This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json) Hash identifier: pLC9LgHvGqmI/VUGCzPi3KyuHsxWhrHkuL7k+hzOzV8= Subject key identifier: 1C:82:65:CB:DE:90:C6:98:51:81:AF:6E:C0:9F:4E:AB:74:78:C1:93 Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Certificate serial: 019AF79D280081F14BC71743F07A46884FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft Manifest number: 0EC1 Signing time: Sun 07 Dec 2025 07:01:02 +0000 Manifest this update: Sun 07 Dec 2025 07:01:02 +0000 Manifest next update: Mon 08 Dec 2025 07:01:02 +0000 Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: w34j8Z5RoBz99w4rGFNw+RVyXX9UCtNDQrCjL9kwesI=) 2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=) 3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:28:00:81:f1:4b:c7:17:43:f0:7a:46:88:4f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189 Validity Not Before: Dec 7 07:01:02 2025 GMT Not After : Dec 8 07:01:02 2025 GMT Subject: CN=1c8265cbde90c6985181af6ec09f4eab7478c193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:fc:7c:53:bb:fb:d2:4b:cb:0c:98:65:40: 52:3f:6e:25:14:a0:8b:8e:15:74:eb:e3:cc:a3:3c: 7f:e0:db:46:b0:58:4e:77:3c:97:97:3a:64:d7:27: 48:24:1a:42:46:dd:a6:63:98:48:d6:b4:44:a7:f8: a6:fd:bf:61:fe:61:05:4d:cc:43:33:0c:62:c1:2f: 0d:6c:0a:da:77:70:7b:07:d7:c8:86:b0:5d:83:d9: 72:9f:10:6b:8c:6d:48:02:9b:bc:f1:1e:cd:f8:70: aa:53:8b:95:e4:98:fd:b7:29:aa:36:e4:19:b9:d5: d8:ec:7a:08:95:68:ea:92:1f:52:3d:eb:02:d8:68: 58:96:ab:66:d1:0b:54:7a:0e:98:a7:0b:41:4a:e1: 8e:7d:69:45:a4:35:2a:4a:88:47:d1:b7:07:73:41: 06:b2:b2:4f:50:dd:b3:37:78:e4:c8:b9:d2:7a:89: 2d:10:d7:e8:5d:43:26:aa:f6:fa:41:6c:0e:b4:f1: 37:f6:94:2d:20:4b:2e:6d:57:c1:84:12:3c:b2:c4: 03:44:98:c4:0f:91:41:f5:73:57:34:5f:3e:8b:e2: b8:0e:eb:e1:b9:01:0b:dd:7a:f0:c7:4c:02:78:0d: 12:03:5e:85:3f:db:c2:e6:5d:1a:f2:f4:1d:0b:80: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:65:CB:DE:90:C6:98:51:81:AF:6E:C0:9F:4E:AB:74:78:C1:93 X509v3 Authority Key Identifier: keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a3:1e:f4:97:35:6c:c5:15:cb:6b:68:f4:2f:5c:2e:b3:80: cf:77:c5:d5:e4:a1:75:42:55:fd:92:31:e8:a1:25:ae:a3:f7: e2:74:bb:e6:f4:6e:7f:55:cc:76:10:55:16:17:10:5b:52:34: df:b1:82:45:bb:db:39:e9:a5:b5:27:8e:94:f1:ba:14:35:bb: 37:72:9a:db:99:d6:39:d4:fd:b0:03:f5:99:93:38:50:7d:75: 21:33:79:dc:1b:87:ea:b2:9f:c5:2b:d7:7a:67:00:30:6d:aa: e8:43:c2:62:1d:4a:b1:6b:54:a8:4f:6f:a2:f8:3c:42:f1:df: 1f:26:97:64:8b:59:4f:90:b5:07:f8:13:02:9d:66:de:4f:ac: 8e:c1:85:af:fa:25:cd:92:a8:4a:a0:a4:53:35:41:06:0d:de: fc:e5:c5:a3:2d:57:78:74:b9:11:a7:80:d3:d8:0c:62:13:29: 07:1a:e9:dc:f1:86:e8:8c:da:1a:7f:17:28:55:50:67:c2:a6: 2b:cf:fa:bf:5e:01:6c:8e:92:3e:7e:fc:a9:cf:fe:4c:8b:93: 72:40:d6:cf:1a:5e:fd:58:25:64:e2:ff:b5:86:d5:4d:93:65: 1e:14:6a:7c:13:be:aa:e4:58:59:cd:89:0d:6d:f9:1d:9d:c3: 37:f3:fa:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nSgAgfFLxxdD8HpGiE/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzViYzczNzlmMTE1YjA2NzE1NTJjOWJhZjJiZWQ4NWJk ZTgxODkwHhcNMjUxMjA3MDcwMTAyWhcNMjUxMjA4MDcwMTAyWjAzMTEwLwYDVQQD EygxYzgyNjVjYmRlOTBjNjk4NTE4MWFmNmVjMDlmNGVhYjc0NzhjMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8z8fFO7+9JLywyYZUBSP24lFKCL jhV06+PMozx/4NtGsFhOdzyXlzpk1ydIJBpCRt2mY5hI1rREp/im/b9h/mEFTcxD MwxiwS8NbArad3B7B9fIhrBdg9lynxBrjG1IApu88R7N+HCqU4uV5Jj9tymqNuQZ udXY7HoIlWjqkh9SPesC2GhYlqtm0QtUeg6YpwtBSuGOfWlFpDUqSohH0bcHc0EG srJPUN2zN3jkyLnSeoktENfoXUMmqvb6QWwOtPE39pQtIEsubVfBhBI8ssQDRJjE D5FB9XNXNF8+i+K4DuvhuQEL3Xrwx0wCeA0SA16FP9vC5l0a8vQdC4Ai9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByCZcvekMaYUYGvbsCfTqt0eMGTMB8GA1UdIwQY MBaAFC91vHN58RWwZxVSybryvthb3oGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYt YWYwZTQxN2Q0YzNhLzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MTBkMjktMGM4NS00MDU3LWI2MjYtYWYwZTQxN2Q0YzNh LzEvTDNXOGMzbnhGYkJuRlZMSnV2Sy0yRnZlZ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqMe9Jc1 bMUVy2to9C9cLrOAz3fF1eShdUJV/ZIx6KElrqP34nS75vRuf1XMdhBVFhcQW1I0 37GCRbvbOemltSeOlPG6FDW7N3Ka25nWOdT9sAP1mZM4UH11ITN53BuH6rKfxSvX emcAMG2q6EPCYh1KsWtUqE9vovg8QvHfHyaXZItZT5C1B/gTAp1m3k+sjsGFr/ol zZKoSqCkUzVBBg3e/OXFoy1XeHS5EaeA09gMYhMpBxrp3PGG6IzaGn8XKFVQZ8Km K8/6v14BbI6SPn78qc/+TIuTckDWzxpe/VglZOL/tYbVTZNlHhRqfBO+quRYWc2J DW35HZ3DN/P60g== -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:10 2025 by rpki-client