This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json) Hash identifier: B1LiFRZLtXV+v4NBiRzDnPMhEYGg2lKKdqr/k0i08f0= Subject key identifier: AA:A9:9C:98:94:30:E7:5F:77:A1:3C:D3:CF:5B:69:EB:5C:FD:F8:AE Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a Certificate serial: 019B6DD804BB38A6A0942DCF460091C84BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 06:00:32 +0000 Manifest this update: Tue 30 Dec 2025 06:00:32 +0000 Manifest next update: Wed 31 Dec 2025 06:00:32 +0000 Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: kF10XrywjDiLv5a1XlzuNJV/HmMufi5djXoJOL/3yjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:04:bb:38:a6:a0:94:2d:cf:46:00:91:c8:4b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9769490337f673c64e39124ae8981b034e50127a Validity Not Before: Dec 30 06:00:32 2025 GMT Not After : Dec 31 06:00:32 2025 GMT Subject: CN=aaa99c989430e75f77a13cd3cf5b69eb5cfdf8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:83:e5:12:ea:de:66:47:69:e6:c8:20:96: 54:29:71:d4:43:8e:ad:6e:42:f8:4c:ed:02:8d:6e: c7:ed:ae:d7:fa:8f:77:5d:7e:a3:a8:37:5c:cb:58: 9f:30:6e:55:4d:5c:32:31:b4:97:43:60:82:b5:13: a3:0c:13:5d:99:0a:6c:83:68:3c:87:3c:82:da:46: d7:39:ee:17:d8:56:6c:90:f7:3a:42:48:7d:82:4e: 9f:ec:ad:2c:d7:8f:95:1e:98:49:3b:20:6a:b4:b6: 98:dc:75:2a:cb:41:65:25:b5:78:82:d6:15:16:83: ab:1d:21:05:a4:ef:6d:38:ae:38:82:9a:1d:46:65: d7:4a:a8:00:79:87:f0:d7:aa:08:83:e8:0a:c3:79: df:0a:4e:22:4b:a8:f0:25:f1:f6:d6:4f:c9:b1:94: b1:26:24:2d:dc:c6:c1:d7:48:3b:e9:de:2c:5c:92: f8:c9:2e:91:a2:33:bd:71:ff:eb:20:fc:a5:90:2e: 93:4f:3a:1e:b1:e0:40:2d:75:f8:c6:05:9b:f2:e7: 9a:25:50:59:cb:a1:35:fe:35:df:fd:3b:a7:ce:80: 9f:b4:6f:6a:f1:e7:a9:6d:17:da:ac:57:4f:66:20: 49:56:bb:59:9a:75:53:5d:49:02:50:4c:7c:85:f0: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:9C:98:94:30:E7:5F:77:A1:3C:D3:CF:5B:69:EB:5C:FD:F8:AE X509v3 Authority Key Identifier: keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9a:cc:78:1a:c5:62:34:3b:55:3f:86:ea:1d:02:a3:d2:ad: d1:ed:da:df:93:86:56:2f:96:35:11:d5:d9:94:19:ac:7e:af: 6b:c0:0d:c7:52:75:82:c8:6b:2f:8a:97:72:f8:8f:65:73:68: cc:f4:66:f4:f5:31:da:87:7c:cc:78:d0:bb:04:72:9a:3e:0e: 94:31:e7:d0:b4:c1:8e:95:73:01:59:c0:56:8a:75:45:ac:91: 4e:f6:94:32:b2:3b:96:c0:20:5e:18:f4:ac:a9:f6:77:28:e4: 55:30:23:69:83:67:6b:81:93:d7:3b:b8:d1:cf:24:c4:bd:01: 45:cb:d9:b7:0e:7f:06:35:4c:11:6a:c7:26:d6:bf:91:79:07: 03:71:94:03:65:74:f7:d5:60:05:da:89:9e:34:cd:2d:e1:9a: 28:2a:f4:ac:c8:a9:e8:8c:60:9b:33:6c:32:6a:7d:14:e8:c3: 32:d3:70:64:ba:b5:ed:92:df:38:a2:03:45:78:f1:7a:1b:4d: 96:b4:5d:8a:12:b2:7e:68:06:3f:cd:10:16:60:8e:7b:df:cf: 14:a0:99:07:eb:c6:fa:18:ae:92:52:9d:54:b4:30:d3:ad:8c: 3e:4f:a0:25:dc:69:d4:36:7a:11:3d:2f:16:fa:a9:be:1e:53: 23:e5:19:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2AS7OKaglC3PRgCRyEvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1 MDEyN2EwHhcNMjUxMjMwMDYwMDMyWhcNMjUxMjMxMDYwMDMyWjAzMTEwLwYDVQQD EyhhYWE5OWM5ODk0MzBlNzVmNzdhMTNjZDNjZjViNjllYjVjZmRmOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSKD5RLq3mZHaebIIJZUKXHUQ46t bkL4TO0CjW7H7a7X+o93XX6jqDdcy1ifMG5VTVwyMbSXQ2CCtROjDBNdmQpsg2g8 hzyC2kbXOe4X2FZskPc6Qkh9gk6f7K0s14+VHphJOyBqtLaY3HUqy0FlJbV4gtYV FoOrHSEFpO9tOK44gpodRmXXSqgAeYfw16oIg+gKw3nfCk4iS6jwJfH21k/JsZSx JiQt3MbB10g76d4sXJL4yS6RojO9cf/rIPylkC6TTzoeseBALXX4xgWb8ueaJVBZ y6E1/jXf/TunzoCftG9q8eepbRfarFdPZiBJVrtZmnVTXUkCUEx8hfC/5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqpnJiUMOdfd6E8089baetc/fiuMB8GA1UdIwQY MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcprMeBrF YjQ7VT+G6h0Co9Kt0e3a35OGVi+WNRHV2ZQZrH6va8ANx1J1gshrL4qXcviPZXNo zPRm9PUx2od8zHjQuwRymj4OlDHn0LTBjpVzAVnAVop1RayRTvaUMrI7lsAgXhj0 rKn2dyjkVTAjaYNna4GT1zu40c8kxL0BRcvZtw5/BjVMEWrHJta/kXkHA3GUA2V0 99VgBdqJnjTNLeGaKCr0rMip6IxgmzNsMmp9FOjDMtNwZLq17ZLfOKIDRXjxehtN lrRdihKyfmgGP80QFmCOe9/PFKCZB+vG+hiuklKdVLQw062MPk+gJdxp1DZ6ET0v Fvqpvh5TI+UZcw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:12:22 2025 by rpki-client