This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json) Hash identifier: BIKdE71icXh2lc1NSGeLRoEVNHBV7PDo8Sgd7Ecr3KY= Subject key identifier: 6F:56:0D:37:B1:B0:24:2B:6E:21:D7:45:93:44:0E:E6:DF:EC:12:A9 Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Certificate serial: 019B3FB62C02F6425199DFACF8AB3CFC53A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft Manifest number: 0185 Signing time: Sun 21 Dec 2025 07:01:01 +0000 Manifest this update: Sun 21 Dec 2025 07:01:01 +0000 Manifest next update: Mon 22 Dec 2025 07:01:01 +0000 Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=) 2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: gbiJnuoiFgNT40/LjFFX9eoa+N8hIs2NbF4e6AkXRZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:2c:02:f6:42:51:99:df:ac:f8:ab:3c:fc:53:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Validity Not Before: Dec 21 07:01:01 2025 GMT Not After : Dec 22 07:01:01 2025 GMT Subject: CN=6f560d37b1b0242b6e21d74593440ee6dfec12a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:3d:83:7e:89:4c:d4:04:54:ca:52:49:98: 0c:48:41:6f:c8:53:0f:f7:2f:3c:99:1d:c3:8f:60: e9:c9:b0:4e:29:68:ad:60:bd:f7:18:ce:92:89:21: b4:a6:29:20:8e:0c:f2:41:77:ce:f4:9c:f3:39:ab: 20:2a:40:af:8a:d5:e9:d1:88:0a:83:06:91:d2:58: d7:e5:33:e2:19:ec:a9:5e:69:af:d2:db:99:2d:14: 4c:cf:b8:96:2c:32:5b:8b:ab:29:30:3b:c6:86:cd: 05:0f:b9:ec:93:35:2a:a1:79:2f:33:61:d0:c4:89: 55:18:bc:b9:26:7c:23:b0:43:6f:7f:df:cc:79:f3: b8:80:dc:53:65:73:81:77:3c:3e:29:bc:f3:25:9a: 15:58:fb:60:fa:aa:22:8d:c6:2c:f5:37:42:6b:b3: cd:df:10:7e:b1:89:e3:d8:15:be:11:60:e5:e8:f2: c9:c1:cf:ca:3b:d9:a1:3b:f4:ef:77:dd:a1:06:b6: fd:60:cb:fd:ef:c0:d2:4b:56:c0:6a:ef:a2:c0:19: 2e:e8:07:fe:f1:f6:8c:50:9f:72:94:13:49:7c:5e: d7:4a:4f:7c:61:3c:aa:25:84:6c:90:fc:db:66:5b: 87:63:3c:d5:ee:fd:17:3e:44:a7:f2:a8:85:ce:a2: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:56:0D:37:B1:B0:24:2B:6E:21:D7:45:93:44:0E:E6:DF:EC:12:A9 X509v3 Authority Key Identifier: keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f8:8b:c3:4a:ea:32:6d:38:eb:3b:ab:eb:c8:43:d4:4d:4f: cf:0d:c9:cc:e8:32:a3:89:07:fa:6e:df:a5:e4:00:ca:68:74: b6:63:05:4f:6f:42:ee:7c:77:4b:bf:c5:53:6c:00:41:2b:3f: 01:2f:df:22:a9:2d:91:56:02:9e:0a:c6:b7:85:d7:fb:0c:6d: ed:b4:81:bf:56:5a:c7:58:93:9e:ec:4d:55:ba:c1:e0:93:3d: 44:7a:8c:91:34:b0:d6:22:c2:32:76:89:2d:b0:16:97:57:ce: 45:3f:ef:74:d1:0f:7c:27:9d:31:91:3e:17:af:f5:bf:27:52: 8f:cb:64:27:2d:b5:ca:04:b5:9b:1d:5b:06:e1:60:5e:80:90: 3f:72:40:1f:a7:7d:0b:7b:aa:be:e9:34:d5:88:c0:ef:32:7f: 70:15:50:76:b1:36:58:89:11:64:06:8f:68:48:20:df:64:83: 9c:80:4e:99:6b:8a:02:3e:8a:68:d6:fb:80:ba:ad:70:66:ea: 25:0b:5b:a3:01:00:a1:54:4b:a9:3c:b4:60:28:f0:73:65:79: ff:d4:51:e9:3e:b4:b4:e8:1c:50:f3:95:7c:12:99:59:c4:35: 3e:9d:26:21:0a:f3:fb:9f:a7:56:6a:9c:4c:25:19:2b:8f:88: 8e:cf:7c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tiwC9kJRmd+s+Ks8/FOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk OTc4ZWEwHhcNMjUxMjIxMDcwMTAxWhcNMjUxMjIyMDcwMTAxWjAzMTEwLwYDVQQD Eyg2ZjU2MGQzN2IxYjAyNDJiNmUyMWQ3NDU5MzQ0MGVlNmRmZWMxMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nA9g36JTNQEVMpSSZgMSEFvyFMP 9y88mR3Dj2DpybBOKWitYL33GM6SiSG0pikgjgzyQXfO9JzzOasgKkCvitXp0YgK gwaR0ljX5TPiGeypXmmv0tuZLRRMz7iWLDJbi6spMDvGhs0FD7nskzUqoXkvM2HQ xIlVGLy5JnwjsENvf9/MefO4gNxTZXOBdzw+KbzzJZoVWPtg+qoijcYs9TdCa7PN 3xB+sYnj2BW+EWDl6PLJwc/KO9mhO/Tvd92hBrb9YMv978DSS1bAau+iwBku6Af+ 8faMUJ9ylBNJfF7XSk98YTyqJYRskPzbZluHYzzV7v0XPkSn8qiFzqKv9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9WDTexsCQrbiHXRZNEDubf7BKpMB8GA1UdIwQY MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/iLw0rq Mm046zur68hD1E1Pzw3JzOgyo4kH+m7fpeQAymh0tmMFT29C7nx3S7/FU2wAQSs/ AS/fIqktkVYCngrGt4XX+wxt7bSBv1Zax1iTnuxNVbrB4JM9RHqMkTSw1iLCMnaJ LbAWl1fORT/vdNEPfCedMZE+F6/1vydSj8tkJy21ygS1mx1bBuFgXoCQP3JAH6d9 C3uqvuk01YjA7zJ/cBVQdrE2WIkRZAaPaEgg32SDnIBOmWuKAj6KaNb7gLqtcGbq JQtbowEAoVRLqTy0YCjwc2V5/9RR6T60tOgcUPOVfBKZWcQ1Pp0mIQrz+5+nVmqc TCUZK4+Ijs98ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:05 2025 by rpki-client