This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json) Hash identifier: W5DC9JAx83HMeBetVx2MSEqTYx28HOfy+yXNSb6vSnY= Subject key identifier: F6:89:EF:AC:2D:88:6F:40:D4:5C:AA:9F:58:3A:45:0C:32:8E:3F:0E Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Certificate serial: 019B3BD9BED44591B384CEB1955813984F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:24 +0000 Manifest this update: Sat 20 Dec 2025 13:01:24 +0000 Manifest next update: Sun 21 Dec 2025 13:01:24 +0000 Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: yBcBYJNA8hbrdQx9oVlUTOYUIHJ7V+7vEeYIKNPh6ZA=) 2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:be:d4:45:91:b3:84:ce:b1:95:58:13:98:4f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9 Validity Not Before: Dec 20 13:01:24 2025 GMT Not After : Dec 21 13:01:24 2025 GMT Subject: CN=f689efac2d886f40d45caa9f583a450c328e3f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:f8:2e:45:39:05:10:ad:fe:66:ef:2e:db: d8:be:61:61:fa:4f:ee:94:95:0a:79:d8:68:47:33: 26:86:4d:c6:20:5e:25:ae:63:04:66:ca:96:7e:24: bf:9b:9c:22:8e:93:40:99:de:37:0d:5c:5e:d9:ee: 1b:9f:ef:ff:9d:51:b3:fe:a3:c8:48:a7:f6:55:59: 4b:40:24:b1:8f:f5:8b:1d:cc:b1:ad:61:88:7c:61: 93:b1:6c:56:4c:bc:77:2a:98:15:51:04:38:63:07: 7c:10:68:b5:21:55:f5:0f:6c:cc:5c:d1:25:79:3a: 25:a1:77:65:b6:ec:70:c5:f5:ea:35:17:ab:f3:01: 8b:7c:47:dd:19:47:c6:72:01:b9:0f:0c:95:11:05: d4:bc:38:07:0e:b3:a7:78:bf:05:3c:4b:b1:42:b0: 6f:eb:30:00:b0:db:75:4e:69:dc:be:ca:fe:79:49: 8d:18:6c:a8:39:6f:1d:9c:02:21:ad:d6:2e:2c:05: 14:45:ae:00:47:5f:04:14:07:ea:d5:f1:80:76:29: 28:9a:42:d9:88:a2:c8:89:96:06:43:9a:d6:de:4f: d5:5d:9d:51:5f:84:19:40:02:9a:8c:48:e7:56:5d: 12:32:71:d5:12:13:16:d3:c3:a5:69:4e:2f:94:02: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:89:EF:AC:2D:88:6F:40:D4:5C:AA:9F:58:3A:45:0C:32:8E:3F:0E X509v3 Authority Key Identifier: keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:ae:08:6a:61:80:0b:0b:36:74:91:c6:13:ea:20:eb:ea: fa:78:ed:79:b6:a5:ac:50:50:62:50:d7:c6:9b:e0:aa:4c:b7: 5f:31:96:eb:b7:e7:08:99:65:e4:0a:69:57:c3:e2:9a:b5:45: 80:39:1a:9e:0a:72:9b:03:b4:aa:68:4e:d6:9c:ec:f6:7b:12: b9:a8:23:5e:c8:36:f2:ea:15:4f:ac:a9:e0:5d:e7:bc:fc:14: 61:29:05:b5:61:17:e0:58:9f:c8:f3:c3:64:5d:7e:b9:cc:b1: 9f:6e:6f:d4:a2:8d:dd:50:58:20:6e:fe:60:d4:13:99:ef:e2: ec:88:4b:0c:37:d8:96:59:35:87:1a:70:3e:f8:b1:d9:c2:0e: 4d:da:77:51:7c:81:e9:24:5d:fb:85:96:c8:18:59:3e:14:3e: 57:c2:62:9e:59:5d:82:74:89:49:13:da:c2:3e:34:16:a2:a3: 46:92:4e:64:4d:ad:c2:31:e3:35:93:b9:22:56:0b:2b:c2:14: e2:3d:2f:a9:bf:3b:0e:8e:8d:ae:2a:dd:7e:bb:22:fc:8e:02: 9f:ad:a0:11:63:0d:c6:d6:b3:17:70:18:bb:0e:ce:78:7e:83: 20:0b:90:75:19:de:a3:5e:e0:cb:5c:e3:44:0a:c6:fa:58:ed: 71:5a:42:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72b7URZGzhM6xlVgTmE83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmYwN2NlYWQwNmE0ZjgxMTU0NzYwMGJhYzAyZmFmMGNj MDg0YzkwHhcNMjUxMjIwMTMwMTI0WhcNMjUxMjIxMTMwMTI0WjAzMTEwLwYDVQQD EyhmNjg5ZWZhYzJkODg2ZjQwZDQ1Y2FhOWY1ODNhNDUwYzMyOGUzZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/4LkU5BRCt/mbvLtvYvmFh+k/u lJUKedhoRzMmhk3GIF4lrmMEZsqWfiS/m5wijpNAmd43DVxe2e4bn+//nVGz/qPI SKf2VVlLQCSxj/WLHcyxrWGIfGGTsWxWTLx3KpgVUQQ4Ywd8EGi1IVX1D2zMXNEl eToloXdltuxwxfXqNRer8wGLfEfdGUfGcgG5DwyVEQXUvDgHDrOneL8FPEuxQrBv 6zAAsNt1Tmncvsr+eUmNGGyoOW8dnAIhrdYuLAUURa4AR18EFAfq1fGAdikomkLZ iKLIiZYGQ5rW3k/VXZ1RX4QZQAKajEjnVl0SMnHVEhMW08OlaU4vlALCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaJ76wtiG9A1Fyqn1g6RQwyjj8OMB8GA1UdIwQY MBaAFC9vB86tBqT4EVR2ALrAL68MwITJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAt MDQ3Y2JjMzEwY2NiLzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAtMDQ3Y2JjMzEwY2Ni LzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2quCGph gAsLNnSRxhPqIOvq+njtebalrFBQYlDXxpvgqky3XzGW67fnCJll5AppV8PimrVF gDkangpymwO0qmhO1pzs9nsSuagjXsg28uoVT6yp4F3nvPwUYSkFtWEX4FifyPPD ZF1+ucyxn25v1KKN3VBYIG7+YNQTme/i7IhLDDfYllk1hxpwPvix2cIOTdp3UXyB 6SRd+4WWyBhZPhQ+V8JinlldgnSJSRPawj40FqKjRpJOZE2twjHjNZO5IlYLK8IU 4j0vqb87Do6Nrirdfrsi/I4Cn62gEWMNxtazF3AYuw7OeH6DIAuQdRneo17gy1zj RArG+ljtcVpCqA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:18 2025 by rpki-client