This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json) Hash identifier: i+ruWlW+PPatZ3Pboi9l/Ua91yFIvHH1HXKKbDFgB8M= Subject key identifier: 36:8D:30:2B:6B:35:0E:B7:8B:3F:74:95:6A:47:71:B4:A0:AD:09:67 Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6 Certificate serial: 019AF5AE6077DD7D6CCC3B12C697155060FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft Manifest number: 1524 Signing time: Sat 06 Dec 2025 22:00:37 +0000 Manifest this update: Sat 06 Dec 2025 22:00:37 +0000 Manifest next update: Sun 07 Dec 2025 22:00:37 +0000 Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=) 2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: DuZbymvKzrAMUglitcQ81SaD8+JSvHeGDZyT4rHIAFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:60:77:dd:7d:6c:cc:3b:12:c6:97:15:50:60:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6 Validity Not Before: Dec 6 22:00:37 2025 GMT Not After : Dec 7 22:00:37 2025 GMT Subject: CN=368d302b6b350eb78b3f74956a4771b4a0ad0967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:73:f0:5c:34:cf:69:7f:bf:3f:ab:3e:1b: 70:d2:f6:fb:ad:19:9d:09:09:3b:c4:5a:f1:02:4e: 3b:e5:6e:18:e0:e4:bd:56:a8:dd:5c:03:64:52:f8: 77:2a:93:82:dd:06:84:8c:ad:13:f3:4a:7a:ff:23: d1:ff:49:07:0d:8a:27:ac:da:63:5c:48:67:1d:e8: 08:e3:66:64:d3:b9:5b:30:e0:e2:cc:57:e0:ae:e1: 7d:85:54:80:13:a7:de:ab:7e:4b:75:13:a3:e2:86: 1e:42:95:c8:e4:b6:d5:76:8b:17:d2:bf:da:0f:bf: 50:eb:0b:b4:84:49:93:9e:8f:a8:5c:a6:4e:37:24: d9:0b:84:f4:f5:d5:b6:1a:e8:a8:08:9c:6f:09:62: d8:ee:b1:c5:ef:b4:c3:ab:43:dc:ae:da:fb:e0:4c: b6:ea:3d:62:e2:22:f4:7c:83:3f:85:9c:e5:bd:aa: ac:8a:68:2b:c8:b7:44:35:99:14:09:c3:4e:bd:a6: 75:76:cc:87:e9:f3:cf:66:53:3c:e9:f6:78:7b:15: b7:a1:74:74:65:7a:53:37:87:11:bd:5e:9e:14:1a: 39:f7:ea:ae:e6:0f:91:98:6a:f4:ed:99:b0:68:15: d8:ad:2c:52:da:51:c9:e6:f4:c6:56:3f:e5:0d:56: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8D:30:2B:6B:35:0E:B7:8B:3F:74:95:6A:47:71:B4:A0:AD:09:67 X509v3 Authority Key Identifier: keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:23:9a:ca:50:46:bf:f6:52:1f:5a:f0:1b:63:60:b0:14:70: 37:eb:d3:f7:09:c6:a8:f2:c3:02:fd:22:a4:1a:51:1a:50:0e: ed:ab:3a:0e:6b:79:dd:04:11:4e:60:10:1e:ec:2a:fe:50:11: 23:36:bb:30:3f:07:fb:dd:84:e4:79:ae:34:9f:f3:28:2e:68: 26:e1:e8:95:85:c7:b6:7e:2e:2d:aa:88:dc:5e:a7:e6:d7:45: f2:d6:66:09:5b:14:bb:e1:d9:be:bb:57:87:21:9d:ca:a0:07: ac:1c:4e:9b:89:0a:81:7f:a6:56:6a:06:52:8d:0a:48:81:ba: 10:22:44:66:af:59:21:cd:6e:7d:b5:53:46:51:6d:c2:ba:41: f7:e2:d8:08:5f:4a:39:bc:ba:e8:01:60:b7:56:6d:b7:32:3b: 89:8c:ab:07:91:53:d7:ed:dc:69:e1:75:20:93:0a:8c:db:6a: 6f:af:3c:08:e6:7d:4c:c9:4f:f9:dc:76:a5:67:c7:d6:04:e8: 18:a4:bb:ec:22:87:3e:da:11:25:dc:ba:7c:69:2e:1f:ef:b5: 23:6e:9c:49:bb:81:3e:61:94:56:e7:be:aa:12:75:ea:75:0f: 0c:40:9f:5d:f2:e0:0e:a0:99:d9:0f:94:67:c0:7c:b2:80:93: 30:6e:42:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmB33X1szDsSxpcVUGD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz MTI3YzYwHhcNMjUxMjA2MjIwMDM3WhcNMjUxMjA3MjIwMDM3WjAzMTEwLwYDVQQD EygzNjhkMzAyYjZiMzUwZWI3OGIzZjc0OTU2YTQ3NzFiNGEwYWQwOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHlz8Fw0z2l/vz+rPhtw0vb7rRmd CQk7xFrxAk475W4Y4OS9VqjdXANkUvh3KpOC3QaEjK0T80p6/yPR/0kHDYonrNpj XEhnHegI42Zk07lbMODizFfgruF9hVSAE6feq35LdROj4oYeQpXI5LbVdosX0r/a D79Q6wu0hEmTno+oXKZONyTZC4T09dW2GuioCJxvCWLY7rHF77TDq0Pcrtr74Ey2 6j1i4iL0fIM/hZzlvaqsimgryLdENZkUCcNOvaZ1dsyH6fPPZlM86fZ4exW3oXR0 ZXpTN4cRvV6eFBo59+qu5g+RmGr07ZmwaBXYrSxS2lHJ5vTGVj/lDVaR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaNMCtrNQ63iz90lWpHcbSgrQlnMB8GA1UdIwQY MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiOaylBG v/ZSH1rwG2NgsBRwN+vT9wnGqPLDAv0ipBpRGlAO7as6Dmt53QQRTmAQHuwq/lAR Iza7MD8H+92E5HmuNJ/zKC5oJuHolYXHtn4uLaqI3F6n5tdF8tZmCVsUu+HZvrtX hyGdyqAHrBxOm4kKgX+mVmoGUo0KSIG6ECJEZq9ZIc1ufbVTRlFtwrpB9+LYCF9K Oby66AFgt1ZttzI7iYyrB5FT1+3caeF1IJMKjNtqb688COZ9TMlP+dx2pWfH1gTo GKS77CKHPtoRJdy6fGkuH++1I26cSbuBPmGUVue+qhJ16nUPDECfXfLgDqCZ2Q+U Z8B8soCTMG5CPA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:10 2025 by rpki-client