This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft File: L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json) Hash identifier: u8EVgruJDJ7C/DpsqUGoM+yOogM8D/IwUyo2c14FwIU= Subject key identifier: 10:6D:93:07:89:51:50:D8:6F:C1:F4:7E:9B:E6:8A:62:D6:C6:0E:23 Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08 Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308 Certificate serial: 019B6CFC3FA6C567E380D6C39C1B686C0EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 02:00:29 +0000 Manifest this update: Tue 30 Dec 2025 02:00:29 +0000 Manifest next update: Wed 31 Dec 2025 02:00:29 +0000 Files and hashes: 1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: KLUmw7fRmD4Pue+QjWe3bdySJbUK+QH69JqfsqxitZw=) 2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:3f:a6:c5:67:e3:80:d6:c3:9c:1b:68:6c:0e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308 Validity Not Before: Dec 30 02:00:29 2025 GMT Not After : Dec 31 02:00:29 2025 GMT Subject: CN=106d9307895150d86fc1f47e9be68a62d6c60e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:42:74:59:66:d9:55:dd:0e:e8:37:97:db: 45:48:42:aa:1e:af:d9:71:ad:61:cc:49:8a:9c:74: 71:b6:af:93:dd:d9:8d:b5:1c:f5:83:09:d7:49:d9: 1f:a0:72:81:42:45:64:9d:1a:c2:24:52:29:10:da: 73:26:4a:56:00:11:79:2b:7e:d8:be:3d:2c:f2:69: 78:39:7e:48:ea:59:6e:62:ae:7f:e2:f7:c8:22:43: b8:6f:60:f4:99:a0:f9:20:11:40:e4:44:7f:88:e2: 85:72:88:15:ce:51:ad:48:09:a8:6d:c7:2b:d8:e3: 38:ce:5a:39:82:85:65:86:d0:ac:eb:a7:6f:51:c1: f6:44:fa:7f:0d:4d:71:be:ce:ea:43:b3:8d:31:94: 6f:a7:fc:05:cb:95:da:39:bc:e3:09:ad:33:89:4f: 80:03:3f:bf:d4:e2:41:9d:88:46:9a:b2:63:e7:ee: b5:3c:57:21:70:b8:5c:88:79:81:1d:3d:f2:9e:4b: 88:75:ae:7a:36:a1:e1:e9:f3:77:db:c2:ba:d5:93: 11:a3:cd:af:91:0c:af:9f:57:0d:51:ef:b7:44:1a: 77:8f:02:39:12:b9:07:a7:c6:4d:10:58:28:e6:fb: dd:ed:77:14:fe:7c:a9:d5:a3:96:17:1c:66:62:fe: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6D:93:07:89:51:50:D8:6F:C1:F4:7E:9B:E6:8A:62:D6:C6:0E:23 X509v3 Authority Key Identifier: keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:13:4e:42:d5:f9:a5:2c:f6:4b:ee:3e:89:c0:b5:3e:16:4a: af:73:24:f5:b6:c3:77:b8:85:d1:3f:3d:f7:d8:38:e3:36:3f: ae:95:07:63:8f:96:ac:ad:6b:e0:44:d4:3e:72:62:68:81:56: 4a:b2:3e:e4:9f:0b:34:a1:49:cc:4f:49:12:d5:bf:89:05:9c: d1:e7:06:ee:23:ac:fc:96:d9:07:ad:e7:df:2b:e6:5e:3e:36: 89:91:45:8e:64:94:f9:d1:f2:0a:0d:2e:e5:3a:94:13:b7:07: ac:26:dc:b1:f9:47:63:59:43:c4:85:f4:65:81:fd:1e:e6:3b: f7:48:d6:21:c6:f6:75:86:61:29:a7:64:bd:17:3e:e2:3d:1c: 63:48:cc:84:48:82:5b:96:ea:9c:95:b4:d2:07:1b:44:69:eb: 2e:c4:c8:78:d6:11:68:36:b6:ca:75:16:f0:87:c2:95:63:da: 97:c2:be:8c:ef:b0:ec:16:fb:6a:75:d5:2f:b0:67:59:d1:2b: 3f:0e:04:9e:fb:dc:f7:e3:d8:87:5d:23:87:5b:ab:b8:f8:24: b5:13:34:ae:d6:dc:89:e5:9d:8f:78:ff:57:b1:51:06:d3:c5: 0d:8d:b5:5c:ce:d0:b1:18:02:37:bc:28:99:cf:54:28:fa:0b: ed:f1:84:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/D+mxWfjgNbDnBtobA7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYThlNjU3ZWVhZTA3ODNkYTE0YTNkYTJjYTc0ZGRlYzE1 ZGQzMDgwHhcNMjUxMjMwMDIwMDI5WhcNMjUxMjMxMDIwMDI5WjAzMTEwLwYDVQQD EygxMDZkOTMwNzg5NTE1MGQ4NmZjMWY0N2U5YmU2OGE2MmQ2YzYwZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35pCdFlm2VXdDug3l9tFSEKqHq/Z ca1hzEmKnHRxtq+T3dmNtRz1gwnXSdkfoHKBQkVknRrCJFIpENpzJkpWABF5K37Y vj0s8ml4OX5I6lluYq5/4vfIIkO4b2D0maD5IBFA5ER/iOKFcogVzlGtSAmobccr 2OM4zlo5goVlhtCs66dvUcH2RPp/DU1xvs7qQ7ONMZRvp/wFy5XaObzjCa0ziU+A Az+/1OJBnYhGmrJj5+61PFchcLhciHmBHT3ynkuIda56NqHh6fN328K61ZMRo82v kQyvn1cNUe+3RBp3jwI5ErkHp8ZNEFgo5vvd7XcU/nyp1aOWFxxmYv6J+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBtkweJUVDYb8H0fpvmimLWxg4jMB8GA1UdIwQY MBaAFC+o5lfurgeD2hSj2iynTd7BXdMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2Yt ODRhMjMzMzY5Mzg2LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hYTRjM2QtZjI3Mi00N2Y2LWE5Y2YtODRhMjMzMzY5Mzg2 LzEvTDZqbVYtNnVCNFBhRktQYUxLZE4zc0ZkMHdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxNOQtX5 pSz2S+4+icC1PhZKr3Mk9bbDd7iF0T8999g44zY/rpUHY4+WrK1r4ETUPnJiaIFW SrI+5J8LNKFJzE9JEtW/iQWc0ecG7iOs/JbZB63n3yvmXj42iZFFjmSU+dHyCg0u 5TqUE7cHrCbcsflHY1lDxIX0ZYH9HuY790jWIcb2dYZhKadkvRc+4j0cY0jMhEiC W5bqnJW00gcbRGnrLsTIeNYRaDa2ynUW8IfClWPal8K+jO+w7Bb7anXVL7BnWdEr Pw4Envvc9+PYh10jh1uruPgktRM0rtbcieWdj3j/V7FRBtPFDY21XM7QsRgCN7wo mc9UKPoL7fGEEA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:14:02 2025 by rpki-client