This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft File: L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json) Hash identifier: r8FoTeRqdpWObCprQ2R+jX5aPv710RUc2dDXFGSO5mA= Subject key identifier: 39:81:4D:B9:CA:9B:13:55:BA:ED:74:2C:63:09:BE:1A:D4:36:70:E8 Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2 Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2 Certificate serial: 019B3E6D6718C0B5B0B89AA522EE44F7EC27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft Manifest number: 16F1 Signing time: Sun 21 Dec 2025 01:01:55 +0000 Manifest this update: Sun 21 Dec 2025 01:01:55 +0000 Manifest next update: Mon 22 Dec 2025 01:01:55 +0000 Files and hashes: 1: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: nlYad8aSQBDhg+2Dll4U3CwnMPajBMPBS1bqu7aLatQ=) 2: vG-sL64PzFjoHvBKrdJSTxY4LJY.roa (hash: eq6XQDgluMAH7RNgHwEJGrW57NnrxZaKBUUVn7gebfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:67:18:c0:b5:b0:b8:9a:a5:22:ee:44:f7:ec:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2 Validity Not Before: Dec 21 01:01:55 2025 GMT Not After : Dec 22 01:01:55 2025 GMT Subject: CN=39814db9ca9b1355baed742c6309be1ad43670e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:fe:b7:96:b0:da:d6:74:ec:f8:af:ed:ec: b8:56:be:96:7e:41:ce:a2:8c:6a:5b:ef:ae:45:c0: 86:e4:65:22:42:78:62:a4:15:f3:19:d5:de:a4:89: 53:2a:c1:68:30:92:29:e1:bf:de:a1:43:56:ee:a8: e8:84:9d:58:97:2a:06:f3:03:67:91:97:06:aa:07: 99:6f:6b:a2:69:fc:2b:e2:72:f6:79:8e:81:d7:ee: ee:fe:ff:2e:10:32:0a:9a:0d:d6:dc:8d:e3:2c:9e: 46:5d:a7:f3:70:e5:0c:a0:5b:48:64:31:f0:64:8a: 45:36:57:c6:52:68:ca:23:23:38:17:b3:14:8c:6d: 15:09:4a:c6:ca:8c:fe:af:ac:f1:7d:a9:6d:7b:41: f5:43:8c:04:18:5b:23:fd:77:64:07:4e:87:7b:10: b7:12:ac:6b:f6:91:ef:70:52:b9:4a:08:d1:89:99: 29:a6:cd:38:c2:eb:62:43:79:9a:36:92:83:23:1b: 06:23:10:77:46:a4:a1:53:83:fb:9c:78:93:1f:0c: 5a:73:08:f9:e8:6d:ba:4e:a7:13:a8:5f:00:4d:d1: a7:8a:a4:43:92:d7:a9:59:41:33:ad:40:9a:c3:d2: a6:c3:10:43:92:51:d7:d8:93:d3:2d:c9:1c:eb:a2: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:81:4D:B9:CA:9B:13:55:BA:ED:74:2C:63:09:BE:1A:D4:36:70:E8 X509v3 Authority Key Identifier: keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:02:be:19:4d:2a:01:fa:fb:f9:8e:6a:ac:fd:fa:ef:7b:13: 7a:0d:df:a0:09:8a:16:97:c2:42:8c:4f:f0:15:78:1e:17:a1: ff:fd:a8:8b:f3:b5:2f:5e:48:7e:b6:ee:7d:2a:15:7e:b6:d8: 39:4f:48:c5:6b:50:e8:a6:8c:35:0c:e4:51:03:01:bc:84:26: f1:3a:2b:35:3d:7b:7b:6e:4f:21:d0:d2:45:61:71:fe:3f:39: 06:88:8f:fc:15:28:7b:e5:f4:f2:48:1f:11:ad:f8:65:32:c1: 5e:6b:55:59:87:8f:ee:f9:fe:f2:b4:2d:3e:dc:ed:52:58:14: 16:e4:c9:c9:41:22:70:2e:78:2e:05:b7:99:c0:e8:34:0c:c8: 68:9a:fa:4f:e0:67:81:c7:87:2d:c8:1a:d7:6c:7b:fe:de:0f: 40:5d:2e:1f:df:d4:36:c1:64:eb:25:8e:02:3f:5c:6f:70:9e: 17:d2:e1:79:23:7e:af:1c:55:80:92:3b:ab:a7:8c:7e:10:ba: f3:f8:b8:22:2e:ba:bc:68:42:95:f2:8b:8b:a6:51:83:6b:d2: 18:b2:21:21:05:b6:77:77:6b:49:1f:61:0e:dc:8f:f0:b2:48: 30:57:78:8a:a5:b9:1e:1b:b0:42:b3:ed:ea:ee:77:cd:ad:95: ad:f5:8c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bWcYwLWwuJqlIu5E9+wnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky OGU5YjIwHhcNMjUxMjIxMDEwMTU1WhcNMjUxMjIyMDEwMTU1WjAzMTEwLwYDVQQD EygzOTgxNGRiOWNhOWIxMzU1YmFlZDc0MmM2MzA5YmUxYWQ0MzY3MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZD+t5aw2tZ07Piv7ey4Vr6WfkHO ooxqW++uRcCG5GUiQnhipBXzGdXepIlTKsFoMJIp4b/eoUNW7qjohJ1YlyoG8wNn kZcGqgeZb2uiafwr4nL2eY6B1+7u/v8uEDIKmg3W3I3jLJ5GXafzcOUMoFtIZDHw ZIpFNlfGUmjKIyM4F7MUjG0VCUrGyoz+r6zxfalte0H1Q4wEGFsj/XdkB06HexC3 Eqxr9pHvcFK5SgjRiZkpps04wutiQ3maNpKDIxsGIxB3RqShU4P7nHiTHwxacwj5 6G26TqcTqF8ATdGniqRDktepWUEzrUCaw9KmwxBDklHX2JPTLckc66KKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmBTbnKmxNVuu10LGMJvhrUNnDoMB8GA1UdIwQY MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt OWU1ZjkwNTM4MzM2LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2 LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAK+GU0q Afr7+Y5qrP3673sTeg3foAmKFpfCQoxP8BV4Hheh//2oi/O1L15IfrbufSoVfrbY OU9IxWtQ6KaMNQzkUQMBvIQm8TorNT17e25PIdDSRWFx/j85BoiP/BUoe+X08kgf Ea34ZTLBXmtVWYeP7vn+8rQtPtztUlgUFuTJyUEicC54LgW3mcDoNAzIaJr6T+Bn gceHLcga12x7/t4PQF0uH9/UNsFk6yWOAj9cb3CeF9LheSN+rxxVgJI7q6eMfhC6 8/i4Ii66vGhClfKLi6ZRg2vSGLIhIQW2d3drSR9hDtyP8LJIMFd4iqW5HhuwQrPt 6u53za2VrfWMXA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:13 2025 by rpki-client