This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json) Hash identifier: 5nbM7cPc+ygLSRv1Woy0HvVLEg8kVQhfvZ4s3D1ul3w= Subject key identifier: 0F:5F:89:C8:44:05:76:7C:96:9A:D6:6F:F4:05:6B:69:0A:9E:39:26 Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a Certificate serial: 019B5FAFA7694662F84A0368F06EBAFEE146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft Manifest number: 0E7F Signing time: Sat 27 Dec 2025 12:01:45 +0000 Manifest this update: Sat 27 Dec 2025 12:01:45 +0000 Manifest next update: Sun 28 Dec 2025 12:01:45 +0000 Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: wNrjeyHm1Tb5v3tfm6ApVD026VIolRebRWJp8VcQdMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:a7:69:46:62:f8:4a:03:68:f0:6e:ba:fe:e1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a Validity Not Before: Dec 27 12:01:45 2025 GMT Not After : Dec 28 12:01:45 2025 GMT Subject: CN=0f5f89c84405767c969ad66ff4056b690a9e3926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:54:ef:63:7f:26:93:2e:b4:30:fb:75:91: 69:32:3c:18:5e:02:d9:28:f3:1f:1b:23:9b:ce:fb: c0:e9:b8:76:67:94:36:cd:db:21:6b:d6:c8:18:3f: 95:07:b1:34:12:05:1a:e3:c0:74:74:62:9a:18:40: 3c:18:1f:7c:ca:3d:fc:8c:5e:68:d2:d5:23:02:84: 7c:3c:69:60:63:e1:2f:f2:ad:66:18:44:0f:56:9e: 0a:0a:3a:d1:30:ec:e4:eb:57:c9:09:13:08:c8:b6: 77:4f:a3:a5:0a:37:23:31:d8:d4:e1:35:4f:a4:a1: 51:ea:20:65:98:62:d4:06:df:73:16:9a:78:dd:ae: 3a:47:58:03:f1:bd:0d:4f:f3:1e:e0:c8:a8:e5:b7: 08:7b:60:7e:2b:cb:e9:72:f0:4b:d1:60:73:8e:e0: 3f:cd:d8:43:65:5f:cf:c8:38:93:e6:90:42:60:90: 65:e1:4c:0f:b3:ef:af:22:a4:d0:c6:e6:b1:f9:c1: 46:98:a7:c7:74:2d:26:71:f6:f7:8b:bd:69:02:ec: 17:12:28:6f:a0:cd:54:32:74:b9:3a:8d:68:46:9e: 41:3b:be:5c:ae:50:dd:f6:97:73:c1:a3:4f:05:1f: 47:73:e9:66:aa:ed:67:22:49:f2:cf:81:d3:94:42: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:89:C8:44:05:76:7C:96:9A:D6:6F:F4:05:6B:69:0A:9E:39:26 X509v3 Authority Key Identifier: keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:90:92:a1:fe:58:8a:2c:c4:89:21:b6:59:cb:ba:b4:cc:12: af:29:21:a7:f3:bb:66:3f:b4:c4:d7:2d:27:ff:04:27:99:19: 41:a0:ce:97:22:89:34:01:94:b6:5a:f8:12:d4:a3:dc:1a:ec: f1:1d:74:35:82:a1:a0:53:58:de:83:ab:55:4d:b9:41:3e:be: 31:ec:56:f0:fe:1a:73:8c:4c:57:ca:0a:e3:33:d0:6d:f4:58: 5f:23:33:0e:49:dc:ca:d4:ee:35:87:0f:ab:04:4c:f3:9a:f8: 85:da:f6:25:c8:43:0a:ac:a4:42:d8:0b:a4:de:c5:9c:c2:a7: fe:ad:0d:61:e5:72:25:e1:7e:72:a8:d4:fe:ff:73:c5:95:a5: 9d:a0:9f:03:bd:a4:30:25:04:de:57:c8:15:de:01:23:d8:72: 69:c8:51:70:1a:78:30:4a:de:cf:a5:95:86:30:7b:c3:6f:17: 1e:c4:1c:0c:18:bd:cc:61:6d:dc:cc:de:0f:49:b8:fe:51:08: fa:b4:1d:e2:0a:d5:89:88:3b:0e:c6:68:b1:35:f5:58:fb:1d: a3:39:63:14:c1:9d:3e:f3:0f:7c:98:f3:b0:e9:83:3d:48:2c: fe:81:33:f4:c8:61:ab:0a:15:a9:1d:a4:77:93:2c:8b:b1:e3: 9b:46:05:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr6dpRmL4SgNo8G66/uFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTE0MzRlZTE2YzYxMzM0ZWMyNzBkZjU2OGM3N2EwYjVk ZTA1MmEwHhcNMjUxMjI3MTIwMTQ1WhcNMjUxMjI4MTIwMTQ1WjAzMTEwLwYDVQQD EygwZjVmODljODQ0MDU3NjdjOTY5YWQ2NmZmNDA1NmI2OTBhOWUzOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8NU72N/JpMutDD7dZFpMjwYXgLZ KPMfGyObzvvA6bh2Z5Q2zdsha9bIGD+VB7E0EgUa48B0dGKaGEA8GB98yj38jF5o 0tUjAoR8PGlgY+Ev8q1mGEQPVp4KCjrRMOzk61fJCRMIyLZ3T6OlCjcjMdjU4TVP pKFR6iBlmGLUBt9zFpp43a46R1gD8b0NT/Me4Mio5bcIe2B+K8vpcvBL0WBzjuA/ zdhDZV/PyDiT5pBCYJBl4UwPs++vIqTQxuax+cFGmKfHdC0mcfb3i71pAuwXEihv oM1UMnS5Oo1oRp5BO75crlDd9pdzwaNPBR9Hc+lmqu1nIknyz4HTlEJxTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9fichEBXZ8lprWb/QFa2kKnjkmMB8GA1UdIwQY MBaAFC+RQ07hbGEzTsJw31aMd6C13gUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEt NWZkYjMyMjhmZTFmLzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEtNWZkYjMyMjhmZTFm LzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZCSof5Y iizEiSG2Wcu6tMwSrykhp/O7Zj+0xNctJ/8EJ5kZQaDOlyKJNAGUtlr4EtSj3Brs 8R10NYKhoFNY3oOrVU25QT6+MexW8P4ac4xMV8oK4zPQbfRYXyMzDkncytTuNYcP qwRM85r4hdr2JchDCqykQtgLpN7FnMKn/q0NYeVyJeF+cqjU/v9zxZWlnaCfA72k MCUE3lfIFd4BI9hyachRcBp4MErez6WVhjB7w28XHsQcDBi9zGFt3MzeD0m4/lEI +rQd4grViYg7DsZosTX1WPsdozljFMGdPvMPfJjzsOmDPUgs/oEz9MhhqwoVqR2k d5Msi7Hjm0YFng== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:13 2025 by rpki-client