This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json) Hash identifier: X8eACtz2eKWmYpSu3UI6XVCdUDEvmXRNKKHiJylOPIo= Subject key identifier: F3:AF:CE:AF:63:E7:D8:EF:83:2E:B8:E5:6D:3F:63:09:68:6C:E7:B2 Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Certificate serial: 019B4B4CBB7701B632534251CA7E60E036C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft Manifest number: 0EE2 Signing time: Tue 23 Dec 2025 13:01:18 +0000 Manifest this update: Tue 23 Dec 2025 13:01:18 +0000 Manifest next update: Wed 24 Dec 2025 13:01:18 +0000 Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=) 2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: D5IJU/j9bTgA6XkoHG4VayhDZKP6m5RN6Wtg2uJnHP8=) 3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:bb:77:01:b6:32:53:42:51:ca:7e:60:e0:36:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Validity Not Before: Dec 23 13:01:18 2025 GMT Not After : Dec 24 13:01:18 2025 GMT Subject: CN=f3afceaf63e7d8ef832eb8e56d3f6309686ce7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:b5:db:38:55:6a:63:f1:65:d8:37:da:90: 75:3a:37:fd:6b:f6:05:1b:58:60:02:fd:26:8c:9f: a8:5b:66:54:b4:7d:c7:cb:3f:c0:93:5c:f6:71:82: be:d8:e4:cc:26:20:00:e0:0f:40:92:b9:6e:cd:0a: e7:71:1e:11:e0:50:6a:f8:cb:fe:95:16:07:ab:ab: 57:67:d4:f0:bf:4a:e2:3e:df:8a:5f:3d:9c:b2:37: 13:ed:8d:9b:fb:84:9a:a8:d8:5e:ed:d8:fe:55:6b: 5f:36:82:6f:16:c3:26:58:c6:55:fd:df:3c:b6:22: 8b:c1:2f:28:d4:0f:77:d4:88:81:98:80:11:0e:5c: 31:e5:b4:8e:68:d3:8b:16:36:f3:d1:ad:25:4e:50: a7:8b:3c:6c:c0:2e:e0:87:2e:8d:01:e8:8f:96:4a: 64:57:a4:58:09:05:79:a8:91:f6:aa:ab:4f:13:ca: 5e:8b:39:9b:b7:40:fd:83:57:19:1f:99:02:d8:36: c8:f7:bf:a6:6b:88:05:84:09:74:f7:5d:54:2e:8a: 18:c1:2b:7d:4d:e9:7d:b7:eb:79:4b:04:cd:5a:26: fe:a9:a9:9f:b3:2f:2e:89:9b:36:7c:d2:69:32:ab: 5a:21:4b:8c:1e:99:91:03:eb:02:10:01:d6:e6:9f: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:CE:AF:63:E7:D8:EF:83:2E:B8:E5:6D:3F:63:09:68:6C:E7:B2 X509v3 Authority Key Identifier: keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5d:2f:0f:cd:65:3e:b3:4b:c9:b6:43:04:49:a2:48:64:82: a7:4a:6a:6b:04:c6:c3:e2:13:20:b6:a9:4e:b2:c2:f4:b9:73: 96:11:68:f3:5a:58:f7:5f:f5:e8:ac:1c:fc:66:3c:07:93:ac: 30:ac:b7:d6:78:aa:e6:fd:f1:a7:3f:31:bb:fc:86:01:65:f5: bd:59:ef:74:c7:58:97:43:0d:0b:77:7c:5e:2d:db:f0:7c:29: b3:a6:ab:a9:5d:a3:99:26:e9:a6:9a:c0:84:fc:50:db:0f:43: 67:81:3e:d5:e0:cf:16:eb:17:5f:b8:06:d2:7a:ea:f1:51:3e: 7f:f3:5e:46:74:e9:b9:d4:ab:44:ed:4b:62:d6:e4:d6:3c:06: ed:4c:92:31:96:e9:2e:38:33:68:a8:fc:16:e0:1e:a1:7d:dd: ab:0b:c4:bd:98:46:83:05:6f:49:49:2f:ae:e2:dd:b6:0f:ef: 24:c0:74:6b:77:a0:c2:50:e6:30:7c:e6:4f:d1:02:2e:ae:fc: b4:7d:2c:59:31:74:7b:86:e8:77:ac:e4:c5:19:ca:c8:a1:25: a3:5b:65:13:21:ed:52:e9:89:5a:57:6b:dc:43:69:2f:9e:52: 98:78:2f:4d:66:ff:4c:1c:cb:cf:92:96:5b:dc:7d:a9:01:6a: 90:7a:f5:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTLt3AbYyU0JRyn5g4DbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmU2MjM3OGJiNTgwYWY0ZWQ3MGJmYTM1YWJjODQwOTQ1 ZDc4MDMwHhcNMjUxMjIzMTMwMTE4WhcNMjUxMjI0MTMwMTE4WjAzMTEwLwYDVQQD EyhmM2FmY2VhZjYzZTdkOGVmODMyZWI4ZTU2ZDNmNjMwOTY4NmNlN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMa12zhVamPxZdg32pB1Ojf9a/YF G1hgAv0mjJ+oW2ZUtH3Hyz/Ak1z2cYK+2OTMJiAA4A9AkrluzQrncR4R4FBq+Mv+ lRYHq6tXZ9Twv0riPt+KXz2csjcT7Y2b+4SaqNhe7dj+VWtfNoJvFsMmWMZV/d88 tiKLwS8o1A931IiBmIARDlwx5bSOaNOLFjbz0a0lTlCnizxswC7ghy6NAeiPlkpk V6RYCQV5qJH2qqtPE8peizmbt0D9g1cZH5kC2DbI97+ma4gFhAl0911ULooYwSt9 Tel9t+t5SwTNWib+qamfsy8uiZs2fNJpMqtaIUuMHpmRA+sCEAHW5p+6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOvzq9j59jvgy645W0/YwlobOeyMB8GA1UdIwQY MBaAFPy+YjeLtYCvTtcL+jWryECUXXgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3Mzkt ZGY1NmVjNjcwZGU3LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3MzktZGY1NmVjNjcwZGU3 LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV0vD81l PrNLybZDBEmiSGSCp0pqawTGw+ITILapTrLC9LlzlhFo81pY91/16Kwc/GY8B5Os MKy31niq5v3xpz8xu/yGAWX1vVnvdMdYl0MNC3d8Xi3b8Hwps6arqV2jmSbppprA hPxQ2w9DZ4E+1eDPFusXX7gG0nrq8VE+f/NeRnTpudSrRO1LYtbk1jwG7UySMZbp LjgzaKj8FuAeoX3dqwvEvZhGgwVvSUkvruLdtg/vJMB0a3egwlDmMHzmT9ECLq78 tH0sWTF0e4bod6zkxRnKyKElo1tlEyHtUumJWldr3ENpL55SmHgvTWb/TBzLz5KW W9x9qQFqkHr1eQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:39 2025 by rpki-client