This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json) Hash identifier: Y+U3X9pfYLuVPTjYP5hwQdxMi1wRhMmGCa/+n++us4w= Subject key identifier: D5:56:DD:39:DE:3E:5A:08:83:23:0E:D4:AE:D7:0A:7C:24:67:83:48 Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a Certificate serial: 019B405C7926669605FC5BEDA067622CD41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft Manifest number: 0EF9 Signing time: Sun 21 Dec 2025 10:02:40 +0000 Manifest this update: Sun 21 Dec 2025 10:02:40 +0000 Manifest next update: Mon 22 Dec 2025 10:02:40 +0000 Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: /LOZpO9FpOUvxfguf9hJVM1Jc2rkb3wi7B0C9vcFEWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:79:26:66:96:05:fc:5b:ed:a0:67:62:2c:d4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a Validity Not Before: Dec 21 10:02:40 2025 GMT Not After : Dec 22 10:02:40 2025 GMT Subject: CN=d556dd39de3e5a0883230ed4aed70a7c24678348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:46:04:22:c6:77:eb:4a:56:4b:1d:18:f1: da:86:71:cd:b5:18:6f:63:62:d0:d3:25:0b:0b:36: f1:0a:fd:3d:1e:76:bd:d1:92:f6:9a:c9:1a:3f:47: c8:7f:5a:3d:bc:06:b4:2e:28:6b:44:ce:ee:c0:12: fd:a7:d1:1c:d2:88:50:e8:ee:2a:3b:df:ce:26:85: af:12:44:d8:f9:6a:21:2d:28:04:87:2e:d1:f2:68: d1:9b:24:29:6c:a6:70:a3:6c:7f:7e:6c:48:8e:ab: fa:38:2c:91:54:5f:c7:46:6a:32:7e:01:ae:2a:d2: 52:c1:72:d5:70:8d:32:b4:db:40:bf:25:f3:c1:49: 32:b4:16:e8:bf:f6:cd:8d:b8:05:22:57:77:4b:3d: ca:7e:26:a4:68:02:d4:be:ff:ee:e1:46:69:d8:93: 78:34:31:70:73:e9:68:63:eb:74:f9:68:10:a8:fd: 24:87:8b:91:a7:ff:34:0a:01:fc:18:63:12:8d:ad: 5a:a2:a5:8c:e0:6e:fc:60:73:0d:2c:9f:6d:c5:ea: 5c:e3:83:85:fc:d7:2a:9e:6c:da:51:3a:17:2d:43: ea:89:de:f5:60:ff:aa:bd:69:6e:c1:d3:28:4c:ec: d3:da:73:88:fb:2b:4d:3c:d4:9e:cd:e9:e8:48:d6: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:56:DD:39:DE:3E:5A:08:83:23:0E:D4:AE:D7:0A:7C:24:67:83:48 X509v3 Authority Key Identifier: keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:55:e3:d7:8e:86:c4:b3:b2:58:92:9e:9b:2d:58:2c:46:4c: a2:8c:64:25:ed:d6:f0:15:6e:f0:02:d4:a7:76:0d:88:56:4d: 73:38:de:3a:56:b6:b5:fa:29:ab:34:ad:55:04:4e:87:83:7d: b9:fc:34:d8:34:78:f0:f7:28:eb:06:92:c7:86:41:cd:81:16: 52:b5:a4:93:71:d4:5f:f1:bc:a9:bf:6e:7e:2b:f3:a6:3b:49: 22:a2:d6:9a:b5:94:bb:37:df:46:db:84:54:b2:bb:5b:b7:69: 6d:d8:af:c9:1f:5b:85:ab:8b:09:57:ee:51:cb:7f:28:20:5b: 77:fd:e7:0a:a6:52:61:30:fa:10:45:09:30:c5:99:09:50:48: 21:24:22:8c:b1:e9:f0:9f:9f:77:c0:da:06:d3:3c:c1:b7:95: 08:6d:00:22:39:ee:97:0e:d4:85:d4:5d:6a:63:4e:c8:75:ce: d3:c5:98:f2:c9:88:7e:e0:55:91:f9:d1:ac:2c:23:71:ce:ae: 4b:ba:ea:05:26:72:0f:0f:95:f5:c6:f4:75:13:d7:4a:e2:49: 34:5f:81:8a:a0:8d:60:1f:65:3f:74:d8:7c:41:79:9e:3b:bc: 3c:2d:06:51:3d:4c:d3:ea:66:bb:5d:66:77:fa:1b:06:0b:1d: 6e:6f:66:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXHkmZpYF/FvtoGdiLNQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YWU4YmQzMzI0OWNmMWVkNWYwZDQzOTgxNDdlZmQzMmQy NTQyMWEwHhcNMjUxMjIxMTAwMjQwWhcNMjUxMjIyMTAwMjQwWjAzMTEwLwYDVQQD EyhkNTU2ZGQzOWRlM2U1YTA4ODMyMzBlZDRhZWQ3MGE3YzI0Njc4MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOZGBCLGd+tKVksdGPHahnHNtRhv Y2LQ0yULCzbxCv09Hna90ZL2mskaP0fIf1o9vAa0LihrRM7uwBL9p9Ec0ohQ6O4q O9/OJoWvEkTY+WohLSgEhy7R8mjRmyQpbKZwo2x/fmxIjqv6OCyRVF/HRmoyfgGu KtJSwXLVcI0ytNtAvyXzwUkytBbov/bNjbgFIld3Sz3KfiakaALUvv/u4UZp2JN4 NDFwc+loY+t0+WgQqP0kh4uRp/80CgH8GGMSja1aoqWM4G78YHMNLJ9txepc44OF /NcqnmzaUToXLUPqid71YP+qvWluwdMoTOzT2nOI+ytNPNSezenoSNaTJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVW3TnePloIgyMO1K7XCnwkZ4NIMB8GA1UdIwQY MBaAFJWui9MySc8e1fDUOYFH79MtJUIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUt OGZmYmQ2YzczYmY1LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lMjdkOWItOTMxYS00ODhiLWFjMzUtOGZmYmQ2YzczYmY1 LzEvbGE2TDB6Skp6eDdWOE5RNWdVZnYweTBsUWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlXj146G xLOyWJKemy1YLEZMooxkJe3W8BVu8ALUp3YNiFZNczjeOla2tfopqzStVQROh4N9 ufw02DR48Pco6waSx4ZBzYEWUrWkk3HUX/G8qb9ufivzpjtJIqLWmrWUuzffRtuE VLK7W7dpbdivyR9bhauLCVfuUct/KCBbd/3nCqZSYTD6EEUJMMWZCVBIISQijLHp 8J+fd8DaBtM8wbeVCG0AIjnulw7UhdRdamNOyHXO08WY8smIfuBVkfnRrCwjcc6u S7rqBSZyDw+V9cb0dRPXSuJJNF+BiqCNYB9lP3TYfEF5nju8PC0GUT1M0+pmu11m d/obBgsdbm9m2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:48:06 2025 by rpki-client