This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json) Hash identifier: gvs2pfxh2t9aace5tju2PPvV7mO9tLav4gOXAjfbUr0= Subject key identifier: 4B:23:99:17:6C:5D:3C:0A:A5:B3:3E:27:F0:B9:3B:2B:D9:A3:EC:9F Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 019AF208B58BC94F84B23E95D4E571766AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft Manifest number: 090F Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=) 2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=) 3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: /zJU0oR3g+6KIth4C4Kec32L4puSOi+M+N61Yw2uP7Y=) 4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b5:8b:c9:4f:84:b2:3e:95:d4:e5:71:76:6a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=4b2399176c5d3c0aa5b33e27f0b93b2bd9a3ec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:a4:fc:b8:67:9d:55:f4:97:36:a2:d9:01: f7:3c:27:2b:0d:24:f8:28:29:b0:6a:12:84:19:d0: 4e:27:98:09:c6:c6:49:3a:e5:8f:4f:e4:1c:23:60: 20:6a:59:1a:74:17:23:65:9e:e8:78:48:72:3c:a1: 56:15:94:fb:1a:9e:17:5d:12:b5:6d:d3:8f:23:07: e8:25:c7:28:6d:63:57:6f:39:a0:13:67:cb:fe:49: 96:9c:eb:ff:74:b5:e9:82:8f:a8:68:e2:08:48:d1: f9:d0:29:48:4e:ae:67:a4:4f:73:bc:1f:e5:55:17: 4d:06:bb:e8:af:78:ee:b9:ee:2c:ad:3c:fb:c4:14: d8:58:59:67:2f:53:5f:cf:5f:e4:b6:5d:06:67:de: 04:70:2f:c2:2a:59:06:44:dd:2f:0e:0a:65:21:85: 76:40:c9:37:1c:b9:20:ae:06:9b:58:f1:44:a4:c2: c7:15:27:eb:4c:26:dc:7e:e0:39:88:ed:49:ac:14: 0a:2f:01:af:9a:08:41:6a:10:18:77:26:7e:19:16: cd:2d:7e:3d:d9:8b:a2:b6:e7:c2:df:a6:92:c1:ff: 47:db:d1:bb:9d:93:74:00:9d:c5:e2:a0:9a:7c:c7: d3:59:9f:67:09:be:ff:11:d8:cb:64:43:16:20:78: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:99:17:6C:5D:3C:0A:A5:B3:3E:27:F0:B9:3B:2B:D9:A3:EC:9F X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1b:c8:64:02:7c:da:d1:3a:4f:81:bc:b8:14:a5:e0:39:f4: 79:22:9b:6b:c5:1a:5b:d8:06:f3:17:ef:2b:02:fc:a4:da:e3: 6f:47:23:ea:31:51:55:39:ba:52:45:9b:e3:91:a8:52:c1:40: 3e:6b:7d:e6:3c:59:f5:05:21:48:5b:0a:eb:1b:2e:8d:57:b4: ed:8e:00:ed:c2:34:25:c8:2b:1d:be:80:1e:ba:9b:59:b8:a4: d0:f3:95:3e:fa:89:d5:4c:18:6e:ee:30:e0:0a:81:a1:76:0b: 04:10:69:00:61:29:71:e0:45:40:ef:e3:71:f6:20:db:af:da: 9a:ff:08:75:cf:56:89:24:85:10:16:d2:46:b0:7d:cf:c3:fa: 1c:f4:60:96:26:8f:32:03:0c:79:da:2a:13:0a:b1:7b:7f:85: ab:02:b6:56:94:3e:df:9e:82:70:62:41:dd:84:be:ff:57:c5: 98:32:5e:dd:10:80:13:a5:53:3f:6b:f1:c6:e4:04:2f:52:54: 56:35:b4:9a:27:8b:bb:a7:4c:3a:da:de:64:5f:41:35:81:3b: 95:26:dc:73:f0:87:90:98:f3:80:c3:ab:64:6a:4c:ab:2e:7f: e5:70:55:3d:26:90:c3:d5:e8:85:ad:b3:9c:d5:13:ae:9c:d3: e0:46:f0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLWLyU+Esj6V1OVxdmrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg0YjIzOTkxNzZjNWQzYzBhYTViMzNlMjdmMGI5M2IyYmQ5YTNlYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyuk/LhnnVX0lzai2QH3PCcrDST4 KCmwahKEGdBOJ5gJxsZJOuWPT+QcI2AgalkadBcjZZ7oeEhyPKFWFZT7Gp4XXRK1 bdOPIwfoJccobWNXbzmgE2fL/kmWnOv/dLXpgo+oaOIISNH50ClITq5npE9zvB/l VRdNBrvor3juue4srTz7xBTYWFlnL1Nfz1/ktl0GZ94EcC/CKlkGRN0vDgplIYV2 QMk3HLkgrgabWPFEpMLHFSfrTCbcfuA5iO1JrBQKLwGvmghBahAYdyZ+GRbNLX49 2YuitufC36aSwf9H29G7nZN0AJ3F4qCafMfTWZ9nCb7/EdjLZEMWIHjpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsjmRdsXTwKpbM+J/C5OyvZo+yfMB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRvIZAJ8 2tE6T4G8uBSl4Dn0eSKba8UaW9gG8xfvKwL8pNrjb0cj6jFRVTm6UkWb45GoUsFA Pmt95jxZ9QUhSFsK6xsujVe07Y4A7cI0JcgrHb6AHrqbWbik0POVPvqJ1UwYbu4w 4AqBoXYLBBBpAGEpceBFQO/jcfYg26/amv8Idc9WiSSFEBbSRrB9z8P6HPRgliaP MgMMedoqEwqxe3+FqwK2VpQ+356CcGJB3YS+/1fFmDJe3RCAE6VTP2vxxuQEL1JU VjW0mieLu6dMOtreZF9BNYE7lSbcc/CHkJjzgMOrZGpMqy5/5XBVPSaQw9Xoha2z nNUTrpzT4Ebwrw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:36 2025 by rpki-client