This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft File: L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json) Hash identifier: /FkWCBNipyIhoD538P+njF90i0f1xJMu6V/P0N2UnzA= Subject key identifier: 03:C5:D5:D9:76:D3:4B:7E:E3:D7:C9:A1:FD:F2:EB:37:7E:7B:2F:89 Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2 Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2 Certificate serial: 019B2551A50D7961A155D52B301AD076EC28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft Manifest number: 16E4 Signing time: Tue 16 Dec 2025 04:01:06 +0000 Manifest this update: Tue 16 Dec 2025 04:01:06 +0000 Manifest next update: Wed 17 Dec 2025 04:01:06 +0000 Files and hashes: 1: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: L3VNv6jaDApMmA/qNkbQYRIISmEkJlwdy4NferOK/DY=) 2: vG-sL64PzFjoHvBKrdJSTxY4LJY.roa (hash: eq6XQDgluMAH7RNgHwEJGrW57NnrxZaKBUUVn7gebfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:a5:0d:79:61:a1:55:d5:2b:30:1a:d0:76:ec:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2 Validity Not Before: Dec 16 04:01:06 2025 GMT Not After : Dec 17 04:01:06 2025 GMT Subject: CN=03c5d5d976d34b7ee3d7c9a1fdf2eb377e7b2f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:4c:ef:41:c8:c1:90:33:95:3f:bb:5b:76: 25:5e:27:83:c9:b4:d5:b8:2e:ae:82:27:ef:75:f8: 7d:f6:99:88:3a:c8:94:4e:b1:6b:69:e6:0e:84:80: 0b:00:75:9e:ad:ec:4f:ae:c7:92:28:41:ea:10:95: df:78:cb:c8:5e:d1:7a:2f:dc:af:8e:77:ff:89:38: 74:49:ad:c7:51:ee:aa:01:26:78:a5:c1:5e:ae:28: 57:26:cf:4f:04:37:14:52:98:e4:ac:65:a3:ba:d1: 71:d1:3c:12:07:88:48:a2:4c:d6:eb:45:9a:59:f3: 18:6d:5b:0e:78:6b:83:cb:e5:d9:f6:af:f1:31:ac: 54:8d:61:a1:66:01:0d:89:47:5f:cf:9a:12:92:15: 29:68:8f:4a:e0:29:c1:cf:df:2b:2d:10:dc:23:cb: 12:7c:2a:7d:71:fd:14:95:ef:49:46:d0:d0:15:fa: 91:e0:9e:3d:b5:41:40:60:79:73:39:dc:a6:67:fa: a5:9e:a8:b6:38:63:6f:6a:8e:fd:eb:6e:22:77:5c: 9b:d3:bd:7a:55:84:43:2c:5b:55:c5:c8:eb:36:b4: 9a:dd:a3:67:5a:a8:03:e3:52:2c:26:a4:ba:14:87: 37:a7:11:cd:3e:b9:80:ed:21:bd:00:6d:d7:98:a8: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C5:D5:D9:76:D3:4B:7E:E3:D7:C9:A1:FD:F2:EB:37:7E:7B:2F:89 X509v3 Authority Key Identifier: keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8a:83:ac:6d:42:8e:9c:e0:8a:4f:f7:30:8c:26:70:2c:6a: dd:90:a0:ea:a0:12:bd:70:4d:97:65:1a:94:1c:c4:7f:d4:e6: 55:de:0d:fb:0a:5f:07:bb:3b:69:ee:18:aa:c0:7f:4e:b6:3e: 7c:40:45:17:de:b8:e0:fc:9a:7a:d0:32:95:03:7d:c9:0e:a1: ef:0f:be:8d:7e:20:db:60:1e:74:b0:cc:90:90:d6:20:68:79: 87:63:5e:d4:3d:c2:2c:ed:ab:25:2c:a6:e0:e7:5e:87:c9:ec: 1d:74:13:45:06:8b:5a:f6:17:dd:d2:cf:0a:71:de:63:6d:84: c9:e8:e8:e1:d5:e8:4a:13:9f:c8:e5:25:cf:35:d7:f7:2b:cb: 17:82:77:79:92:87:fc:ad:b3:d9:2e:7b:9d:a1:77:b9:49:dd: 81:fc:81:00:06:80:69:b9:08:f3:16:50:f1:4b:56:34:6e:1c: 75:ae:0d:3b:74:e5:0d:35:f5:7e:1d:b8:8e:5f:64:6d:7f:49: 01:21:f9:0a:e8:6a:52:ec:62:50:59:0c:60:aa:49:c6:24:3d: 34:2d:60:a5:74:d8:23:6e:4b:0a:1a:33:16:91:be:86:bc:33: b7:2c:4a:09:6f:61:6f:cb:89:f2:5a:eb:6e:cc:ae:58:3e:2c: a5:73:7c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUaUNeWGhVdUrMBrQduwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky OGU5YjIwHhcNMjUxMjE2MDQwMTA2WhcNMjUxMjE3MDQwMTA2WjAzMTEwLwYDVQQD EygwM2M1ZDVkOTc2ZDM0YjdlZTNkN2M5YTFmZGYyZWIzNzdlN2IyZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytFM70HIwZAzlT+7W3YlXieDybTV uC6ugifvdfh99pmIOsiUTrFraeYOhIALAHWerexPrseSKEHqEJXfeMvIXtF6L9yv jnf/iTh0Sa3HUe6qASZ4pcFerihXJs9PBDcUUpjkrGWjutFx0TwSB4hIokzW60Wa WfMYbVsOeGuDy+XZ9q/xMaxUjWGhZgENiUdfz5oSkhUpaI9K4CnBz98rLRDcI8sS fCp9cf0Ule9JRtDQFfqR4J49tUFAYHlzOdymZ/qlnqi2OGNvao79624id1yb0716 VYRDLFtVxcjrNrSa3aNnWqgD41IsJqS6FIc3pxHNPrmA7SG9AG3XmKgfvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPF1dl200t+49fJof3y6zd+ey+JMB8GA1UdIwQY MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt OWU1ZjkwNTM4MzM2LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2 LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4qDrG1C jpzgik/3MIwmcCxq3ZCg6qASvXBNl2UalBzEf9TmVd4N+wpfB7s7ae4YqsB/TrY+ fEBFF9644PyaetAylQN9yQ6h7w++jX4g22AedLDMkJDWIGh5h2Ne1D3CLO2rJSym 4Odeh8nsHXQTRQaLWvYX3dLPCnHeY22Eyejo4dXoShOfyOUlzzXX9yvLF4J3eZKH /K2z2S57naF3uUndgfyBAAaAabkI8xZQ8UtWNG4cda4NO3TlDTX1fh24jl9kbX9J ASH5CuhqUuxiUFkMYKpJxiQ9NC1gpXTYI25LChozFpG+hrwztyxKCW9hb8uJ8lrr bsyuWD4spXN8aA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:11 2025 by rpki-client