This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft File: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft (raw, json) Hash identifier: oeMOP2+pRF8MgWpNbfmQsInx5b5RLD0hvzV358uJg14= Subject key identifier: 1F:B5:6E:3F:BC:88:62:4E:58:0C:36:B3:C6:0C:CD:45:90:EE:43:80 Authority key identifier: DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62 Certificate issuer: /CN=da5f25e8950f69e2d75b93b92f5404199e044762 Certificate serial: 019B5A886DC51338257BD3B6773EABFD9532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft Manifest number: 7A Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl (hash: zttSRyeWSgmx9gtjEVHlsysNzqCJm4Hyz/HraSGNFqQ=) 2: MGGeam7llhDq2FLJ6zvvA80CGko.roa (hash: YxemhPkHhbnVR4JIFpydLIzQBu/u0QukoPhhWFPkjhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6d:c5:13:38:25:7b:d3:b6:77:3e:ab:fd:95:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da5f25e8950f69e2d75b93b92f5404199e044762 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=1fb56e3fbc88624e580c36b3c60ccd4590ee4380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:d4:af:e6:d3:53:76:78:3e:3e:06:f4:d7: 39:71:78:1b:a3:1a:09:37:52:a0:1b:a5:5d:40:9f: 92:bc:ac:86:1b:b6:a0:21:25:cb:2c:32:4a:5d:61: 68:14:84:33:ba:bd:99:2e:fa:1d:a5:61:63:1c:ff: 0c:8b:a7:25:d5:41:6f:6b:39:08:4e:27:95:0d:c5: cf:1c:88:ae:ba:05:0b:42:3b:b8:ec:85:98:08:fb: d6:a0:be:ab:10:b2:20:5c:e1:7c:63:4a:81:82:ab: 3b:39:42:0b:e4:49:6d:7c:d8:cc:88:70:02:cd:41: 50:6e:41:b6:91:cb:95:22:49:e8:ed:0f:0f:bc:02: 61:fd:41:4b:6d:df:7c:c7:c0:39:7e:da:96:e1:63: b0:fc:dc:f3:80:9d:86:7b:38:81:57:6b:8e:4b:bd: fa:5d:39:33:6c:fa:20:94:32:53:06:08:8f:3a:33: 87:04:c5:03:9a:33:66:98:34:84:8b:07:b6:2d:a4: cc:39:5a:11:68:75:1d:df:19:b0:d6:f3:e5:bb:00: 6d:20:11:78:1c:e1:8b:e5:b4:bf:62:b9:2c:71:97: da:81:40:85:37:c4:bc:19:92:e7:b8:d8:7b:b7:9b: b8:57:f1:b8:9b:a5:f4:71:3e:95:70:3c:96:70:cb: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:6E:3F:BC:88:62:4E:58:0C:36:B3:C6:0C:CD:45:90:EE:43:80 X509v3 Authority Key Identifier: keyid:DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:34:dc:c4:d1:1d:6c:bb:89:5a:14:aa:80:49:70:9e:cf:15: 22:e6:f2:05:b9:87:e6:3a:62:bb:0a:ed:ec:35:46:29:7a:f5: d9:c8:c1:1e:d0:88:5c:57:1e:d8:85:f7:cb:83:c1:fe:f3:6f: b5:3f:5b:a4:c7:10:57:d2:0b:7c:2a:1c:92:ba:ee:ec:c5:f3: aa:0e:61:31:c9:7f:ab:36:a2:77:f0:4a:3e:2d:fb:27:7b:93: e0:eb:4b:15:83:3a:05:6a:90:5e:3d:11:c5:11:01:7d:21:44: c9:5a:54:24:24:56:b6:c9:14:94:ee:1a:3f:e2:71:a0:de:de: 52:16:8c:54:e3:f9:72:3e:a7:4e:63:64:70:0a:48:ce:ab:d3: 52:a0:d3:10:9d:87:09:bc:76:93:82:f6:7b:33:bc:0d:2b:55: 8c:ea:2f:cf:48:45:cb:2a:eb:66:73:11:50:76:11:dc:a2:dc: 7b:6c:2b:e4:08:7a:a6:2d:9c:23:22:9e:8b:6c:f1:11:fd:bd: 1f:34:d9:4a:bd:fe:93:81:90:e0:86:3b:42:1a:7f:e7:e3:d9: a8:a0:6b:e4:ab:94:0e:17:f5:6d:cd:a5:b3:2f:bf:ae:97:68: 1b:60:85:97:5d:22:80:9f:c9:07:b3:35:05:98:cb:32:e4:aa: 26:8b:e6:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiG3FEzgle9O2dz6r/ZUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNWYyNWU4OTUwZjY5ZTJkNzViOTNiOTJmNTQwNDE5OWUw NDQ3NjIwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EygxZmI1NmUzZmJjODg2MjRlNTgwYzM2YjNjNjBjY2Q0NTkwZWU0MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pjUr+bTU3Z4Pj4G9Nc5cXgboxoJ N1KgG6VdQJ+SvKyGG7agISXLLDJKXWFoFIQzur2ZLvodpWFjHP8Mi6cl1UFvazkI TieVDcXPHIiuugULQju47IWYCPvWoL6rELIgXOF8Y0qBgqs7OUIL5EltfNjMiHAC zUFQbkG2kcuVIkno7Q8PvAJh/UFLbd98x8A5ftqW4WOw/NzzgJ2GeziBV2uOS736 XTkzbPoglDJTBgiPOjOHBMUDmjNmmDSEiwe2LaTMOVoRaHUd3xmw1vPluwBtIBF4 HOGL5bS/YrkscZfagUCFN8S8GZLnuNh7t5u4V/G4m6X0cT6VcDyWcMtjZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+1bj+8iGJOWAw2s8YMzUWQ7kOAMB8GA1UdIwQY MBaAFNpfJeiVD2ni11uTuS9UBBmeBEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzkt ZTJhYmM2MzEwMGJiLzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzktZTJhYmM2MzEwMGJi LzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjTcxNEd bLuJWhSqgElwns8VIubyBbmH5jpiuwrt7DVGKXr12cjBHtCIXFce2IX3y4PB/vNv tT9bpMcQV9ILfCockrru7MXzqg5hMcl/qzaid/BKPi37J3uT4OtLFYM6BWqQXj0R xREBfSFEyVpUJCRWtskUlO4aP+JxoN7eUhaMVOP5cj6nTmNkcApIzqvTUqDTEJ2H Cbx2k4L2ezO8DStVjOovz0hFyyrrZnMRUHYR3KLce2wr5Ah6pi2cIyKei2zxEf29 HzTZSr3+k4GQ4IY7Qhp/5+PZqKBr5KuUDhf1bc2lsy+/rpdoG2CFl10igJ/JB7M1 BZjLMuSqJovmEA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:37 2025 by rpki-client