This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json) Hash identifier: KR54qI/JxzAgPmsPxtrQIilXliNmk28UrrQ97ZUXby8= Subject key identifier: 2D:54:BE:F3:46:C1:BE:F4:71:D0:64:97:B3:7F:16:29:B3:A0:AC:14 Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Certificate serial: 019B4136F60A86B131234C6A58E589B15AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft Manifest number: 079C Signing time: Sun 21 Dec 2025 14:01:19 +0000 Manifest this update: Sun 21 Dec 2025 14:01:19 +0000 Manifest next update: Mon 22 Dec 2025 14:01:19 +0000 Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: kKLR+kViIwjnbqsuWG4ydpK+VkUYg0mli1qWzfzN3k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:f6:0a:86:b1:31:23:4c:6a:58:e5:89:b1:5a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6 Validity Not Before: Dec 21 14:01:19 2025 GMT Not After : Dec 22 14:01:19 2025 GMT Subject: CN=2d54bef346c1bef471d06497b37f1629b3a0ac14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:d1:15:74:29:eb:a3:de:83:a1:17:96:6f: 9a:cc:a0:0d:86:7d:79:56:7a:24:16:d0:82:2b:eb: 43:0d:f6:de:d0:e9:c5:d2:8b:da:d9:2c:55:25:f9: 70:7f:e4:e5:09:4a:b3:14:23:38:aa:9d:6c:85:93: e1:95:63:e3:c6:a4:27:ec:b4:19:7e:81:6b:1b:31: 4a:53:52:a8:01:1b:ea:b3:28:a3:37:59:7d:6f:fb: 55:ca:1a:63:f6:bc:e2:ea:53:30:23:cb:6d:42:4a: de:eb:6c:db:d0:4b:65:4f:e6:33:ff:51:e7:13:dc: bb:82:21:35:75:8f:e6:c9:8b:d4:98:ad:ae:74:71: ae:3b:ab:7e:e0:49:ee:77:36:fb:26:2c:20:ce:5b: 06:ec:4a:6b:23:5f:74:03:db:f0:0a:cf:14:ea:0e: 02:4b:c5:66:46:60:b0:08:ca:bf:8f:da:99:76:0f: 09:3e:20:67:81:f7:5f:a7:32:f3:5a:fc:7f:34:4b: 92:63:e5:0f:5d:e2:eb:ed:c1:7c:cc:79:64:3f:f6: 2f:72:bc:ba:2b:83:6d:21:e8:58:eb:c3:25:b7:d6: 87:21:f1:f0:c3:94:01:40:b8:9a:65:69:31:c2:ca: 2f:1c:9d:45:2f:a3:23:2d:83:13:38:4a:16:30:18: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:BE:F3:46:C1:BE:F4:71:D0:64:97:B3:7F:16:29:B3:A0:AC:14 X509v3 Authority Key Identifier: keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2b:e3:d7:60:e1:53:8c:53:21:28:1c:fc:7f:c2:9e:ed:48: 92:6c:80:32:1d:ca:c2:dc:35:63:ae:9f:bc:ab:f8:ee:4a:9a: 04:fd:68:19:2d:6b:97:d3:df:46:d7:d5:2b:a9:ae:5f:0d:ce: cc:f8:8e:71:08:d8:50:bd:c6:0d:ab:2f:72:3b:9e:53:f9:b6: de:1f:da:94:30:8f:89:04:a0:7d:a6:2c:dc:4f:a4:05:9b:3b: f7:66:d3:cf:c1:6a:90:d6:6f:da:bc:5a:d4:f2:6f:f1:cf:a3: d6:4f:14:13:13:20:c3:48:8b:8d:6b:9e:47:d3:0a:d2:d5:4b: 14:3c:f6:fb:fe:76:4b:ed:5a:ac:30:29:b8:59:11:16:e1:d9: 6b:61:d8:6f:5d:db:f4:ad:1e:a9:4c:de:cb:52:8f:ae:1c:24: ee:1e:17:0b:8f:cb:b6:e9:85:cd:3d:5c:d0:ca:04:12:5e:f0: da:24:54:03:44:fe:45:7a:dc:9c:f9:27:29:1b:91:77:cc:c2: 2d:0b:85:11:35:ca:b8:61:af:2e:b0:ba:01:00:f3:e5:3f:1a: c0:af:ca:90:bf:7e:9c:04:4b:56:15:29:a6:7b:42:8d:66:1f: 8c:6d:2a:da:e8:65:ad:2f:4b:93:5a:5c:6d:e6:e8:fc:b9:7a: 65:4f:8f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvYKhrExI0xqWOWJsVr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi YWIxYjYwHhcNMjUxMjIxMTQwMTE5WhcNMjUxMjIyMTQwMTE5WjAzMTEwLwYDVQQD EygyZDU0YmVmMzQ2YzFiZWY0NzFkMDY0OTdiMzdmMTYyOWIzYTBhYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7LRFXQp66Peg6EXlm+azKANhn15 VnokFtCCK+tDDfbe0OnF0ova2SxVJflwf+TlCUqzFCM4qp1shZPhlWPjxqQn7LQZ foFrGzFKU1KoARvqsyijN1l9b/tVyhpj9rzi6lMwI8ttQkre62zb0EtlT+Yz/1Hn E9y7giE1dY/myYvUmK2udHGuO6t+4Enudzb7JiwgzlsG7EprI190A9vwCs8U6g4C S8VmRmCwCMq/j9qZdg8JPiBngfdfpzLzWvx/NEuSY+UPXeLr7cF8zHlkP/Yvcry6 K4NtIehY68Mlt9aHIfHww5QBQLiaZWkxwsovHJ1FL6MjLYMTOEoWMBiDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1UvvNGwb70cdBkl7N/FimzoKwUMB8GA1UdIwQY MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADivj12Dh U4xTISgc/H/Cnu1IkmyAMh3Kwtw1Y66fvKv47kqaBP1oGS1rl9PfRtfVK6muXw3O zPiOcQjYUL3GDasvcjueU/m23h/alDCPiQSgfaYs3E+kBZs792bTz8FqkNZv2rxa 1PJv8c+j1k8UExMgw0iLjWueR9MK0tVLFDz2+/52S+1arDApuFkRFuHZa2HYb13b 9K0eqUzey1KPrhwk7h4XC4/LtumFzT1c0MoEEl7w2iRUA0T+RXrcnPknKRuRd8zC LQuFETXKuGGvLrC6AQDz5T8awK/KkL9+nARLVhUppntCjWYfjG0q2uhlrS9Lk1pc bebo/Ll6ZU+PBw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:27 2025 by rpki-client