This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json) Hash identifier: Ura/iXxNlypj2P44ADXPKMQnEuOMUnIbnWdto14YPN0= Subject key identifier: 0C:9A:B3:7D:9E:C3:2F:12:9E:CC:7D:56:AF:D3:F2:61:D6:4A:6C:56 Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Certificate serial: 019B0E25DA9DF1205126F9B0D54276FCC277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft Manifest number: 06CD Signing time: Thu 11 Dec 2025 16:02:00 +0000 Manifest this update: Thu 11 Dec 2025 16:02:00 +0000 Manifest next update: Fri 12 Dec 2025 16:02:00 +0000 Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=) 2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: dnuUzIobUwOTkp153v1uzsrhsGKgCsc6uBSGFbERyUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:da:9d:f1:20:51:26:f9:b0:d5:42:76:fc:c2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f Validity Not Before: Dec 11 16:02:00 2025 GMT Not After : Dec 12 16:02:00 2025 GMT Subject: CN=0c9ab37d9ec32f129ecc7d56afd3f261d64a6c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d0:23:d9:e1:db:a5:ba:ed:9d:89:e6:21:93: ee:c1:6c:16:32:d2:51:fd:51:b6:c7:8b:8e:4e:e4: ae:d8:98:71:e1:93:99:2b:dd:87:28:b7:d9:f7:d3: 28:22:0b:61:cb:42:ee:84:51:42:36:2f:1f:87:db: 94:88:13:f7:51:e4:20:6d:1e:b5:d4:c1:d0:01:35: 34:a7:27:7c:80:24:5d:c2:5f:07:1f:68:89:04:e6: 60:7f:eb:35:86:0c:bf:66:33:90:5b:57:fb:ec:1a: e5:9d:9f:d8:84:c6:1c:e3:c4:5f:46:2c:21:db:e6: 67:34:42:cd:06:61:f3:ea:0d:21:08:ec:f0:fa:5a: a0:e8:b6:f8:9a:ab:99:7d:5f:5a:2e:6c:df:b2:a3: 46:24:77:15:11:6e:2d:47:f4:d7:1b:96:7e:36:6a: 14:cd:59:87:84:2b:ce:cf:4a:9b:cf:2a:20:1a:d8: 30:57:a9:06:66:a8:b2:37:85:81:8d:c0:12:f4:c0: 49:c0:6e:31:c6:dc:66:82:30:36:69:cf:10:a1:4f: 8b:8f:35:d3:aa:20:f5:80:bf:31:45:9a:40:14:e1: 91:1e:a1:52:cb:b0:b5:d2:87:eb:61:c5:bd:5d:05: cb:77:25:7b:98:e4:d3:bd:c7:3f:67:68:0a:41:52: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9A:B3:7D:9E:C3:2F:12:9E:CC:7D:56:AF:D3:F2:61:D6:4A:6C:56 X509v3 Authority Key Identifier: keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e1:a7:a3:91:3a:6a:c7:01:d7:f3:be:82:bf:26:4e:51:26: af:de:5b:a6:88:d9:c7:98:55:f9:57:4a:bd:02:b8:e0:7f:99: 08:87:4e:9c:09:54:32:0e:28:52:7a:85:c2:b3:3b:05:2c:73: 0c:05:3b:97:5b:1e:f0:8f:74:15:9d:5b:fa:86:b6:af:47:e7: bc:b1:c8:11:13:59:07:2d:e8:19:e1:31:4c:fd:a0:b0:d0:e1: 5a:95:55:f0:e8:92:ec:48:59:ae:00:84:b1:ff:b8:7c:28:b6: a2:23:fb:18:0e:1f:0e:a3:3e:c7:81:31:12:5a:c3:26:94:ea: 3d:60:d4:be:a1:69:cb:ec:2f:f5:d6:b9:ef:50:75:fb:eb:19: b8:fa:2f:56:74:71:41:41:d2:02:24:39:51:f5:f5:34:87:d7: 38:4a:b0:06:ee:69:dc:05:af:e7:36:38:53:98:42:03:14:d8: b0:02:88:e5:f7:7c:38:26:86:3c:f9:5f:50:fb:ee:8a:bf:63: de:6f:e4:79:f2:df:6c:b3:fc:c0:80:04:e9:a5:17:8f:c4:3d: 50:c5:67:ce:01:97:57:60:24:1a:fe:fe:b6:c1:c1:13:bb:e1: 87:00:c5:d2:04:4a:ea:d3:c1:00:b0:57:6a:9a:60:18:7b:ca: 03:72:35:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJdqd8SBRJvmw1UJ2/MJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYWU0MTJjZmZhOGNiNWNmYjkzYmIzMWFiNWU5ODkwMzg3 ODRkN2YwHhcNMjUxMjExMTYwMjAwWhcNMjUxMjEyMTYwMjAwWjAzMTEwLwYDVQQD EygwYzlhYjM3ZDllYzMyZjEyOWVjYzdkNTZhZmQzZjI2MWQ2NGE2YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAj2eHbpbrtnYnmIZPuwWwWMtJR /VG2x4uOTuSu2Jhx4ZOZK92HKLfZ99MoIgthy0LuhFFCNi8fh9uUiBP3UeQgbR61 1MHQATU0pyd8gCRdwl8HH2iJBOZgf+s1hgy/ZjOQW1f77BrlnZ/YhMYc48RfRiwh 2+ZnNELNBmHz6g0hCOzw+lqg6Lb4mquZfV9aLmzfsqNGJHcVEW4tR/TXG5Z+NmoU zVmHhCvOz0qbzyogGtgwV6kGZqiyN4WBjcAS9MBJwG4xxtxmgjA2ac8QoU+LjzXT qiD1gL8xRZpAFOGRHqFSy7C10ofrYcW9XQXLdyV7mOTTvcc/Z2gKQVJw/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyas32ewy8Snsx9Vq/T8mHWSmxWMB8GA1UdIwQY MBaAFC+uQSz/qMtc+5O7MatemJA4eE1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2Mt ODMwYjIyZGQyZGVhLzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85NGQ1YTEtMWNjMy00OGZjLTk5Y2MtODMwYjIyZGQyZGVh LzEvTDY1QkxQLW95MXo3azdzeHExNllrRGg0VFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveGno5E6 ascB1/O+gr8mTlEmr95bpojZx5hV+VdKvQK44H+ZCIdOnAlUMg4oUnqFwrM7BSxz DAU7l1se8I90FZ1b+oa2r0fnvLHIERNZBy3oGeExTP2gsNDhWpVV8OiS7EhZrgCE sf+4fCi2oiP7GA4fDqM+x4ExElrDJpTqPWDUvqFpy+wv9da571B1++sZuPovVnRx QUHSAiQ5UfX1NIfXOEqwBu5p3AWv5zY4U5hCAxTYsAKI5fd8OCaGPPlfUPvuir9j 3m/kefLfbLP8wIAE6aUXj8Q9UMVnzgGXV2AkGv7+tsHBE7vhhwDF0gRK6tPBALBX appgGHvKA3I10Q== -----END CERTIFICATE-----Generated at Fri Dec 12 01:43:59 2025 by rpki-client