This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json) Hash identifier: RZtwK8YqMmoah758UeAfSg/fa9HuZzAv8KBvxwKG+BA= Subject key identifier: 8C:47:F9:7B:12:7E:ED:7B:96:3C:8D:91:A3:91:19:68:5D:B1:19:D8 Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f Certificate serial: 019B616655982919CF82414D2853FA8B2147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft Manifest number: 0FA7 Signing time: Sat 27 Dec 2025 20:00:54 +0000 Manifest this update: Sat 27 Dec 2025 20:00:54 +0000 Manifest next update: Sun 28 Dec 2025 20:00:54 +0000 Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: cdJFUL8oe0UHPMrSP+IXh32+dYPAdsDGkPGxlCf0Lsw=) 2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:66:55:98:29:19:cf:82:41:4d:28:53:fa:8b:21:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f Validity Not Before: Dec 27 20:00:54 2025 GMT Not After : Dec 28 20:00:54 2025 GMT Subject: CN=8c47f97b127eed7b963c8d91a39119685db119d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:4f:31:0a:80:ab:6b:70:07:37:b0:ea:d6: 25:81:13:4f:e8:d6:fc:41:c7:e3:76:02:12:e6:87: 3f:da:92:65:f3:4a:8e:71:1d:b6:1b:e3:5c:87:79: 24:ec:80:73:39:c0:e3:57:ba:6d:e7:1a:3b:0c:82: ae:85:35:3d:9f:8a:05:c8:1d:51:c2:0c:03:08:8f: c9:b6:2a:0b:f6:15:80:34:16:1b:4f:c1:f2:3a:e3: 11:e3:ca:41:84:15:a1:fc:fb:3e:43:67:a0:4e:f2: 43:d1:28:e4:d2:a2:f5:c2:b4:96:86:3e:14:f8:1d: 26:b7:c9:09:a8:6d:47:ea:1a:8e:b5:2d:b4:36:f0: 3d:55:e8:e6:b4:e8:3a:6e:00:92:1d:03:04:24:75: e4:aa:9b:79:f2:81:39:06:20:04:ab:a1:b6:b5:4b: 69:26:c1:76:2b:d9:82:2b:26:f5:de:7c:03:57:82: 32:21:cd:d4:31:11:88:ca:a1:40:e8:89:db:d8:4d: 1a:52:74:72:2d:02:0a:25:c4:ac:7f:fa:c0:1b:a0: db:82:4e:5a:6e:0b:10:ef:df:d6:65:29:d7:e6:e9: 29:d0:46:ad:12:4f:08:68:48:bd:7d:71:62:ea:7d: 37:88:59:64:4c:08:f4:8d:59:49:26:c5:05:2b:52: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:47:F9:7B:12:7E:ED:7B:96:3C:8D:91:A3:91:19:68:5D:B1:19:D8 X509v3 Authority Key Identifier: keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d1:35:d7:03:7d:15:04:30:8d:c3:70:06:ce:40:8e:9a:98: 07:ad:f4:5d:46:1f:7a:99:13:90:22:83:7d:3f:fa:f4:be:ef: 77:38:0f:99:1e:f3:bc:d3:92:c2:06:5c:be:ef:19:1c:ce:60: 65:93:0b:de:92:4d:2e:ae:05:8f:87:d7:94:16:64:fc:02:1c: a9:92:06:c5:b5:d3:82:ff:9e:b4:3f:ed:e2:0a:7f:7b:38:ea: 2b:0c:61:ad:f0:58:ba:fc:4d:00:e9:4d:cd:86:29:04:ce:bd: 68:5a:ca:61:7c:dd:86:0c:41:0d:bf:b6:9f:2d:f4:c0:33:8e: 07:e5:db:26:3d:db:14:cd:2b:32:7a:23:40:f3:5e:e0:23:56: 5f:20:72:2c:55:95:b0:36:9f:e3:58:16:71:54:e5:a1:d3:9b: 8b:63:8b:40:08:bd:20:a0:d3:4d:0f:f1:56:a9:e3:78:70:e0: f2:9d:68:71:0d:d7:ee:ff:9e:84:87:d7:b5:a0:5b:cd:48:af: 15:1a:c4:6f:8e:b9:73:a3:d3:ab:fa:4b:f5:4d:c8:9c:42:15: dd:f6:26:00:3d:ce:15:77:30:0a:e1:5f:d5:68:33:b5:63:5e: a9:69:84:f3:4e:5e:1d:16:34:27:6d:4d:61:cb:c7:f3:02:83: 58:91:1d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthZlWYKRnPgkFNKFP6iyFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz MjUxOWYwHhcNMjUxMjI3MjAwMDU0WhcNMjUxMjI4MjAwMDU0WjAzMTEwLwYDVQQD Eyg4YzQ3Zjk3YjEyN2VlZDdiOTYzYzhkOTFhMzkxMTk2ODVkYjExOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo5PMQqAq2twBzew6tYlgRNP6Nb8 QcfjdgIS5oc/2pJl80qOcR22G+Nch3kk7IBzOcDjV7pt5xo7DIKuhTU9n4oFyB1R wgwDCI/JtioL9hWANBYbT8HyOuMR48pBhBWh/Ps+Q2egTvJD0Sjk0qL1wrSWhj4U +B0mt8kJqG1H6hqOtS20NvA9VejmtOg6bgCSHQMEJHXkqpt58oE5BiAEq6G2tUtp JsF2K9mCKyb13nwDV4IyIc3UMRGIyqFA6Inb2E0aUnRyLQIKJcSsf/rAG6Dbgk5a bgsQ79/WZSnX5ukp0EatEk8IaEi9fXFi6n03iFlkTAj0jVlJJsUFK1LdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxH+XsSfu17ljyNkaORGWhdsRnYMB8GA1UdIwQY MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdE11wN9 FQQwjcNwBs5AjpqYB630XUYfepkTkCKDfT/69L7vdzgPmR7zvNOSwgZcvu8ZHM5g ZZML3pJNLq4Fj4fXlBZk/AIcqZIGxbXTgv+etD/t4gp/ezjqKwxhrfBYuvxNAOlN zYYpBM69aFrKYXzdhgxBDb+2ny30wDOOB+XbJj3bFM0rMnojQPNe4CNWXyByLFWV sDaf41gWcVTlodObi2OLQAi9IKDTTQ/xVqnjeHDg8p1ocQ3X7v+ehIfXtaBbzUiv FRrEb465c6PTq/pL9U3InEIV3fYmAD3OFXcwCuFf1WgztWNeqWmE805eHRY0J21N YcvH8wKDWJEd2Q== -----END CERTIFICATE-----Generated at Sun Dec 28 03:21:52 2025 by rpki-client