This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json) Hash identifier: 1QSanYcEdK5nHOXvjJ19HKG0KQmgGdd4lIRmUKF0reI= Subject key identifier: 4C:08:44:87:0F:04:ED:6B:60:DB:4C:97:6A:B5:BB:72:56:C2:4D:5E Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83 Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283 Certificate serial: 019B3A21AC70578623DBA4A4773DE414D8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:43 +0000 Manifest this update: Sat 20 Dec 2025 05:00:43 +0000 Manifest next update: Sun 21 Dec 2025 05:00:43 +0000 Files and hashes: 1: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (hash: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=) 2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: gsUZKtYn8GATVNsXRql0ZCWrI+NNT0uadC8fk8EmsZk=) 3: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (hash: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=) 4: raNLX_Rlhb8qt_iqRNHRfzz2onw.roa (hash: CXUwU+ePCPV8g/dv883GbgzoP+FoppZgtKTpY2iI3OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:ac:70:57:86:23:db:a4:a4:77:3d:e4:14:d8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283 Validity Not Before: Dec 20 05:00:43 2025 GMT Not After : Dec 21 05:00:43 2025 GMT Subject: CN=4c0844870f04ed6b60db4c976ab5bb7256c24d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:4f:56:d5:5c:30:27:ce:6c:ef:59:bc:c5: 97:36:34:85:8d:87:02:47:18:c9:51:ba:ce:f6:ca: e4:38:06:f7:a8:b8:63:95:ad:91:36:a1:c9:c9:98: ce:99:1c:00:83:a2:d3:47:f4:6e:02:f6:44:90:b4: 5f:48:4a:df:1e:4e:86:05:44:63:47:0c:fd:ba:f3: 59:cf:9b:04:8c:eb:22:60:89:9a:b5:9f:d2:68:e5: 3f:9e:c3:ce:d9:7b:b4:3f:9e:69:29:1a:49:2b:ef: d1:6a:07:f9:3f:ac:db:24:73:a0:fc:07:a5:6c:7a: 4a:ac:c0:d3:f8:91:3d:9a:6c:95:a1:f5:19:32:9e: 63:b9:f3:1e:ed:3e:4e:cb:13:fa:0e:5d:0c:28:f6: 68:ae:5b:0b:28:b0:0a:29:09:d3:93:a2:28:df:c4: 44:f1:7b:7c:95:da:ed:a5:cf:4e:ee:26:ca:f7:27: 4c:24:ef:46:75:56:74:d5:ec:20:49:2d:5c:b2:d4: 33:6c:3e:f3:c1:49:56:45:75:69:43:1e:31:3a:0c: d1:63:7f:0e:79:8e:b9:28:56:e6:32:df:ba:db:de: 2d:ba:d7:01:51:8c:d5:d2:0e:61:14:41:92:47:2b: 6c:10:c9:59:a3:40:77:d9:1a:a2:24:70:1c:a7:b5: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:08:44:87:0F:04:ED:6B:60:DB:4C:97:6A:B5:BB:72:56:C2:4D:5E X509v3 Authority Key Identifier: keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:5e:a8:8d:d7:00:00:09:be:52:b5:42:c3:9d:33:8f:a9: 78:7c:82:5f:d6:22:dd:b4:03:1f:ca:89:b7:b4:0e:4d:a2:69: 2a:34:82:38:6a:61:96:c8:4c:ef:e6:54:f5:d7:82:6f:49:83: 84:6e:71:dc:48:8b:56:24:ff:4f:c8:42:e7:dc:f7:60:8c:4e: f4:c8:20:58:5b:78:ce:55:7c:6c:f2:f8:6c:ff:a6:1c:7a:c4: ba:d5:49:18:47:60:84:d9:0c:68:28:a9:6f:fc:19:52:f0:44: 63:6b:99:8a:e3:09:f1:d6:7e:4f:b5:4a:89:d7:98:cb:f9:dc: 10:90:51:03:7a:d1:a8:61:ad:35:f5:cd:46:44:a4:ff:8a:e6: 95:86:4d:84:4e:f8:ee:69:48:be:7f:cb:98:c1:82:21:fb:57: 78:55:71:c9:02:f5:d5:f4:c2:cd:63:9d:5f:20:96:26:66:b7: 39:88:00:71:25:51:97:e1:4e:cf:ca:04:1b:36:27:db:66:00: 36:cc:09:e1:0c:64:00:5e:76:62:91:a4:9d:5c:b5:69:a4:53: e5:68:b4:3a:a0:fd:84:9f:17:82:5b:3c:a7:94:da:c5:49:68: 19:89:c3:fd:58:ae:1c:28:ca:62:16:31:b1:ab:d6:f4:3d:9b: e1:0c:2e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IaxwV4Yj26Skdz3kFNj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTViN2NjYjQwM2QzMGE0NDg1N2Q0N2M1OGNmMTM0NjU0 NmQyODMwHhcNMjUxMjIwMDUwMDQzWhcNMjUxMjIxMDUwMDQzWjAzMTEwLwYDVQQD Eyg0YzA4NDQ4NzBmMDRlZDZiNjBkYjRjOTc2YWI1YmI3MjU2YzI0ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFRPVtVcMCfObO9ZvMWXNjSFjYcC RxjJUbrO9srkOAb3qLhjla2RNqHJyZjOmRwAg6LTR/RuAvZEkLRfSErfHk6GBURj Rwz9uvNZz5sEjOsiYImatZ/SaOU/nsPO2Xu0P55pKRpJK+/Ragf5P6zbJHOg/Ael bHpKrMDT+JE9mmyVofUZMp5jufMe7T5OyxP6Dl0MKPZorlsLKLAKKQnTk6Io38RE 8Xt8ldrtpc9O7ibK9ydMJO9GdVZ01ewgSS1cstQzbD7zwUlWRXVpQx4xOgzRY38O eY65KFbmMt+6294tutcBUYzV0g5hFEGSRytsEMlZo0B32RqiJHAcp7V3ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwIRIcPBO1rYNtMl2q1u3JWwk1eMB8GA1UdIwQY MBaAFC/lt8y0A9MKRIV9R8WM8TRlRtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzIt MmI4ZjczNDZmMzUwLzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzItMmI4ZjczNDZmMzUw LzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjdeqI3X AAAJvlK1QsOdM4+peHyCX9Yi3bQDH8qJt7QOTaJpKjSCOGphlshM7+ZU9deCb0mD hG5x3EiLViT/T8hC59z3YIxO9MggWFt4zlV8bPL4bP+mHHrEutVJGEdghNkMaCip b/wZUvBEY2uZiuMJ8dZ+T7VKideYy/ncEJBRA3rRqGGtNfXNRkSk/4rmlYZNhE74 7mlIvn/LmMGCIftXeFVxyQL11fTCzWOdXyCWJma3OYgAcSVRl+FOz8oEGzYn22YA NswJ4QxkAF52YpGknVy1aaRT5Wi0OqD9hJ8Xgls8p5TaxUloGYnD/ViuHCjKYhYx savW9D2b4Qwu1w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:52 2025 by rpki-client