This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json) Hash identifier: OD4iD4flc8yKJVsqt15ip0Sz9O3rXpASN2wEPIf8uuQ= Subject key identifier: B0:C8:74:7F:93:F4:86:32:64:F9:61:A1:66:69:77:E4:95:7A:D2:D1 Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef Certificate serial: 019AF208C616D69260CE4510802854DC53AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft Manifest number: 090C Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: a7DJAUDPn37znsw217b9nvNm6DD+st9ye9B32aByAFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c6:16:d6:92:60:ce:45:10:80:28:54:dc:53:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=b0c8747f93f4863264f961a1666977e4957ad2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:0a:77:67:27:5c:d5:53:74:40:3b:13:d5: 41:4d:78:e6:94:b0:73:56:5d:54:05:0d:9e:41:80: 3d:8b:2f:20:8e:40:ec:91:a2:fa:ef:58:22:2b:cf: af:c8:e1:50:08:5d:0a:ca:01:4c:b5:da:59:28:dc: 96:33:55:7d:1a:e6:77:00:cf:49:ca:b1:06:39:f0: e5:af:90:72:10:d7:35:a3:de:9f:a5:d8:4e:e1:e9: 18:3a:95:1c:91:08:eb:70:43:76:48:07:e4:f0:13: c4:27:2f:2d:e6:7e:7d:63:9b:ad:6e:f9:d0:06:76: d3:03:89:1b:a0:53:ed:ea:ab:f1:96:66:72:24:d1: 22:e1:4f:92:cc:a1:26:02:ba:8f:96:d5:71:d5:88: 96:47:b5:35:de:71:9c:3b:a7:37:77:f4:ef:67:b1: 11:2f:15:84:b0:13:03:01:b1:cd:b0:68:aa:09:d5: 12:0e:6a:37:79:f1:c9:d9:22:0e:b9:41:9a:3c:6b: d8:f7:ff:f3:d4:d0:10:70:ab:0e:99:be:71:97:fe: 7b:77:db:29:12:36:53:87:3c:c2:71:f6:20:63:d1: 70:eb:ff:8f:6f:e3:d9:eb:3b:e6:93:0d:99:76:80: 24:5a:a4:da:03:4c:b8:0c:3f:0a:b7:3a:bd:49:fe: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:74:7F:93:F4:86:32:64:F9:61:A1:66:69:77:E4:95:7A:D2:D1 X509v3 Authority Key Identifier: keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:9c:07:3f:7e:bd:b7:c5:60:bb:d0:53:17:10:c8:b2:d1: f0:db:ba:d7:1c:3c:db:d1:3b:44:5d:30:97:de:a4:f9:64:83: 27:0e:82:6f:33:c9:6f:27:9f:e8:ad:6c:87:9d:b5:b7:71:04: 65:58:b4:b7:06:62:09:f9:b3:d5:22:9a:82:5e:b0:6b:56:f0: df:05:d8:e2:22:39:cf:e2:14:1f:fc:28:4c:5f:53:73:be:ed: 3e:88:99:51:44:88:fc:78:88:14:f2:14:5e:1c:6c:e9:99:11: e2:9f:36:bc:b3:9d:aa:e3:fd:93:ca:84:5e:5c:b6:3b:63:6c: d3:fd:2a:a0:e4:b4:93:25:4d:6e:13:19:35:0b:e1:5c:58:a4: 9b:5d:a4:b9:8a:a3:7d:fe:4a:6c:9b:16:1c:a1:bb:56:7f:9a: 7c:ff:5c:85:2d:4c:ab:5f:49:d7:7f:93:2d:57:e9:e7:79:15: 10:5c:46:17:96:49:47:b7:dc:11:bb:eb:e5:e5:6e:ed:c5:cb: b8:41:f4:20:f7:04:9b:01:9e:75:52:bc:ff:64:76:cc:ee:06: 95:4b:1a:56:81:9a:10:ac:58:e8:ea:fd:3e:6c:44:2c:73:75: 90:d9:66:1e:76:4a:1a:fd:ef:04:3e:56:57:fa:fc:c6:cc:d1: 6c:a0:35:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMYW1pJgzkUQgChU3FOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YjZjYjQ4ODQxY2U1MTliMjgzNTljYWYxYmNlMzQwZTMz NjgxZWYwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhiMGM4NzQ3ZjkzZjQ4NjMyNjRmOTYxYTE2NjY5NzdlNDk1N2FkMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomIKd2cnXNVTdEA7E9VBTXjmlLBz Vl1UBQ2eQYA9iy8gjkDskaL671giK8+vyOFQCF0KygFMtdpZKNyWM1V9GuZ3AM9J yrEGOfDlr5ByENc1o96fpdhO4ekYOpUckQjrcEN2SAfk8BPEJy8t5n59Y5utbvnQ BnbTA4kboFPt6qvxlmZyJNEi4U+SzKEmArqPltVx1YiWR7U13nGcO6c3d/TvZ7ER LxWEsBMDAbHNsGiqCdUSDmo3efHJ2SIOuUGaPGvY9//z1NAQcKsOmb5xl/57d9sp EjZThzzCcfYgY9Fw6/+Pb+PZ6zvmkw2ZdoAkWqTaA0y4DD8Ktzq9Sf70zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDIdH+T9IYyZPlhoWZpd+SVetLRMB8GA1UdIwQY MBaAFJe2y0iEHOUZsoNZyvG840DjNoHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMt NDZlYTY1NmJmMzg5LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMtNDZlYTY1NmJmMzg5 LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs+cBz9+ vbfFYLvQUxcQyLLR8Nu61xw829E7RF0wl96k+WSDJw6CbzPJbyef6K1sh521t3EE ZVi0twZiCfmz1SKagl6wa1bw3wXY4iI5z+IUH/woTF9Tc77tPoiZUUSI/HiIFPIU Xhxs6ZkR4p82vLOdquP9k8qEXly2O2Ns0/0qoOS0kyVNbhMZNQvhXFikm12kuYqj ff5KbJsWHKG7Vn+afP9chS1Mq19J13+TLVfp53kVEFxGF5ZJR7fcEbvr5eVu7cXL uEH0IPcEmwGedVK8/2R2zO4GlUsaVoGaEKxY6Or9PmxELHN1kNlmHnZKGv3vBD5W V/r8xszRbKA11w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:31 2025 by rpki-client