e5:01:b9:34:84: 3d:58:54:50:d5:98:5d:bc:56:bb:18:b6:8b:a4:0d: dc:d7:be:22:61:b9:3d:0e:50:9e:73:60:e9:45:80: cc:5e:16:08:79:25:ff:c3:4a:2b:7a:eb:52:f3:d2: 07:35:6e:e4:95:ac:d1:61:7f:c8:9c:78:8c:8a:88: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:08:72:1E:ED:AC:2D:54:7E:37:4F:79:D9:14:15:B3:DA:91:17:B2 X509v3 Authority Key Identifier: keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f2:cf:d7:72:f0:b9:c2:28:c5:83:f6:4b:44:7b:10:00:4b: c3:6b:53:67:0f:77:1d:68:c6:7b:69:00:67:1c:04:19:76:00: 3b:fe:a8:7e:7d:e9:54:68:fb:06:1e:77:04:d2:42:ff:32:cf: ae:31:ab:7a:0b:18:77:95:c1:93:98:be:87:cc:fb:2f:85:c9: 67:20:50:4b:a5:e3:63:1f:df:f4:20:92:74:32:ca:a3:66:c5: 4c:b5:19:3c:0b:08:af:77:6a:6c:55:46:31:bc:da:e7:d2:ad: 9c:f8:de:0d:20:a3:c2:69:d4:36:c3:1d:88:36:25:d6:a9:6b: 3b:22:3c:7f:44:d5:58:22:80:27:fb:b5:30:97:fe:81:0f:91: 59:fa:e3:49:04:6c:b8:a3:fb:30:68:fb:34:33:c2:ee:e6:c0: 91:ee:c0:6e:74:17:75:8d:79:fd:fa:14:0f:53:70:81:79:cb: 76:5f:e5:96:25:9b:4c:2e:a9:e3:ef:c9:8c:4e:6a:94:f2:72: ff:7a:27:f9:2f:dc:90:17:54:f1:ba:83:8c:4b:8b:7a:04:89: f2:8d:8d:d1:a8:fc:9f:d8:33:3f:64:73:bd:f5:37:36:de:c8: be:ca:dc:c1:6f:92:ed:dd:15:81:83:1b:29:5f:ca:68:97:c9: 1b:2d:71:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1SgVDe/6TFaRK1A9KC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGU4M2VlZmU3ZjE0YjllNDQ5MGEzNmVlYmQ4ODFlMTYz Y2NjMWIwHhcNMjUxMjIxMjEwMTA5WhcNMjUxMjIyMjEwMTA5WjAzMTEwLwYDVQQD EyhlZTA4NzIxZWVkYWMyZDU0N2UzNzRmNzlkOTE0MTViM2RhOTExN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WFWhDq04tHswqQ6T7RafYv4acnT a5qudijppFY+2dEf5C8DjUXYl4g/1FAM9hxRa4iylpaCxmRb4MbWrW7PyXp8stPY LFWHXutpLxAEsIoGZa7axD9pqpWpjMcbBbGn2nM++gPQ1M8IwTf4t6QsUZuqXest Qr74ggA2bCv+X94juxD0XkZ8sNTpq9IJ7EMYt51vCthuYYp/Pnkup8ekWbq8Yuos 8T9xgG/gVGI9pjs27UgHd4DF24L25Bmo5QG5NIQ9WFRQ1ZhdvFa7GLaLpA3c174i Ybk9DlCec2DpRYDMXhYIeSX/w0oreutS89IHNW7klazRYX/InHiMiojZdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4Ich7trC1UfjdPedkUFbPakReyMB8GA1UdIwQY MBaAFC+Og+7+fxS55EkKNu69iB4WPMwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgt MWViM2I4YTk0MWY3LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgtMWViM2I4YTk0MWY3 LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPLP13Lw ucIoxYP2S0R7EABLw2tTZw93HWjGe2kAZxwEGXYAO/6ofn3pVGj7Bh53BNJC/zLP rjGregsYd5XBk5i+h8z7L4XJZyBQS6XjYx/f9CCSdDLKo2bFTLUZPAsIr3dqbFVG Mbza59KtnPjeDSCjwmnUNsMdiDYl1qlrOyI8f0TVWCKAJ/u1MJf+gQ+RWfrjSQRs uKP7MGj7NDPC7ubAke7AbnQXdY15/foUD1NwgXnLdl/lliWbTC6p4+/JjE5qlPJy /3on+S/ckBdU8bqDjEuLegSJ8o2N0aj8n9gzP2RzvfU3Nt7IvsrcwW+S7d0VgYMb KV/KaJfJGy1xtA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:27 2025 by rpki-client