This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json) Hash identifier: wtj979EnhHm018iZ3+J4jC21ot84Jh20LWqr7pCLt1E= Subject key identifier: B1:C9:AD:34:A6:E0:68:0A:61:68:74:1B:92:FA:98:18:2C:7A:C1:71 Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5 Certificate serial: 019AF12DBED5785361F26928F31A4C0A276D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: 1FRv6Rfe3VZkJKUGcGGUKLjZx78J9j5pzTH5SKDrk4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:be:d5:78:53:61:f2:69:28:f3:1a:4c:0a:27:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5 Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=b1c9ad34a6e0680a6168741b92fa98182c7ac171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:ac:55:b7:8a:76:a3:d6:29:e8:c0:23:9d: 57:6d:38:b6:99:15:62:3c:5b:d8:57:79:17:b7:a1: 3a:78:29:9c:0e:a7:24:92:a3:10:9b:8e:c1:41:24: 31:df:34:33:d3:df:d4:7f:59:1f:a4:95:87:7a:2a: 3c:2e:1b:bb:93:0d:e9:5e:a5:4c:bc:86:25:c9:ce: d1:11:6f:3f:40:07:5e:1d:37:52:d4:78:20:ec:9f: 73:36:d6:74:d9:3c:e5:12:d6:e2:b7:13:3c:59:d6: bc:e4:ac:de:68:68:75:97:5f:01:96:8f:68:76:98: b1:dd:7a:6d:a6:2d:84:b1:3f:b6:84:6d:e7:55:75: 69:00:53:b6:28:25:71:73:71:1f:f6:8b:9b:37:26: c0:63:0c:f2:22:83:78:04:ff:56:7b:27:d1:f8:90: 00:b4:41:bf:31:37:f8:17:a7:73:23:25:25:48:d5: 2a:5b:0b:2e:b3:8d:e9:b0:56:11:73:df:82:8d:89: 76:52:c1:61:2f:0c:4f:ff:72:9a:34:fb:1a:5c:66: fe:30:e3:88:93:08:6e:66:36:2b:db:71:fd:7e:74: 9c:90:f9:3d:a9:1a:1e:5f:62:e7:f8:36:9a:12:8f: c7:c7:da:06:fe:99:ab:f6:dd:5c:b7:e4:09:bc:13: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C9:AD:34:A6:E0:68:0A:61:68:74:1B:92:FA:98:18:2C:7A:C1:71 X509v3 Authority Key Identifier: keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:90:e4:1a:66:c9:70:47:93:34:ba:04:71:ce:d8:7e:9e:da: 91:de:05:62:cf:6d:c9:c3:7c:b9:6b:51:35:43:51:28:98:aa: 2f:96:3e:fa:f1:52:60:cd:88:e5:ca:a3:62:6f:10:e5:67:dd: 39:84:35:5e:db:dd:51:da:87:bd:a3:43:b4:74:44:89:0c:a6: 1e:72:86:be:38:40:dc:df:f9:f5:ba:62:3f:4c:a5:84:3e:fc: f4:81:91:03:33:a4:ce:54:a3:b4:35:0a:46:27:07:bf:70:81: 42:46:40:26:c7:0c:f3:59:de:ec:27:ca:9d:bd:66:b0:04:1f: 00:7f:ab:6c:4c:a9:94:9b:77:8f:18:70:09:7b:97:88:f7:bf: 47:6d:1e:c8:c4:bc:db:47:62:9e:c0:7e:05:39:f1:a8:c3:2e: 53:21:99:00:c5:bf:5f:df:19:13:5c:9e:34:60:20:ef:1a:0d: a0:5e:11:29:d0:21:dd:c8:7d:49:e0:34:00:77:52:4d:a3:9c: a9:39:f5:1e:f9:c4:72:ab:1f:f8:51:f7:28:b4:44:b4:c0:3b: 19:4c:1c:f9:f0:7f:9c:b0:f2:6f:2c:c3:e7:6d:7e:03:b8:c7: 3b:09:0a:2e:ea:26:e9:db:78:50:8d:db:67:b9:c4:b2:4b:41: 80:87:02:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLb7VeFNh8mko8xpMCidtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm Y2ExYTUwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EyhiMWM5YWQzNGE2ZTA2ODBhNjE2ODc0MWI5MmZhOTgxODJjN2FjMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXKsVbeKdqPWKejAI51XbTi2mRVi PFvYV3kXt6E6eCmcDqckkqMQm47BQSQx3zQz09/Uf1kfpJWHeio8Lhu7kw3pXqVM vIYlyc7REW8/QAdeHTdS1Hgg7J9zNtZ02TzlEtbitxM8Wda85KzeaGh1l18Blo9o dpix3Xptpi2EsT+2hG3nVXVpAFO2KCVxc3Ef9oubNybAYwzyIoN4BP9WeyfR+JAA tEG/MTf4F6dzIyUlSNUqWwsus43psFYRc9+CjYl2UsFhLwxP/3KaNPsaXGb+MOOI kwhuZjYr23H9fnSckPk9qRoeX2Ln+DaaEo/Hx9oG/pmr9t1ct+QJvBNeJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHJrTSm4GgKYWh0G5L6mBgsesFxMB8GA1UdIwQY MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5 LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpDkGmbJ cEeTNLoEcc7Yfp7akd4FYs9tycN8uWtRNUNRKJiqL5Y++vFSYM2I5cqjYm8Q5Wfd OYQ1XtvdUdqHvaNDtHREiQymHnKGvjhA3N/59bpiP0ylhD789IGRAzOkzlSjtDUK RicHv3CBQkZAJscM81ne7CfKnb1msAQfAH+rbEyplJt3jxhwCXuXiPe/R20eyMS8 20dinsB+BTnxqMMuUyGZAMW/X98ZE1yeNGAg7xoNoF4RKdAh3ch9SeA0AHdSTaOc qTn1HvnEcqsf+FH3KLREtMA7GUwc+fB/nLDybyzD521+A7jHOwkKLuom6dt4UI3b Z7nEsktBgIcCMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:54 2025 by rpki-client