This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json) Hash identifier: 0Zd1RjudNTzenTsW/UambJhGPdvp6BtKNk/Z94qAImU= Subject key identifier: A7:6D:95:96:3D:D3:5E:28:27:4F:18:C4:53:1F:CB:0C:87:00:C0:E8 Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Certificate serial: 019B0F6E980C6092EDBA832D7A7A50BBC332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft Manifest number: 016C Signing time: Thu 11 Dec 2025 22:01:04 +0000 Manifest this update: Thu 11 Dec 2025 22:01:04 +0000 Manifest next update: Fri 12 Dec 2025 22:01:04 +0000 Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=) 2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: VBBeK4fI2GoE9mpYEAihmJfE5VqkX0NJV+zYaKCs6Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:98:0c:60:92:ed:ba:83:2d:7a:7a:50:bb:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea Validity Not Before: Dec 11 22:01:04 2025 GMT Not After : Dec 12 22:01:04 2025 GMT Subject: CN=a76d95963dd35e28274f18c4531fcb0c8700c0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:27:0a:62:05:de:c7:76:99:a5:2e:96:1e: bf:c4:7c:f3:56:47:49:19:5a:7b:75:75:34:40:f6: be:c1:68:51:ec:22:69:6c:d8:11:e6:a7:6f:e1:8d: 1d:b5:1b:74:4a:dc:2d:00:27:fc:2f:5c:3d:51:e0: 8b:eb:b0:fd:76:e7:e6:85:5a:99:5b:dd:b1:eb:97: 2f:c7:fc:ab:cc:97:b8:f6:d1:68:6e:bf:15:d9:ea: ad:a8:00:98:63:81:63:8c:ae:50:80:e9:e3:34:6a: bf:38:b6:cc:c5:1d:3f:48:74:7c:6d:b9:8b:50:03: bb:39:06:d7:e6:cb:90:10:1c:b6:37:91:25:61:37: e5:88:5e:b3:6c:f1:89:98:b0:f8:0e:99:5c:84:25: 47:5b:78:c4:b4:0d:af:d3:df:58:99:db:82:7b:50: 59:8c:b1:f7:50:bd:e3:44:81:41:5c:90:8b:a0:ee: f5:12:58:d2:68:c4:9b:66:54:3a:fe:48:a2:c6:f0: 8b:a6:4a:63:fa:34:a4:2a:93:f0:f2:d1:55:a4:72: 46:12:1d:de:7a:56:5b:a8:cf:ce:1b:17:a2:22:23: 82:82:d6:c4:c4:5e:15:48:4f:9b:da:65:e1:98:62: 09:02:0c:ce:5d:84:0d:ec:24:72:7e:f7:7c:43:75: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6D:95:96:3D:D3:5E:28:27:4F:18:C4:53:1F:CB:0C:87:00:C0:E8 X509v3 Authority Key Identifier: keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b1:9d:d4:f2:cf:19:8d:b4:82:56:ca:1e:0c:3a:f1:30:bd: 3e:1e:ef:5a:58:41:53:95:d1:dc:a1:0c:0c:0d:29:d6:6e:0c: 92:a9:86:5a:9c:d2:78:13:0f:c9:20:f4:a3:1d:33:89:82:66: ac:51:4b:07:ba:a1:ee:e2:c9:d1:16:22:a3:fa:f5:7d:c0:cd: d0:e3:40:1f:3a:c4:00:27:99:41:de:3f:e0:24:dc:bc:cd:ed: 24:48:a3:e5:4a:bb:f4:f0:f2:41:c5:27:08:b1:3e:41:6d:5b: 56:e6:e4:04:41:f0:9b:a5:a5:fe:b5:8b:0c:8b:68:e2:d4:c7: 4a:75:fc:2c:39:48:e0:26:da:c8:ee:3d:5a:71:ae:e2:a2:8d: e2:0c:c4:f2:ed:45:95:f3:5b:e7:a0:80:ab:d9:f0:ec:2e:7f: 71:8d:8f:1e:f2:3c:5a:51:c8:e7:9d:60:eb:78:74:9a:4b:00: 89:43:79:8a:3d:59:00:87:72:4c:20:d2:b0:a0:4b:a1:86:48: 7a:1d:c0:8b:83:aa:82:3e:e9:91:da:a8:a3:1c:2c:c5:ce:96: 86:47:9f:f6:63:43:5c:9b:e9:a6:56:c7:b8:fc:16:cc:57:4f: 59:0b:31:26:80:35:74:32:68:ec:89:42:e5:ee:79:8f:ab:5d: 02:5b:25:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbpgMYJLtuoMtenpQu8MyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQ5MDhkMGM1YmQzYWFjZjUyODBkZDgxZWEyMDM4MmNk OTc4ZWEwHhcNMjUxMjExMjIwMTA0WhcNMjUxMjEyMjIwMTA0WjAzMTEwLwYDVQQD EyhhNzZkOTU5NjNkZDM1ZTI4Mjc0ZjE4YzQ1MzFmY2IwYzg3MDBjMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD8nCmIF3sd2maUulh6/xHzzVkdJ GVp7dXU0QPa+wWhR7CJpbNgR5qdv4Y0dtRt0StwtACf8L1w9UeCL67D9dufmhVqZ W92x65cvx/yrzJe49tFobr8V2eqtqACYY4FjjK5QgOnjNGq/OLbMxR0/SHR8bbmL UAO7OQbX5suQEBy2N5ElYTfliF6zbPGJmLD4DplchCVHW3jEtA2v099YmduCe1BZ jLH3UL3jRIFBXJCLoO71EljSaMSbZlQ6/kiixvCLpkpj+jSkKpPw8tFVpHJGEh3e elZbqM/OGxeiIiOCgtbExF4VSE+b2mXhmGIJAgzOXYQN7CRyfvd8Q3VncwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdtlZY9014oJ08YxFMfywyHAMDoMB8GA1UdIwQY MBaAFC+9kI0MW9Oqz1KA3YHqIDgs2XjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2Mt N2VjZGQyZjY0ZDJkLzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNzIzNGMtODg3ZS00MWU5LWFkM2MtN2VjZGQyZjY0ZDJk LzEvTDcyUWpReGIwNnJQVW9EZGdlb2dPQ3paZU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7Gd1PLP GY20glbKHgw68TC9Ph7vWlhBU5XR3KEMDA0p1m4MkqmGWpzSeBMPySD0ox0ziYJm rFFLB7qh7uLJ0RYio/r1fcDN0ONAHzrEACeZQd4/4CTcvM3tJEij5Uq79PDyQcUn CLE+QW1bVubkBEHwm6Wl/rWLDIto4tTHSnX8LDlI4CbayO49WnGu4qKN4gzE8u1F lfNb56CAq9nw7C5/cY2PHvI8WlHI551g63h0mksAiUN5ij1ZAIdyTCDSsKBLoYZI eh3Ai4Oqgj7pkdqooxwsxc6Whkef9mNDXJvpplbHuPwWzFdPWQsxJoA1dDJo7IlC 5e55j6tdAlslFw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:47 2025 by rpki-client