This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json) Hash identifier: tJtKVlh2zBTrJW5R8rwhc4SDf6ZF5AhAcOWa3MKO7gE= Subject key identifier: CF:F6:78:4F:A2:76:06:CF:0E:96:BA:E9:5D:6C:47:B7:8F:23:3B:30 Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46 Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046 Certificate serial: 019B32D7A76D9002653143F17D46D6CDE1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft Manifest number: 13EF Signing time: Thu 18 Dec 2025 19:02:32 +0000 Manifest this update: Thu 18 Dec 2025 19:02:32 +0000 Manifest next update: Fri 19 Dec 2025 19:02:32 +0000 Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: 1ZnzSDihThAz7H5Sms0T0QlL2WC0x7VOq6x2Hu4cSzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:a7:6d:90:02:65:31:43:f1:7d:46:d6:cd:e1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046 Validity Not Before: Dec 18 19:02:32 2025 GMT Not After : Dec 19 19:02:32 2025 GMT Subject: CN=cff6784fa27606cf0e96bae95d6c47b78f233b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:02:f5:06:aa:29:c8:a9:ef:1d:ce:d9:d9: 2c:f0:f4:b2:ce:0e:fd:b6:28:82:f0:e4:6a:f1:df: fe:1d:61:73:e0:a1:1b:03:9d:07:a2:21:e4:08:ab: a9:1a:5a:ba:41:76:f7:5c:af:da:4d:b0:e3:79:02: ad:a4:2b:2b:05:85:c3:2d:fc:35:15:3f:f3:8e:45: 93:2d:f0:f0:e9:83:14:f6:c8:1a:a5:8a:3e:56:fa: 84:09:73:a1:20:98:fc:79:d0:b5:2d:8c:21:30:11: 57:87:88:cd:6e:bc:83:46:20:20:a6:01:95:84:c7: 45:e1:0a:8f:eb:ad:b8:d9:8e:d1:28:7a:0e:71:94: 60:85:28:fa:04:2e:5e:ee:75:f1:2d:a5:d2:66:1a: f5:e1:1b:3c:6d:a6:70:c1:a7:b8:c8:88:a4:5e:79: 23:71:cb:78:c5:66:aa:17:a8:c9:68:fb:67:1d:25: fc:c0:7d:c5:bf:be:8e:19:6a:e5:59:df:f9:43:69: 74:ca:60:78:c8:fe:3a:76:6d:7d:97:db:3f:7f:7e: fa:ed:43:4d:8c:a8:1c:17:31:24:60:e5:93:6c:83: da:a5:4b:03:99:be:02:16:35:7e:e4:cd:ec:59:5d: d2:57:aa:7b:1f:03:58:d3:89:ea:04:0d:17:b7:bc: 0c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:78:4F:A2:76:06:CF:0E:96:BA:E9:5D:6C:47:B7:8F:23:3B:30 X509v3 Authority Key Identifier: keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5f:7a:a8:65:57:5a:aa:27:cc:2b:cc:da:b5:4c:15:3e:e0: d5:4e:66:63:6f:10:31:0e:6c:ae:bf:c8:6e:e6:c7:b9:5b:9f: 16:30:43:08:cc:2a:9f:d9:c2:c8:4a:8c:24:5f:f5:ab:1a:c2: 29:77:a1:ae:9f:8c:38:54:d3:59:1b:68:58:29:65:06:30:a4: 56:8d:db:2c:00:c4:3f:c7:f4:d0:6e:0a:89:4c:3d:ac:79:7d: f1:2a:92:89:2a:16:34:95:9d:89:ce:3e:4e:77:55:3f:b1:5b: e9:40:b7:50:83:48:7e:e4:cf:60:00:99:cf:18:26:27:8f:9e: 8c:50:7d:0b:60:c1:52:b0:15:ee:e6:ea:96:2f:6f:f0:1d:40: 44:bb:42:f3:c7:ca:28:6f:cb:ea:89:c2:b9:d8:e3:69:35:d7: 81:10:90:ff:a7:fb:2f:58:93:73:12:07:3f:85:f8:78:bd:26: df:b3:96:20:1f:82:6d:c8:f3:55:c1:35:d8:0d:9c:98:c0:3c: c5:2b:c1:3c:c8:e5:85:70:9f:59:6e:06:db:4c:78:91:a3:d4: c5:bc:d8:7f:9e:e6:16:89:87:62:26:16:70:d2:7c:e8:4a:2c: ff:8d:67:63:f1:2f:34:2a:d8:bc:63:34:d8:20:09:fc:28:56: f8:87:9a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy16dtkAJlMUPxfUbWzeH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZWMxMGQwMDg4YjJkZGI4YTRkMTUxNWJmMDZiNGMwMDEy YWUwNDYwHhcNMjUxMjE4MTkwMjMyWhcNMjUxMjE5MTkwMjMyWjAzMTEwLwYDVQQD EyhjZmY2Nzg0ZmEyNzYwNmNmMGU5NmJhZTk1ZDZjNDdiNzhmMjMzYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9cC9QaqKcip7x3O2dks8PSyzg79 tiiC8ORq8d/+HWFz4KEbA50HoiHkCKupGlq6QXb3XK/aTbDjeQKtpCsrBYXDLfw1 FT/zjkWTLfDw6YMU9sgapYo+VvqECXOhIJj8edC1LYwhMBFXh4jNbryDRiAgpgGV hMdF4QqP66242Y7RKHoOcZRghSj6BC5e7nXxLaXSZhr14Rs8baZwwae4yIikXnkj cct4xWaqF6jJaPtnHSX8wH3Fv76OGWrlWd/5Q2l0ymB4yP46dm19l9s/f3767UNN jKgcFzEkYOWTbIPapUsDmb4CFjV+5M3sWV3SV6p7HwNY04nqBA0Xt7wMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/2eE+idgbPDpa66V1sR7ePIzswMB8GA1UdIwQY MBaAFC/sENAIiy3bik0VFb8GtMABKuBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUt NTczY2NmNTllNjg4LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUtNTczY2NmNTllNjg4 LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb196qGVX WqonzCvM2rVMFT7g1U5mY28QMQ5srr/IbubHuVufFjBDCMwqn9nCyEqMJF/1qxrC KXehrp+MOFTTWRtoWCllBjCkVo3bLADEP8f00G4KiUw9rHl98SqSiSoWNJWdic4+ TndVP7Fb6UC3UINIfuTPYACZzxgmJ4+ejFB9C2DBUrAV7ubqli9v8B1ARLtC88fK KG/L6onCudjjaTXXgRCQ/6f7L1iTcxIHP4X4eL0m37OWIB+CbcjzVcE12A2cmMA8 xSvBPMjlhXCfWW4G20x4kaPUxbzYf57mFomHYiYWcNJ86Eos/41nY/EvNCrYvGM0 2CAJ/ChW+IeaIg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:29 2025 by rpki-client