This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json) Hash identifier: pWEOxrmapRv4WY5X2MnQQ1bRmHxpiSbHPKOWFOrXcBY= Subject key identifier: 10:70:07:B7:0C:A2:52:F1:19:CD:14:F2:CE:57:71:C2:34:93:E0:6F Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e Certificate serial: 019B59AC9B71A5F1AAF41BACD2BFC5DDF472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft Manifest number: 05DE Signing time: Fri 26 Dec 2025 08:00:42 +0000 Manifest this update: Fri 26 Dec 2025 08:00:42 +0000 Manifest next update: Sat 27 Dec 2025 08:00:42 +0000 Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: DwijNsaJYHxrW/8T/46aqR96nSeQzzUdPcB3RtqgFcU=) 2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=) 3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=) 4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:9b:71:a5:f1:aa:f4:1b:ac:d2:bf:c5:dd:f4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e Validity Not Before: Dec 26 08:00:42 2025 GMT Not After : Dec 27 08:00:42 2025 GMT Subject: CN=107007b70ca252f119cd14f2ce5771c23493e06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:b4:81:b3:75:00:37:f2:cd:0e:56:bb:df: ca:df:55:0b:da:a0:e2:5b:8b:fa:b4:20:ce:62:fd: 32:e1:94:f4:2f:9f:27:c0:de:fb:c3:d7:5f:48:2b: b3:4f:a0:95:cc:19:6c:96:fc:3f:58:da:92:88:c6: e0:53:0f:37:f3:0d:74:15:97:d0:5a:4f:75:6c:13: fe:57:12:c5:cf:54:7a:3c:49:8f:a1:84:68:4c:32: 4d:64:82:73:50:52:ba:1f:2f:39:d9:dd:79:d7:77: c5:ad:08:f9:bb:a6:b2:0e:e4:78:3e:3d:49:8f:fd: 42:60:a4:23:88:bd:fa:66:80:1f:f9:cf:52:74:07: bc:47:3e:7c:1b:cf:7c:64:50:71:31:b9:33:5e:b8: 40:8c:b3:33:f1:ab:ae:bd:0e:a6:44:8a:7c:c8:18: 96:26:4e:a7:d0:df:a0:79:0a:2b:56:71:38:27:dc: 45:ad:30:1d:22:0f:d2:2a:0e:8f:c0:9a:db:47:ee: fa:af:a4:e3:3c:a7:b2:87:91:dd:d2:7c:8a:e8:fc: 34:80:36:d7:c8:3b:5b:83:40:73:af:64:6d:13:00: 3d:87:9a:15:5b:46:c2:e0:f9:aa:61:f0:bd:8a:d7: 2c:72:68:91:67:e4:f1:1a:9f:c1:22:a8:e4:f4:05: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:70:07:B7:0C:A2:52:F1:19:CD:14:F2:CE:57:71:C2:34:93:E0:6F X509v3 Authority Key Identifier: keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:09:de:8c:40:5f:fb:49:ab:16:47:ae:63:de:29:18:78: b4:d5:5b:97:b4:35:24:c6:dd:e5:29:a1:16:be:b3:68:5c:91: 9f:50:85:f7:ea:ba:83:7f:3d:22:c7:6c:1b:b8:4b:f4:29:a6: ca:f8:97:b8:9a:4e:5d:0d:dc:d2:c7:7e:df:de:d7:b6:d9:73: aa:04:1e:43:4d:74:fb:ec:66:a4:7f:ea:af:99:77:a5:63:3c: 53:0f:ef:da:94:9e:e1:a4:87:3b:1e:f1:ce:1b:b9:93:b0:f9: 3d:bf:3c:8e:6d:6f:b1:59:d3:4a:92:1d:18:3a:74:49:cf:74: 7c:2f:36:fe:6d:25:11:34:5f:ff:59:6f:48:8d:ed:2d:4f:17: 37:67:2b:c5:60:0f:08:11:43:f4:74:74:29:e0:bc:d2:93:66: a1:60:36:79:49:fd:66:29:50:b3:7e:ea:71:93:2e:5c:04:44: 17:5b:b0:49:06:96:67:2d:6f:00:81:bb:94:a3:09:d6:49:33: 91:cb:0a:a0:17:c2:41:fa:7b:2c:c7:b5:dd:d4:0a:ae:24:30: 07:d1:57:72:12:f2:3c:d1:1a:0f:83:03:6f:13:78:88:c2:92: 78:e0:85:91:91:ad:15:98:3a:8f:3f:0a:37:aa:f9:0b:5c:9f: 5f:20:8b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJtxpfGq9Bus0r/F3fRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw NDU2OGUwHhcNMjUxMjI2MDgwMDQyWhcNMjUxMjI3MDgwMDQyWjAzMTEwLwYDVQQD EygxMDcwMDdiNzBjYTI1MmYxMTljZDE0ZjJjZTU3NzFjMjM0OTNlMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX60gbN1ADfyzQ5Wu9/K31UL2qDi W4v6tCDOYv0y4ZT0L58nwN77w9dfSCuzT6CVzBlslvw/WNqSiMbgUw838w10FZfQ Wk91bBP+VxLFz1R6PEmPoYRoTDJNZIJzUFK6Hy852d1513fFrQj5u6ayDuR4Pj1J j/1CYKQjiL36ZoAf+c9SdAe8Rz58G898ZFBxMbkzXrhAjLMz8auuvQ6mRIp8yBiW Jk6n0N+geQorVnE4J9xFrTAdIg/SKg6PwJrbR+76r6TjPKeyh5Hd0nyK6Pw0gDbX yDtbg0Bzr2RtEwA9h5oVW0bC4PmqYfC9itcscmiRZ+TxGp/BIqjk9AU87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBwB7cMolLxGc0U8s5XccI0k+BvMB8GA1UdIwQY MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqwJ3oxA X/tJqxZHrmPeKRh4tNVbl7Q1JMbd5SmhFr6zaFyRn1CF9+q6g389IsdsG7hL9Cmm yviXuJpOXQ3c0sd+397XttlzqgQeQ010++xmpH/qr5l3pWM8Uw/v2pSe4aSHOx7x zhu5k7D5Pb88jm1vsVnTSpIdGDp0Sc90fC82/m0lETRf/1lvSI3tLU8XN2crxWAP CBFD9HR0KeC80pNmoWA2eUn9ZilQs37qcZMuXAREF1uwSQaWZy1vAIG7lKMJ1kkz kcsKoBfCQfp7LMe13dQKriQwB9FXchLyPNEaD4MDbxN4iMKSeOCFkZGtFZg6jz8K N6r5C1yfXyCLrw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:01 2025 by rpki-client