This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json) Hash identifier: L3MWlJ+MDc4/LM6zw3SFSv/AjTcyC0m+z/sLzbGcgFI= Subject key identifier: 9A:E1:8C:35:C3:D7:E6:5C:7A:C4:31:BE:E4:79:AB:3B:BE:A2:52:44 Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Certificate serial: 019B631E8092507C255F0BA378965ACA0D0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:01:41 +0000 Manifest this update: Sun 28 Dec 2025 04:01:41 +0000 Manifest next update: Mon 29 Dec 2025 04:01:41 +0000 Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: ii2wAXaJl4FARzc/OgyYOmUo4qNI5aGB/Xt7Qab/O/g=) 2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:80:92:50:7c:25:5f:0b:a3:78:96:5a:ca:0d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Validity Not Before: Dec 28 04:01:41 2025 GMT Not After : Dec 29 04:01:41 2025 GMT Subject: CN=9ae18c35c3d7e65c7ac431bee479ab3bbea25244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:d9:8c:42:be:6b:27:db:cc:ee:9f:74:78: 9a:89:41:da:93:0f:5a:00:14:ac:29:cc:20:15:7c: d2:eb:f2:ee:95:e1:2e:f2:a6:7a:2c:d8:d0:8d:d3: ca:99:df:70:63:6a:fe:5c:4e:4e:51:78:5b:c4:cf: d6:1f:6d:b8:02:a9:13:f5:5a:13:43:bd:80:80:1c: f1:6b:43:59:06:f1:a9:9b:33:2d:a7:dd:4d:e2:a7: 8d:b4:d1:e2:cf:d6:f9:ee:83:b7:17:47:82:2c:5e: 17:22:8e:69:7b:bb:dc:8a:4b:a9:ca:c9:f5:4a:ce: 69:ec:9c:6a:a9:d6:d5:3b:12:a3:83:66:4d:2a:f5: 2e:43:8f:f1:03:3d:0e:45:5c:03:f5:5c:1c:39:78: 1d:d1:fc:20:43:52:71:23:0a:28:a3:b5:f6:e4:4e: cc:97:35:de:17:05:0c:7c:49:d8:f1:50:cd:48:8e: 70:13:49:45:6c:02:d8:2d:3e:48:47:31:fb:66:8e: 14:c9:94:73:07:cd:22:7a:00:2f:54:55:e5:d0:6a: 93:b8:c3:6a:b8:c6:4a:91:14:ae:8b:9c:e9:9d:96: 55:40:65:8b:cc:32:b9:07:93:48:68:27:5c:ae:99: 86:3e:19:04:53:ca:81:49:21:23:0d:b9:09:68:db: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:8C:35:C3:D7:E6:5C:7A:C4:31:BE:E4:79:AB:3B:BE:A2:52:44 X509v3 Authority Key Identifier: keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:4b:81:e2:e9:56:b7:b1:61:0b:76:48:39:24:69:4b:54:a0: e7:e3:13:97:47:2c:9f:1d:d0:54:0a:8f:de:6f:87:1c:d8:c8: 77:0f:cb:01:36:fd:c2:3a:b6:0f:f7:9a:d5:77:f6:5b:57:62: 21:79:68:a5:c8:c6:9d:f6:4a:ce:a2:0d:97:4d:29:2f:89:20: 50:fe:95:4a:e3:5f:21:9f:40:03:81:41:78:f5:00:9b:ac:d5: af:8f:cf:18:44:ba:3d:f8:c1:0a:42:bb:d4:7f:19:6a:01:7d: 21:8d:bf:cd:6c:c8:fc:02:13:2b:96:1c:1d:06:5d:37:5e:1a: cb:11:88:0b:b2:93:e5:d9:6e:33:3f:e0:b4:63:a1:c1:48:f6: 72:b8:27:d6:1f:00:91:7d:9a:5d:75:b4:c8:6f:30:5a:73:aa: 5c:26:b1:ea:ae:f9:dd:eb:63:16:ba:0b:7e:88:4d:2d:5f:31: 3a:ae:97:a2:f3:31:53:39:f6:68:fc:31:8e:a7:ef:3f:ff:1d: ce:83:da:cd:20:4d:e1:14:cb:74:b8:1b:8c:8d:c2:f9:1a:92: 68:a9:e3:18:8b:8f:6f:8b:a1:df:4b:30:f6:07:88:5c:24:aa: ea:fb:16:36:87:52:9f:c1:ab:6c:57:9b:53:22:8f:c0:58:72: 80:99:ad:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHoCSUHwlXwujeJZayg0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTE3YmY4MGVlMWUyZTcwZGIzZWEwNWRjMTZmMzA0ZTcw OTBjZjQwHhcNMjUxMjI4MDQwMTQxWhcNMjUxMjI5MDQwMTQxWjAzMTEwLwYDVQQD Eyg5YWUxOGMzNWMzZDdlNjVjN2FjNDMxYmVlNDc5YWIzYmJlYTI1MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DDZjEK+ayfbzO6fdHiaiUHakw9a ABSsKcwgFXzS6/LuleEu8qZ6LNjQjdPKmd9wY2r+XE5OUXhbxM/WH224AqkT9VoT Q72AgBzxa0NZBvGpmzMtp91N4qeNtNHiz9b57oO3F0eCLF4XIo5pe7vcikupysn1 Ss5p7JxqqdbVOxKjg2ZNKvUuQ4/xAz0ORVwD9VwcOXgd0fwgQ1JxIwooo7X25E7M lzXeFwUMfEnY8VDNSI5wE0lFbALYLT5IRzH7Zo4UyZRzB80iegAvVFXl0GqTuMNq uMZKkRSui5zpnZZVQGWLzDK5B5NIaCdcrpmGPhkEU8qBSSEjDbkJaNvayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrhjDXD1+ZcesQxvuR5qzu+olJEMB8GA1UdIwQY MBaAFC/he/gO4eLnDbPqBdwW8wTnCQz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMt MjRiMzU3MmE4M2JiLzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMtMjRiMzU3MmE4M2Ji LzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkuB4ulW t7FhC3ZIOSRpS1Sg5+MTl0csnx3QVAqP3m+HHNjIdw/LATb9wjq2D/ea1Xf2W1di IXlopcjGnfZKzqINl00pL4kgUP6VSuNfIZ9AA4FBePUAm6zVr4/PGES6PfjBCkK7 1H8ZagF9IY2/zWzI/AITK5YcHQZdN14ayxGIC7KT5dluMz/gtGOhwUj2crgn1h8A kX2aXXW0yG8wWnOqXCax6q753etjFroLfohNLV8xOq6XovMxUzn2aPwxjqfvP/8d zoPazSBN4RTLdLgbjI3C+RqSaKnjGIuPb4uh30sw9geIXCSq6vsWNodSn8GrbFeb UyKPwFhygJmtAg== -----END CERTIFICATE-----Generated at Sun Dec 28 06:42:57 2025 by rpki-client