This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json) Hash identifier: 2ERTNJvXCunY7NYTsJSHEcBpYP8BP9a5hjYGXKjW8uI= Subject key identifier: 96:81:B0:C5:99:EA:AD:99:70:0B:10:11:69:CD:EC:88:77:25:BB:16 Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269 Certificate serial: 019AF389C3A28F4EAAE2204E42CA778BC95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft Manifest number: 91 Signing time: Sat 06 Dec 2025 12:01:23 +0000 Manifest this update: Sat 06 Dec 2025 12:01:23 +0000 Manifest next update: Sun 07 Dec 2025 12:01:23 +0000 Files and hashes: 1: BTfaTJRkv38NK3OV8P41ApchwpU.roa (hash: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=) 2: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: ns++snwyvMtJUgrenF+u68kbFXQl/yQGGzFuSRkfOS4=) 3: MhT_ic0uhnvyZeHmGUuSvJeWPpk.roa (hash: wzWvYEFygdswmUnUlDOzRDuit/r9AHiuR6372yT7GYk=) 4: tNh8YNIJ-t7wlK_o6eKwKtq426I.roa (hash: Bmf1Jl1G+qWmzgmuLyWRiOcoL0N7ljcIkRUAYdz1q4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c3:a2:8f:4e:aa:e2:20:4e:42:ca:77:8b:c9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269 Validity Not Before: Dec 6 12:01:23 2025 GMT Not After : Dec 7 12:01:23 2025 GMT Subject: CN=9681b0c599eaad99700b101169cdec887725bb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:eb:c6:ba:5c:c5:b8:aa:56:40:9a:71:06: d7:51:2d:0f:c6:7b:b5:7a:bd:5a:26:da:f1:33:fb: c8:f1:30:6d:4f:82:63:1e:61:2b:4f:ef:a7:c8:65: d0:90:cd:33:a5:8e:9d:f5:1d:2c:07:3d:18:15:c6: 0b:f6:62:c9:02:f9:bd:37:7a:42:59:a7:c0:79:e9: 39:b7:fe:de:ad:46:76:45:3f:db:8b:e3:c0:a1:79: fe:bf:40:57:7f:31:77:64:57:fe:5f:35:a8:59:60: 68:a2:ec:80:20:83:26:44:1b:b2:86:76:42:21:e7: 98:37:ec:53:c7:d8:6e:ce:42:0a:b0:f7:3a:3d:18: a2:06:31:e2:52:f5:fe:95:23:db:91:9c:9e:7e:65: 0f:fb:7f:36:5f:97:a3:d1:66:85:cb:6b:e2:27:37: be:7f:6d:74:65:80:93:4c:25:49:d0:12:5b:58:ac: 35:23:26:37:cf:71:36:77:29:3b:cb:74:e9:94:44: 31:1c:9c:a5:6c:43:dc:0c:66:38:8d:8c:75:9b:bd: d3:d8:e3:5b:00:0b:48:57:a3:44:fd:7e:1d:d4:5f: 4a:39:80:bd:e1:09:e1:a7:79:f2:81:e1:8c:da:33: 24:2f:9c:65:6c:db:55:06:9f:bb:1b:f8:bc:25:1f: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:B0:C5:99:EA:AD:99:70:0B:10:11:69:CD:EC:88:77:25:BB:16 X509v3 Authority Key Identifier: keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:27:e5:37:68:c3:35:c2:d0:6d:77:7b:14:35:01:8a:52:75: 16:81:22:74:29:61:2d:d1:fe:6d:2c:e0:c1:ec:80:7e:ad:f6: 1d:dd:fd:82:41:9b:27:15:9e:2a:8e:4b:aa:64:be:a1:0c:40: dd:59:ba:ff:30:6c:dd:2a:f0:e9:74:c8:54:43:70:c8:d2:70: a8:a8:29:9f:5a:d7:93:db:d4:f0:3a:5e:4a:09:4b:8f:b8:a6: 4a:b8:77:7d:15:9b:6c:25:6d:9f:5a:6f:8d:28:3b:3d:2a:43: e6:1a:7b:87:65:cf:9d:84:b9:19:15:e9:c4:9a:31:b7:85:5d: 93:ab:17:4e:6d:5b:e3:56:94:db:2c:41:7b:c3:21:a1:f6:76: 84:17:6a:ae:12:a2:dc:33:db:5a:57:3b:b7:5d:f4:17:c5:df: 11:33:bc:c9:df:28:76:ac:c8:90:8f:a6:ee:a8:7b:80:47:0d: 70:1e:41:35:02:a6:2f:73:08:12:a0:39:6f:43:8c:1d:c3:57: bf:4a:10:93:ec:6e:69:6c:53:78:77:4a:b0:d5:41:07:3c:6a: a3:63:92:a2:cb:ef:b9:0c:46:c9:fe:bd:76:b0:51:c9:34:54: 53:7b:4b:20:b1:ea:3c:bd:c3:1e:79:c8:56:e2:1d:6a:1c:4f: 8a:0e:8f:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicOij06q4iBOQsp3i8laMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmEwMDM3NTZkMTAxM2I5NDNlYjRmNTA3ZmI0ZTdjNzQ3 NzgyNjkwHhcNMjUxMjA2MTIwMTIzWhcNMjUxMjA3MTIwMTIzWjAzMTEwLwYDVQQD Eyg5NjgxYjBjNTk5ZWFhZDk5NzAwYjEwMTE2OWNkZWM4ODc3MjViYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF3rxrpcxbiqVkCacQbXUS0Pxnu1 er1aJtrxM/vI8TBtT4JjHmErT++nyGXQkM0zpY6d9R0sBz0YFcYL9mLJAvm9N3pC WafAeek5t/7erUZ2RT/bi+PAoXn+v0BXfzF3ZFf+XzWoWWBoouyAIIMmRBuyhnZC IeeYN+xTx9huzkIKsPc6PRiiBjHiUvX+lSPbkZyefmUP+382X5ej0WaFy2viJze+ f210ZYCTTCVJ0BJbWKw1IyY3z3E2dyk7y3TplEQxHJylbEPcDGY4jYx1m73T2ONb AAtIV6NE/X4d1F9KOYC94Qnhp3nygeGM2jMkL5xlbNtVBp+7G/i8JR8/bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaBsMWZ6q2ZcAsQEWnN7Ih3JbsWMB8GA1UdIwQY MBaAFC+6ADdW0QE7lD609Qf7Tnx0d4JpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmIt YjMxZjI1MmYxOTY5LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy82MjJmZGItMGU1Ni00Yzg3LTg2NmItYjMxZjI1MmYxOTY5 LzEvTDdvQU4xYlJBVHVVUHJUMUJfdE9mSFIzZ21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyflN2jD NcLQbXd7FDUBilJ1FoEidClhLdH+bSzgweyAfq32Hd39gkGbJxWeKo5LqmS+oQxA 3Vm6/zBs3Srw6XTIVENwyNJwqKgpn1rXk9vU8DpeSglLj7imSrh3fRWbbCVtn1pv jSg7PSpD5hp7h2XPnYS5GRXpxJoxt4Vdk6sXTm1b41aU2yxBe8MhofZ2hBdqrhKi 3DPbWlc7t130F8XfETO8yd8odqzIkI+m7qh7gEcNcB5BNQKmL3MIEqA5b0OMHcNX v0oQk+xuaWxTeHdKsNVBBzxqo2OSosvvuQxGyf69drBRyTRUU3tLILHqPL3DHnnI VuIdahxPig6P2g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:00:49 2025 by rpki-client