This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json) Hash identifier: Uy0NxegGsJ0RhXPNbUI254s+RnVbcLTXUJPpGoRE3Fk= Subject key identifier: C8:BB:9A:1F:95:0E:9E:FC:49:DF:BB:0D:D1:4F:2C:BA:B1:F6:AE:A2 Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Certificate serial: 019B3F489BA8A656CDB1488685F7D10384DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft Manifest number: 05AF Signing time: Sun 21 Dec 2025 05:01:21 +0000 Manifest this update: Sun 21 Dec 2025 05:01:21 +0000 Manifest next update: Mon 22 Dec 2025 05:01:21 +0000 Files and hashes: 1: 8uoobD-uNsoIUa3wePqJLnyhcpo.roa (hash: O0gO7wKip3iHzyPxgcMRO0gg6URqBUsF4wabpY8lFzs=) 2: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: 2DPaG2Bw9S3HtJ9Nu/B2ReJm3+UoGIEft2L5snZLQ44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:9b:a8:a6:56:cd:b1:48:86:85:f7:d1:03:84:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Validity Not Before: Dec 21 05:01:21 2025 GMT Not After : Dec 22 05:01:21 2025 GMT Subject: CN=c8bb9a1f950e9efc49dfbb0dd14f2cbab1f6aea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:09:e6:9b:8d:88:6d:16:2f:bf:93:22:05: ef:93:9a:ba:d4:28:67:a7:17:32:01:29:14:ac:72: 15:b6:66:5a:dd:5e:36:2b:57:67:32:ca:05:33:79: 61:55:2a:35:d0:ab:2d:d6:42:c2:bb:17:f0:37:94: 39:af:d1:01:bf:a7:31:0a:3e:40:d4:03:ae:34:df: bd:66:4e:e9:3c:c8:9b:d4:e0:1f:0f:49:23:1a:42: bc:a8:43:a9:10:6d:96:a8:50:40:02:c7:50:4a:05: ba:56:43:ca:4f:3d:f4:74:56:66:67:37:c3:fe:b6: b1:5e:ac:2a:2e:1f:eb:f7:76:b9:5f:df:f6:2d:20: de:45:7a:a8:d0:ef:84:d0:92:2d:90:d0:ba:e5:24: 99:6c:06:32:8c:9e:1a:00:5c:47:42:e7:f1:68:29: 5b:10:7e:a0:33:c7:cd:50:ea:df:34:06:5b:ca:0c: 96:33:9c:54:40:cb:b9:a0:93:b0:98:1a:d4:d8:48: fd:88:70:2d:1d:d1:b3:3d:a3:61:70:e5:2a:3b:70: 4b:68:0a:a2:86:4e:5b:de:f3:ae:8b:b0:9a:00:8c: 48:27:d3:f6:51:6e:b1:9d:ca:40:56:cc:13:28:c3: 74:93:7a:60:f7:e8:b0:e7:a9:af:92:2d:8e:0d:80: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:9A:1F:95:0E:9E:FC:49:DF:BB:0D:D1:4F:2C:BA:B1:F6:AE:A2 X509v3 Authority Key Identifier: keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8b:78:30:c7:12:16:a7:a1:b7:e8:4f:d0:5a:62:ae:a6:44: 58:d3:0a:8f:bd:24:f9:92:4d:5d:24:fc:45:16:98:e0:45:ce: e0:44:8c:b1:c5:3c:75:ed:0a:17:3e:7e:a9:f4:d7:46:22:8b: ae:db:9a:c7:02:dc:a4:a3:1f:45:36:50:1d:5b:3b:b5:c2:2c: f4:ec:38:ff:92:ff:de:24:3a:9b:89:07:aa:ef:e4:6d:13:37: b2:3b:55:ad:40:eb:dc:ff:c2:b0:48:4e:e7:42:80:98:9f:06: 83:fc:b5:f6:a4:9d:85:b9:9d:0a:c6:27:c8:89:00:33:04:67: db:d9:ff:60:7e:0f:14:85:3b:40:e0:ca:18:b6:60:ef:53:9a: 68:f2:b9:9f:8a:1b:de:a0:ca:a8:db:2a:79:2a:d8:bc:ac:47: e5:86:4d:e6:63:55:71:69:3e:4c:b3:c9:9e:50:b0:c3:f1:53: ef:ba:46:7c:68:7f:d3:75:60:22:31:dd:bb:4d:08:f7:d5:27: dd:6c:8d:59:ba:df:fc:5e:c4:41:ab:cd:47:b7:9d:7d:c7:ce: cd:71:ba:5d:22:bc:1c:e3:03:0a:8d:c4:dd:51:12:a2:12:04: a7:83:7b:10:ed:44:6f:ec:fc:43:27:fd:8b:9b:b8:15:df:bf: d8:92:85:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJuoplbNsUiGhffRA4TbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl MTFlZGIwHhcNMjUxMjIxMDUwMTIxWhcNMjUxMjIyMDUwMTIxWjAzMTEwLwYDVQQD EyhjOGJiOWExZjk1MGU5ZWZjNDlkZmJiMGRkMTRmMmNiYWIxZjZhZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoUJ5puNiG0WL7+TIgXvk5q61Chn pxcyASkUrHIVtmZa3V42K1dnMsoFM3lhVSo10Kst1kLCuxfwN5Q5r9EBv6cxCj5A 1AOuNN+9Zk7pPMib1OAfD0kjGkK8qEOpEG2WqFBAAsdQSgW6VkPKTz30dFZmZzfD /raxXqwqLh/r93a5X9/2LSDeRXqo0O+E0JItkNC65SSZbAYyjJ4aAFxHQufxaClb EH6gM8fNUOrfNAZbygyWM5xUQMu5oJOwmBrU2Ej9iHAtHdGzPaNhcOUqO3BLaAqi hk5b3vOui7CaAIxIJ9P2UW6xncpAVswTKMN0k3pg9+iw56mvki2ODYCtuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi7mh+VDp78Sd+7DdFPLLqx9q6iMB8GA1UdIwQY MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt MjUxMGRhYzMyNDk2LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2 LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYt4MMcS Fqeht+hP0FpirqZEWNMKj70k+ZJNXST8RRaY4EXO4ESMscU8de0KFz5+qfTXRiKL rtuaxwLcpKMfRTZQHVs7tcIs9Ow4/5L/3iQ6m4kHqu/kbRM3sjtVrUDr3P/CsEhO 50KAmJ8Gg/y19qSdhbmdCsYnyIkAMwRn29n/YH4PFIU7QODKGLZg71OaaPK5n4ob 3qDKqNsqeSrYvKxH5YZN5mNVcWk+TLPJnlCww/FT77pGfGh/03VgIjHdu00I99Un 3WyNWbrf/F7EQavNR7edfcfOzXG6XSK8HOMDCo3E3VESohIEp4N7EO1Eb+z8Qyf9 i5u4Fd+/2JKF+w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:37 2025 by rpki-client