This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: Sx5+Vpa84W5Z4fYJ4sAv/SlBtU4u10KKta6Cq8fvcaQ= Subject key identifier: F2:60:08:2C:A5:5A:D3:B0:10:22:42:25:95:28:59:C9:31:73:DF:1F Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B3DC752DDDB8C9507C546A35AF317FFFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 1554 Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: tCwMD5wNOgG+2Uf2D55QZSppeMtKV21QNT19Y2DcIx8=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) 11: xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa (hash: 4OPLheoTg5k7mp/nUmmdqHwXsQWi3MUcdPRsarIm3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:52:dd:db:8c:95:07:c5:46:a3:5a:f3:17:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=f260082ca55ad3b010224225952859c93173df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:b7:08:0f:d2:a9:1e:12:b5:f5:82:d4:a1: 5d:de:02:4a:3e:1c:a4:6a:c4:cb:96:b5:e6:6e:a9: 60:6d:5a:6d:80:12:ff:0f:a1:35:3c:72:dd:a5:ec: 8d:f3:ab:c6:23:fe:20:ab:bc:9c:ca:c4:2d:bc:3e: 48:5e:58:92:d9:16:49:7d:ab:b4:76:14:2d:55:99: 43:29:3e:14:72:02:65:31:b7:2f:66:bf:fd:f5:41: af:19:f2:25:b3:e4:40:09:b4:f0:86:eb:b4:e1:02: 03:dc:ea:ce:cb:18:50:1e:77:d9:2f:6a:27:f0:c1: cb:70:d7:e1:2a:4e:18:ca:ca:b9:c1:6f:ba:f7:e3: 82:3f:38:2f:cf:6e:9e:d5:80:f8:a1:f0:17:70:7f: d7:9b:05:78:4d:5d:a9:ea:14:7f:09:19:1d:c3:14: 03:9f:97:0f:49:4f:25:3a:31:e7:cb:40:4a:1f:b4: 0b:6b:55:c4:ea:7f:38:3c:9b:13:2c:28:43:ea:a3: ff:d9:53:64:06:fe:7f:5f:8e:c4:08:95:1f:19:d7: 81:65:8a:48:c0:b5:16:74:3e:42:cf:91:00:a5:47: ca:e6:fc:d1:26:95:af:d5:47:93:ce:06:58:00:55: 6b:dd:89:5a:23:72:24:c6:b5:d5:8f:68:87:3f:3f: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:60:08:2C:A5:5A:D3:B0:10:22:42:25:95:28:59:C9:31:73:DF:1F X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e8:c0:76:ce:7e:4e:24:23:e3:20:09:14:81:ef:4b:f9:52: 5b:48:13:a1:f6:97:81:d7:e0:28:2e:d4:68:e2:71:4d:34:b5: cd:d0:21:8d:f1:6c:a8:2f:d0:d5:c2:db:5f:4c:45:0b:d4:48: e2:a0:45:87:b6:e3:98:f6:3b:69:e3:d6:43:77:49:a4:2b:fc: ba:22:13:02:d3:4c:c4:ef:2b:70:a6:18:97:e5:5f:ae:f8:ed: f8:f9:fb:74:b3:1f:5f:8f:e7:04:4d:cb:0d:e3:20:c3:f9:46: a8:9b:6d:30:f9:c3:c2:ba:49:e5:bf:e4:68:63:2d:36:38:49: b2:bd:89:13:6a:ec:ff:a7:ee:f1:87:1c:e4:a5:04:85:61:8e: cf:6b:a3:bc:b6:95:f1:a1:71:19:fb:bb:ef:69:b8:d8:94:5a: 8b:62:b9:b8:7f:bc:96:8a:c5:a8:8a:dd:bb:cd:ff:d2:ed:f5: a1:cd:b2:79:fb:b1:70:f6:12:d1:18:14:b5:71:1e:79:e5:31: 30:cf:c5:fb:fa:cb:0b:74:fd:27:c0:22:0b:a4:2f:cc:bb:21: e8:70:d2:12:4a:ba:57:63:fe:c0:0c:c6:b1:cc:6b:d2:f6:31: 8e:05:72:79:5c:da:8b:a5:7a:11:03:08:ca:fa:2f:af:60:90: 35:19:8b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1Ld24yVB8VGo1rzF///MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD EyhmMjYwMDgyY2E1NWFkM2IwMTAyMjQyMjU5NTI4NTljOTMxNzNkZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1u3CA/SqR4StfWC1KFd3gJKPhyk asTLlrXmbqlgbVptgBL/D6E1PHLdpeyN86vGI/4gq7ycysQtvD5IXliS2RZJfau0 dhQtVZlDKT4UcgJlMbcvZr/99UGvGfIls+RACbTwhuu04QID3OrOyxhQHnfZL2on 8MHLcNfhKk4Yysq5wW+69+OCPzgvz26e1YD4ofAXcH/XmwV4TV2p6hR/CRkdwxQD n5cPSU8lOjHny0BKH7QLa1XE6n84PJsTLChD6qP/2VNkBv5/X47ECJUfGdeBZYpI wLUWdD5Cz5EApUfK5vzRJpWv1UeTzgZYAFVr3YlaI3IkxrXVj2iHPz/dFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJgCCylWtOwECJCJZUoWckxc98fMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWejAds5+ TiQj4yAJFIHvS/lSW0gTofaXgdfgKC7UaOJxTTS1zdAhjfFsqC/Q1cLbX0xFC9RI 4qBFh7bjmPY7aePWQ3dJpCv8uiITAtNMxO8rcKYYl+Vfrvjt+Pn7dLMfX4/nBE3L DeMgw/lGqJttMPnDwrpJ5b/kaGMtNjhJsr2JE2rs/6fu8Ycc5KUEhWGOz2ujvLaV 8aFxGfu772m42JRai2K5uH+8lorFqIrdu83/0u31oc2yefuxcPYS0RgUtXEeeeUx MM/F+/rLC3T9J8AiC6QvzLsh6HDSEkq6V2P+wAzGscxr0vYxjgVyeVzai6V6EQMI yvovr2CQNRmL2A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:28:13 2025 by rpki-client