This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json) Hash identifier: bzlmwNbzVLYzulZlaSgW6iXlJzN1Kcd+o8m8C77V5w8= Subject key identifier: 23:64:E4:3F:3C:3F:8F:42:55:D8:C7:CA:AE:8F:34:85:3F:DE:E5:E5 Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a Certificate serial: 019B23D0F7D0E89E46685CC179C6BE44C271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft Manifest number: 0E5B Signing time: Mon 15 Dec 2025 21:00:56 +0000 Manifest this update: Mon 15 Dec 2025 21:00:56 +0000 Manifest next update: Tue 16 Dec 2025 21:00:56 +0000 Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: FrIUDmXd43dikuGlWm/987Pd7yFar/Go6js/diD28vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:f7:d0:e8:9e:46:68:5c:c1:79:c6:be:44:c2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a Validity Not Before: Dec 15 21:00:56 2025 GMT Not After : Dec 16 21:00:56 2025 GMT Subject: CN=2364e43f3c3f8f4255d8c7caae8f34853fdee5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:15:d4:3d:8b:98:a3:bb:84:f2:5a:5f:b2: b3:24:d0:e9:34:bd:f1:12:87:75:51:c0:72:06:f3: c6:a5:46:36:49:c6:88:0d:2f:18:16:8b:6f:8f:44: af:61:38:51:86:56:70:d3:95:32:06:16:87:82:86: cc:42:0b:c4:78:f5:8d:52:03:58:dd:a2:5b:af:de: 69:df:bb:ff:43:91:ad:31:cc:a4:b9:63:ec:83:7c: 17:08:10:0b:b3:1e:09:4d:24:ba:23:ff:a8:86:15: 47:29:7d:9e:d1:02:e9:25:19:e1:2e:a1:cd:ef:c8: 3b:df:7b:3d:a6:20:d7:3a:74:54:f1:8a:e3:7e:b2: e4:26:cc:2f:29:5b:2f:da:a2:5d:3d:7d:17:de:85: 11:3b:ca:ad:59:8f:c7:44:db:49:dd:29:de:dd:3c: eb:dc:7c:b5:e8:bd:37:8d:f6:8b:81:e2:cc:f8:ed: 8d:00:18:b7:d6:36:5a:f3:2b:9b:8d:ed:67:f7:83: ff:66:4b:6f:c4:fe:bf:8c:4b:3c:dd:ae:78:f3:cc: ba:1f:f0:ba:6c:95:49:4a:f2:7f:a8:f9:27:57:53: 5c:23:24:84:a6:4d:98:3e:dd:4e:bf:06:2e:1e:f6: fe:79:21:97:5c:8f:c6:77:06:e2:91:17:2c:38:bb: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:E4:3F:3C:3F:8F:42:55:D8:C7:CA:AE:8F:34:85:3F:DE:E5:E5 X509v3 Authority Key Identifier: keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:68:a9:6b:7a:36:7c:9f:8a:28:78:db:2b:4e:8f:b3:33:c7: 02:39:2a:be:37:05:19:da:c9:28:f3:e1:b8:63:9b:8f:c9:c1: 26:2b:5f:c6:42:da:91:3c:64:71:29:12:6b:0e:3c:90:9f:17: e5:d3:b1:a2:5d:66:58:b0:76:de:c7:91:02:c7:e5:26:1c:d3: 62:4e:ed:4a:a6:7a:01:43:0e:d9:33:b1:cb:1f:fe:65:35:a5: 31:4e:ac:52:5f:45:81:da:d4:4d:89:08:d3:ed:61:df:4a:f8: d0:4f:29:16:c9:ce:25:b2:03:34:16:4d:51:17:ce:ee:82:a0: 9e:3b:86:43:21:01:07:9d:23:17:a1:5e:73:e4:02:77:64:29: d1:f5:34:75:86:b6:4e:40:93:fd:34:76:e0:08:2e:1b:e7:58: 5e:a9:92:d8:b1:9c:8a:88:f9:0e:72:59:2e:94:2b:2c:f2:e0: be:5b:d9:4a:81:59:2b:f9:60:38:76:31:af:b0:31:88:cb:7c: 39:ff:f5:7c:51:b0:8d:2e:58:90:80:63:c0:3e:79:c2:0f:d6: 03:71:47:4f:ac:bb:c2:b3:91:c9:40:52:13:54:9b:f5:df:a1: 42:c8:ec:8d:31:93:cd:f0:1a:37:20:23:6b:37:51:66:e9:1c: 43:56:6e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0PfQ6J5GaFzBeca+RMJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZGVjNjcwYjc4MGMzYmY5NDAxZWYxYzExNWExZDg3ZmU4 ZjdjN2EwHhcNMjUxMjE1MjEwMDU2WhcNMjUxMjE2MjEwMDU2WjAzMTEwLwYDVQQD EygyMzY0ZTQzZjNjM2Y4ZjQyNTVkOGM3Y2FhZThmMzQ4NTNmZGVlNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuIV1D2LmKO7hPJaX7KzJNDpNL3x Eod1UcByBvPGpUY2ScaIDS8YFotvj0SvYThRhlZw05UyBhaHgobMQgvEePWNUgNY 3aJbr95p37v/Q5GtMcykuWPsg3wXCBALsx4JTSS6I/+ohhVHKX2e0QLpJRnhLqHN 78g733s9piDXOnRU8YrjfrLkJswvKVsv2qJdPX0X3oURO8qtWY/HRNtJ3Sne3Tzr 3Hy16L03jfaLgeLM+O2NABi31jZa8yubje1n94P/ZktvxP6/jEs83a5488y6H/C6 bJVJSvJ/qPknV1NcIySEpk2YPt1OvwYuHvb+eSGXXI/GdwbikRcsOLsb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNk5D88P49CVdjHyq6PNIU/3uXlMB8GA1UdIwQY MBaAFC/exnC3gMO/lAHvHBFaHYf+j3x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQt YWIxZDhlOTg0NGFmLzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQtYWIxZDhlOTg0NGFm LzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmipa3o2 fJ+KKHjbK06PszPHAjkqvjcFGdrJKPPhuGObj8nBJitfxkLakTxkcSkSaw48kJ8X 5dOxol1mWLB23seRAsflJhzTYk7tSqZ6AUMO2TOxyx/+ZTWlMU6sUl9FgdrUTYkI 0+1h30r40E8pFsnOJbIDNBZNURfO7oKgnjuGQyEBB50jF6Fec+QCd2Qp0fU0dYa2 TkCT/TR24AguG+dYXqmS2LGcioj5DnJZLpQrLPLgvlvZSoFZK/lgOHYxr7AxiMt8 Of/1fFGwjS5YkIBjwD55wg/WA3FHT6y7wrORyUBSE1Sb9d+hQsjsjTGTzfAaNyAj azdRZukcQ1Zu0g== -----END CERTIFICATE-----Generated at Tue Dec 16 00:18:48 2025 by rpki-client