This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json) Hash identifier: Od/+pUVL6At1kG/1VKXIdM2DVWD0N4rWlCxaV/svnhY= Subject key identifier: 99:8A:F3:B5:21:72:7B:7F:1E:16:EA:8F:BC:E1:30:37:D3:C2:69:D4 Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Certificate serial: 019AF19BA76F05DB08E7250DE1090519DF34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft Manifest number: 1079 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=) 2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: vkw91TruElog8Qq73q5fYL0zWPYRhkdz68E1mgDxisE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a7:6f:05:db:08:e7:25:0d:e1:09:05:19:df:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=998af3b521727b7f1e16ea8fbce13037d3c269d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:55:18:1a:6c:69:79:2f:db:8e:96:e9:11: 6d:4b:a4:5b:66:2e:2b:fd:74:bb:8b:31:8d:93:90: af:7e:74:4d:eb:e4:3e:30:9c:96:ab:35:8a:43:0a: 15:88:7e:25:f9:3a:e6:0e:7c:4d:42:6d:4a:8d:e9: 62:c1:82:a1:14:51:25:4d:9b:f5:68:84:2e:d8:95: 2d:b9:8a:62:17:52:c3:35:db:16:29:88:c1:c9:0f: c0:be:80:44:37:5a:f1:8f:c0:15:52:e5:38:93:43: 94:7e:20:3e:b5:9c:3e:eb:aa:47:58:ad:2b:43:10: ee:de:48:2b:5c:46:9f:ef:d2:e0:4c:e5:94:c9:11: fa:b8:51:8b:0b:2c:a2:69:fe:3f:ac:2d:fc:f3:34: 23:92:eb:72:ab:48:c0:6a:4b:17:e9:39:90:e0:85: cd:50:1f:92:ed:69:d9:0e:50:1e:71:1a:59:9d:09: a2:2e:b9:8f:b2:9c:fa:cd:67:9c:f5:eb:46:a9:2b: ab:d0:0d:9e:4d:56:94:5b:b7:38:f2:c9:c3:6c:26: ea:70:9a:c1:f4:69:c9:ff:de:be:1e:ea:c9:07:e2: f7:f2:6c:18:3e:51:ee:e2:5a:90:b6:e7:33:97:db: 5b:89:67:73:82:60:e2:b1:3d:4d:35:3d:56:80:b5: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8A:F3:B5:21:72:7B:7F:1E:16:EA:8F:BC:E1:30:37:D3:C2:69:D4 X509v3 Authority Key Identifier: keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c4:6f:83:0f:d6:90:72:d9:b8:45:dd:72:a6:a0:6a:5b:89: 9e:56:a0:5a:d6:33:7f:dd:0e:ab:03:93:37:6a:b4:68:46:fb: 4a:cc:5b:14:74:85:e1:85:65:43:58:06:3a:37:fd:5e:51:5d: ea:e2:d0:87:79:e0:ec:e2:ae:51:a1:fa:ae:cc:cc:18:b4:47: ed:05:59:96:83:e6:cd:66:02:76:bd:46:df:84:ce:cd:c3:47: af:08:02:fa:45:a1:46:09:fe:cd:d1:70:58:e6:b5:27:e3:76: 4b:8e:06:34:06:ba:2a:51:43:fe:5e:5c:31:4b:d0:47:7e:38: b9:5c:bf:7e:f5:dd:05:30:ee:28:95:ae:97:16:c8:85:9f:59: 68:00:c6:7e:0f:d6:37:29:2a:68:0b:ad:93:e0:17:50:f5:45: 4e:a5:62:35:25:72:40:8e:65:8d:cb:b9:63:c3:30:83:28:4c: 93:8d:82:a1:55:5a:1d:8b:75:43:9b:34:60:36:bd:5e:45:1c: d5:06:b3:f8:c3:fb:43:18:1c:6f:ff:87:df:b7:23:65:1c:c9: 6b:d8:62:74:fc:cf:3a:9a:51:d1:dc:e2:3d:cb:4c:68:7f:46: ca:d3:09:08:8a:6f:72:80:19:6a:e0:c6:bc:31:08:04:d7:8c: 1e:5c:78:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6dvBdsI5yUN4QkFGd80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDI5ZGU4YmNjM2JlNDc0YWJiZGEyYmUyYTg5ZDBmMzIw OGMzODUwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg5OThhZjNiNTIxNzI3YjdmMWUxNmVhOGZiY2UxMzAzN2QzYzI2OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIpVGBpsaXkv246W6RFtS6RbZi4r /XS7izGNk5CvfnRN6+Q+MJyWqzWKQwoViH4l+TrmDnxNQm1KjeliwYKhFFElTZv1 aIQu2JUtuYpiF1LDNdsWKYjByQ/AvoBEN1rxj8AVUuU4k0OUfiA+tZw+66pHWK0r QxDu3kgrXEaf79LgTOWUyRH6uFGLCyyiaf4/rC388zQjkutyq0jAaksX6TmQ4IXN UB+S7WnZDlAecRpZnQmiLrmPspz6zWec9etGqSur0A2eTVaUW7c48snDbCbqcJrB 9GnJ/96+HurJB+L38mwYPlHu4lqQtuczl9tbiWdzgmDisT1NNT1WgLWuhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmK87Uhcnt/Hhbqj7zhMDfTwmnUMB8GA1UdIwQY MBaAFJdCnei8w75HSrvaK+KonQ8yCMOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMt MDQ5YmRjNmI4ZWYzLzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85OTExYWMtNGNmMi00ZWU1LThkNjMtMDQ5YmRjNmI4ZWYz LzEvbDBLZDZMekR2a2RLdTlvcjRxaWREeklJdzRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8Rvgw/W kHLZuEXdcqagaluJnlagWtYzf90OqwOTN2q0aEb7SsxbFHSF4YVlQ1gGOjf9XlFd 6uLQh3ng7OKuUaH6rszMGLRH7QVZloPmzWYCdr1G34TOzcNHrwgC+kWhRgn+zdFw WOa1J+N2S44GNAa6KlFD/l5cMUvQR344uVy/fvXdBTDuKJWulxbIhZ9ZaADGfg/W NykqaAutk+AXUPVFTqViNSVyQI5ljcu5Y8MwgyhMk42CoVVaHYt1Q5s0YDa9XkUc 1Qaz+MP7Qxgcb/+H37cjZRzJa9hidPzPOppR0dziPctMaH9GytMJCIpvcoAZauDG vDEIBNeMHlx4Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:58 2025 by rpki-client