This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json) Hash identifier: z14KujtsrLjV2TKc9c9nLvy7bI+K0vtXP4cYQkqKwb8= Subject key identifier: 64:21:09:DC:69:17:D3:3E:37:1B:F0:6A:D1:B0:7A:FB:C9:67:5C:FD Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90 Certificate serial: 019B32D65A0C26D22B85AE6B6045E1839D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft Manifest number: 149B Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=) 2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=) 3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 5Wc3xT3zzzwpBUQvcAjJCzDGYHhVRWphr/CQq5reJqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5a:0c:26:d2:2b:85:ae:6b:60:45:e1:83:9d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90 Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=642109dc6917d33e371bf06ad1b07afbc9675cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:7c:f5:e6:ad:94:97:dd:e6:05:2b:30:29: 24:92:65:f7:f1:cb:35:15:1c:04:dd:0b:56:f4:61: 88:14:f9:89:3a:05:66:33:92:19:93:ef:ad:4c:7e: 49:88:83:59:ce:0b:55:9c:35:3b:eb:94:e4:ba:9b: 6c:e8:d0:c8:55:19:99:b6:4f:b3:f0:4b:73:42:0b: eb:04:fa:e1:f9:4b:51:db:10:19:3a:13:06:2e:6a: f3:b7:46:4d:fc:1f:29:cc:c5:f0:e1:b8:d1:ce:29: 95:91:5a:d2:ed:64:1e:76:9a:3c:d9:a8:8b:43:cb: 28:df:c2:45:d8:c4:50:2f:82:cc:b0:ae:f5:69:7e: 79:89:57:50:df:51:94:48:38:48:0e:ed:c0:d0:7e: 1e:03:b1:c7:97:fa:f5:06:57:08:61:42:b1:e0:b7: 5d:43:88:af:d1:30:24:b1:d1:55:c6:63:15:e9:2a: 01:21:99:43:17:cb:d8:07:15:d8:db:eb:8c:09:02: c2:4c:3c:f9:75:ca:27:b0:5e:ef:bf:e6:df:ed:54: a7:ad:36:bf:f3:c2:3d:f8:b8:c2:49:ba:00:94:34: e2:ba:42:9e:90:6d:bb:0b:98:15:98:db:31:f5:dd: 0a:5c:55:4e:93:68:dc:d0:77:d0:bd:d5:6c:83:95: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:21:09:DC:69:17:D3:3E:37:1B:F0:6A:D1:B0:7A:FB:C9:67:5C:FD X509v3 Authority Key Identifier: keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5e:af:7f:f8:d2:a9:b8:4b:9c:0f:72:8b:1a:12:f7:d4:3a: 11:ee:82:af:92:ed:0d:4b:b4:31:34:88:3e:15:c7:02:fe:55: 78:c8:52:2f:72:89:1f:85:69:dd:da:28:7d:ff:03:58:cb:f5: f7:27:c8:9d:fb:66:d9:71:15:f3:a8:cc:ab:3a:09:dd:00:16: ce:ae:2d:3b:c4:a0:6e:06:34:56:24:10:2d:cb:0a:c4:e2:4d: c6:b4:fb:b6:20:3a:c5:2b:f6:67:4e:b7:c3:f0:bc:e7:38:e5: 85:5c:57:7d:6f:82:7d:64:96:b1:ad:48:eb:9b:90:f6:a0:18: 80:10:c1:6e:f2:0b:f2:e2:62:93:2c:82:bc:81:b8:37:e7:73: 81:ab:82:6d:35:7c:95:23:0a:b3:e9:ed:6e:4b:ac:58:2b:85: 1d:88:3a:23:86:58:2a:a7:66:5b:61:c3:4b:56:f7:97:8f:3b: 71:ca:d3:26:8a:e6:67:2e:ae:ab:13:1c:b7:10:99:4e:de:92: c0:e2:b6:ef:95:21:c8:a5:18:b1:20:11:32:2d:e3:31:54:64: e6:73:3f:b7:8a:df:a6:c4:38:65:3c:ec:11:a1:df:3e:82:48: f0:d4:ca:7f:0e:e6:9d:0a:30:b1:e2:a2:9d:f6:c7:fa:33:02: 96:06:74:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1loMJtIrha5rYEXhg51IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0 OWNhOTAwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD Eyg2NDIxMDlkYzY5MTdkMzNlMzcxYmYwNmFkMWIwN2FmYmM5Njc1Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGN89eatlJfd5gUrMCkkkmX38cs1 FRwE3QtW9GGIFPmJOgVmM5IZk++tTH5JiINZzgtVnDU765Tkupts6NDIVRmZtk+z 8EtzQgvrBPrh+UtR2xAZOhMGLmrzt0ZN/B8pzMXw4bjRzimVkVrS7WQedpo82aiL Q8so38JF2MRQL4LMsK71aX55iVdQ31GUSDhIDu3A0H4eA7HHl/r1BlcIYUKx4Ldd Q4iv0TAksdFVxmMV6SoBIZlDF8vYBxXY2+uMCQLCTDz5dconsF7vv+bf7VSnrTa/ 88I9+LjCSboAlDTiukKekG27C5gVmNsx9d0KXFVOk2jc0HfQvdVsg5XV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQhCdxpF9M+NxvwatGwevvJZ1z9MB8GA1UdIwQY MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt ZGU0YWNjYjAwZGQ3LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3 LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg16vf/jS qbhLnA9yixoS99Q6Ee6Cr5LtDUu0MTSIPhXHAv5VeMhSL3KJH4Vp3dooff8DWMv1 9yfInftm2XEV86jMqzoJ3QAWzq4tO8SgbgY0ViQQLcsKxOJNxrT7tiA6xSv2Z063 w/C85zjlhVxXfW+CfWSWsa1I65uQ9qAYgBDBbvIL8uJikyyCvIG4N+dzgauCbTV8 lSMKs+ntbkusWCuFHYg6I4ZYKqdmW2HDS1b3l487ccrTJormZy6uqxMctxCZTt6S wOK275UhyKUYsSARMi3jMVRk5nM/t4rfpsQ4ZTzsEaHfPoJI8NTKfw7mnQowseKi nfbH+jMClgZ0QA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:36:21 2025 by rpki-client