This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json) Hash identifier: +8j4lVgjTwDmXzksYhDrvZHlRxT507GzuPCBtZo0nI8= Subject key identifier: 47:20:4C:00:3B:36:63:67:C4:AB:8E:FB:04:BF:42:EA:1F:44:3F:FA Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f Certificate serial: 019B59ACB7DB19CE928AB4EF8E7D32B8D6E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft Manifest number: 0488 Signing time: Fri 26 Dec 2025 08:00:50 +0000 Manifest this update: Fri 26 Dec 2025 08:00:50 +0000 Manifest next update: Sat 27 Dec 2025 08:00:50 +0000 Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: 5p/WXPFsQEWx+Ef48i+66JZovezN1M34ff0CzClgeB4=) 2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:b7:db:19:ce:92:8a:b4:ef:8e:7d:32:b8:d6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f Validity Not Before: Dec 26 08:00:50 2025 GMT Not After : Dec 27 08:00:50 2025 GMT Subject: CN=47204c003b366367c4ab8efb04bf42ea1f443ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:75:98:20:7b:fa:9c:70:3d:57:13:4d:a4: de:56:ea:97:d6:4f:1a:ba:9c:c0:4b:ce:93:51:c5: d8:98:e3:f3:94:6d:76:6a:ec:c2:e9:19:38:c7:7e: 37:98:b6:2f:e7:6f:7e:f8:4b:88:92:61:ba:2f:f8: c3:b8:08:25:66:c0:37:6a:0b:07:82:91:88:da:43: ab:12:9d:33:41:8b:55:11:80:a4:ad:a1:a0:4f:b7: d6:63:31:d5:a7:ce:e3:78:23:81:45:12:00:1c:a9: bf:80:5d:5f:44:dd:11:2b:24:e3:4f:cd:31:16:cd: fb:cb:f8:01:1f:2c:93:f5:15:36:1f:ef:04:e4:13: 06:20:65:52:e4:15:00:23:df:c5:e1:c7:b2:25:59: fa:13:8f:28:97:c7:f2:5e:8e:d6:be:a0:36:08:44: cd:94:1e:d9:71:a2:1b:59:4d:ed:cf:96:58:cc:2e: a4:d4:d7:71:e2:9b:b0:20:c5:b8:18:48:10:a7:e5: 74:73:1f:6c:54:5a:ee:e8:d8:ca:31:ad:46:61:ec: 0d:de:82:85:6a:d0:78:4c:d3:0b:0b:27:e3:56:2f: 6f:41:81:11:e3:9f:4f:fa:14:fa:17:7f:de:f6:b1: 4f:c4:03:57:42:41:0f:7e:8b:02:48:d5:09:f4:64: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:20:4C:00:3B:36:63:67:C4:AB:8E:FB:04:BF:42:EA:1F:44:3F:FA X509v3 Authority Key Identifier: keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:17:5b:4e:4f:01:cd:a6:46:d7:bb:9a:96:e9:b0:cb:09:e4: f3:c6:42:47:e0:1f:da:71:a8:cc:be:fb:c7:b2:c0:af:a0:5e: 29:ec:00:2e:4b:ea:a3:f1:a6:05:3d:22:78:ca:2a:c0:23:47: cb:5d:f1:06:1f:0c:d0:88:93:88:9d:02:9a:90:09:34:49:d4: ff:7e:c7:c7:3d:21:6a:a1:46:db:39:c2:ba:9c:4d:9a:1e:25: 61:32:b9:37:8a:04:b0:4d:ad:f9:21:ee:a9:a7:5f:fd:86:7b: c8:1f:ae:2d:ce:5b:3e:c2:43:7a:ba:84:48:c6:f1:e1:3c:7a: c8:b6:62:80:90:94:60:ba:ae:b7:26:c3:6a:27:7c:4d:8f:47: ef:02:88:a0:5a:d5:b1:48:90:50:bb:79:f5:20:67:c4:27:b6: 7b:16:40:de:fc:b4:cb:ab:5e:63:7f:ff:9c:6b:29:f3:28:4e: b3:06:fc:b3:08:a0:88:09:d9:e3:df:18:3c:dc:0f:6e:5b:c6: 1a:b9:19:1c:ad:8b:a3:04:ea:9a:86:32:bc:62:ec:f2:7c:be: 5f:51:d2:ce:f4:ca:81:f3:e8:2c:14:13:b3:00:0a:7a:48:31: 93:80:0d:a4:f9:a9:1c:da:e8:cc:7f:92:15:a6:aa:19:21:41: 56:14:10:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLfbGc6SirTvjn0yuNbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTA4Yjk3MGJjOGNiZDBlNDQ1M2M4OTZiZGI4MjJhYTcx Y2EyNmYwHhcNMjUxMjI2MDgwMDUwWhcNMjUxMjI3MDgwMDUwWjAzMTEwLwYDVQQD Eyg0NzIwNGMwMDNiMzY2MzY3YzRhYjhlZmIwNGJmNDJlYTFmNDQzZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgR1mCB7+pxwPVcTTaTeVuqX1k8a upzAS86TUcXYmOPzlG12auzC6Rk4x343mLYv529++EuIkmG6L/jDuAglZsA3agsH gpGI2kOrEp0zQYtVEYCkraGgT7fWYzHVp87jeCOBRRIAHKm/gF1fRN0RKyTjT80x Fs37y/gBHyyT9RU2H+8E5BMGIGVS5BUAI9/F4ceyJVn6E48ol8fyXo7WvqA2CETN lB7ZcaIbWU3tz5ZYzC6k1Ndx4puwIMW4GEgQp+V0cx9sVFru6NjKMa1GYewN3oKF atB4TNMLCyfjVi9vQYER459P+hT6F3/e9rFPxANXQkEPfosCSNUJ9GS/zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcgTAA7NmNnxKuO+wS/QuofRD/6MB8GA1UdIwQY MBaAFC+gi5cLyMvQ5EU8iWvbgiqnHKJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEt YTQ0ZGQ5NjZjZTUwLzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEtYTQ0ZGQ5NjZjZTUw LzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBdbTk8B zaZG17ualumwywnk88ZCR+Af2nGozL77x7LAr6BeKewALkvqo/GmBT0ieMoqwCNH y13xBh8M0IiTiJ0CmpAJNEnU/37Hxz0haqFG2znCupxNmh4lYTK5N4oEsE2t+SHu qadf/YZ7yB+uLc5bPsJDerqESMbx4Tx6yLZigJCUYLqutybDaid8TY9H7wKIoFrV sUiQULt59SBnxCe2exZA3vy0y6teY3//nGsp8yhOswb8swigiAnZ498YPNwPblvG GrkZHK2LowTqmoYyvGLs8ny+X1HSzvTKgfPoLBQTswAKekgxk4ANpPmpHNrozH+S FaaqGSFBVhQQIA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:16 2025 by rpki-client