This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json) Hash identifier: NQw1MPgI7K85GJgpY8iUUPVI/c4HGqW5NmCMDnv2CVA= Subject key identifier: D4:65:74:EB:A2:C9:5F:0A:65:69:7A:AA:7F:EC:35:87:AC:A3:5D:4B Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Certificate serial: 019AF389424BD9AE52A2E203D81C606C48D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft Manifest number: 174B Signing time: Sat 06 Dec 2025 12:00:50 +0000 Manifest this update: Sat 06 Dec 2025 12:00:50 +0000 Manifest next update: Sun 07 Dec 2025 12:00:50 +0000 Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: vwMhOE7KwT0o2F9hUgM8XZbwcLGFIRZwvu0fvwSX7fM=) 2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:42:4b:d9:ae:52:a2:e2:03:d8:1c:60:6c:48:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Validity Not Before: Dec 6 12:00:50 2025 GMT Not After : Dec 7 12:00:50 2025 GMT Subject: CN=d46574eba2c95f0a65697aaa7fec3587aca35d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:83:c0:4d:c8:d3:38:0c:8b:9e:bd:c3:1f: 9d:b2:3a:08:5a:48:4a:69:96:a4:31:f1:e6:96:3c: 22:23:9b:d9:f6:9d:4b:ce:d8:69:ea:a5:03:ea:03: f3:b4:80:7d:61:47:39:a8:dd:c9:b3:23:e6:cd:15: b8:67:41:d9:a7:7f:45:a8:db:ef:2e:57:5f:9a:c0: 72:0c:75:84:6e:9f:31:dc:06:db:f0:bf:29:c7:d9: 1a:76:98:c0:e3:e0:7e:4e:c2:b6:eb:23:a4:48:3b: 8e:84:1b:03:21:68:68:ba:de:fa:03:4b:4f:33:34: 23:06:3f:a4:63:e3:84:39:2e:ff:0d:82:66:e6:05: d0:11:5e:23:a3:99:ce:c4:25:63:21:06:88:2a:43: c6:89:26:2e:9d:f4:38:4f:65:d6:b6:b5:89:37:0d: 87:c1:b5:9e:6b:5e:05:43:c6:56:61:d5:6e:f3:5d: 6b:c3:3a:3d:11:d3:db:f7:c4:16:32:6e:0e:1e:78: 53:79:89:da:7c:c6:3c:24:4d:27:01:28:9c:53:47: 99:95:5b:12:2f:32:6e:14:78:11:79:03:cf:16:ef: 1f:74:ab:5a:29:d1:51:3a:91:40:73:a8:a2:69:ad: 97:24:3f:1a:c2:b8:3a:d9:c9:d7:a9:76:7b:8e:1c: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:74:EB:A2:C9:5F:0A:65:69:7A:AA:7F:EC:35:87:AC:A3:5D:4B X509v3 Authority Key Identifier: keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3d:2e:9e:d0:16:30:be:2d:5f:34:40:83:5e:6f:9c:33:b5: f2:0f:aa:2c:71:5b:85:78:50:08:36:43:90:db:85:f6:2f:05: b8:47:56:95:bf:45:35:20:61:34:8e:7d:5c:bc:7b:05:01:f9: be:5e:f3:bc:94:e8:5a:1b:90:e4:6c:bb:61:f0:4b:cd:98:d0: 65:a6:e2:8b:2d:f0:97:d3:11:77:c3:b0:79:49:03:2d:96:42: 7b:25:13:33:66:10:8e:58:46:e2:ee:58:b0:9b:0c:92:a7:c8: de:4d:4f:ec:e0:72:0c:12:f3:a5:bf:57:87:e3:5c:f8:a2:e0: 2a:7b:04:27:34:0c:6b:6a:a9:b0:7c:cc:de:c3:29:30:94:9b: 25:1e:37:03:0e:14:46:68:6c:86:9f:d5:d1:33:59:d6:8e:3f: 15:56:2f:8c:e3:6c:e3:18:0e:61:1e:a1:79:09:37:57:1b:f9: 92:33:54:74:6c:1c:ba:7c:95:87:09:71:20:cf:63:d8:51:8d: b0:a7:ab:d4:f7:ac:f8:14:28:ef:4a:40:08:d3:79:9c:93:a1: 1c:68:92:9e:c0:c0:bc:25:4e:e8:95:a3:40:4b:70:9e:94:34: e4:d5:57:6c:df:ac:a9:36:c8:90:91:f9:38:84:6b:1f:52:3b: 34:3f:2d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUJL2a5SouID2BxgbEjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy YjY5MDEwHhcNMjUxMjA2MTIwMDUwWhcNMjUxMjA3MTIwMDUwWjAzMTEwLwYDVQQD EyhkNDY1NzRlYmEyYzk1ZjBhNjU2OTdhYWE3ZmVjMzU4N2FjYTM1ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q6DwE3I0zgMi569wx+dsjoIWkhK aZakMfHmljwiI5vZ9p1Lzthp6qUD6gPztIB9YUc5qN3JsyPmzRW4Z0HZp39FqNvv LldfmsByDHWEbp8x3Abb8L8px9kadpjA4+B+TsK26yOkSDuOhBsDIWhout76A0tP MzQjBj+kY+OEOS7/DYJm5gXQEV4jo5nOxCVjIQaIKkPGiSYunfQ4T2XWtrWJNw2H wbWea14FQ8ZWYdVu811rwzo9EdPb98QWMm4OHnhTeYnafMY8JE0nASicU0eZlVsS LzJuFHgReQPPFu8fdKtaKdFROpFAc6iiaa2XJD8awrg62cnXqXZ7jhyGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRldOuiyV8KZWl6qn/sNYeso11LMB8GA1UdIwQY MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz0untAW ML4tXzRAg15vnDO18g+qLHFbhXhQCDZDkNuF9i8FuEdWlb9FNSBhNI59XLx7BQH5 vl7zvJToWhuQ5Gy7YfBLzZjQZabiiy3wl9MRd8OweUkDLZZCeyUTM2YQjlhG4u5Y sJsMkqfI3k1P7OByDBLzpb9Xh+Nc+KLgKnsEJzQMa2qpsHzM3sMpMJSbJR43Aw4U Rmhshp/V0TNZ1o4/FVYvjONs4xgOYR6heQk3Vxv5kjNUdGwcunyVhwlxIM9j2FGN sKer1Pes+BQo70pACNN5nJOhHGiSnsDAvCVO6JWjQEtwnpQ05NVXbN+sqTbIkJH5 OIRrH1I7ND8tBw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:43 2025 by rpki-client