This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json) Hash identifier: 56TfUjv2IusDsuhVoNMDT7v3aHGuD2R0wNRUF412pQQ= Subject key identifier: 88:E0:94:D9:04:43:54:F4:54:EA:6E:49:03:B4:3A:2A:46:A0:A0:3D Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Certificate serial: 019B6DA123A3085CCEBA2C162B0A2267790B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft Manifest number: 0E83 Signing time: Tue 30 Dec 2025 05:00:35 +0000 Manifest this update: Tue 30 Dec 2025 05:00:35 +0000 Manifest next update: Wed 31 Dec 2025 05:00:35 +0000 Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: KpOB7cYOdxAHCg+iQ/xRs6WefcjmhitHDKO6W/b2HcU=) 2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:23:a3:08:5c:ce:ba:2c:16:2b:0a:22:67:79:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821 Validity Not Before: Dec 30 05:00:35 2025 GMT Not After : Dec 31 05:00:35 2025 GMT Subject: CN=88e094d9044354f454ea6e4903b43a2a46a0a03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:dd:28:e5:3a:3c:74:a6:b6:05:f9:54:8d: 78:42:7b:c4:eb:1f:27:31:0e:29:02:e2:af:f5:32: 0d:d1:8a:88:82:9c:3f:98:95:42:93:65:5a:13:ea: 37:a6:62:9c:a0:58:b0:56:1b:e8:29:90:4d:8f:09: 4b:53:06:c9:eb:5b:82:c6:81:23:48:32:50:84:64: 0d:0e:93:9c:2d:40:1b:e2:6b:0c:02:be:7d:af:8c: 7d:27:b5:ba:77:5b:f7:a7:31:b1:9f:cb:56:a1:13: 2c:78:98:28:64:90:7c:88:12:09:b9:41:de:92:b2: 6a:11:a5:2c:71:45:79:29:5a:5b:ab:72:fc:11:07: bf:48:e9:36:ba:2c:6b:1b:28:56:a8:30:fe:f3:bd: b7:86:bd:3c:47:2b:9b:d1:c0:90:da:bd:77:b1:2a: a8:fa:4d:44:c6:a7:0e:c5:e5:16:f9:db:18:0c:92: fc:dd:b1:ab:90:cf:e8:3d:7c:0d:ab:76:ff:3c:f0: 8a:c8:a1:c6:7e:2e:1c:36:5d:f8:81:be:92:a8:1b: 53:24:21:e8:1f:ec:3b:f2:b5:57:ec:62:d6:62:89: 53:97:90:33:d2:48:65:1a:95:ed:d8:77:70:bb:c4: ea:d6:fc:54:e9:75:c1:9f:ad:6a:4c:d1:dc:a2:d9: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E0:94:D9:04:43:54:F4:54:EA:6E:49:03:B4:3A:2A:46:A0:A0:3D X509v3 Authority Key Identifier: keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:a8:c5:8a:98:cc:9b:b7:d8:63:f7:ef:38:21:ac:da:ce: a8:72:1c:be:cc:e0:6a:77:01:4e:3e:5e:22:4c:68:58:0a:1a: ce:5a:97:b7:0d:f5:24:06:d5:b4:78:e9:04:7d:83:88:eb:5c: e9:30:d9:24:fb:41:f6:09:7a:d1:5d:5c:f0:d9:0f:32:b2:e9: 21:55:a1:e8:9b:79:13:77:89:e6:19:5b:f3:e1:09:f2:3c:97: 22:4d:66:be:fb:7d:d8:06:39:fe:95:bb:9f:b0:20:c4:98:cd: d7:a3:d3:31:28:0d:21:4c:e5:03:e5:91:f9:0b:b5:68:e9:9f: 91:75:1d:35:fd:42:e3:54:79:e7:4d:4f:44:e8:8b:54:9b:bb: a1:9b:6c:35:ba:c0:be:30:5f:a9:ee:02:1a:2e:73:87:5b:08: d8:a9:e6:f4:42:3a:b3:3e:cb:08:56:34:47:69:f9:ec:96:05: b5:a6:31:ff:97:39:56:e4:eb:a8:58:fb:40:a3:08:47:5d:87: 5a:f5:a6:03:c3:d4:e6:71:53:c5:a1:9d:73:45:f2:a2:85:1d: 32:73:82:a3:3f:c0:00:76:8a:27:67:73:a4:00:48:09:3b:64: ba:a9:b0:64:59:ef:d6:dc:57:00:ba:b2:e1:10:11:16:29:73: 58:d7:ba:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoSOjCFzOuiwWKwoiZ3kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NjBmZDU4NjQ4MjY4MDVjZjM2NTVlZWViMmZiODk4ZjM2 ZDk4MjEwHhcNMjUxMjMwMDUwMDM1WhcNMjUxMjMxMDUwMDM1WjAzMTEwLwYDVQQD Eyg4OGUwOTRkOTA0NDM1NGY0NTRlYTZlNDkwM2I0M2EyYTQ2YTBhMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCbdKOU6PHSmtgX5VI14QnvE6x8n MQ4pAuKv9TIN0YqIgpw/mJVCk2VaE+o3pmKcoFiwVhvoKZBNjwlLUwbJ61uCxoEj SDJQhGQNDpOcLUAb4msMAr59r4x9J7W6d1v3pzGxn8tWoRMseJgoZJB8iBIJuUHe krJqEaUscUV5KVpbq3L8EQe/SOk2uixrGyhWqDD+8723hr08Ryub0cCQ2r13sSqo +k1ExqcOxeUW+dsYDJL83bGrkM/oPXwNq3b/PPCKyKHGfi4cNl34gb6SqBtTJCHo H+w78rVX7GLWYolTl5Az0khlGpXt2Hdwu8Tq1vxU6XXBn61qTNHcotlugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjglNkEQ1T0VOpuSQO0OipGoKA9MB8GA1UdIwQY MBaAFJdg/VhkgmgFzzZV7usvuJjzbZghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMt ZDlhMTA0NDA0YWFmLzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hMjljOWEtY2E0ZC00MDAwLThmZjMtZDlhMTA0NDA0YWFm LzEvbDJEOVdHU0NhQVhQTmxYdTZ5LTRtUE50bUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTqoxYqY zJu32GP37zghrNrOqHIcvszgancBTj5eIkxoWAoazlqXtw31JAbVtHjpBH2DiOtc 6TDZJPtB9gl60V1c8NkPMrLpIVWh6Jt5E3eJ5hlb8+EJ8jyXIk1mvvt92AY5/pW7 n7AgxJjN16PTMSgNIUzlA+WR+Qu1aOmfkXUdNf1C41R5501PROiLVJu7oZtsNbrA vjBfqe4CGi5zh1sI2Knm9EI6sz7LCFY0R2n57JYFtaYx/5c5VuTrqFj7QKMIR12H WvWmA8PU5nFTxaGdc0XyooUdMnOCoz/AAHaKJ2dzpABICTtkuqmwZFnv1txXALqy 4RARFilzWNe6Ng== -----END CERTIFICATE-----Generated at Tue Dec 30 12:13:00 2025 by rpki-client