This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json) Hash identifier: UbawUOal2w6qBx9WrAhE+Dtt66b/12iMYAsA4rwhls0= Subject key identifier: 25:C9:EC:09:FC:FA:3A:6E:01:AE:B1:73:44:02:08:57:B0:DF:99:0C Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e Certificate serial: 019AF1D1AEEFC8B87B554BD2FE59C0D36CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft Manifest number: 0650 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: c3bL/7xHLewFdY8KkeVZzQgAR91Q60nj/JBwk3IeEPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:ef:c8:b8:7b:55:4b:d2:fe:59:c0:d3:6c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=25c9ec09fcfa3a6e01aeb17344020857b0df990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:83:a8:43:0b:78:4e:d8:00:fe:8c:9a:e9: a2:52:a6:f8:a2:d1:1f:61:c7:1f:d5:51:1f:20:f5: 98:de:35:5f:db:1f:60:24:12:26:78:03:23:18:d4: 46:63:94:50:ad:53:c5:82:20:40:15:30:f5:63:cb: fd:52:c5:77:d7:82:a8:66:2d:c8:24:5f:19:c8:8a: 3c:31:95:be:09:b0:cc:a0:a5:c8:8f:68:25:c1:9d: cc:a3:a0:17:fb:6b:30:57:a8:9a:a3:f4:f7:ba:90: c7:58:51:a4:20:c2:74:de:9d:ff:24:bf:b6:a1:9e: 9b:ba:3d:4a:8d:ba:c4:16:18:f5:24:63:75:f5:25: dd:7c:4b:33:57:82:3f:6d:8f:c7:32:2b:20:60:a0: e3:9d:b3:80:6c:88:a9:9a:56:d5:28:54:78:40:fc: 40:53:ec:e7:6e:98:71:2d:a0:99:45:55:f0:5d:08: 25:9a:4a:03:62:fb:8a:e4:71:8e:e4:07:6a:1c:f6: c1:6f:32:3a:39:e9:16:c2:a6:32:13:c5:38:3f:07: 81:60:f5:23:ad:27:b7:8c:42:05:39:fe:f9:09:30: 35:c9:36:81:74:02:0e:e7:34:95:49:fe:73:3f:32: d6:4c:08:2e:bb:fa:0c:54:ad:04:50:17:d3:02:81: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:EC:09:FC:FA:3A:6E:01:AE:B1:73:44:02:08:57:B0:DF:99:0C X509v3 Authority Key Identifier: keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:88:48:aa:72:b5:89:a2:00:3c:2b:c2:1b:8d:4b:0d:07:c9: 79:69:04:45:2c:3b:78:5c:5e:5d:2c:b2:99:57:7f:82:16:fe: e2:d1:ce:28:c2:36:2e:1f:23:1c:24:8e:53:15:e0:3e:79:cb: ca:71:29:ad:d1:1f:a7:16:74:d0:9a:8f:87:70:fc:9d:b2:38: d0:03:36:3f:4d:e3:f6:da:63:57:52:b5:07:69:73:3a:38:a4: 84:d8:a5:09:5c:b3:1c:7c:25:ed:50:aa:28:4c:a3:6c:78:e3: 85:75:ab:d3:e0:d1:28:a2:3b:03:2c:04:7d:f0:3c:a6:0f:a1: df:34:ed:2a:ea:18:6c:89:4a:13:56:9f:45:59:98:c1:03:61: 67:b0:ad:2d:ae:00:b8:2a:b3:d3:22:a6:dd:9c:0f:9e:0d:2d: 9e:59:26:be:80:6b:78:47:d3:e0:12:5c:08:fc:e4:fe:4a:57: 66:11:73:a8:6e:5e:75:a0:e5:3a:1b:61:f4:19:f8:1b:eb:6a: f0:be:46:15:c2:2b:8d:62:ce:03:88:39:56:43:03:13:f2:d1: 7a:46:62:5d:5a:e2:03:50:29:aa:01:33:65:83:20:a7:70:67: f4:34:54:a0:c0:4e:c3:4f:df:da:8e:6f:a0:82:9e:38:2b:9e: 4a:58:85:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a7vyLh7VUvS/lnA02zuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzhjYzljNTk0YmM4ZThmMTQ1NDU2ZjQxNTY2ZDhjYmQ0 YWFkM2UwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygyNWM5ZWMwOWZjZmEzYTZlMDFhZWIxNzM0NDAyMDg1N2IwZGY5OTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioaDqEMLeE7YAP6MmumiUqb4otEf Yccf1VEfIPWY3jVf2x9gJBImeAMjGNRGY5RQrVPFgiBAFTD1Y8v9UsV314KoZi3I JF8ZyIo8MZW+CbDMoKXIj2glwZ3Mo6AX+2swV6iao/T3upDHWFGkIMJ03p3/JL+2 oZ6buj1KjbrEFhj1JGN19SXdfEszV4I/bY/HMisgYKDjnbOAbIipmlbVKFR4QPxA U+znbphxLaCZRVXwXQglmkoDYvuK5HGO5AdqHPbBbzI6OekWwqYyE8U4PweBYPUj rSe3jEIFOf75CTA1yTaBdAIO5zSVSf5zPzLWTAguu/oMVK0EUBfTAoEP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXJ7An8+jpuAa6xc0QCCFew35kMMB8GA1UdIwQY MBaAFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgt ZTgwMmNkNmRhNjA4LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgtZTgwMmNkNmRhNjA4 LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvohIqnK1 iaIAPCvCG41LDQfJeWkERSw7eFxeXSyymVd/ghb+4tHOKMI2Lh8jHCSOUxXgPnnL ynEprdEfpxZ00JqPh3D8nbI40AM2P03j9tpjV1K1B2lzOjikhNilCVyzHHwl7VCq KEyjbHjjhXWr0+DRKKI7AywEffA8pg+h3zTtKuoYbIlKE1afRVmYwQNhZ7CtLa4A uCqz0yKm3ZwPng0tnlkmvoBreEfT4BJcCPzk/kpXZhFzqG5edaDlOhth9Bn4G+tq 8L5GFcIrjWLOA4g5VkMDE/LRekZiXVriA1ApqgEzZYMgp3Bn9DRUoMBOw0/f2o5v oIKeOCueSliFTg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:45 2025 by rpki-client