This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json) Hash identifier: aqtocATtXXqD8koK9o4Rbo7QL2yyc7kYDtmENZRjsKU= Subject key identifier: 82:58:29:C6:01:BA:B6:D0:D3:28:9F:41:54:8D:85:D6:BE:26:EB:0A Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Certificate serial: 019B1C85E8C2DA6F3BA14FBBC482E417B3D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 11:01:36 +0000 Manifest this update: Sun 14 Dec 2025 11:01:36 +0000 Manifest next update: Mon 15 Dec 2025 11:01:36 +0000 Files and hashes: 1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: w+8Rt2yhS/pIGMTXgUlBkgvPP+jwz9b0aBhykSylrVg=) 2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:e8:c2:da:6f:3b:a1:4f:bb:c4:82:e4:17:b3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0 Validity Not Before: Dec 14 11:01:36 2025 GMT Not After : Dec 15 11:01:36 2025 GMT Subject: CN=825829c601bab6d0d3289f41548d85d6be26eb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:8b:d0:37:5b:a5:a0:af:f6:19:5e:2d:19: 41:57:09:42:e9:7e:95:4d:3b:64:01:50:3a:33:3f: 44:fe:dd:2b:d1:02:99:5a:04:48:99:9d:76:52:16: f2:aa:55:bc:c1:b6:3c:17:16:01:3e:07:ab:af:5b: fc:72:eb:28:f3:49:7b:47:24:11:53:87:c1:9a:52: 95:a3:d0:5d:ae:d6:6f:f6:1c:69:d5:b4:b2:db:70: 60:75:8c:6b:8c:9b:b9:58:53:9a:aa:c5:50:0c:9c: 7a:7e:47:d5:ee:fb:28:ca:69:86:9f:ec:b0:e9:e3: b2:75:b2:8b:40:cc:80:28:b0:a7:fd:99:95:63:63: d0:49:30:1d:4b:4e:42:da:99:66:bb:f8:da:59:78: 2b:5b:87:8f:6b:b6:15:2b:b0:46:ff:dd:89:d6:57: 83:47:20:30:6f:ee:b1:90:15:79:93:c5:0d:91:df: a5:02:43:44:17:13:15:c5:98:fa:75:fd:1b:62:de: 4c:24:d0:8e:6d:a5:d9:8b:48:f2:49:8f:70:bb:08: 8d:91:2e:d2:3f:eb:c0:72:9b:40:ec:3d:c7:88:1f: 0f:fd:8f:e1:0b:33:a3:19:8d:8d:1c:3c:70:46:d8: d0:22:e0:3e:d1:78:64:ed:9b:cd:4d:1f:e0:f0:d1: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:29:C6:01:BA:B6:D0:D3:28:9F:41:54:8D:85:D6:BE:26:EB:0A X509v3 Authority Key Identifier: keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:c9:3a:de:c8:94:36:25:63:c9:83:5f:a7:dd:1e:7b:5b: 8b:75:e7:d2:6c:af:af:43:58:3b:ff:91:f4:67:89:8b:62:77: d4:0d:ef:64:cf:97:12:63:af:7a:49:8f:e7:93:96:f1:a6:b3: b1:ca:fe:9e:e4:4b:65:91:5f:cd:51:8c:7a:b5:88:a0:fc:cf: 22:c6:31:ec:a2:87:54:91:dd:b2:a8:1e:39:65:6f:49:35:cb: bd:2d:c4:ac:39:c2:c1:16:35:43:34:fd:4f:6e:ac:ad:16:73: 16:3a:7c:61:a6:ad:51:03:ec:c5:d9:b8:41:5c:e8:7b:6b:f8: 46:17:25:ad:91:20:5e:f7:f9:06:cd:7f:1a:76:65:0d:9b:fa: 42:85:9d:ab:d4:02:57:59:ca:d9:89:6a:d1:0b:d8:5d:96:7e: f2:e2:2c:ba:fc:fe:85:29:07:78:df:07:f8:1c:6d:0d:f2:ee: 9f:7b:28:d9:3b:65:59:a1:b6:1e:b3:70:de:5c:96:fd:05:ff: 9d:37:51:f7:c1:f4:e3:85:3f:5d:fc:93:37:3c:a7:1e:28:27: a4:4d:f2:ee:3e:11:41:6d:41:54:f0:f0:78:d7:05:6d:fa:2e: e4:7f:97:ea:e5:f6:d2:dc:1c:72:cf:80:03:e9:7e:17:d0:2c: d0:7f:42:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschejC2m87oU+7xILkF7PYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjhjZjc1NjFmY2Q2ZDc2NmI3YWFkMzFkYmY3ODVmMDI5 MTQ5ZjAwHhcNMjUxMjE0MTEwMTM2WhcNMjUxMjE1MTEwMTM2WjAzMTEwLwYDVQQD Eyg4MjU4MjljNjAxYmFiNmQwZDMyODlmNDE1NDhkODVkNmJlMjZlYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YaL0DdbpaCv9hleLRlBVwlC6X6V TTtkAVA6Mz9E/t0r0QKZWgRImZ12UhbyqlW8wbY8FxYBPgerr1v8cuso80l7RyQR U4fBmlKVo9BdrtZv9hxp1bSy23BgdYxrjJu5WFOaqsVQDJx6fkfV7vsoymmGn+yw 6eOydbKLQMyAKLCn/ZmVY2PQSTAdS05C2plmu/jaWXgrW4ePa7YVK7BG/92J1leD RyAwb+6xkBV5k8UNkd+lAkNEFxMVxZj6df0bYt5MJNCObaXZi0jySY9wuwiNkS7S P+vAcptA7D3HiB8P/Y/hCzOjGY2NHDxwRtjQIuA+0Xhk7ZvNTR/g8NEhHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJYKcYBurbQ0yifQVSNhda+JusKMB8GA1UdIwQY MBaAFC/4z3Vh/NbXZreq0x2/eF8CkUnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQt ZGU3M2E4MWUzNTdkLzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mNzdhY2EtYWQ5MS00MDNmLWI5OGQtZGU3M2E4MWUzNTdk LzEvTF9qUGRXSDgxdGRtdDZyVEhiOTRYd0tSU2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVnJOt7I lDYlY8mDX6fdHntbi3Xn0myvr0NYO/+R9GeJi2J31A3vZM+XEmOvekmP55OW8aaz scr+nuRLZZFfzVGMerWIoPzPIsYx7KKHVJHdsqgeOWVvSTXLvS3ErDnCwRY1QzT9 T26srRZzFjp8YaatUQPsxdm4QVzoe2v4RhclrZEgXvf5Bs1/GnZlDZv6QoWdq9QC V1nK2Ylq0QvYXZZ+8uIsuvz+hSkHeN8H+BxtDfLun3so2TtlWaG2HrNw3lyW/QX/ nTdR98H044U/XfyTNzynHignpE3y7j4RQW1BVPDweNcFbfou5H+X6uX20twccs+A A+l+F9As0H9C8g== -----END CERTIFICATE-----Generated at Sun Dec 14 14:39:52 2025 by rpki-client