This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json) Hash identifier: g3ddNsN057xNGf4f0F8BoJOTDTOeBj25JqMwIwG8/Ks= Subject key identifier: E5:19:81:FE:E2:E1:E0:11:60:B1:5B:7A:FC:ED:B3:41:6A:DE:BB:4F Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Certificate serial: 019B31C37E6CE0F853247B05B9D860D2D727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft Manifest number: 05A8 Signing time: Thu 18 Dec 2025 14:00:54 +0000 Manifest this update: Thu 18 Dec 2025 14:00:54 +0000 Manifest next update: Fri 19 Dec 2025 14:00:54 +0000 Files and hashes: 1: 8uoobD-uNsoIUa3wePqJLnyhcpo.roa (hash: O0gO7wKip3iHzyPxgcMRO0gg6URqBUsF4wabpY8lFzs=) 2: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: VQI03T18mpHqoH0D+LzS2AEbYEiLOuFOLqoxun7gFOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:7e:6c:e0:f8:53:24:7b:05:b9:d8:60:d2:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb Validity Not Before: Dec 18 14:00:54 2025 GMT Not After : Dec 19 14:00:54 2025 GMT Subject: CN=e51981fee2e1e01160b15b7afcedb3416adebb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:79:a9:17:09:2b:67:01:2b:f4:f0:83:65: 79:cf:60:80:f4:02:31:52:e1:6c:f3:87:01:2e:0a: d7:d7:e6:ad:15:b7:04:3b:31:dc:71:7b:52:a7:e6: 37:30:e1:13:7b:c3:d3:15:a0:ab:e5:33:1f:c6:79: 3f:dc:ab:9f:aa:15:20:5a:c9:e0:ba:5c:11:76:0d: 17:a4:91:2d:c9:8f:d7:b3:2e:a9:dc:b0:8f:b7:29: c4:0b:0f:ed:96:4a:e4:eb:ca:61:fa:de:bd:8d:9a: c7:ce:2d:b6:9e:af:ad:74:f5:7e:a7:fc:67:cd:00: 5f:ae:ee:bc:ae:5b:00:2e:e1:ed:42:14:fc:85:93: 64:9f:15:55:9c:54:04:01:91:1b:71:90:7f:b2:ef: 6c:a1:22:dd:20:6d:be:80:cd:a2:07:c5:47:43:49: 0e:1b:a4:6a:99:18:e4:bf:31:10:d8:8c:7d:45:18: d1:c3:a2:e7:8c:b4:6b:91:6d:ed:09:e8:33:0b:31: d0:12:07:f5:12:9e:2f:b8:e6:05:1e:8a:51:33:76: f0:74:82:22:f9:e5:12:f6:f1:0d:1c:60:cf:22:7c: d4:1d:9b:c9:a1:cf:9c:19:77:45:6f:e1:8b:ad:38: 31:51:b0:54:2b:94:4e:88:81:bb:1d:4e:e5:72:ea: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:19:81:FE:E2:E1:E0:11:60:B1:5B:7A:FC:ED:B3:41:6A:DE:BB:4F X509v3 Authority Key Identifier: keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bf:38:86:1b:d4:a2:fb:af:cb:bd:a8:10:eb:d7:24:f9:fd: 42:35:7a:75:03:80:bd:5b:c2:57:3a:11:70:04:f8:61:d9:0f: 45:ae:b1:5e:c2:39:1e:39:8e:d5:39:23:2c:33:33:ea:82:0e: 86:55:05:23:30:1f:7c:12:f8:22:26:05:87:f2:fe:ad:65:52: 80:cb:46:d3:7c:4a:a6:d1:12:34:8b:3f:75:c6:cd:7c:75:8c: 0b:d0:a7:de:5e:13:51:09:67:90:78:4a:2a:64:07:33:de:5e: 7d:d1:ee:81:6b:30:97:f0:0e:b7:da:b5:69:ea:d8:08:5d:45: 89:b0:f2:2f:59:b8:52:ad:3a:26:73:e1:67:eb:9d:17:0e:04: 6f:55:85:8a:7f:91:0a:3e:92:49:37:f1:61:d4:83:b4:33:19: 74:3f:a2:3f:ca:f4:b2:ed:e5:71:0a:e2:91:a6:dc:12:2e:e9: ee:ab:cf:9c:0f:45:77:8b:95:6c:50:18:a8:5f:10:63:42:a0: 49:ac:19:82:99:ae:f1:80:b4:1b:4f:e2:28:ac:c6:9c:ad:98: 11:ec:9f:2e:1f:7a:21:5f:07:ae:94:3e:a5:12:15:01:36:9f: 28:e5:20:fb:9e:ad:b1:6b:83:7a:81:f3:0b:8f:a8:55:37:7f: 75:d4:8b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw35s4PhTJHsFudhg0tcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl MTFlZGIwHhcNMjUxMjE4MTQwMDU0WhcNMjUxMjE5MTQwMDU0WjAzMTEwLwYDVQQD EyhlNTE5ODFmZWUyZTFlMDExNjBiMTViN2FmY2VkYjM0MTZhZGViYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNN5qRcJK2cBK/Twg2V5z2CA9AIx UuFs84cBLgrX1+atFbcEOzHccXtSp+Y3MOETe8PTFaCr5TMfxnk/3KufqhUgWsng ulwRdg0XpJEtyY/Xsy6p3LCPtynECw/tlkrk68ph+t69jZrHzi22nq+tdPV+p/xn zQBfru68rlsALuHtQhT8hZNknxVVnFQEAZEbcZB/su9soSLdIG2+gM2iB8VHQ0kO G6RqmRjkvzEQ2Ix9RRjRw6LnjLRrkW3tCegzCzHQEgf1Ep4vuOYFHopRM3bwdIIi +eUS9vENHGDPInzUHZvJoc+cGXdFb+GLrTgxUbBUK5ROiIG7HU7lcuoDyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUZgf7i4eARYLFbevzts0Fq3rtPMB8GA1UdIwQY MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt MjUxMGRhYzMyNDk2LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2 LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb84hhvU ovuvy72oEOvXJPn9QjV6dQOAvVvCVzoRcAT4YdkPRa6xXsI5HjmO1TkjLDMz6oIO hlUFIzAffBL4IiYFh/L+rWVSgMtG03xKptESNIs/dcbNfHWMC9Cn3l4TUQlnkHhK KmQHM95efdHugWswl/AOt9q1aerYCF1FibDyL1m4Uq06JnPhZ+udFw4Eb1WFin+R Cj6SSTfxYdSDtDMZdD+iP8r0su3lcQrikabcEi7p7qvPnA9Fd4uVbFAYqF8QY0Kg SawZgpmu8YC0G0/iKKzGnK2YEeyfLh96IV8HrpQ+pRIVATafKOUg+56tsWuDeoHz C4+oVTd/ddSLPw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:40:58 2025 by rpki-client