This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json) Hash identifier: XFKXdwnR84rMZVdQYplA3jzP8ez30RRLsUMo+sutMOs= Subject key identifier: AB:82:90:87:09:DC:8D:70:89:D3:7F:9B:10:6C:D1:87:E1:AC:51:4F Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a Certificate serial: 019B19BB3479F0F95657A9497A470F5CAF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft Manifest number: 09BF Signing time: Sat 13 Dec 2025 22:00:57 +0000 Manifest this update: Sat 13 Dec 2025 22:00:57 +0000 Manifest next update: Sun 14 Dec 2025 22:00:57 +0000 Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: pXgv8GbrERMwDcyzV7D4vPRfERLJ8SP8X4YbIso4acA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:34:79:f0:f9:56:57:a9:49:7a:47:0f:5c:af:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a Validity Not Before: Dec 13 22:00:57 2025 GMT Not After : Dec 14 22:00:57 2025 GMT Subject: CN=ab82908709dc8d7089d37f9b106cd187e1ac514f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:bf:53:6a:5f:30:6c:2f:41:6d:98:f2:d7: 5d:2e:30:7e:c6:78:ef:e4:0a:28:62:de:1b:f6:5e: 18:ad:49:c7:99:0d:e1:e5:ac:e7:e0:4c:ac:71:b3: 2a:77:0d:ff:2f:48:b0:0d:38:89:55:28:4d:bd:cc: d0:ad:5a:6c:e2:65:70:9f:27:8e:0a:4c:48:07:c7: f7:26:1a:47:e4:d8:46:f9:fb:28:a7:86:67:68:f0: 9a:6f:f2:c2:72:9b:ef:c6:37:2f:85:12:ef:bc:df: 66:a7:59:3f:e4:e7:01:8f:e6:da:a2:c3:c6:fe:ff: 71:56:42:12:f2:64:c2:f3:7d:3d:96:c0:99:09:78: 6a:86:e7:06:b2:ba:a3:60:3d:fe:9f:26:c8:5c:c0: 19:93:86:a9:d3:77:88:9e:26:dc:dd:f9:a8:d2:44: ed:4b:a6:6a:13:2d:8b:97:18:23:63:30:4b:9f:ea: fa:fe:bb:e3:10:4a:e0:3a:ef:9e:d1:c2:7d:c7:11: b3:21:f4:f5:b0:5d:7e:18:ca:bc:b8:24:05:f9:2d: fe:72:8a:86:8f:ac:b3:ea:ef:04:d8:0f:7e:df:b0: 73:45:fc:cf:dd:04:f7:7a:0a:70:48:05:29:2c:d2: 0f:76:ba:8a:0f:60:e2:a1:ce:f4:0f:ce:ba:23:a4: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:90:87:09:DC:8D:70:89:D3:7F:9B:10:6C:D1:87:E1:AC:51:4F X509v3 Authority Key Identifier: keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4b:57:6f:83:f4:e2:07:72:3b:9c:4b:22:2f:01:e0:03:e0: ba:75:9b:3f:93:81:fd:17:0f:d5:7b:18:82:6e:36:76:8d:01: ee:ae:04:dc:73:da:ac:9a:dc:99:fd:67:5c:87:78:e9:e5:f4: 71:b5:3b:11:83:c8:d9:91:de:cf:f3:9d:37:b2:30:77:fe:ce: 6e:7e:00:49:7e:9d:77:78:f7:09:62:10:b3:85:17:59:e7:1e: 18:8a:ff:9b:90:18:a0:ef:1a:e2:46:62:ed:ce:13:17:2f:5d: b6:c1:fe:ba:64:0f:70:20:1a:e5:30:f2:24:bf:f5:c2:5e:91: ad:d5:36:cc:fa:8a:8a:fb:5b:5b:42:0d:5e:5c:69:56:dc:5c: 04:55:07:6e:b8:0f:7f:ba:8c:9a:f0:0a:e2:a5:c2:8c:96:3c: 46:cc:9e:85:89:21:35:47:2f:6d:f9:66:5b:40:f3:65:66:29: 95:47:ee:34:72:8d:d9:42:9b:7e:13:55:7e:95:55:58:89:a2: bd:2d:a8:e1:d5:1f:07:05:4c:c7:db:8f:09:f6:f9:6f:d6:c7: 39:bd:c6:1a:1c:6d:81:f2:68:1a:81:32:b1:e7:96:9a:bc:c7: 6b:b6:f2:07:4c:17:35:c0:1d:54:7a:0b:a1:58:ec:a5:2a:b3: 1c:ba:44:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuzR58PlWV6lJekcPXK9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNjQ3MTZiMTg2YmUxMTQ1ODIyZTFjNzA3NjRmYWI2MWZi MTNjNmEwHhcNMjUxMjEzMjIwMDU3WhcNMjUxMjE0MjIwMDU3WjAzMTEwLwYDVQQD EyhhYjgyOTA4NzA5ZGM4ZDcwODlkMzdmOWIxMDZjZDE4N2UxYWM1MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv92/U2pfMGwvQW2Y8tddLjB+xnjv 5AooYt4b9l4YrUnHmQ3h5azn4EyscbMqdw3/L0iwDTiJVShNvczQrVps4mVwnyeO CkxIB8f3JhpH5NhG+fsop4ZnaPCab/LCcpvvxjcvhRLvvN9mp1k/5OcBj+baosPG /v9xVkIS8mTC8309lsCZCXhqhucGsrqjYD3+nybIXMAZk4ap03eInibc3fmo0kTt S6ZqEy2LlxgjYzBLn+r6/rvjEErgOu+e0cJ9xxGzIfT1sF1+GMq8uCQF+S3+coqG j6yz6u8E2A9+37BzRfzP3QT3egpwSAUpLNIPdrqKD2Dioc70D866I6T9yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuCkIcJ3I1widN/mxBs0YfhrFFPMB8GA1UdIwQY MBaAFC9kcWsYa+EUWCLhxwdk+rYfsTxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lYjBjMTAtYWIyZS00YzFhLTgxNmUt NTQ5MGQ3MDg3ZWQyLzEvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lYjBjMTAtYWIyZS00YzFhLTgxNmUtNTQ5MGQ3MDg3ZWQy LzEvTDJSeGF4aHI0UlJZSXVISEIyVDZ0aC14UEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEtXb4P0 4gdyO5xLIi8B4APgunWbP5OB/RcP1XsYgm42do0B7q4E3HParJrcmf1nXId46eX0 cbU7EYPI2ZHez/OdN7Iwd/7Obn4ASX6dd3j3CWIQs4UXWeceGIr/m5AYoO8a4kZi 7c4TFy9dtsH+umQPcCAa5TDyJL/1wl6RrdU2zPqKivtbW0INXlxpVtxcBFUHbrgP f7qMmvAK4qXCjJY8RsyehYkhNUcvbflmW0DzZWYplUfuNHKN2UKbfhNVfpVVWImi vS2o4dUfBwVMx9uPCfb5b9bHOb3GGhxtgfJoGoEyseeWmrzHa7byB0wXNcAdVHoL oVjspSqzHLpEWw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:38:27 2025 by rpki-client