This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json) Hash identifier: 2ezHCV4pFN9CHRC+k4bjvDaC9g6sI0ZQADvq9IRD5PE= Subject key identifier: DF:FE:0C:1A:C9:89:7C:3B:CF:03:60:8E:29:BF:10:19:FF:98:F3:32 Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Certificate serial: 019AF50A080F832D0C3BA47DE90200A77E12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft Manifest number: 07EC Signing time: Sat 06 Dec 2025 19:01:06 +0000 Manifest this update: Sat 06 Dec 2025 19:01:06 +0000 Manifest next update: Sun 07 Dec 2025 19:01:06 +0000 Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=) 2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: WJly3nBczuTQ5ZjblL8WiYsdX7UIB0kg238pAhzzcB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:08:0f:83:2d:0c:3b:a4:7d:e9:02:00:a7:7e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8 Validity Not Before: Dec 6 19:01:06 2025 GMT Not After : Dec 7 19:01:06 2025 GMT Subject: CN=dffe0c1ac9897c3bcf03608e29bf1019ff98f332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:43:ae:b1:89:da:8a:d0:12:e4:0d:13:7e: ef:4e:40:77:ce:72:85:48:f2:84:ee:e8:c5:c8:c3: aa:d5:0e:33:bd:5d:ab:86:01:04:17:1b:e3:f7:80: 71:7f:63:3a:e3:a6:6f:82:ea:6b:58:ba:d7:f4:42: 8c:c5:fa:ee:4d:0e:35:9b:cf:b1:f2:b5:80:a7:2c: 05:7c:10:77:9e:10:15:1c:d8:a9:e8:e1:5d:cd:46: 06:b0:30:45:f6:6c:31:de:bf:a9:b2:38:a8:c6:3d: 9f:43:56:d0:39:e6:c4:cf:63:01:fd:c5:99:39:0f: 08:37:fc:e3:ed:d8:0f:b7:83:93:e2:14:0c:7c:a2: 3d:51:ab:29:fb:e6:6b:12:24:8b:5d:a0:a5:95:ef: ef:c4:87:b0:e7:fc:43:fd:29:7c:7e:dc:fc:7d:e1: 95:5c:9f:d4:a5:46:03:64:4a:dc:25:99:a8:ba:7d: d2:52:c4:84:b8:45:9e:c4:0d:a5:3b:f4:7a:d3:8c: 56:d8:8a:74:9f:a9:ff:fd:4d:0b:bd:09:1f:cf:37: 9e:b1:03:92:75:0f:a4:53:8b:d9:cd:4f:cb:90:7f: 82:fd:76:61:8d:24:c2:07:11:ab:54:36:1d:91:fd: 27:ac:de:28:38:27:c2:29:52:6c:f5:35:5a:a8:f1: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:0C:1A:C9:89:7C:3B:CF:03:60:8E:29:BF:10:19:FF:98:F3:32 X509v3 Authority Key Identifier: keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:69:a7:b5:0a:ff:a1:e2:65:db:36:96:70:c8:86:18:4e: 01:1b:39:da:40:1e:e9:4b:ac:4d:c0:1e:9a:ae:09:18:42:1f: ad:40:32:13:26:12:f6:13:89:09:41:cc:35:0a:e4:51:9e:57: 4b:92:5e:24:06:3e:e6:c5:e1:f2:62:41:11:29:1c:25:f6:df: 36:05:87:ab:1f:9b:0d:df:b8:6b:46:16:11:22:47:47:fe:5f: f7:da:0c:9c:94:77:b7:f0:3c:ad:01:63:35:d7:34:17:b9:aa: 83:86:eb:20:18:6a:08:11:66:e7:17:78:75:e8:1d:a5:52:39: 70:6b:96:e8:58:2b:57:78:fb:c1:6c:26:ad:3f:68:10:ff:96: eb:55:01:75:7f:68:5e:db:cc:04:f9:c4:7c:ed:ac:a3:95:2d: 07:96:ac:fa:a8:39:f9:79:fa:5c:39:59:09:ed:ee:a1:63:63: af:bf:7f:48:36:a5:74:5d:68:ea:45:2a:7a:2e:b2:8d:65:86: b9:05:d0:e1:47:8c:e1:6e:76:47:ee:31:71:8d:6f:07:95:09: a3:b9:02:25:86:80:c7:bc:9f:bc:27:6c:87:6e:0b:1c:d0:2d: 0b:6e:66:74:01:70:68:7f:5a:82:be:fc:3c:79:a9:4b:6a:7b: d4:57:e4:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CggPgy0MO6R96QIAp34SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi NmY5ZjgwHhcNMjUxMjA2MTkwMTA2WhcNMjUxMjA3MTkwMTA2WjAzMTEwLwYDVQQD EyhkZmZlMGMxYWM5ODk3YzNiY2YwMzYwOGUyOWJmMTAxOWZmOThmMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr1DrrGJ2orQEuQNE37vTkB3znKF SPKE7ujFyMOq1Q4zvV2rhgEEFxvj94Bxf2M646ZvguprWLrX9EKMxfruTQ41m8+x 8rWApywFfBB3nhAVHNip6OFdzUYGsDBF9mwx3r+psjioxj2fQ1bQOebEz2MB/cWZ OQ8IN/zj7dgPt4OT4hQMfKI9Uasp++ZrEiSLXaClle/vxIew5/xD/Sl8ftz8feGV XJ/UpUYDZErcJZmoun3SUsSEuEWexA2lO/R604xW2Ip0n6n//U0LvQkfzzeesQOS dQ+kU4vZzU/LkH+C/XZhjSTCBxGrVDYdkf0nrN4oOCfCKVJs9TVaqPH4YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/+DBrJiXw7zwNgjim/EBn/mPMyMB8GA1UdIwQY MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqhpp7UK /6HiZds2lnDIhhhOARs52kAe6UusTcAemq4JGEIfrUAyEyYS9hOJCUHMNQrkUZ5X S5JeJAY+5sXh8mJBESkcJfbfNgWHqx+bDd+4a0YWESJHR/5f99oMnJR3t/A8rQFj Ndc0F7mqg4brIBhqCBFm5xd4degdpVI5cGuW6FgrV3j7wWwmrT9oEP+W61UBdX9o XtvMBPnEfO2so5UtB5as+qg5+Xn6XDlZCe3uoWNjr79/SDaldF1o6kUqei6yjWWG uQXQ4UeM4W52R+4xcY1vB5UJo7kCJYaAx7yfvCdsh24LHNAtC25mdAFwaH9agr78 PHmpS2p71Ffk3A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:31 2025 by rpki-client