This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json) Hash identifier: 4ZnatV7Pm529C9MhJ2ArEkX2bZ13jirF6lh++4mRtso= Subject key identifier: E0:6F:CB:23:05:87:41:0D:C0:15:BC:80:CC:84:76:D7:DE:74:50:65 Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a Certificate serial: 019AF12D9A4B6567DE319873B13D1BBEBFB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft Manifest number: 0490 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: xExwbDVKvl/lmICfkvsNx5hYmM8bmPYEzQyS0eGvI0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9a:4b:65:67:de:31:98:73:b1:3d:1b:be:bf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=e06fcb230587410dc015bc80cc8476d7de745065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a1:c2:89:7a:c8:6d:ad:9c:51:0a:e1:24:45: 8d:7b:15:46:4b:1d:37:5c:bc:48:3e:8b:e9:ad:35: ca:a9:fe:0c:10:58:ec:32:9a:a4:51:06:2c:02:30: 6d:e4:72:37:fd:e5:23:1c:bf:aa:90:d8:16:c8:67: fd:0c:57:b8:0e:d4:52:4c:30:7a:47:12:2d:a2:a7: 79:ae:af:c0:be:2c:9e:1d:64:09:a0:3d:90:aa:03: b1:a6:4b:e0:c6:00:ab:47:02:3a:84:ee:25:e1:f1: 2c:e1:ac:53:6b:7d:a5:e9:33:8c:80:8e:e5:3f:3a: 35:ad:d5:85:f4:9e:99:c9:7f:69:60:f2:5a:ac:7f: bf:ae:63:f4:77:2d:59:95:7c:f9:8a:d4:59:ae:de: e3:48:43:56:46:df:89:9b:c3:3f:e8:33:83:0d:4c: 5f:0b:07:87:6b:9e:3c:44:be:5a:22:3f:4d:61:f5: 0b:d7:ef:d6:ff:46:c8:4c:0f:36:b2:f1:b2:57:29: ad:8f:2e:c8:23:f0:d5:87:57:2a:4b:ff:6c:98:8e: 2a:48:2f:15:ff:5b:3f:75:4f:49:5c:41:db:f2:94: 14:e8:3e:d4:28:de:f3:9c:b6:8d:6d:52:8a:bb:10: 90:49:ca:54:12:34:48:65:d5:61:46:a3:61:a5:e9: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6F:CB:23:05:87:41:0D:C0:15:BC:80:CC:84:76:D7:DE:74:50:65 X509v3 Authority Key Identifier: keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8e:dc:f8:45:c4:3f:18:62:0d:7f:06:e6:19:e0:63:d0:89: 01:5e:76:cb:4e:68:ee:cd:ca:cc:f0:25:a4:94:e8:69:e0:55: 45:5c:98:76:db:46:b2:29:d1:8b:37:f0:fd:a0:82:0f:ed:ed: 84:b2:b2:63:a6:9d:3c:8c:65:50:04:d4:03:da:58:0d:e6:8f: 56:b8:d6:9e:8f:b7:2c:80:88:cb:58:c2:42:0c:83:b6:36:f3: f2:47:73:51:3d:1b:6a:ce:5f:94:e2:cb:eb:b9:2f:58:fe:3d: 68:5d:4e:f5:a5:1c:d3:1c:cf:d7:e6:6b:1e:68:2c:5a:4b:ca: 9e:6b:7c:5a:fc:e9:b8:7b:b5:c3:77:25:43:5f:f2:db:de:0a: 7e:33:88:99:3f:43:34:30:94:06:43:36:38:26:39:68:a5:55: 8c:0d:0a:ea:4f:4e:2d:a1:9b:cb:d9:ee:fe:bd:c3:b7:2b:04: dc:52:96:28:13:0a:c9:cf:96:a6:3b:c3:e9:1c:e4:87:28:13: 23:d1:e6:0d:46:37:c9:0b:34:0e:33:bb:a2:97:1b:bb:49:6d: 5b:e0:89:58:93:03:28:13:64:a5:99:91:50:66:62:49:75:9f: 24:11:90:66:21:b8:8b:50:1e:78:31:dc:32:59:40:90:91:56: 95:82:94:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZpLZWfeMZhzsT0bvr+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTQ4YmQ2ZjJhZDE1OGU2MjRmZDhlODllOWVmNWYxYmRi MWQzOWEwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EyhlMDZmY2IyMzA1ODc0MTBkYzAxNWJjODBjYzg0NzZkN2RlNzQ1MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aHCiXrIba2cUQrhJEWNexVGSx03 XLxIPovprTXKqf4MEFjsMpqkUQYsAjBt5HI3/eUjHL+qkNgWyGf9DFe4DtRSTDB6 RxItoqd5rq/AviyeHWQJoD2QqgOxpkvgxgCrRwI6hO4l4fEs4axTa32l6TOMgI7l Pzo1rdWF9J6ZyX9pYPJarH+/rmP0dy1ZlXz5itRZrt7jSENWRt+Jm8M/6DODDUxf CweHa548RL5aIj9NYfUL1+/W/0bITA82svGyVymtjy7II/DVh1cqS/9smI4qSC8V /1s/dU9JXEHb8pQU6D7UKN7znLaNbVKKuxCQScpUEjRIZdVhRqNhpenb1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBvyyMFh0ENwBW8gMyEdtfedFBlMB8GA1UdIwQY MBaAFJeUi9byrRWOYk/Y6J6e9fG9sdOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgt YTZjNTAwMGM3MTg0LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNzI3YmYtNzcwOS00YjMzLWI2MTgtYTZjNTAwMGM3MTg0 LzEvbDVTTDF2S3RGWTVpVDlqb25wNzE4YjJ4MDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI7c+EXE PxhiDX8G5hngY9CJAV52y05o7s3KzPAlpJToaeBVRVyYdttGsinRizfw/aCCD+3t hLKyY6adPIxlUATUA9pYDeaPVrjWno+3LICIy1jCQgyDtjbz8kdzUT0bas5flOLL 67kvWP49aF1O9aUc0xzP1+ZrHmgsWkvKnmt8WvzpuHu1w3clQ1/y294KfjOImT9D NDCUBkM2OCY5aKVVjA0K6k9OLaGby9nu/r3DtysE3FKWKBMKyc+WpjvD6RzkhygT I9HmDUY3yQs0DjO7opcbu0ltW+CJWJMDKBNkpZmRUGZiSXWfJBGQZiG4i1AeeDHc MllAkJFWlYKUnw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:35 2025 by rpki-client