This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json) Hash identifier: oasOfwXu//sOkSU9V20D6lCzkiff77jV6ovxFTpgZdM= Subject key identifier: FD:52:A3:63:1C:48:9A:83:84:B6:F7:3C:E9:B2:73:C0:17:64:AE:80 Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Certificate serial: 019B3D90A4C7776CFA5C16E972AABBCC343E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft Manifest number: 12A6 Signing time: Sat 20 Dec 2025 21:00:48 +0000 Manifest this update: Sat 20 Dec 2025 21:00:48 +0000 Manifest next update: Sun 21 Dec 2025 21:00:48 +0000 Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: K4v5YADikrS5vIWXBRrODv5STiCjkGfxbpVszgUCqkQ=) 2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a4:c7:77:6c:fa:5c:16:e9:72:aa:bb:cc:34:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Validity Not Before: Dec 20 21:00:48 2025 GMT Not After : Dec 21 21:00:48 2025 GMT Subject: CN=fd52a3631c489a8384b6f73ce9b273c01764ae80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:ce:d9:ba:23:f8:0c:81:be:c9:e4:48:e3: 12:2b:2d:2d:17:e5:e6:88:20:2b:06:aa:0f:74:3b: 2c:32:e1:d8:df:bb:e1:55:49:f2:ae:65:d8:f5:ed: d0:19:fb:cc:60:de:ce:43:ba:17:74:ff:d8:49:64: 7a:f7:04:c3:3c:62:50:d4:ec:8b:b1:ee:3d:b2:aa: b0:f7:85:a0:e7:21:59:47:37:39:b2:18:3e:c0:f2: 12:bc:fe:b1:88:8c:a1:47:7b:a7:1b:ef:63:84:3c: 82:5e:a8:31:5f:a9:14:38:cf:f1:d1:6a:2c:ee:b1: 77:e4:02:e0:a2:b7:81:18:a5:73:f2:29:c8:e9:1e: d3:80:7b:c6:73:67:b9:23:84:7c:d0:52:4a:11:18: 65:4e:51:da:91:4a:ba:23:8d:64:21:c8:1a:9f:dd: e3:c5:ca:25:19:b6:b0:17:96:b7:c1:df:02:38:7f: 42:a7:34:5e:d4:93:ca:fd:8d:73:28:a0:0c:96:77: bf:f2:70:64:80:e8:e3:5a:58:dd:92:e8:2d:fc:63: 16:ad:75:d0:0c:78:6f:58:b4:91:f0:85:fc:6c:3b: e5:9a:e8:2d:13:42:12:d6:b5:7b:14:b3:34:a6:35: ae:8f:15:b4:09:ea:dc:2a:19:f8:61:71:1e:ae:38: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:52:A3:63:1C:48:9A:83:84:B6:F7:3C:E9:B2:73:C0:17:64:AE:80 X509v3 Authority Key Identifier: keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:da:93:62:8e:55:8d:8c:24:94:b9:e9:95:35:d6:41:de:ff: 6c:6e:ea:75:99:e5:a0:c9:3c:00:91:f8:26:41:d8:9c:fd:99: 3a:bc:56:47:ab:fb:85:eb:ea:8d:2a:09:a7:91:30:63:dc:bd: 7d:a3:08:39:48:4a:5b:bb:1e:f4:ce:68:a5:d2:49:51:c7:00: ce:e8:fd:b0:9b:cc:39:93:19:f5:cc:c1:0f:54:ea:b2:67:04: 02:a0:c9:e8:01:2b:75:72:80:66:8e:3c:be:58:a9:e1:fd:39: 98:13:7a:1e:2d:fa:2e:95:88:9c:61:38:36:cd:35:45:4e:8c: df:da:c8:fb:e2:65:05:dd:d6:08:ca:47:b5:37:b8:4a:ae:88: 71:c8:17:32:47:7a:04:df:10:fc:11:b1:88:fd:40:70:4f:4f: a9:de:df:ed:2b:8b:5b:32:15:59:b6:3b:70:60:56:60:cf:a8: 16:23:cb:ac:35:53:9a:6f:9a:63:88:3f:f1:0a:97:aa:64:e3: 72:54:9e:c8:2e:da:67:26:75:f2:31:5a:ff:33:26:82:b9:cb: 2b:65:52:86:92:45:bf:9f:e0:69:23:7e:35:3f:61:ee:31:22: 73:70:c0:c9:83:e2:a0:9e:1d:b3:ba:46:c5:27:76:80:d1:60: 17:25:f5:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKTHd2z6XBbpcqq7zDQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1 MGJjYTMwHhcNMjUxMjIwMjEwMDQ4WhcNMjUxMjIxMjEwMDQ4WjAzMTEwLwYDVQQD EyhmZDUyYTM2MzFjNDg5YTgzODRiNmY3M2NlOWIyNzNjMDE3NjRhZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UvO2boj+AyBvsnkSOMSKy0tF+Xm iCArBqoPdDssMuHY37vhVUnyrmXY9e3QGfvMYN7OQ7oXdP/YSWR69wTDPGJQ1OyL se49sqqw94Wg5yFZRzc5shg+wPISvP6xiIyhR3unG+9jhDyCXqgxX6kUOM/x0Wos 7rF35ALgoreBGKVz8inI6R7TgHvGc2e5I4R80FJKERhlTlHakUq6I41kIcgan93j xcolGbawF5a3wd8COH9CpzRe1JPK/Y1zKKAMlne/8nBkgOjjWljdkugt/GMWrXXQ DHhvWLSR8IX8bDvlmugtE0IS1rV7FLM0pjWujxW0CercKhn4YXEerji3IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1So2McSJqDhLb3POmyc8AXZK6AMB8GA1UdIwQY MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9qTYo5V jYwklLnplTXWQd7/bG7qdZnloMk8AJH4JkHYnP2ZOrxWR6v7hevqjSoJp5EwY9y9 faMIOUhKW7se9M5opdJJUccAzuj9sJvMOZMZ9czBD1TqsmcEAqDJ6AErdXKAZo48 vlip4f05mBN6Hi36LpWInGE4Ns01RU6M39rI++JlBd3WCMpHtTe4Sq6IccgXMkd6 BN8Q/BGxiP1AcE9Pqd7f7SuLWzIVWbY7cGBWYM+oFiPLrDVTmm+aY4g/8QqXqmTj clSeyC7aZyZ18jFa/zMmgrnLK2VShpJFv5/gaSN+NT9h7jEic3DAyYPioJ4ds7pG xSd2gNFgFyX1Ig== -----END CERTIFICATE-----Generated at Sat Dec 20 22:28:17 2025 by rpki-client