This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json) Hash identifier: uHW/oc2ogNUf/XE1ayrY3c8nz4grviC6D0duQ3WHAEg= Subject key identifier: 11:39:E0:48:12:8A:A0:34:08:A7:AC:82:1F:A5:EB:30:62:EB:0F:38 Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df Certificate serial: 019B1E063FEE702156505D858C803678D07F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 18:01:24 +0000 Manifest this update: Sun 14 Dec 2025 18:01:24 +0000 Manifest next update: Mon 15 Dec 2025 18:01:24 +0000 Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: xu/zxiky6pxmTBfkQHp31MmZAbGN8PwljTgz7wdeWrE=) 2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:3f:ee:70:21:56:50:5d:85:8c:80:36:78:d0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df Validity Not Before: Dec 14 18:01:24 2025 GMT Not After : Dec 15 18:01:24 2025 GMT Subject: CN=1139e048128aa03408a7ac821fa5eb3062eb0f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:d6:a5:67:33:c5:c4:8e:c6:b4:d8:22:37: 3b:f6:0f:44:db:ab:00:bc:46:30:73:16:ff:fd:a1: 0e:96:8e:d5:58:38:fa:8b:34:1d:41:ec:91:c7:dd: c4:00:e8:b6:89:03:d1:41:f0:7c:86:52:27:2b:3d: 34:51:f3:de:3a:29:4b:7e:ec:17:61:39:fd:4f:a7: 22:bf:bd:d6:84:75:4b:51:24:fd:2f:69:00:e1:54: 71:74:dd:db:2b:e0:2d:8b:af:a7:f4:38:42:47:19: 32:37:6a:d1:a7:96:47:79:97:87:e8:3c:72:fe:bd: 16:29:a4:c9:ff:d8:32:20:82:83:bd:16:c3:8b:2a: be:a6:69:2a:f0:97:f7:96:46:a1:16:f7:72:ab:e4: bc:41:da:c7:4d:e9:f3:16:47:46:21:9c:97:8a:d5: 5d:8e:ae:72:10:cb:cd:e8:8a:a5:e3:40:31:2f:55: e0:38:e3:7c:9b:57:8a:2b:21:50:5c:9d:37:f5:8a: e4:91:51:df:fb:43:d9:3f:ab:09:35:92:7b:5f:bc: b9:49:74:7e:a9:33:71:51:aa:f3:f9:4a:1c:56:ca: ac:b1:f8:32:bb:0b:21:d0:6f:f2:72:2f:66:06:7e: 5f:1c:84:fa:57:75:82:9a:28:37:35:5c:e8:9e:dd: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:E0:48:12:8A:A0:34:08:A7:AC:82:1F:A5:EB:30:62:EB:0F:38 X509v3 Authority Key Identifier: keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4f:ce:c3:ee:bb:7b:d1:f5:94:bb:b4:fa:7b:6f:b3:23:67: ea:78:f3:50:f0:3d:c1:be:3c:2e:9a:a3:4a:93:44:7e:01:f5: 01:09:f3:d2:4f:c7:52:90:28:4a:85:cd:1f:7a:87:6d:9d:3a: d7:ba:a7:86:d7:d4:2e:7c:13:05:85:82:5e:a3:47:0c:e0:66: 7f:06:f6:85:b0:e7:6e:7d:15:fe:3c:68:29:9b:e5:57:aa:4e: 8a:3f:06:b1:e0:71:29:84:df:9e:52:2f:4a:42:08:d4:8d:77: d2:8a:bf:e3:f0:a7:b9:d1:97:36:79:1b:dd:bd:e1:a9:c5:71: a1:05:ef:c4:be:fa:2c:0d:4b:ca:d3:b0:97:8e:56:3c:8b:21: 78:49:b5:c8:16:42:f4:33:8e:4c:b6:10:2b:92:17:c1:3f:90: 92:f6:9e:0a:70:94:ab:b1:76:5e:40:46:20:6c:e7:b7:cf:99: 46:fe:15:28:ad:74:f2:70:05:a4:45:5c:cb:d9:5b:6b:17:13: e2:e7:03:21:89:9f:42:ca:a0:4a:5f:21:2b:0a:8d:2f:f2:af: d9:18:3a:6c:4f:fb:24:e6:df:d4:a1:c6:d8:f9:a8:6e:9e:3d: fe:14:c4:d9:13:a6:67:fa:0f:fb:8f:97:40:30:3a:d4:7b:dd: da:08:69:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBj/ucCFWUF2FjIA2eNB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmYwZWEwMTI3YTZlMzkyMTk1Njk2MzgwYmU1YmIwNDc0 YjAxZGYwHhcNMjUxMjE0MTgwMTI0WhcNMjUxMjE1MTgwMTI0WjAzMTEwLwYDVQQD EygxMTM5ZTA0ODEyOGFhMDM0MDhhN2FjODIxZmE1ZWIzMDYyZWIwZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw3WpWczxcSOxrTYIjc79g9E26sA vEYwcxb//aEOlo7VWDj6izQdQeyRx93EAOi2iQPRQfB8hlInKz00UfPeOilLfuwX YTn9T6civ73WhHVLUST9L2kA4VRxdN3bK+Ati6+n9DhCRxkyN2rRp5ZHeZeH6Dxy /r0WKaTJ/9gyIIKDvRbDiyq+pmkq8Jf3lkahFvdyq+S8QdrHTenzFkdGIZyXitVd jq5yEMvN6Iql40AxL1XgOON8m1eKKyFQXJ039YrkkVHf+0PZP6sJNZJ7X7y5SXR+ qTNxUarz+UocVsqssfgyuwsh0G/yci9mBn5fHIT6V3WCmig3NVzont33VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBE54EgSiqA0CKesgh+l6zBi6w84MB8GA1UdIwQY MBaAFC9vDqASem45IZVpY4C+W7BHSwHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDct YjJhMjMyNDZlNjE0LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82MjY0MWYtY2Y5OS00NTE0LWI3ZDctYjJhMjMyNDZlNjE0 LzEvTDI4T29CSjZiamtobFdsamdMNWJzRWRMQWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE/Ow+67 e9H1lLu0+ntvsyNn6njzUPA9wb48LpqjSpNEfgH1AQnz0k/HUpAoSoXNH3qHbZ06 17qnhtfULnwTBYWCXqNHDOBmfwb2hbDnbn0V/jxoKZvlV6pOij8GseBxKYTfnlIv SkII1I130oq/4/CnudGXNnkb3b3hqcVxoQXvxL76LA1LytOwl45WPIsheEm1yBZC 9DOOTLYQK5IXwT+QkvaeCnCUq7F2XkBGIGznt8+ZRv4VKK108nAFpEVcy9lbaxcT 4ucDIYmfQsqgSl8hKwqNL/Kv2Rg6bE/7JObf1KHG2Pmobp49/hTE2ROmZ/oP+4+X QDA61Hvd2ghplA== -----END CERTIFICATE-----Generated at Sun Dec 14 23:15:57 2025 by rpki-client