This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json) Hash identifier: RSAgesnjNSyzkCr/7YBgTolbbSNWTpx57At7TU8hxrE= Subject key identifier: DF:38:D6:BE:BC:E6:1E:65:66:21:51:CE:67:D0:5A:0F:54:BA:63:35 Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Certificate serial: 019B18DFB35200DB5B4BCC6B44D5E4C8A5A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft Manifest number: 1293 Signing time: Sat 13 Dec 2025 18:01:12 +0000 Manifest this update: Sat 13 Dec 2025 18:01:12 +0000 Manifest next update: Sun 14 Dec 2025 18:01:12 +0000 Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: J1/Iyer6Q46hKq47qEGs6QB9eEwKRWRDNDXhHaJolTE=) 2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:b3:52:00:db:5b:4b:cc:6b:44:d5:e4:c8:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3 Validity Not Before: Dec 13 18:01:12 2025 GMT Not After : Dec 14 18:01:12 2025 GMT Subject: CN=df38d6bebce61e65662151ce67d05a0f54ba6335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:39:10:6e:11:76:a6:98:2a:8e:d0:f4:b8: f6:fa:35:52:4c:ab:4f:7a:e4:32:00:09:f4:52:22: 8e:76:01:dd:9f:0e:8e:3f:64:cd:b3:e3:6e:57:98: 3c:db:34:3e:bb:a2:65:7e:a1:40:0c:87:77:9d:a3: 16:cb:cb:5b:43:4e:0a:e7:cc:ea:c5:a0:3c:8e:0c: 40:61:98:7b:6b:f9:be:6d:e3:d9:26:41:55:c0:ef: af:3a:51:68:97:88:7c:f6:cc:f7:ec:d5:3e:b7:bf: d8:25:95:72:47:b7:99:be:06:5e:52:cc:14:ab:f5: a1:6f:10:fd:84:fb:04:88:88:f8:02:67:55:76:31: da:59:0d:38:60:3b:1a:cc:bc:ea:32:5f:b7:7d:ee: 4a:19:6a:b4:96:ec:c5:b8:97:f1:18:71:fd:82:8d: 7c:e2:cd:34:f2:28:6b:ca:9e:bd:1f:eb:f9:27:1c: cc:ce:78:7e:3f:15:af:de:16:cd:96:dc:b0:f9:4f: d2:7a:81:7d:72:e9:ea:3e:cf:b7:7b:66:f8:ab:47: bd:7a:e1:dd:9e:99:24:17:2d:22:c9:80:9e:26:26: 87:f1:94:01:f9:6b:d8:cd:9f:fa:2a:6a:c3:f7:31: fd:7b:da:52:c4:30:5f:b3:ac:8b:f4:70:d7:26:63: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:D6:BE:BC:E6:1E:65:66:21:51:CE:67:D0:5A:0F:54:BA:63:35 X509v3 Authority Key Identifier: keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:15:37:59:ac:5b:81:bd:d1:97:08:56:5f:e9:d9:35:df:de: 95:65:9b:82:cb:fc:cc:d3:5f:e6:f2:b9:86:6b:b6:bd:0a:70: ac:7a:68:4c:f3:72:30:09:64:b6:b9:a5:f4:da:b3:f2:63:cb: 9b:a9:b7:2b:8b:4b:0b:fc:17:ea:cc:93:84:42:7f:c6:95:36: a5:d5:da:e9:a3:ae:4e:4d:ca:17:89:fe:0e:bd:74:6b:3e:ea: 11:7c:90:84:42:93:5c:53:f9:3b:6b:22:b7:36:34:af:38:7f: db:60:e5:f7:e4:ae:f0:11:1f:ab:d0:cd:89:b5:3e:3a:14:72: ec:16:a9:94:5d:88:aa:8c:70:77:d4:bc:bf:77:65:41:9d:de: e6:ee:c9:16:b9:a9:ce:eb:73:6e:b0:e9:2c:36:a8:57:0a:4b: 0f:78:3a:4b:54:40:62:55:26:ad:59:57:37:31:6c:06:d5:25: d0:d8:24:07:b6:16:97:72:be:cd:7e:43:80:6c:4b:60:ea:40: a6:45:8e:fe:c8:de:9a:ba:f5:07:83:56:df:d2:cd:d7:69:dc: 73:7b:ea:a3:09:b4:b4:a0:70:55:06:1c:65:eb:3f:91:56:ab: 4a:21:6d:f6:ce:4f:5b:70:15:ca:6d:82:00:f0:31:74:19:17: ff:f2:58:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY37NSANtbS8xrRNXkyKWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1 MGJjYTMwHhcNMjUxMjEzMTgwMTEyWhcNMjUxMjE0MTgwMTEyWjAzMTEwLwYDVQQD EyhkZjM4ZDZiZWJjZTYxZTY1NjYyMTUxY2U2N2QwNWEwZjU0YmE2MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdM5EG4RdqaYKo7Q9Lj2+jVSTKtP euQyAAn0UiKOdgHdnw6OP2TNs+NuV5g82zQ+u6JlfqFADId3naMWy8tbQ04K58zq xaA8jgxAYZh7a/m+bePZJkFVwO+vOlFol4h89sz37NU+t7/YJZVyR7eZvgZeUswU q/WhbxD9hPsEiIj4AmdVdjHaWQ04YDsazLzqMl+3fe5KGWq0luzFuJfxGHH9go18 4s008ihryp69H+v5JxzMznh+PxWv3hbNltyw+U/SeoF9cunqPs+3e2b4q0e9euHd npkkFy0iyYCeJiaH8ZQB+WvYzZ/6KmrD9zH9e9pSxDBfs6yL9HDXJmNUrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN841r685h5lZiFRzmfQWg9UumM1MB8GA1UdIwQY MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRU3Waxb gb3RlwhWX+nZNd/elWWbgsv8zNNf5vK5hmu2vQpwrHpoTPNyMAlktrml9Nqz8mPL m6m3K4tLC/wX6syThEJ/xpU2pdXa6aOuTk3KF4n+Dr10az7qEXyQhEKTXFP5O2si tzY0rzh/22Dl9+Su8BEfq9DNibU+OhRy7BaplF2Iqoxwd9S8v3dlQZ3e5u7JFrmp zutzbrDpLDaoVwpLD3g6S1RAYlUmrVlXNzFsBtUl0NgkB7YWl3K+zX5DgGxLYOpA pkWO/sjemrr1B4NW39LN12ncc3vqowm0tKBwVQYcZes/kVarSiFt9s5PW3AVym2C APAxdBkX//JY8Q== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:28 2025 by rpki-client