This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json) Hash identifier: sAnj3rzUKyFyjoY9tSE7lLBajZgc2vXD8AflVeMnHuc= Subject key identifier: 60:01:7C:B3:14:7B:C7:DC:99:2A:0A:A7:29:CA:25:23:6F:47:13:E2 Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Certificate serial: 019B4437D9FF05E97CC420EE85808814C82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft Manifest number: 1787 Signing time: Mon 22 Dec 2025 04:01:09 +0000 Manifest this update: Mon 22 Dec 2025 04:01:09 +0000 Manifest next update: Tue 23 Dec 2025 04:01:09 +0000 Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: T6lH4sWnJGBcmDnmqxH9akUHRivGJiFZ7RBO/nWBgRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:d9:ff:05:e9:7c:c4:20:ee:85:80:88:14:c8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120 Validity Not Before: Dec 22 04:01:09 2025 GMT Not After : Dec 23 04:01:09 2025 GMT Subject: CN=60017cb3147bc7dc992a0aa729ca25236f4713e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:cf:7e:17:a7:21:92:a0:4e:02:15:8b:96: cb:43:c6:1f:8b:b3:3b:77:9e:b4:ee:34:e6:0a:26: 50:93:21:25:0f:e1:cc:8c:8c:7b:23:5a:e3:b2:81: 64:69:0c:4a:6e:fb:8d:6c:9f:58:36:45:8b:59:83: bf:93:a5:15:5d:67:e8:7f:4e:c5:be:66:b2:70:c5: 58:0d:8a:70:ca:34:f0:10:07:a0:31:c4:30:ed:c8: 22:6f:0e:b5:3a:2b:b4:60:08:ab:b0:65:34:af:03: fa:b0:92:f8:14:2d:53:b4:29:3a:41:db:96:1c:aa: 3b:87:ca:66:97:1d:e3:cd:95:45:dc:e7:15:28:cc: f1:b1:80:f5:5b:5d:ae:2d:62:29:db:cc:8a:bf:39: bb:00:75:c6:45:84:97:29:dc:59:c1:0d:d2:44:3e: a8:b7:32:e0:4d:4a:c0:29:a3:4a:58:f2:3d:b3:c1: 43:76:aa:a8:6c:c3:87:00:8c:a7:38:da:05:6f:f6: 33:b4:1a:af:86:86:ec:18:d8:5f:42:fe:76:c9:52: a3:68:58:ee:51:38:18:1e:0e:e1:2e:4c:2c:01:84: 82:da:ef:fe:5d:ec:83:96:6f:1a:ae:73:38:d1:0e: f3:87:94:09:b3:8f:46:4c:b8:db:d3:05:14:16:ba: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:7C:B3:14:7B:C7:DC:99:2A:0A:A7:29:CA:25:23:6F:47:13:E2 X509v3 Authority Key Identifier: keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:65:a4:04:a1:0e:bb:9a:a8:65:91:9a:ee:e5:11:95:57:25: c3:45:be:14:d4:6d:41:16:02:e5:ab:51:82:33:cc:4b:47:a2: 2b:27:11:73:89:00:17:12:18:ec:46:af:1b:a3:27:a7:83:fa: 8e:5e:73:d6:50:9f:f4:7c:f8:5f:4d:14:08:18:39:dd:f2:2f: 2e:c0:2d:d3:d2:fb:87:26:61:a1:3b:eb:c1:71:7c:3b:fd:40: 1e:a9:d9:b8:15:12:43:3b:dd:be:f6:b2:4b:07:92:da:c7:ac: c0:b5:03:d0:47:cc:30:45:b7:cc:50:84:dd:75:0e:d3:ba:c5: 3e:f3:64:a5:1d:c5:fb:7b:15:64:b0:5b:30:95:56:ca:69:f3: 49:83:5f:dd:39:22:fe:64:b6:2b:bf:2b:b0:84:96:75:e2:b2: 3a:2a:5f:d6:f8:dc:2d:3f:2d:fc:94:c8:e8:6f:5e:ca:ea:98: 29:59:72:49:d4:65:1b:09:87:f7:e2:00:c9:17:9c:e6:27:50: 5b:0d:de:29:6e:de:eb:66:65:80:7f:09:8b:09:5c:1e:71:5a: a6:4f:1a:f0:4e:a5:75:44:78:5e:11:c2:fb:f3:c1:95:c1:40: 83:26:9c:91:5f:6f:0c:60:85:e8:62:52:71:99:ee:7c:34:0c: 68:47:f6:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN9n/Bel8xCDuhYCIFMgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTBhYTdiZmFlMTI0NzQwMmFiYjZjODliNzViYjIzZjBm MGYxMjAwHhcNMjUxMjIyMDQwMTA5WhcNMjUxMjIzMDQwMTA5WjAzMTEwLwYDVQQD Eyg2MDAxN2NiMzE0N2JjN2RjOTkyYTBhYTcyOWNhMjUyMzZmNDcxM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk7PfhenIZKgTgIVi5bLQ8Yfi7M7 d5607jTmCiZQkyElD+HMjIx7I1rjsoFkaQxKbvuNbJ9YNkWLWYO/k6UVXWfof07F vmaycMVYDYpwyjTwEAegMcQw7cgibw61Oiu0YAirsGU0rwP6sJL4FC1TtCk6QduW HKo7h8pmlx3jzZVF3OcVKMzxsYD1W12uLWIp28yKvzm7AHXGRYSXKdxZwQ3SRD6o tzLgTUrAKaNKWPI9s8FDdqqobMOHAIynONoFb/YztBqvhobsGNhfQv52yVKjaFju UTgYHg7hLkwsAYSC2u/+XeyDlm8arnM40Q7zh5QJs49GTLjb0wUUFrq7OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGABfLMUe8fcmSoKpynKJSNvRxPiMB8GA1UdIwQY MBaAFC/gqnv64SR0Aqu2yJt1uyPw8PEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYt NTJjOWQzNTZhMjE1LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hNDZkMzItYjA1NS00YWIyLTgyODYtNTJjOWQzNTZhMjE1 LzEvTC1DcWVfcmhKSFFDcTdiSW0zVzdJX0R3OFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWWkBKEO u5qoZZGa7uURlVclw0W+FNRtQRYC5atRgjPMS0eiKycRc4kAFxIY7EavG6Mnp4P6 jl5z1lCf9Hz4X00UCBg53fIvLsAt09L7hyZhoTvrwXF8O/1AHqnZuBUSQzvdvvay SweS2seswLUD0EfMMEW3zFCE3XUO07rFPvNkpR3F+3sVZLBbMJVWymnzSYNf3Tki /mS2K78rsISWdeKyOipf1vjcLT8t/JTI6G9eyuqYKVlySdRlGwmH9+IAyRec5idQ Ww3eKW7e62ZlgH8JiwlcHnFapk8a8E6ldUR4XhHC+/PBlcFAgyackV9vDGCF6GJS cZnufDQMaEf2cg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:45 2025 by rpki-client