This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json) Hash identifier: TXNO/bNg5KwWndV0oLiP8YeU/Ivf+QvSXm2gtZUcBMg= Subject key identifier: 1F:D7:6F:C3:61:DD:C4:36:5F:F0:A5:58:55:D6:94:CF:8B:89:25:6F Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f Certificate serial: 019B59ACFA9A851A1843B8EAAA7078D1BADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft Manifest number: 0FA3 Signing time: Fri 26 Dec 2025 08:01:06 +0000 Manifest this update: Fri 26 Dec 2025 08:01:06 +0000 Manifest next update: Sat 27 Dec 2025 08:01:06 +0000 Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: 5tNse/EWP7nARsRHenHxw13m1N0pmDtwLyJ4zW7VFGY=) 2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:fa:9a:85:1a:18:43:b8:ea:aa:70:78:d1:ba:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f Validity Not Before: Dec 26 08:01:06 2025 GMT Not After : Dec 27 08:01:06 2025 GMT Subject: CN=1fd76fc361ddc4365ff0a55855d694cf8b89256f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:d4:6e:ad:5e:a9:21:d6:39:04:e6:dc:1f: 16:cd:45:0c:56:31:74:7a:0d:84:23:33:1a:08:3b: 75:69:c5:49:04:99:bf:ce:42:49:54:0d:0d:54:d2: e6:35:dc:07:18:f6:21:79:1e:1b:ed:8b:39:1d:b1: 9b:7c:e5:f6:45:2e:94:60:97:b9:f1:e1:e3:0c:a6: ef:ac:bc:49:aa:fe:68:84:5d:5f:6e:18:a5:13:dc: 5f:dc:28:05:9c:52:dd:e0:9a:b6:c6:21:55:b5:e2: 4e:79:a8:4b:b9:96:82:6b:38:33:17:f7:37:e4:37: 41:e8:d1:55:51:c1:46:00:77:51:a3:17:28:40:93: 38:aa:01:62:45:81:f4:b4:27:51:8a:67:32:52:d3: d7:90:2c:30:9d:2d:4f:dd:71:eb:b6:e1:e7:f3:ec: c5:8c:43:45:66:da:8a:e1:5f:61:56:2f:07:99:06: 00:e1:bd:44:50:14:52:e2:bd:bd:d8:4b:92:0b:13: cb:b9:98:e4:cd:e5:f7:5d:74:0c:68:d4:ab:29:15: 7c:d5:82:3c:63:3a:d9:9b:9c:05:38:1e:56:b0:13: 26:17:c9:15:c2:de:0c:aa:b8:f8:d8:98:01:5e:d5: d1:16:c4:22:04:2b:10:85:c6:24:0b:71:57:c4:9e: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:6F:C3:61:DD:C4:36:5F:F0:A5:58:55:D6:94:CF:8B:89:25:6F X509v3 Authority Key Identifier: keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:cf:ff:1a:ff:9d:ba:65:a6:d9:d0:ea:c2:54:1e:8c:f1:c8: 94:61:58:81:f9:0a:18:9e:25:c3:af:b4:4c:6d:b9:f6:03:bf: e9:9b:8a:65:18:91:36:04:00:2a:9c:48:05:a9:0d:0d:20:15: 58:39:fb:02:b5:47:e0:a3:11:0a:c5:62:73:fa:9a:c2:c0:d8: c8:27:8c:d5:93:95:a1:e5:51:2c:b6:fe:76:19:a1:9e:6d:25: 13:59:1c:f9:64:55:00:d6:07:ab:9a:2e:c6:41:3b:71:af:42: d4:30:81:6b:ff:b9:2b:29:f4:8e:b9:0e:2e:fb:4f:89:a9:71: 74:7f:ec:20:6d:fc:d4:0b:0c:63:c1:02:9a:0d:c7:99:ee:71: 1b:18:0e:c5:ea:25:bb:8c:e4:1c:06:67:a1:dd:17:f5:c0:8e: dd:40:92:a9:4a:c5:cb:15:c0:0b:de:14:bb:3b:93:1b:09:04: 98:66:11:9f:13:0a:94:cc:04:fa:e2:3d:c0:79:46:1d:84:f4: 7b:cc:54:b5:6c:cc:0e:a1:78:a5:74:6c:13:34:9d:ec:ec:ca: d7:03:28:94:70:b6:c8:b6:60:63:d7:1a:ff:c5:bc:bb:28:dd: 02:22:92:a9:03:ec:5f:d5:5d:64:69:48:f2:4b:0c:bf:69:fa: 90:ff:71:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPqahRoYQ7jqqnB40brdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz MjUxOWYwHhcNMjUxMjI2MDgwMTA2WhcNMjUxMjI3MDgwMTA2WjAzMTEwLwYDVQQD EygxZmQ3NmZjMzYxZGRjNDM2NWZmMGE1NTg1NWQ2OTRjZjhiODkyNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLTUbq1eqSHWOQTm3B8WzUUMVjF0 eg2EIzMaCDt1acVJBJm/zkJJVA0NVNLmNdwHGPYheR4b7Ys5HbGbfOX2RS6UYJe5 8eHjDKbvrLxJqv5ohF1fbhilE9xf3CgFnFLd4Jq2xiFVteJOeahLuZaCazgzF/c3 5DdB6NFVUcFGAHdRoxcoQJM4qgFiRYH0tCdRimcyUtPXkCwwnS1P3XHrtuHn8+zF jENFZtqK4V9hVi8HmQYA4b1EUBRS4r292EuSCxPLuZjkzeX3XXQMaNSrKRV81YI8 YzrZm5wFOB5WsBMmF8kVwt4Mqrj42JgBXtXRFsQiBCsQhcYkC3FXxJ4vaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/Xb8Nh3cQ2X/ClWFXWlM+LiSVvMB8GA1UdIwQY MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM//Gv+d umWm2dDqwlQejPHIlGFYgfkKGJ4lw6+0TG259gO/6ZuKZRiRNgQAKpxIBakNDSAV WDn7ArVH4KMRCsVic/qawsDYyCeM1ZOVoeVRLLb+dhmhnm0lE1kc+WRVANYHq5ou xkE7ca9C1DCBa/+5Kyn0jrkOLvtPialxdH/sIG381AsMY8ECmg3Hme5xGxgOxeol u4zkHAZnod0X9cCO3UCSqUrFyxXAC94UuzuTGwkEmGYRnxMKlMwE+uI9wHlGHYT0 e8xUtWzMDqF4pXRsEzSd7OzK1wMolHC2yLZgY9ca/8W8uyjdAiKSqQPsX9VdZGlI 8ksMv2n6kP9xhQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client