This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json) Hash identifier: IUUinHu3+KNHphQU5zTyAhUWfYa5xQhpHrG1GyYKv34= Subject key identifier: 03:D7:2D:B8:D6:35:1B:57:EB:4B:E3:91:E6:D3:56:90:EE:44:37:77 Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Certificate serial: 019B5A88B72C38CCAD442B987B44570918A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft Manifest number: 08AC Signing time: Fri 26 Dec 2025 12:01:07 +0000 Manifest this update: Fri 26 Dec 2025 12:01:07 +0000 Manifest next update: Sat 27 Dec 2025 12:01:07 +0000 Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: 6aaJjQebTjknIKt4k0+2hYzw6HuaeRISrDd39gP5SOU=) 2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=) 3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=) 4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b7:2c:38:cc:ad:44:2b:98:7b:44:57:09:18:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9 Validity Not Before: Dec 26 12:01:07 2025 GMT Not After : Dec 27 12:01:07 2025 GMT Subject: CN=03d72db8d6351b57eb4be391e6d35690ee443777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:5c:c4:4f:82:c5:1a:1b:3e:9b:f8:97:c4: 1a:ed:c8:29:a3:7c:c0:0c:ee:ee:44:4e:cb:27:6e: d5:d2:69:f2:d8:6b:9e:8f:47:84:8e:b9:b3:9a:fb: da:94:1a:1f:85:15:14:b9:a3:56:45:33:93:ee:31: b3:3f:08:e3:26:ec:e9:80:fe:fc:ec:07:57:ae:06: c8:43:5c:ff:f9:73:62:48:49:bc:87:57:95:00:71: 38:e6:e6:15:ec:d0:50:27:6d:03:aa:c3:60:1a:55: 5a:3e:f5:3a:78:7c:c7:91:81:fc:81:8d:fe:f0:8d: 67:99:c3:7e:00:5b:d5:55:a7:6f:10:ae:d6:3d:cb: ed:a8:44:ec:14:3f:ea:c5:4f:7b:68:e5:48:bc:e8: a8:72:67:cc:e5:63:71:da:78:95:5b:ec:ee:5c:ae: 35:a8:31:09:9d:15:d3:59:51:f9:c3:98:2e:06:70: 14:29:d4:d0:a6:ee:0f:7d:b2:42:16:01:13:b4:15: 4a:16:f9:66:b1:71:d8:55:7f:79:92:3c:e9:f7:0b: 3a:3b:2c:60:6c:0c:dd:0d:0c:9e:ef:eb:d6:9d:c7: 8d:30:5d:df:52:95:b2:1a:56:e0:95:fa:3d:4d:3e: b5:78:12:d6:36:7c:23:1e:d3:4c:8d:be:0d:48:c6: 81:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:2D:B8:D6:35:1B:57:EB:4B:E3:91:E6:D3:56:90:EE:44:37:77 X509v3 Authority Key Identifier: keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:73:a3:36:62:de:df:25:96:0f:db:c6:a8:51:e3:ee:58: 16:29:73:83:fc:22:d3:3b:4c:d3:40:31:11:19:ce:dd:ea:27: 6b:39:9f:9e:26:98:8e:79:2f:72:42:d1:f9:11:4a:bb:dd:da: cb:97:ed:92:7d:99:57:9d:c3:69:ce:59:fa:cb:ed:06:b6:ed: ca:96:18:74:96:0f:5f:f1:63:31:36:0e:79:7e:50:61:42:a8: 4a:a1:76:ef:08:c9:0b:38:4e:4f:67:63:82:ac:3e:d7:6a:60: c9:07:cd:93:97:cb:40:af:15:59:89:6a:5c:37:49:24:c0:be: 8d:5b:af:73:d1:03:9f:fb:1d:af:6f:51:0d:06:39:08:b5:7f: b8:e4:e9:e0:c6:30:f7:4b:40:00:c6:62:f2:c2:93:e1:14:ee: e9:b5:59:78:13:8d:c7:af:4f:05:5d:bf:2f:99:11:18:4a:b4: 4d:19:20:6b:b0:9b:3f:a6:c7:55:44:ef:a4:bf:28:9c:6a:04: 22:71:2f:68:2a:64:72:be:5c:af:84:ae:77:a2:41:b4:0c:fd: 15:1e:73:cf:9a:f4:27:7e:6e:f1:44:6b:2a:3e:78:77:64:98: dc:1f:68:28:42:8e:84:cc:3b:d9:78:d0:53:bc:30:3f:54:f5: ae:d5:86:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLcsOMytRCuYe0RXCRikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw NDAyZjkwHhcNMjUxMjI2MTIwMTA3WhcNMjUxMjI3MTIwMTA3WjAzMTEwLwYDVQQD EygwM2Q3MmRiOGQ2MzUxYjU3ZWI0YmUzOTFlNmQzNTY5MGVlNDQzNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXhcxE+CxRobPpv4l8Qa7cgpo3zA DO7uRE7LJ27V0mny2Guej0eEjrmzmvvalBofhRUUuaNWRTOT7jGzPwjjJuzpgP78 7AdXrgbIQ1z/+XNiSEm8h1eVAHE45uYV7NBQJ20DqsNgGlVaPvU6eHzHkYH8gY3+ 8I1nmcN+AFvVVadvEK7WPcvtqETsFD/qxU97aOVIvOiocmfM5WNx2niVW+zuXK41 qDEJnRXTWVH5w5guBnAUKdTQpu4PfbJCFgETtBVKFvlmsXHYVX95kjzp9ws6Oyxg bAzdDQye7+vWnceNMF3fUpWyGlbglfo9TT61eBLWNnwjHtNMjb4NSMaBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPXLbjWNRtX60vjkebTVpDuRDd3MB8GA1UdIwQY MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDFzozZi 3t8llg/bxqhR4+5YFilzg/wi0ztM00AxERnO3eonazmfniaYjnkvckLR+RFKu93a y5ftkn2ZV53Dac5Z+svtBrbtypYYdJYPX/FjMTYOeX5QYUKoSqF27wjJCzhOT2dj gqw+12pgyQfNk5fLQK8VWYlqXDdJJMC+jVuvc9EDn/sdr29RDQY5CLV/uOTp4MYw 90tAAMZi8sKT4RTu6bVZeBONx69PBV2/L5kRGEq0TRkga7CbP6bHVUTvpL8onGoE InEvaCpkcr5cr4Sud6JBtAz9FR5zz5r0J35u8URrKj54d2SY3B9oKEKOhMw72XjQ U7wwP1T1rtWGOA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client