This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json) Hash identifier: coPgiYbtf006JzbAozh1hnDwX256r591G3HkyDt9LHk= Subject key identifier: 2D:66:CD:5C:36:5E:DB:A8:CF:E7:DC:AD:56:0D:04:29:49:A5:F2:E8 Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Certificate serial: 019B59E433323E7993D335CBC9655A310450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft Manifest number: 059B Signing time: Fri 26 Dec 2025 09:01:26 +0000 Manifest this update: Fri 26 Dec 2025 09:01:26 +0000 Manifest next update: Sat 27 Dec 2025 09:01:26 +0000 Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=) 2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: 7rHPH38AXwH29H0+WjdyKYIA51TXzi0Au3g77/dGzLM=) 3: mGghwIHKQBTkopfB0lg-kUS38O0.roa (hash: 2oNORn859cAJogo2Beqpp561liE7aDeTcBLJ5YZQz9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:33:32:3e:79:93:d3:35:cb:c9:65:5a:31:04:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Validity Not Before: Dec 26 09:01:26 2025 GMT Not After : Dec 27 09:01:26 2025 GMT Subject: CN=2d66cd5c365edba8cfe7dcad560d042949a5f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5a:e9:d3:a6:7f:8d:a5:56:2a:06:33:9a:f5: 67:ee:96:3d:0f:9e:d9:3f:93:31:19:eb:03:ce:31: 07:ea:fc:95:bf:7e:4e:88:37:1d:a3:93:e6:55:25: 07:fa:a9:f8:eb:35:c9:85:07:d7:ee:fe:12:78:54: c5:ac:eb:b1:e1:19:06:a5:7a:92:22:df:e5:ab:01: c3:da:03:57:9c:6c:0b:33:59:e2:b3:b4:79:b8:8f: 13:db:c1:39:bb:b3:b4:62:f8:8d:b7:2a:72:85:3d: 6d:d3:ab:eb:ca:b8:ee:05:8e:35:40:3c:7d:e8:79: 8d:4f:53:f7:e3:fc:cb:21:a8:55:ba:88:03:0f:a9: e1:cd:2c:8b:31:4a:56:b9:cf:2b:f7:63:ed:f8:c3: 02:bf:15:aa:2d:ef:5c:d0:a8:3e:ce:63:36:6a:00: f2:91:b7:0e:1d:82:f5:64:fc:eb:d1:b6:63:17:ca: 38:d3:75:9e:47:95:7c:ad:3e:71:32:21:ef:86:b4: 81:99:06:f0:07:00:a0:64:ca:16:06:e0:a0:c1:50: 6c:21:20:fc:9b:75:cf:91:84:7f:4b:67:2a:68:31: 25:56:e6:c8:7b:f6:a1:66:21:c9:f0:3c:99:61:b2: b3:ae:e5:34:71:4f:4e:a5:65:44:41:09:12:56:d3: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:CD:5C:36:5E:DB:A8:CF:E7:DC:AD:56:0D:04:29:49:A5:F2:E8 X509v3 Authority Key Identifier: keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fa:78:b9:c2:08:df:53:92:e4:cc:46:28:5f:32:90:d7:28: ed:c8:b0:27:41:a6:33:8d:90:33:39:5f:2f:c3:08:0e:a7:da: 50:9a:a7:08:59:eb:98:2d:39:21:b7:e1:19:36:0e:9f:60:66: 34:22:ab:74:59:c0:ec:39:37:c4:bd:bc:9c:98:ed:56:53:91: b3:e8:07:c9:5b:3c:e7:cc:71:6a:1e:20:5b:3a:3a:05:d7:a2: 66:b2:3e:1b:4d:79:c8:2e:ee:87:9e:b2:e2:5b:24:df:c2:1d: 70:21:5f:46:eb:75:b8:c6:2a:10:23:8f:04:bf:29:a5:0f:46: d0:19:30:23:3c:c6:30:ef:86:72:7a:bf:73:15:4f:76:60:95: 36:bf:66:2d:73:a3:a1:00:d0:db:26:b0:a0:a9:ae:c7:14:60: cc:cb:a3:ef:cd:72:f7:e0:47:e6:4c:d7:ff:e1:bc:f1:22:0c: 2b:b3:04:29:e0:a7:74:07:6d:04:2b:b7:a4:05:6c:ed:74:b5: 2b:e7:b2:59:f9:cd:b2:ac:e0:d3:db:d3:50:45:31:25:14:90: 6e:03:59:6c:b8:bf:00:9a:b9:ca:eb:03:b5:8e:3d:60:6c:c9: a0:eb:a5:4c:a5:cf:53:08:ee:85:1f:e9:2e:8d:ac:56:e9:67: d3:1b:f6:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DMyPnmT0zXLyWVaMQRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk OTBiODcwHhcNMjUxMjI2MDkwMTI2WhcNMjUxMjI3MDkwMTI2WjAzMTEwLwYDVQQD EygyZDY2Y2Q1YzM2NWVkYmE4Y2ZlN2RjYWQ1NjBkMDQyOTQ5YTVmMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91rp06Z/jaVWKgYzmvVn7pY9D57Z P5MxGesDzjEH6vyVv35OiDcdo5PmVSUH+qn46zXJhQfX7v4SeFTFrOux4RkGpXqS It/lqwHD2gNXnGwLM1nis7R5uI8T28E5u7O0YviNtypyhT1t06vryrjuBY41QDx9 6HmNT1P34/zLIahVuogDD6nhzSyLMUpWuc8r92Pt+MMCvxWqLe9c0Kg+zmM2agDy kbcOHYL1ZPzr0bZjF8o403WeR5V8rT5xMiHvhrSBmQbwBwCgZMoWBuCgwVBsISD8 m3XPkYR/S2cqaDElVubIe/ahZiHJ8DyZYbKzruU0cU9OpWVEQQkSVtPUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1mzVw2Xtuoz+fcrVYNBClJpfLoMB8GA1UdIwQY MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfp4ucII 31OS5MxGKF8ykNco7ciwJ0GmM42QMzlfL8MIDqfaUJqnCFnrmC05IbfhGTYOn2Bm NCKrdFnA7Dk3xL28nJjtVlORs+gHyVs858xxah4gWzo6BdeiZrI+G015yC7uh56y 4lsk38IdcCFfRut1uMYqECOPBL8ppQ9G0BkwIzzGMO+Gcnq/cxVPdmCVNr9mLXOj oQDQ2yawoKmuxxRgzMuj781y9+BH5kzX/+G88SIMK7MEKeCndAdtBCu3pAVs7XS1 K+eyWfnNsqzg09vTUEUxJRSQbgNZbLi/AJq5yusDtY49YGzJoOulTKXPUwjuhR/p Lo2sVuln0xv2jA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:45 2025 by rpki-client