This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json) Hash identifier: RS1Edm+2pegfEUA309DV5cH14FqjbDeit+M31y2ubrs= Subject key identifier: 37:2E:5E:F0:F2:9F:85:D7:28:5C:8A:9C:D5:B1:F9:BF:20:C2:1A:2C Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83 Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283 Certificate serial: 019B07EBAB5E1C983E79C7D629232E038582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 11:00:43 +0000 Manifest this update: Wed 10 Dec 2025 11:00:43 +0000 Manifest next update: Thu 11 Dec 2025 11:00:43 +0000 Files and hashes: 1: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (hash: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=) 2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: 0Zk+SIaqbKbosyuXy2Oy3JzlKJswkvfPNhLMX9i/xaQ=) 3: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (hash: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=) 4: raNLX_Rlhb8qt_iqRNHRfzz2onw.roa (hash: CXUwU+ePCPV8g/dv883GbgzoP+FoppZgtKTpY2iI3OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:ab:5e:1c:98:3e:79:c7:d6:29:23:2e:03:85:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283 Validity Not Before: Dec 10 11:00:43 2025 GMT Not After : Dec 11 11:00:43 2025 GMT Subject: CN=372e5ef0f29f85d7285c8a9cd5b1f9bf20c21a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:5e:a2:f8:ce:78:4f:b2:96:20:f8:1d:bc: 2a:8b:fc:5f:21:58:5e:49:bc:69:3b:ad:32:9b:a5: a5:c8:b5:6d:60:a7:8c:b8:e8:51:9a:ac:ef:61:0f: b1:be:90:f2:fa:57:90:a6:81:e3:3d:81:10:de:57: c3:20:48:4e:d8:0a:d7:b4:f8:ee:16:0c:93:c4:04: 51:ae:de:fd:15:46:36:00:fb:fe:5a:9b:7b:ed:02: 1c:dd:56:09:be:2b:70:c5:fe:bf:6e:af:81:44:30: 09:73:74:45:27:c3:48:10:bc:4c:35:33:40:65:f5: 51:a2:c3:e3:41:7a:fa:11:b3:36:ba:12:73:24:9e: 96:29:d3:cc:8d:f1:4c:48:aa:94:53:70:1e:49:82: af:7b:67:51:3b:02:50:4e:e2:5f:e3:c0:b9:91:28: af:6f:68:ed:92:7c:c8:1c:77:bd:8f:f8:8d:1d:c2: de:2f:f8:87:f9:5d:66:bf:37:59:7b:76:50:8e:a8: e4:9b:97:59:d7:c0:21:1c:e4:2e:dc:8f:ad:81:0e: 8c:93:79:27:4e:e2:e2:53:64:be:0b:56:0a:f4:35: 40:15:2c:bd:90:ea:85:8f:23:40:a5:68:87:60:34: ad:19:83:c7:4f:61:b3:10:d9:dd:64:ae:43:75:3a: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:5E:F0:F2:9F:85:D7:28:5C:8A:9C:D5:B1:F9:BF:20:C2:1A:2C X509v3 Authority Key Identifier: keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:78:9c:f9:93:db:d3:cf:9d:7a:88:1e:39:83:12:f6:d1:08: ee:5a:77:85:9e:f9:16:9b:73:da:13:84:f1:33:b8:b3:24:fb: dd:39:9b:8d:2f:c0:41:8e:b7:e8:8c:44:a9:b2:da:30:25:32: 33:a3:fc:27:bd:cb:e0:b7:56:cb:d4:d4:b1:50:53:1f:cc:9e: 3c:b1:c9:07:45:ee:9f:0f:2c:cb:a5:5b:dc:07:1e:4a:14:f3: 7c:61:28:25:81:b9:b5:f5:66:d4:94:8b:fb:2b:69:48:a1:b3: c1:6f:70:06:af:14:1d:64:64:98:96:93:69:8a:e0:e2:e8:a9: fb:44:79:97:ac:f5:1c:ae:9e:9e:34:91:db:5f:47:60:8d:0f: 48:0f:dd:0a:ef:66:3c:71:cc:5e:f0:56:83:d4:85:ec:c2:05: 41:0b:7f:9e:bc:ef:43:c8:ee:2c:25:1a:1c:80:87:2f:9b:2a: 04:a1:bc:ad:27:0b:17:9e:23:f7:ec:f1:6e:57:a7:f1:57:10: 02:af:e1:8d:e0:b4:1e:3c:fc:56:67:a6:61:09:5c:a8:bd:70: b7:bc:55:53:16:1a:76:ba:33:02:f3:8a:c8:9c:35:a9:32:c6: cc:35:65:ee:9e:af:54:ef:c1:83:86:eb:2b:f3:04:31:61:3e: be:2e:47:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH66teHJg+ecfWKSMuA4WCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZTViN2NjYjQwM2QzMGE0NDg1N2Q0N2M1OGNmMTM0NjU0 NmQyODMwHhcNMjUxMjEwMTEwMDQzWhcNMjUxMjExMTEwMDQzWjAzMTEwLwYDVQQD EygzNzJlNWVmMGYyOWY4NWQ3Mjg1YzhhOWNkNWIxZjliZjIwYzIxYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bdeovjOeE+yliD4Hbwqi/xfIVhe SbxpO60ym6WlyLVtYKeMuOhRmqzvYQ+xvpDy+leQpoHjPYEQ3lfDIEhO2ArXtPju FgyTxARRrt79FUY2APv+Wpt77QIc3VYJvitwxf6/bq+BRDAJc3RFJ8NIELxMNTNA ZfVRosPjQXr6EbM2uhJzJJ6WKdPMjfFMSKqUU3AeSYKve2dROwJQTuJf48C5kSiv b2jtknzIHHe9j/iNHcLeL/iH+V1mvzdZe3ZQjqjkm5dZ18AhHOQu3I+tgQ6Mk3kn TuLiU2S+C1YK9DVAFSy9kOqFjyNApWiHYDStGYPHT2GzENndZK5DdTop+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcuXvDyn4XXKFyKnNWx+b8gwhosMB8GA1UdIwQY MBaAFC/lt8y0A9MKRIV9R8WM8TRlRtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzIt MmI4ZjczNDZmMzUwLzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MWNkZmQtMmM3Mi00MjM2LWE0YzItMmI4ZjczNDZmMzUw LzEvTC1XM3pMUUQwd3BFaFgxSHhZenhOR1ZHMG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3ic+ZPb 08+deogeOYMS9tEI7lp3hZ75Fptz2hOE8TO4syT73TmbjS/AQY636IxEqbLaMCUy M6P8J73L4LdWy9TUsVBTH8yePLHJB0Xunw8sy6Vb3AceShTzfGEoJYG5tfVm1JSL +ytpSKGzwW9wBq8UHWRkmJaTaYrg4uip+0R5l6z1HK6enjSR219HYI0PSA/dCu9m PHHMXvBWg9SF7MIFQQt/nrzvQ8juLCUaHICHL5sqBKG8rScLF54j9+zxblen8VcQ Aq/hjeC0Hjz8VmemYQlcqL1wt7xVUxYadrozAvOKyJw1qTLGzDVl7p6vVO/Bg4br K/MEMWE+vi5HJw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:26:05 2025 by rpki-client