This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json) Hash identifier: cysBYwhR0k69BudzA9ze1GLJF13e3OjH9cbVUlvKWcU= Subject key identifier: 98:9F:E7:A6:DF:22:35:02:B4:4B:B5:BD:7F:5E:E0:4C:10:05:F6:B5 Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c Certificate serial: 019B736CF014AA65F53A66DFBC17FAD62873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft Manifest number: 14E0 Signing time: Wed 31 Dec 2025 08:01:17 +0000 Manifest this update: Wed 31 Dec 2025 08:01:17 +0000 Manifest next update: Thu 01 Jan 2026 08:01:17 +0000 Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: ozU7k3rNYBe50gHozLFfcmyLWQ2usw3DEOrBlXQF7+g=) 2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:f0:14:aa:65:f5:3a:66:df:bc:17:fa:d6:28:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c Validity Not Before: Dec 31 08:01:17 2025 GMT Not After : Jan 1 08:01:17 2026 GMT Subject: CN=989fe7a6df223502b44bb5bd7f5ee04c1005f6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:9a:d6:2b:cd:88:e7:81:a8:78:9e:1f:46: 55:4f:b6:d1:1b:cf:d9:05:56:f5:4a:a5:28:ae:cf: 05:c2:09:07:2c:11:95:81:2c:6a:1d:5d:41:38:71: c7:93:34:ea:b4:eb:04:77:6f:67:c8:d9:22:1d:ae: ad:40:12:cf:23:e0:39:0a:cb:da:3b:d7:28:20:5c: f0:d2:0e:93:61:dc:5d:4e:0a:e3:ad:b3:7f:07:e2: c9:a1:ec:d0:59:7d:8b:97:c8:14:65:6c:c8:59:6b: 4b:f0:5d:b2:62:ce:2b:8f:20:fb:b5:ed:fb:e8:82: ec:4f:98:b7:72:2b:0a:01:60:7e:f5:ad:b9:65:c3: 52:8a:09:d3:41:8a:a7:4e:bd:d2:a7:52:79:5e:52: e7:90:b7:3e:3b:bb:7c:a1:d8:24:61:83:be:19:b6: 53:89:5c:e9:ec:b7:8d:6c:16:2b:2a:50:87:95:be: 2f:7c:ed:f0:22:9b:fc:4a:cf:50:34:20:cb:43:7b: f7:7f:83:82:f1:85:e4:75:bb:b9:95:c8:a2:3f:aa: 9c:07:aa:5f:42:5b:81:e8:c1:29:c2:50:d9:b9:7f: 06:a8:23:7a:14:1c:65:6b:16:f6:45:89:6d:d2:90: 22:13:74:f6:ce:e7:99:67:08:b3:6c:a5:aa:62:f6: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9F:E7:A6:DF:22:35:02:B4:4B:B5:BD:7F:5E:E0:4C:10:05:F6:B5 X509v3 Authority Key Identifier: keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:13:b6:46:4e:a3:67:b3:a8:3e:88:5d:72:ea:e8:2f:c6:04: b6:e4:d9:bc:ea:09:cd:79:dd:dc:af:dc:d9:13:aa:33:9f:49: 82:9e:06:e0:e1:6c:e7:75:70:8e:30:b6:06:12:52:3a:6f:da: 51:71:91:94:e5:90:c1:55:c0:a0:f1:b0:b9:02:09:38:03:dd: 03:61:3a:75:79:76:e3:58:1b:20:6b:be:ff:67:ad:f0:17:4b: 6f:e4:ca:29:ca:18:e6:1f:d6:a3:3e:99:3b:c9:0a:12:a4:c0: 22:a8:9b:91:09:8f:11:f7:f1:20:cc:5e:09:46:3c:3c:0e:a6: fb:d6:79:34:ce:31:e1:e2:ee:1c:06:1d:13:d8:03:06:2c:69: 1a:ee:68:9d:f1:35:ca:43:aa:5b:c2:a6:da:d6:bd:9e:3c:80: cf:77:bc:14:f1:a9:9a:5b:3f:57:3a:ed:55:f7:ba:9e:2f:42: 20:b1:ca:aa:05:d4:d8:6e:c0:1e:88:68:e1:7a:53:1e:37:de: 4d:41:4b:70:f0:a4:08:b1:04:aa:ea:98:cd:86:17:44:74:f2: 4d:25:42:a8:93:3f:1f:81:86:0f:2c:aa:c3:45:7e:8d:fc:89: 4e:05:a9:90:13:b9:90:db:68:dd:89:9a:c5:0f:f6:d8:7f:a6: c6:22:ce:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbPAUqmX1OmbfvBf61ihzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTIwZDk5MTJiM2E3MjhiOTQ4MTgxODhlZjNlM2U1N2Y4 ZDNmOWMwHhcNMjUxMjMxMDgwMTE3WhcNMjYwMTAxMDgwMTE3WjAzMTEwLwYDVQQD Eyg5ODlmZTdhNmRmMjIzNTAyYjQ0YmI1YmQ3ZjVlZTA0YzEwMDVmNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bWa1ivNiOeBqHieH0ZVT7bRG8/Z BVb1SqUors8FwgkHLBGVgSxqHV1BOHHHkzTqtOsEd29nyNkiHa6tQBLPI+A5Csva O9coIFzw0g6TYdxdTgrjrbN/B+LJoezQWX2Ll8gUZWzIWWtL8F2yYs4rjyD7te37 6ILsT5i3cisKAWB+9a25ZcNSignTQYqnTr3Sp1J5XlLnkLc+O7t8odgkYYO+GbZT iVzp7LeNbBYrKlCHlb4vfO3wIpv8Ss9QNCDLQ3v3f4OC8YXkdbu5lciiP6qcB6pf QluB6MEpwlDZuX8GqCN6FBxlaxb2RYlt0pAiE3T2zueZZwizbKWqYvam9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJif56bfIjUCtEu1vX9e4EwQBfa1MB8GA1UdIwQY MBaAFC+SDZkSs6couUgYGI7z4+V/jT+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDIt OWMzMDAwMjQ1Njc2LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDItOWMzMDAwMjQ1Njc2 LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRO2Rk6j Z7OoPohdcuroL8YEtuTZvOoJzXnd3K/c2ROqM59Jgp4G4OFs53VwjjC2BhJSOm/a UXGRlOWQwVXAoPGwuQIJOAPdA2E6dXl241gbIGu+/2et8BdLb+TKKcoY5h/Woz6Z O8kKEqTAIqibkQmPEffxIMxeCUY8PA6m+9Z5NM4x4eLuHAYdE9gDBixpGu5onfE1 ykOqW8Km2ta9njyAz3e8FPGpmls/VzrtVfe6ni9CILHKqgXU2G7AHoho4XpTHjfe TUFLcPCkCLEEquqYzYYXRHTyTSVCqJM/H4GGDyyqw0V+jfyJTgWpkBO5kNto3Yma xQ/22H+mxiLOlQ== -----END CERTIFICATE-----Generated at Wed Dec 31 11:55:19 2025 by rpki-client