This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json) Hash identifier: DqV1QlfqtrcmxaPgTefPW+jnk6mnFrRI4ekglZN2Wp0= Subject key identifier: A9:5C:A0:D4:09:B9:89:56:42:59:51:DC:86:A6:6B:18:76:32:63:0D Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Certificate serial: 019B4BF2C1E7D6CEE6FE38104CE9654BD2BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 16:02:39 +0000 Manifest this update: Tue 23 Dec 2025 16:02:39 +0000 Manifest next update: Wed 24 Dec 2025 16:02:39 +0000 Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: MFkYxCx5yJXerrtvjfryYnxGC7GKBa2oWqK0XNwTvqQ=) 2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:c1:e7:d6:ce:e6:fe:38:10:4c:e9:65:4b:d2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4 Validity Not Before: Dec 23 16:02:39 2025 GMT Not After : Dec 24 16:02:39 2025 GMT Subject: CN=a95ca0d409b98956425951dc86a66b187632630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:2e:c2:22:6f:1b:9f:9b:6b:57:a5:04:4c: c4:6f:52:19:7c:b4:00:48:e3:d2:45:ca:37:00:4f: e9:3b:aa:a7:92:a4:87:75:3d:8a:55:38:80:e2:23: 02:bf:c4:c3:e7:be:1a:8c:18:27:f4:18:7a:fd:dc: fd:ff:eb:47:3b:ec:39:73:48:ac:01:f5:04:c4:7d: f2:2b:9d:6d:1f:a0:a6:40:49:08:92:1f:f4:a7:d4: 84:ed:88:62:2a:f9:c4:0d:c2:7b:53:5d:e7:e1:60: af:a9:5c:74:20:bd:f3:0e:ff:4e:98:30:95:94:74: bb:2c:2d:47:84:62:7d:4f:64:7d:87:49:b3:14:93: 0e:de:f5:e7:83:2e:7a:c1:21:4a:9a:66:4c:91:a0: 8e:03:a0:34:ff:bd:ed:84:2d:5a:2b:2e:9e:e2:d6: 76:21:9f:8e:32:84:2e:f6:e6:87:83:fb:08:d5:98: af:d1:c6:ca:70:fb:a8:bd:c6:04:cd:d5:1e:7a:5a: 66:2b:7a:f7:90:6f:b7:47:10:30:29:8a:d5:67:47: 4a:da:37:90:ff:9a:59:73:29:93:8e:a9:bf:dd:b0: 67:b4:3e:96:ce:1c:d5:b2:8e:7a:26:02:de:29:36: c8:40:c6:30:61:59:8e:24:1b:61:65:8e:85:91:f3: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:A0:D4:09:B9:89:56:42:59:51:DC:86:A6:6B:18:76:32:63:0D X509v3 Authority Key Identifier: keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:17:84:2c:84:8d:58:05:2c:fd:44:73:4d:e5:d0:ee:a1:48: 16:2c:08:f6:cb:ed:dc:a1:0f:33:ba:ff:28:54:6c:e4:2d:41: 91:7a:3e:17:2b:9f:ec:d6:f0:c4:a8:37:7c:8e:b5:d9:f4:cc: 42:98:92:02:4a:52:d8:6b:ae:51:36:2f:91:f2:14:0e:25:bf: aa:6e:1b:4d:17:69:53:0d:30:a2:f3:e9:87:f4:4b:06:97:70: 7a:95:c2:cc:3f:28:76:d0:67:87:49:a9:7c:d1:39:4b:22:d5: e8:30:a5:4e:bd:3a:60:3b:02:71:98:72:a5:d4:09:0c:6b:60: 51:b2:34:02:28:63:70:69:85:db:03:aa:9c:a6:4a:fe:17:50: fa:86:49:d0:b7:5e:a1:36:e2:17:a4:e9:12:25:ae:bc:8f:52: b5:c5:77:e4:47:89:ad:a0:56:7c:34:6f:f9:f1:5e:fb:0e:b2: c4:f4:64:70:9c:56:09:7f:20:22:7e:e7:a2:fc:f5:dd:92:e1: c4:ec:9b:6f:ed:65:4d:51:e7:82:38:86:2f:6f:3f:55:32:78: 31:10:c0:5c:eb:82:75:0f:73:c3:dc:6d:a1:0a:57:a7:ef:f1: ed:f3:7d:b9:1d:83:50:cf:c6:b2:c8:04:b3:b4:4f:2d:bd:24: f1:05:19:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8sHn1s7m/jgQTOllS9K9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTE3YmY4MGVlMWUyZTcwZGIzZWEwNWRjMTZmMzA0ZTcw OTBjZjQwHhcNMjUxMjIzMTYwMjM5WhcNMjUxMjI0MTYwMjM5WjAzMTEwLwYDVQQD EyhhOTVjYTBkNDA5Yjk4OTU2NDI1OTUxZGM4NmE2NmIxODc2MzI2MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLIuwiJvG5+ba1elBEzEb1IZfLQA SOPSRco3AE/pO6qnkqSHdT2KVTiA4iMCv8TD574ajBgn9Bh6/dz9/+tHO+w5c0is AfUExH3yK51tH6CmQEkIkh/0p9SE7YhiKvnEDcJ7U13n4WCvqVx0IL3zDv9OmDCV lHS7LC1HhGJ9T2R9h0mzFJMO3vXngy56wSFKmmZMkaCOA6A0/73thC1aKy6e4tZ2 IZ+OMoQu9uaHg/sI1Ziv0cbKcPuovcYEzdUeelpmK3r3kG+3RxAwKYrVZ0dK2jeQ /5pZcymTjqm/3bBntD6WzhzVso56JgLeKTbIQMYwYVmOJBthZY6FkfO17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlcoNQJuYlWQllR3Iamaxh2MmMNMB8GA1UdIwQY MBaAFC/he/gO4eLnDbPqBdwW8wTnCQz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMt MjRiMzU3MmE4M2JiLzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81YzRhNzEtYjM4YS00ZWI0LTg2MzMtMjRiMzU3MmE4M2Ji LzEvTC1GNy1BN2g0dWNOcy1vRjNCYnpCT2NKRFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxeELISN WAUs/URzTeXQ7qFIFiwI9svt3KEPM7r/KFRs5C1BkXo+Fyuf7NbwxKg3fI612fTM QpiSAkpS2GuuUTYvkfIUDiW/qm4bTRdpUw0wovPph/RLBpdwepXCzD8odtBnh0mp fNE5SyLV6DClTr06YDsCcZhypdQJDGtgUbI0AihjcGmF2wOqnKZK/hdQ+oZJ0Lde oTbiF6TpEiWuvI9StcV35EeJraBWfDRv+fFe+w6yxPRkcJxWCX8gIn7novz13ZLh xOybb+1lTVHngjiGL28/VTJ4MRDAXOuCdQ9zw9xtoQpXp+/x7fN9uR2DUM/GssgE s7RPLb0k8QUZuw== -----END CERTIFICATE-----Generated at Tue Dec 23 23:52:00 2025 by rpki-client