This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json) Hash identifier: QNPin7kdjgXQzNVeh+2ozb+Xfy/CbYS/W84M3GlB7CQ= Subject key identifier: 2B:F1:FF:D3:86:46:B9:C9:40:E7:9F:03:3C:DF:73:68:26:B6:25:90 Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Certificate serial: 019B3CEBDF983DE15A3865AA6F3CDC4606B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft Manifest number: 058C Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=) 2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: tM1vzmzdsQ2d4jgr/cXiSTuHkOkK4T6m+fNpg2Al5Qo=) 3: mGghwIHKQBTkopfB0lg-kUS38O0.roa (hash: 2oNORn859cAJogo2Beqpp561liE7aDeTcBLJ5YZQz9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:df:98:3d:e1:5a:38:65:aa:6f:3c:dc:46:06:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=2bf1ffd38646b9c940e79f033cdf736826b62590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:74:1c:43:48:1b:bf:fd:ce:ba:a4:cf:30: b2:38:df:c6:14:bf:c6:ef:57:31:b3:9e:6b:b5:2b: d7:d8:aa:3e:e3:eb:69:d3:8d:3f:fa:53:03:fb:02: 38:6e:c9:a2:81:66:71:4a:a2:0e:f3:fc:15:b7:10: ec:5f:ee:ad:32:03:d1:1b:c6:08:8a:38:57:80:03: 05:0e:7a:e8:0b:ad:48:66:5d:ba:e4:bd:05:a3:1f: 45:4f:af:ed:60:ae:52:51:b2:7c:a1:65:a3:77:73: cd:00:ad:13:4f:10:05:0e:d2:2e:06:ab:d0:51:24: a1:28:c6:a6:68:86:de:96:3c:0b:af:ab:49:24:d5: e0:71:e2:7f:f8:13:88:b3:3d:67:3f:1e:27:ae:23: dd:35:80:4a:92:77:4e:c7:12:b6:07:17:e8:78:09: 1e:b4:25:37:47:b8:cc:8e:30:7c:b1:43:b7:74:24: 3b:73:55:bc:de:5e:2f:ed:05:e6:a9:92:27:09:b6: 92:e9:7b:29:71:28:b9:ca:b9:48:00:1a:1b:6b:cd: fb:74:06:a8:cb:ef:f0:dd:8e:2f:cf:dc:88:cf:fa: d4:f5:56:c7:3f:78:cc:06:e3:26:4d:47:ec:d1:e0: 38:f3:a4:c2:9d:c0:24:31:0a:c1:3c:e2:ad:b5:af: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:FF:D3:86:46:B9:C9:40:E7:9F:03:3C:DF:73:68:26:B6:25:90 X509v3 Authority Key Identifier: keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:eb:87:19:55:08:bd:68:5f:1d:b3:fe:43:fb:89:a3:d8:cf: 5b:79:98:fd:3e:53:18:c6:fd:a7:c4:d9:93:47:35:d3:b9:1f: 56:a9:53:12:07:10:f1:21:db:32:ba:9f:0f:c4:42:63:c6:81: e6:a4:4a:08:6b:ea:dd:10:c0:27:97:fc:ae:e5:76:3b:0b:40: 3d:a8:9b:9d:3c:c7:7a:30:69:ce:be:53:4a:45:bb:e0:02:1e: 31:68:d8:38:44:e8:ea:46:38:63:34:f1:48:76:9d:e3:35:a0: ca:e5:62:3d:e3:84:de:bb:a2:08:b2:21:d5:d5:8f:ca:d9:74: 39:85:be:dd:6b:04:67:e5:88:da:6a:bd:dc:85:59:a8:68:25: 36:47:52:42:ea:16:0a:63:29:08:6d:55:96:29:7d:ab:3c:4e: 3d:9d:fc:2e:c4:94:0c:a1:08:2a:c2:0b:be:03:b1:1e:07:c8: 43:e1:ae:18:3e:99:f6:a5:61:51:e1:cb:7a:ce:b3:39:d6:81: a4:a2:27:33:34:e7:f7:1a:9d:79:90:eb:98:39:46:07:5b:16: a1:d8:12:ac:e3:66:3a:5c:94:74:fc:a7:d1:22:97:dd:53:d3: f4:52:9b:2c:be:1b:1a:98:26:e6:52:4a:5f:87:99:2b:e1:28: 1d:36:f5:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869+YPeFaOGWqbzzcRgawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk OTBiODcwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD EygyYmYxZmZkMzg2NDZiOWM5NDBlNzlmMDMzY2RmNzM2ODI2YjYyNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymt0HENIG7/9zrqkzzCyON/GFL/G 71cxs55rtSvX2Ko+4+tp040/+lMD+wI4bsmigWZxSqIO8/wVtxDsX+6tMgPRG8YI ijhXgAMFDnroC61IZl265L0Fox9FT6/tYK5SUbJ8oWWjd3PNAK0TTxAFDtIuBqvQ USShKMamaIbeljwLr6tJJNXgceJ/+BOIsz1nPx4nriPdNYBKkndOxxK2BxfoeAke tCU3R7jMjjB8sUO3dCQ7c1W83l4v7QXmqZInCbaS6XspcSi5yrlIABoba837dAao y+/w3Y4vz9yIz/rU9VbHP3jMBuMmTUfs0eA486TCncAkMQrBPOKtta9WLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvx/9OGRrnJQOefAzzfc2gmtiWQMB8GA1UdIwQY MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuuHGVUI vWhfHbP+Q/uJo9jPW3mY/T5TGMb9p8TZk0c107kfVqlTEgcQ8SHbMrqfD8RCY8aB 5qRKCGvq3RDAJ5f8ruV2OwtAPaibnTzHejBpzr5TSkW74AIeMWjYOETo6kY4YzTx SHad4zWgyuViPeOE3ruiCLIh1dWPytl0OYW+3WsEZ+WI2mq93IVZqGglNkdSQuoW CmMpCG1Vlil9qzxOPZ38LsSUDKEIKsILvgOxHgfIQ+GuGD6Z9qVhUeHLes6zOdaB pKInMzTn9xqdeZDrmDlGB1sWodgSrONmOlyUdPyn0SKX3VPT9FKbLL4bGpgm5lJK X4eZK+EoHTb1Lw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:08 2025 by rpki-client