This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json) Hash identifier: rXFAoKJ3/IH1VZbKiNuTSzXy6LK5anK2Gg6Njlpk58I= Subject key identifier: E3:4A:C5:D6:96:DB:DC:F2:62:6A:D5:CA:61:85:CC:5F:0C:41:42:FA Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a Certificate serial: 019B5A88BD180108470E8B62D1E5EC0F7696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 12:01:09 +0000 Manifest this update: Fri 26 Dec 2025 12:01:09 +0000 Manifest next update: Sat 27 Dec 2025 12:01:09 +0000 Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: jajP0cPh/kWTCpfSQMVwX1UICnI3HUY7w5TATA/5PLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:bd:18:01:08:47:0e:8b:62:d1:e5:ec:0f:76:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9769490337f673c64e39124ae8981b034e50127a Validity Not Before: Dec 26 12:01:09 2025 GMT Not After : Dec 27 12:01:09 2025 GMT Subject: CN=e34ac5d696dbdcf2626ad5ca6185cc5f0c4142fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:24:10:df:08:97:f3:25:48:29:2c:ae:81: 94:fd:a6:9a:e0:7c:4e:1a:8b:06:0d:11:de:2f:d9: b6:78:12:35:15:44:d3:4b:a4:70:f0:1d:e4:e9:d3: bc:d5:0e:31:54:9f:11:62:d4:a0:6e:e0:e3:06:85: 6f:7b:5d:a7:70:83:8e:04:ee:ad:b5:a0:ff:08:95: 0e:15:37:f4:fc:b4:fb:bf:a7:cf:11:b0:f7:ea:1c: 43:9f:47:b2:20:66:7a:ec:42:a7:d7:ed:6e:4e:d1: bd:0f:cd:0d:0b:9b:db:7c:d0:a7:58:b3:7b:7d:41: 01:bc:d6:cd:42:9b:ed:7e:b9:ff:f5:c4:8f:34:53: fa:c1:da:45:9b:87:e0:8f:c0:9f:5c:62:47:44:91: b3:ba:37:72:fc:71:4a:4a:be:3f:2f:c9:2c:de:46: 5d:b0:c8:e0:40:ee:66:a9:ef:cc:0a:16:70:8b:f0: 59:30:d2:be:2d:b8:e7:fa:5b:30:6a:16:ed:34:aa: f5:b1:4b:60:29:0b:a1:7a:22:ff:1c:d9:d7:94:e9: 49:24:96:c5:67:7b:b7:ee:a2:3d:5a:ee:1c:5e:94: 49:98:ba:01:05:36:e5:12:e9:6b:25:ac:31:25:6a: a8:31:f4:08:40:30:a7:a5:66:9a:27:3d:ad:36:ab: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4A:C5:D6:96:DB:DC:F2:62:6A:D5:CA:61:85:CC:5F:0C:41:42:FA X509v3 Authority Key Identifier: keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:27:c4:b5:c0:70:4c:7e:53:b3:7f:57:44:41:ea:10:78:bd: 78:d9:b7:d4:9d:cc:79:4c:37:2c:bd:c2:dd:32:56:9e:1c:c8: a7:49:8b:d6:3e:cd:47:ff:4b:8c:43:77:42:4a:8c:6e:b8:e6: 5e:7e:cd:28:7f:ae:00:c6:63:df:63:68:f6:ec:a5:c7:fd:48: 69:03:55:da:2f:a0:a9:5a:16:58:88:bc:5c:fc:80:04:c9:ce: 24:ae:55:29:a1:81:4a:16:f9:87:d2:84:90:7d:28:74:cb:7b: c0:74:8f:88:31:07:84:82:cf:a1:de:8c:96:38:19:e3:66:ca: fa:12:d3:cd:14:75:1f:45:33:ab:9a:81:f6:be:44:54:24:a5: cb:1f:8f:15:90:84:cc:88:eb:f2:53:cd:8a:b0:e1:16:2e:17: 12:ce:5c:8f:de:cf:ad:2d:9b:0f:47:51:97:a3:81:2e:ff:aa: fb:a0:83:7d:05:da:24:3b:77:5a:f8:cc:2c:c1:7a:7e:84:62: a9:30:8c:64:cc:77:8d:d7:14:4a:07:ea:21:82:90:75:8a:33: 45:cf:42:0a:46:0a:11:b5:82:23:8e:8e:19:c2:28:28:cc:a3: 15:a9:29:11:20:f7:51:29:4f:0c:fa:0f:6c:bb:8b:4d:97:17: b1:b6:7a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiL0YAQhHDoti0eXsD3aWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Njk0OTAzMzdmNjczYzY0ZTM5MTI0YWU4OTgxYjAzNGU1 MDEyN2EwHhcNMjUxMjI2MTIwMTA5WhcNMjUxMjI3MTIwMTA5WjAzMTEwLwYDVQQD EyhlMzRhYzVkNjk2ZGJkY2YyNjI2YWQ1Y2E2MTg1Y2M1ZjBjNDE0MmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gMkEN8Il/MlSCksroGU/aaa4HxO GosGDRHeL9m2eBI1FUTTS6Rw8B3k6dO81Q4xVJ8RYtSgbuDjBoVve12ncIOOBO6t taD/CJUOFTf0/LT7v6fPEbD36hxDn0eyIGZ67EKn1+1uTtG9D80NC5vbfNCnWLN7 fUEBvNbNQpvtfrn/9cSPNFP6wdpFm4fgj8CfXGJHRJGzujdy/HFKSr4/L8ks3kZd sMjgQO5mqe/MChZwi/BZMNK+Lbjn+lswahbtNKr1sUtgKQuheiL/HNnXlOlJJJbF Z3u37qI9Wu4cXpRJmLoBBTblEulrJawxJWqoMfQIQDCnpWaaJz2tNquPDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONKxdaW29zyYmrVymGFzF8MQUL6MB8GA1UdIwQY MBaAFJdpSQM39nPGTjkSSuiYGwNOUBJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2Mt YzEyM2Y3NjYyOGNiLzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jODdiNzYtMWI4YS00YjhhLWI0N2MtYzEyM2Y3NjYyOGNi LzEvbDJsSkF6ZjJjOFpPT1JKSzZKZ2JBMDVRRW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSfEtcBw TH5Ts39XREHqEHi9eNm31J3MeUw3LL3C3TJWnhzIp0mL1j7NR/9LjEN3QkqMbrjm Xn7NKH+uAMZj32No9uylx/1IaQNV2i+gqVoWWIi8XPyABMnOJK5VKaGBShb5h9KE kH0odMt7wHSPiDEHhILPod6MljgZ42bK+hLTzRR1H0Uzq5qB9r5EVCSlyx+PFZCE zIjr8lPNirDhFi4XEs5cj97PrS2bD0dRl6OBLv+q+6CDfQXaJDt3WvjMLMF6foRi qTCMZMx3jdcUSgfqIYKQdYozRc9CCkYKEbWCI46OGcIoKMyjFakpESD3USlPDPoP bLuLTZcXsbZ67A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:10 2025 by rpki-client