This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json) Hash identifier: NQBS6PEBMSxMtxXb9iXmb2eT5GZAJtHadtYXjd8UiaQ= Subject key identifier: 3B:93:05:33:43:4F:52:3A:AD:BF:0A:C0:88:2D:2D:15:41:D2:FE:4C Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Certificate serial: 019B70A39878FBB18F9F4B17E5BF65DBB0FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft Manifest number: 0700 Signing time: Tue 30 Dec 2025 19:02:08 +0000 Manifest this update: Tue 30 Dec 2025 19:02:08 +0000 Manifest next update: Wed 31 Dec 2025 19:02:08 +0000 Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=) 2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: 8HB8GRMLRrq2o76wFlzwWupsBGykyzIeJ2o1XB89zXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:98:78:fb:b1:8f:9f:4b:17:e5:bf:65:db:b0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Validity Not Before: Dec 30 19:02:08 2025 GMT Not After : Dec 31 19:02:08 2025 GMT Subject: CN=3b930533434f523aadbf0ac0882d2d1541d2fe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:8a:f8:db:47:a5:ec:4c:74:6b:72:00:57: cc:68:db:9a:ef:1f:fb:a7:3d:21:61:8b:a5:77:1c: 4a:0c:4a:55:86:ef:8f:b4:43:0a:94:4c:21:79:ec: a2:ce:11:e0:fb:5b:8c:c8:a9:5c:01:69:fb:62:2b: 99:44:b4:dc:77:35:b4:61:28:a5:37:36:f0:d1:19: b8:72:f7:22:84:99:25:a3:77:d1:53:29:62:87:55: 16:c4:01:4f:02:ec:4b:61:47:9b:fb:7f:67:3b:00: cb:cd:49:72:74:5a:cd:f2:6a:35:2c:54:05:e1:f2: f3:1b:fc:69:c8:cb:02:a6:70:d3:15:2a:03:ae:17: 5f:7b:e3:f0:a6:83:89:47:19:23:17:9a:02:e5:00: 24:28:9b:b4:7f:cb:57:e5:4b:1c:b3:1a:ba:4b:13: 4d:af:3d:55:22:85:bc:75:59:2a:14:3b:f2:4d:3a: b4:7e:a5:6c:cf:61:38:40:69:10:25:7d:7f:1a:0c: 56:f0:50:aa:fa:6c:0d:32:a7:7b:59:f0:30:ea:93: a8:0b:2d:62:be:b9:ed:bd:0f:84:3f:88:01:59:29: 66:c6:cb:44:0b:be:31:7a:03:0d:11:59:80:c2:af: a5:8a:ed:ec:99:2f:60:10:ee:46:8e:9b:76:5d:3e: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:93:05:33:43:4F:52:3A:AD:BF:0A:C0:88:2D:2D:15:41:D2:FE:4C X509v3 Authority Key Identifier: keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0d:37:6c:01:34:16:c5:07:fc:71:09:e8:9a:65:a7:87:75: 9f:a0:1c:c5:f1:98:7c:58:9e:15:1e:43:e2:c2:30:fb:76:df: a4:a3:f7:ff:37:e9:77:74:04:29:ba:72:a1:ac:a8:d4:f4:64: 5a:45:5c:90:ee:aa:db:98:dd:cd:ab:98:a5:a4:69:8c:b2:53: 0f:b6:4e:3c:0c:16:1d:42:34:40:76:88:8b:95:0e:29:08:10: fe:a5:cd:21:c6:c4:88:c7:a9:70:f1:6d:8f:61:6e:b1:c3:c2: b0:2e:84:f0:74:3f:86:d1:65:4a:9f:ec:08:4e:e5:81:17:a4: 5e:d4:bc:e4:17:69:ce:75:7f:c8:54:9d:51:da:4e:9e:0e:34: b5:1d:f0:91:38:e2:d2:57:67:79:d8:38:67:39:bc:90:98:eb: ac:7f:b8:74:61:3d:9c:64:07:be:04:fb:e8:62:b6:0c:50:26: cf:92:aa:6a:34:53:27:be:6d:a2:15:ca:9b:dc:22:0b:fa:f4: b6:1f:08:e8:c1:a6:bb:17:17:4b:c3:45:40:e5:d8:36:ae:93: 36:18:b2:13:ce:70:bc:b7:39:94:d2:2f:bf:1a:2e:d9:bd:c9: 85:27:9a:5c:c4:1d:08:32:22:db:b2:a1:c7:34:0c:f1:4d:9a: e0:c0:17:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo5h4+7GPn0sX5b9l27D6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYWU0MTJjZmZhOGNiNWNmYjkzYmIzMWFiNWU5ODkwMzg3 ODRkN2YwHhcNMjUxMjMwMTkwMjA4WhcNMjUxMjMxMTkwMjA4WjAzMTEwLwYDVQQD EygzYjkzMDUzMzQzNGY1MjNhYWRiZjBhYzA4ODJkMmQxNTQxZDJmZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8SK+NtHpexMdGtyAFfMaNua7x/7 pz0hYYuldxxKDEpVhu+PtEMKlEwheeyizhHg+1uMyKlcAWn7YiuZRLTcdzW0YSil Nzbw0Rm4cvcihJklo3fRUylih1UWxAFPAuxLYUeb+39nOwDLzUlydFrN8mo1LFQF 4fLzG/xpyMsCpnDTFSoDrhdfe+PwpoOJRxkjF5oC5QAkKJu0f8tX5Uscsxq6SxNN rz1VIoW8dVkqFDvyTTq0fqVsz2E4QGkQJX1/GgxW8FCq+mwNMqd7WfAw6pOoCy1i vrntvQ+EP4gBWSlmxstEC74xegMNEVmAwq+liu3smS9gEO5Gjpt2XT7rcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuTBTNDT1I6rb8KwIgtLRVB0v5MMB8GA1UdIwQY MBaAFC+uQSz/qMtc+5O7MatemJA4eE1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2Mt ODMwYjIyZGQyZGVhLzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2MtODMwYjIyZGQyZGVh LzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQ03bAE0 FsUH/HEJ6Jplp4d1n6AcxfGYfFieFR5D4sIw+3bfpKP3/zfpd3QEKbpyoayo1PRk WkVckO6q25jdzauYpaRpjLJTD7ZOPAwWHUI0QHaIi5UOKQgQ/qXNIcbEiMepcPFt j2FuscPCsC6E8HQ/htFlSp/sCE7lgRekXtS85BdpznV/yFSdUdpOng40tR3wkTji 0ldnedg4Zzm8kJjrrH+4dGE9nGQHvgT76GK2DFAmz5KqajRTJ75tohXKm9wiC/r0 th8I6MGmuxcXS8NFQOXYNq6TNhiyE85wvLc5lNIvvxou2b3JhSeaXMQdCDIi27Kh xzQM8U2a4MAXqA== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:52 2025 by rpki-client