This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json) Hash identifier: LEOBohFD2tzUE7gH84dEjJa9qkV6VcYROcN2+DYcrF8= Subject key identifier: 91:E6:08:11:D9:48:36:94:87:9E:58:DA:02:2C:24:22:06:41:36:4F Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc Certificate serial: 019B19BAF9AFC66B229EFDEA411F1A07E980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft Manifest number: 175C Signing time: Sat 13 Dec 2025 22:00:42 +0000 Manifest this update: Sat 13 Dec 2025 22:00:42 +0000 Manifest next update: Sun 14 Dec 2025 22:00:42 +0000 Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: zd4s5Bet3ksMEjVJg663rHeKdL7p9MIJAJw4Msgg2R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:f9:af:c6:6b:22:9e:fd:ea:41:1f:1a:07:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc Validity Not Before: Dec 13 22:00:42 2025 GMT Not After : Dec 14 22:00:42 2025 GMT Subject: CN=91e60811d9483694879e58da022c24220641364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:5a:4e:16:3c:35:44:9a:ae:17:44:35:4f: 14:09:25:10:9b:14:05:32:5c:e1:a1:d3:18:e5:fe: 1a:10:23:a3:a7:49:d9:1c:fc:45:07:0c:b6:ba:e7: 2d:bd:ba:31:dd:55:1c:c8:4f:1d:d3:ef:79:b1:b6: a8:77:16:13:5e:06:03:7b:47:86:3b:ce:4f:b1:f6: 19:c8:c7:de:94:c3:aa:33:08:ad:b0:81:e1:de:a5: 43:49:e1:e3:60:d4:5a:5c:0f:a1:45:b6:d6:62:cb: c0:f6:ab:1f:b5:10:72:58:32:02:ec:ba:9e:13:77: d3:aa:4e:64:de:17:66:c5:f2:51:86:9a:82:64:4b: c0:de:27:5c:c9:01:76:68:3b:e8:c5:dc:47:3e:71: c0:53:9c:87:d2:64:ff:3a:e0:db:1c:f6:45:96:ba: fb:a7:66:54:b2:07:0e:e4:ce:86:62:b4:fd:2d:e8: ad:92:9e:9e:11:d7:94:b4:99:b1:3c:10:71:b9:08: 20:69:73:70:5b:aa:89:93:38:19:aa:fd:cf:8a:4d: f4:e8:a4:e2:4f:b7:f1:55:b8:98:3f:bb:a3:a7:ec: 56:62:2d:07:94:6a:cf:97:df:62:03:13:17:a6:54: c5:98:a7:31:f7:3d:31:94:fa:b4:0c:2e:17:d2:7e: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:08:11:D9:48:36:94:87:9E:58:DA:02:2C:24:22:06:41:36:4F X509v3 Authority Key Identifier: keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:87:d7:45:b0:e7:bb:73:c3:ae:8a:f2:43:ce:3c:08:80:11: b2:8f:4b:dc:94:c0:bd:d7:40:a8:77:e6:6f:05:ed:10:0c:81: b8:d7:49:a2:3c:78:b4:04:27:e5:5d:5a:4b:75:8f:e1:bf:0a: ce:2f:42:e5:1a:f0:25:61:37:67:3c:26:9b:0f:90:65:9d:d3: 11:ca:79:13:9e:a2:05:ba:cd:7c:2f:ec:ee:3f:23:16:8d:ff: f0:ce:16:3a:87:ef:16:eb:83:5f:0f:66:38:9a:3d:cb:70:10: 02:60:98:bb:a6:8d:f2:f6:8b:91:16:ca:f8:7a:b5:d8:bd:2a: 21:20:e4:d9:ef:e7:94:54:10:3a:2a:2c:70:1c:78:8a:21:f9: 93:fc:74:23:b4:df:19:fa:04:a3:7a:b7:cb:e7:ee:c5:48:7b: 6a:76:d2:e8:c8:16:56:f6:c0:87:c1:84:95:2b:b9:27:a0:69: 16:64:cd:a0:24:2e:00:ac:7e:2d:8d:56:66:c0:2d:9c:54:cd: 02:4d:68:15:94:62:1c:c6:e1:0b:a9:9e:d4:fc:23:fe:5f:ce: d0:32:ba:d9:27:a7:52:af:51:74:98:9a:e4:ac:32:e2:c9:d5: 31:ed:9c:67:64:78:b4:dc:17:a8:65:29:09:df:af:c0:b8:03: 4a:1e:d4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuvmvxmsinv3qQR8aB+mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NjUzZTU2YTk0ZjhmZmRlOTRiNWU0ZjI4YTc5ZTQ1Zjdl ZjBjZGMwHhcNMjUxMjEzMjIwMDQyWhcNMjUxMjE0MjIwMDQyWjAzMTEwLwYDVQQD Eyg5MWU2MDgxMWQ5NDgzNjk0ODc5ZTU4ZGEwMjJjMjQyMjA2NDEzNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fNaThY8NUSarhdENU8UCSUQmxQF MlzhodMY5f4aECOjp0nZHPxFBwy2uuctvbox3VUcyE8d0+95sbaodxYTXgYDe0eG O85PsfYZyMfelMOqMwitsIHh3qVDSeHjYNRaXA+hRbbWYsvA9qsftRByWDIC7Lqe E3fTqk5k3hdmxfJRhpqCZEvA3idcyQF2aDvoxdxHPnHAU5yH0mT/OuDbHPZFlrr7 p2ZUsgcO5M6GYrT9Leitkp6eEdeUtJmxPBBxuQggaXNwW6qJkzgZqv3Pik306KTi T7fxVbiYP7ujp+xWYi0HlGrPl99iAxMXplTFmKcx9z0xlPq0DC4X0n7wgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHmCBHZSDaUh55Y2gIsJCIGQTZPMB8GA1UdIwQY MBaAFJdlPlapT4/96UteTyinnkX37wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjct MjhjODljNTFiNGIwLzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi84Y2UxNDYtZTA3ZC00MWQwLWIxMjctMjhjODljNTFiNGIw LzEvbDJVLVZxbFBqXzNwUzE1UEtLZWVSZmZ2RE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYfXRbDn u3PDroryQ848CIARso9L3JTAvddAqHfmbwXtEAyBuNdJojx4tAQn5V1aS3WP4b8K zi9C5RrwJWE3Zzwmmw+QZZ3TEcp5E56iBbrNfC/s7j8jFo3/8M4WOofvFuuDXw9m OJo9y3AQAmCYu6aN8vaLkRbK+Hq12L0qISDk2e/nlFQQOioscBx4iiH5k/x0I7Tf GfoEo3q3y+fuxUh7anbS6MgWVvbAh8GElSu5J6BpFmTNoCQuAKx+LY1WZsAtnFTN Ak1oFZRiHMbhC6me1Pwj/l/O0DK62SenUq9RdJia5Kwy4snVMe2cZ2R4tNwXqGUp Cd+vwLgDSh7Utw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:46 2025 by rpki-client