This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json) Hash identifier: CAWBYbIO8+1lZpB6b4xBsK60IxpFixBAWgPCJS65VNY= Subject key identifier: A1:ED:F3:ED:E5:9B:3A:63:1D:C4:22:D0:42:CF:00:97:B6:90:FC:2A Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Certificate serial: 019B6354C4117B4250D7E87D90BA43D44E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft Manifest number: 149C Signing time: Sun 28 Dec 2025 05:00:58 +0000 Manifest this update: Sun 28 Dec 2025 05:00:58 +0000 Manifest next update: Mon 29 Dec 2025 05:00:58 +0000 Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=) 2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: QBJsUVYqgb9L7TzHlN33ZvKAN0IvPjkVfdngdlbrVis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:c4:11:7b:42:50:d7:e8:7d:90:ba:43:d4:4e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Validity Not Before: Dec 28 05:00:58 2025 GMT Not After : Dec 29 05:00:58 2025 GMT Subject: CN=a1edf3ede59b3a631dc422d042cf0097b690fc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:ce:0f:dc:ce:f1:16:eb:73:b6:15:fd:94: ae:68:c1:ea:34:7d:8c:d5:be:1d:5e:b5:96:a2:e1: f5:22:11:ad:9c:f9:59:b5:e7:27:2b:18:50:68:70: fe:80:9d:78:cb:e5:86:b9:56:2a:0b:5c:37:3e:6f: 9e:88:ae:b8:52:65:a7:ef:60:15:98:74:53:fe:a0: 55:6b:6b:c6:db:ed:91:28:30:ca:aa:9b:78:ac:85: e3:02:9e:1e:92:77:9a:d3:b6:4e:da:02:33:eb:58: e7:30:61:4b:1c:a4:0b:7e:b9:0c:8f:1f:8d:b0:29: 36:3f:76:31:e0:34:0b:4f:4f:0a:84:ae:9c:ff:a6: a4:5f:40:e4:34:72:71:d7:51:41:24:4c:c8:a0:58: 56:20:21:1d:5c:3f:65:ce:8f:a1:60:c4:5d:84:1a: ce:a3:0e:4f:96:cd:42:b4:91:56:8a:bb:22:76:07: 4f:e0:ed:e5:bc:08:75:01:20:46:8d:76:1c:e7:0f: 07:99:ef:38:1e:5d:38:1e:74:34:2d:20:6a:bb:4c: 47:1c:2e:a2:2b:ad:e7:1f:5d:37:1b:c4:cc:c8:3d: d0:ec:6e:6d:ad:0c:45:d0:5f:10:34:aa:d1:17:aa: 85:10:db:21:e3:d0:83:9c:06:d9:73:77:a3:5b:60: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:ED:F3:ED:E5:9B:3A:63:1D:C4:22:D0:42:CF:00:97:B6:90:FC:2A X509v3 Authority Key Identifier: keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:72:a0:2e:63:52:f4:dc:75:f2:52:e0:a6:18:d1:62:c2:3c: 4b:e2:75:4b:c4:41:fe:45:9a:88:fc:2d:ec:c3:a5:09:1d:ae: 48:59:cf:aa:e5:15:d3:02:9b:93:cc:71:fc:68:b9:00:1d:99: 21:a5:06:3d:b0:0c:80:5c:5c:3e:bd:55:07:ec:9b:e0:73:4a: 66:8e:05:4a:79:21:fb:86:3b:d6:2f:d2:28:64:df:45:91:d8: 8c:1f:94:5e:b2:26:df:fc:0e:d1:24:2f:a7:d1:8b:bd:d7:c2: 1e:87:70:35:e9:4d:44:88:09:cb:f0:05:50:4d:da:fe:c3:e8: 64:f4:e4:bc:48:1f:6c:de:3b:fb:1d:60:2f:d3:c7:60:f1:18: a8:1f:bf:95:58:6a:7d:3d:94:f8:87:ec:36:33:6d:e8:13:73: 26:e6:71:36:c2:47:83:e1:fb:e2:7e:fc:0e:da:9c:ec:4e:67: 75:2c:3f:52:ca:a8:b6:bd:ac:db:84:9e:a0:99:ce:8f:07:a6: 45:02:20:0e:26:ef:e6:b4:a9:12:13:23:9b:df:eb:e9:7d:12: 14:6b:00:7b:01:0d:58:76:85:7b:6b:d7:ca:6d:14:5a:48:e8: 65:ce:86:67:7d:76:b3:8d:49:56:3c:ad:83:a1:59:9a:bc:09: 18:78:05:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVMQRe0JQ1+h9kLpD1E5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGY5NGU0MGM5OWUxOWEzMjIzYTI5MzVkOGVjOTRlM2Q5 MjcwYmIwHhcNMjUxMjI4MDUwMDU4WhcNMjUxMjI5MDUwMDU4WjAzMTEwLwYDVQQD EyhhMWVkZjNlZGU1OWIzYTYzMWRjNDIyZDA0MmNmMDA5N2I2OTBmYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6POD9zO8Rbrc7YV/ZSuaMHqNH2M 1b4dXrWWouH1IhGtnPlZtecnKxhQaHD+gJ14y+WGuVYqC1w3Pm+eiK64UmWn72AV mHRT/qBVa2vG2+2RKDDKqpt4rIXjAp4eknea07ZO2gIz61jnMGFLHKQLfrkMjx+N sCk2P3Yx4DQLT08KhK6c/6akX0DkNHJx11FBJEzIoFhWICEdXD9lzo+hYMRdhBrO ow5Pls1CtJFWirsidgdP4O3lvAh1ASBGjXYc5w8Hme84Hl04HnQ0LSBqu0xHHC6i K63nH103G8TMyD3Q7G5trQxF0F8QNKrRF6qFENsh49CDnAbZc3ejW2Bi+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHt8+3lmzpjHcQi0ELPAJe2kPwqMB8GA1UdIwQY MBaAFC9PlOQMmeGaMiOik12OyU49knC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQt MDhlMDBkYTQwNDQ0LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQtMDhlMDBkYTQwNDQ0 LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHKgLmNS 9Nx18lLgphjRYsI8S+J1S8RB/kWaiPwt7MOlCR2uSFnPquUV0wKbk8xx/Gi5AB2Z IaUGPbAMgFxcPr1VB+yb4HNKZo4FSnkh+4Y71i/SKGTfRZHYjB+UXrIm3/wO0SQv p9GLvdfCHodwNelNRIgJy/AFUE3a/sPoZPTkvEgfbN47+x1gL9PHYPEYqB+/lVhq fT2U+IfsNjNt6BNzJuZxNsJHg+H74n78Dtqc7E5ndSw/Usqotr2s24SeoJnOjwem RQIgDibv5rSpEhMjm9/r6X0SFGsAewENWHaFe2vXym0UWkjoZc6GZ312s41JVjyt g6FZmrwJGHgFKg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:06 2025 by rpki-client