This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json) Hash identifier: UjqKtjNDJr9ynMy+HAwJ5aOXChsV+Zjg0fYBtclc5rU= Subject key identifier: F2:9A:59:1F:4F:45:41:9F:1A:1D:AA:F7:05:A0:C5:84:9E:06:8E:FF Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d Certificate serial: 019AF12E73E97CAC8EEAE6DD56AA99C6ED47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: 4pisSNtBdQw7LoCLsz6MLNfr0iUSBcIFU+If+ffVMes=) 2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:73:e9:7c:ac:8e:ea:e6:dd:56:aa:99:c6:ed:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=f29a591f4f45419f1a1daaf705a0c5849e068eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:e6:d2:80:be:79:70:60:77:39:06:c9:93: bb:2f:76:95:30:40:86:f8:2a:a5:3d:d9:13:88:5c: 6d:1c:c3:71:c6:f8:99:32:2e:f6:8b:c7:ac:b8:b6: c3:82:b6:a2:27:25:0b:02:59:54:8a:85:51:b6:cb: 57:fb:ed:c1:5d:2c:0d:c6:8b:2b:5f:af:16:f0:66: d5:7f:30:3d:1b:96:af:78:43:5f:71:dc:e7:99:4f: c2:71:21:b4:7c:76:aa:ed:45:81:7b:ce:c0:d0:e1: ca:c7:71:69:f5:a8:cc:67:60:8d:10:4f:89:37:24: 73:4c:e4:ed:0c:21:a5:1b:f4:41:ad:c9:aa:f5:f4: b1:8b:12:53:6d:62:22:b2:10:f8:21:23:0d:48:95: e8:57:c1:4f:2f:ef:f5:7d:cc:3d:d8:7b:a4:e4:22: e2:c6:89:25:25:3e:01:01:bd:0f:a4:d5:87:3b:82: c0:26:91:e4:f7:25:8f:af:94:8a:32:66:8d:0d:37: ff:ad:72:06:13:57:94:27:48:2d:ab:c3:4f:dc:5c: bf:29:2f:2d:9e:43:ba:5c:1f:ea:7c:f0:6a:bc:00: 76:4a:e3:4c:f6:fd:b5:46:40:fd:ad:8e:0a:c5:2e: 59:27:95:a4:8f:86:7c:73:38:dc:55:ec:8a:70:98: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:59:1F:4F:45:41:9F:1A:1D:AA:F7:05:A0:C5:84:9E:06:8E:FF X509v3 Authority Key Identifier: keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:83:ca:8c:8c:55:fb:2b:2d:96:4c:47:df:40:51:f9:80:d7: b3:7c:64:ab:19:61:36:c6:fa:80:71:f8:7f:52:f5:ae:17:bf: 7e:eb:95:8f:4f:02:bd:31:0b:8c:07:2d:ee:b8:b6:8a:8f:cb: fc:13:68:9b:1e:d1:cb:68:c0:e2:9d:f8:ae:cb:50:0d:90:85: d3:16:c9:bf:94:7b:0f:a6:9c:6b:92:9d:38:e1:67:74:e7:83: fb:48:b4:e1:59:26:2c:21:07:59:8b:14:f9:6b:53:d3:cc:32: 50:f2:8b:d2:4e:80:97:84:3c:b9:4f:79:e6:54:12:b9:38:fc: 37:82:cd:50:59:e3:88:e0:12:45:d7:a8:ae:1f:5d:0c:4f:65: 9b:62:6f:bd:35:18:6a:41:1e:03:ed:43:73:87:f3:1f:f1:dc: 42:fb:6c:80:80:a8:8f:c9:78:33:40:50:a1:ae:d7:80:2b:07: 7f:bc:8e:24:d0:c3:54:6f:54:85:57:6c:b9:d8:83:0a:25:e7: 7b:33:bd:4d:33:b4:c9:ae:ef:39:ca:78:cf:58:1d:f5:1e:fc: a7:a0:76:13:91:fd:b7:33:0d:8a:05:a8:44:98:67:0b:74:ca: 2b:e2:51:1b:9f:9d:ee:45:a4:eb:c4:68:1c:bf:d2:4b:98:97: 34:3f:c5:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnPpfKyO6ubdVqqZxu1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj NmM4OGQwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhmMjlhNTkxZjRmNDU0MTlmMWExZGFhZjcwNWEwYzU4NDllMDY4ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9rm0oC+eXBgdzkGyZO7L3aVMECG +CqlPdkTiFxtHMNxxviZMi72i8esuLbDgraiJyULAllUioVRtstX++3BXSwNxosr X68W8GbVfzA9G5aveENfcdznmU/CcSG0fHaq7UWBe87A0OHKx3Fp9ajMZ2CNEE+J NyRzTOTtDCGlG/RBrcmq9fSxixJTbWIishD4ISMNSJXoV8FPL+/1fcw92Huk5CLi xoklJT4BAb0PpNWHO4LAJpHk9yWPr5SKMmaNDTf/rXIGE1eUJ0gtq8NP3Fy/KS8t nkO6XB/qfPBqvAB2SuNM9v21RkD9rY4KxS5ZJ5Wkj4Z8czjcVeyKcJgb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKaWR9PRUGfGh2q9wWgxYSeBo7/MB8GA1UdIwQY MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt OGQ0NGRlNTRjZmE3LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3 LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYPKjIxV +ystlkxH30BR+YDXs3xkqxlhNsb6gHH4f1L1rhe/fuuVj08CvTELjAct7ri2io/L /BNomx7Ry2jA4p34rstQDZCF0xbJv5R7D6aca5KdOOFndOeD+0i04VkmLCEHWYsU +WtT08wyUPKL0k6Al4Q8uU955lQSuTj8N4LNUFnjiOASRdeorh9dDE9lm2JvvTUY akEeA+1Dc4fzH/HcQvtsgICoj8l4M0BQoa7XgCsHf7yOJNDDVG9UhVdsudiDCiXn ezO9TTO0ya7vOcp4z1gd9R78p6B2E5H9tzMNigWoRJhnC3TKK+JRG5+d7kWk68Ro HL/SS5iXND/Fpw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:15 2025 by rpki-client