This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json) Hash identifier: um3l+He71hMcGkaq4IFa1YMVmTSDUlxkVFIFhk5fdcE= Subject key identifier: 18:D8:98:20:DE:B0:C8:51:EA:42:B6:79:41:A0:18:25:B7:F4:DF:75 Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67 Certificate serial: 019AF12E065DB55F028894A0DC00BC835DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft Manifest number: 0765 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: MUKBuBPiLVGulLDe+ZFEGRcDrfN+w+TYuJluAoVWlE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:06:5d:b5:5f:02:88:94:a0:dc:00:bc:83:5d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67 Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=18d89820deb0c851ea42b67941a01825b7f4df75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:f6:87:50:43:11:d5:de:b9:59:58:f0:a1: b0:aa:9e:a8:8d:c3:f4:ba:fa:c1:99:ee:72:e4:52: 75:7c:9d:2e:df:3c:7e:b0:77:c9:a3:69:ce:93:83: 46:90:eb:5e:95:51:d9:e4:b1:2c:ff:c0:bd:86:e3: 8a:d6:62:b8:04:0a:1d:7a:e7:5f:a0:98:78:42:00: 60:28:fe:ae:39:51:5e:ca:71:f1:0d:95:dd:e5:e2: 7d:e3:02:2d:03:c0:58:71:d2:2f:03:fe:8f:c4:b0: 0a:bb:ec:b6:36:1e:d8:9b:2b:ef:f3:7f:87:25:0f: cf:ef:39:92:bb:b3:7f:3f:03:76:af:72:1e:c5:f3: 97:02:1f:b5:e4:f5:5d:5e:97:75:1e:14:e4:0f:ae: b5:44:7b:b8:d9:36:1b:d4:b6:fb:96:93:3f:fc:ec: df:e6:78:a5:31:4f:7a:3f:e4:83:de:54:16:c8:60: 6e:3e:e0:9a:28:ab:7d:bd:e3:f9:4c:67:1a:fd:b1: 2d:57:f3:44:ec:56:fc:a7:40:05:f9:18:4d:2f:a8: ac:9c:55:f3:83:1b:ff:ab:8e:b4:5a:ed:8e:50:ca: b2:79:2f:93:1e:bd:98:3e:58:2e:5e:cd:b0:2c:79: 3d:37:21:31:7c:04:d3:63:38:aa:fa:1d:cb:9e:4d: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D8:98:20:DE:B0:C8:51:EA:42:B6:79:41:A0:18:25:B7:F4:DF:75 X509v3 Authority Key Identifier: keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:75:3a:8c:27:1b:95:96:bc:fa:e3:6b:89:03:c9:49:26:ed: 04:e5:2d:70:9c:8c:1b:51:8b:b0:22:fa:2a:01:3e:9f:f0:ed: f5:19:c3:bf:6f:b5:1e:af:7a:ae:76:39:24:6a:74:60:40:a7: d3:83:64:4e:5f:09:89:38:5a:c9:20:bd:fb:a5:b9:c8:9f:45: e3:83:31:22:40:17:50:ac:8f:bd:89:e3:04:1b:cf:d4:c6:a8: 11:35:1d:2b:59:0d:4f:f9:9c:29:bb:d8:6d:e9:d6:18:d5:9f: 34:bc:29:8d:5b:b1:81:39:33:34:69:c8:36:9f:16:08:80:de: 1a:58:96:c4:03:d6:72:a6:38:ab:df:2f:2e:a4:de:f9:9c:93: fd:93:45:a9:4e:2d:eb:c5:ba:dd:2e:d6:d9:31:63:a5:d2:64: 63:a4:74:1f:66:c5:c4:e6:72:e2:7d:d8:1b:83:e7:33:42:2a: bd:f1:e0:6f:0c:96:87:55:ab:4f:31:62:dc:ae:ae:18:88:50: a0:c1:4c:b8:c8:3e:95:68:17:39:45:2c:39:78:06:99:b0:ae: 81:cc:ee:90:c4:21:9c:1c:9e:7f:60:dc:ee:41:ca:3b:1b:e9: f2:a2:0b:84:df:2e:39:86:64:47:3a:6a:82:8b:80:dc:f1:01: 10:87:aa:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgZdtV8CiJSg3AC8g13xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZTI3MWExZDQ0N2U0MTA2MzBmYWMzYTY0MDZlMDRhODMw NjdjNjcwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD EygxOGQ4OTgyMGRlYjBjODUxZWE0MmI2Nzk0MWEwMTgyNWI3ZjRkZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8832h1BDEdXeuVlY8KGwqp6ojcP0 uvrBme5y5FJ1fJ0u3zx+sHfJo2nOk4NGkOtelVHZ5LEs/8C9huOK1mK4BAodeudf oJh4QgBgKP6uOVFeynHxDZXd5eJ94wItA8BYcdIvA/6PxLAKu+y2Nh7Ymyvv83+H JQ/P7zmSu7N/PwN2r3IexfOXAh+15PVdXpd1HhTkD661RHu42TYb1Lb7lpM//Ozf 5nilMU96P+SD3lQWyGBuPuCaKKt9veP5TGca/bEtV/NE7Fb8p0AF+RhNL6isnFXz gxv/q460Wu2OUMqyeS+THr2YPlguXs2wLHk9NyExfATTYziq+h3Lnk2ItwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjYmCDesMhR6kK2eUGgGCW39N91MB8GA1UdIwQY MBaAFJficaHUR+QQYw+sOmQG4EqDBnxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEt NWZmMjYyYWM4N2JhLzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEtNWZmMjYyYWM4N2Jh LzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnU6jCcb lZa8+uNriQPJSSbtBOUtcJyMG1GLsCL6KgE+n/Dt9RnDv2+1Hq96rnY5JGp0YECn 04NkTl8JiThaySC9+6W5yJ9F44MxIkAXUKyPvYnjBBvP1MaoETUdK1kNT/mcKbvY benWGNWfNLwpjVuxgTkzNGnINp8WCIDeGliWxAPWcqY4q98vLqTe+ZyT/ZNFqU4t 68W63S7W2TFjpdJkY6R0H2bFxOZy4n3YG4PnM0IqvfHgbwyWh1WrTzFi3K6uGIhQ oMFMuMg+lWgXOUUsOXgGmbCugczukMQhnByef2Dc7kHKOxvp8qILhN8uOYZkRzpq gouA3PEBEIeq+w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:03 2025 by rpki-client