This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json) Hash identifier: pHhLc16XInqmVuDEKTJidgasaUxQqth4Z4d5+md/tfE= Subject key identifier: A9:0E:D0:5D:29:3A:32:69:34:0A:C9:C2:B7:18:57:32:09:D8:08:E9 Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034 Certificate serial: 019AF19A947B68007B2E68BC0B1B423FA8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=) 2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: ZHBi2LZnhuP44YYmcKTe1Q2hXWrth/eOeE1lDPOQyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:7b:68:00:7b:2e:68:bc:0b:1b:42:3f:a8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979586035abe23569c2135e320dbd1a255b84034 Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=a90ed05d293a3269340ac9c2b718573209d808e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:5d:ef:18:e0:ba:cb:b5:71:d2:01:1d:86: 36:50:fb:de:f9:59:2c:e8:0e:50:3d:db:96:f2:ac: 4f:91:b8:e0:b1:61:c6:0e:f9:ff:92:32:6b:2c:93: 82:0d:3c:42:d9:cd:ec:5b:fe:b5:e7:70:9b:be:bc: ed:a1:64:7b:ff:2b:a4:c7:60:8b:16:5c:75:56:1b: 09:78:bf:94:b1:eb:e1:6f:5a:fb:9a:a1:9e:98:94: 3b:5f:d1:34:f6:8a:d3:9d:bd:70:63:00:23:8d:f2: cc:9d:1c:d7:bd:f2:99:dd:cf:81:de:cc:7d:51:a8: 68:6e:98:43:9a:9c:e6:1a:79:51:c2:d2:e7:f2:a7: 9b:4b:5c:ba:ca:86:8a:65:d4:57:b9:29:9c:e7:2b: f8:69:d4:4d:b7:7f:2a:ee:8c:4c:fc:06:00:29:70: ec:2b:4b:49:c2:f9:bc:c8:6b:84:71:16:76:81:ba: 02:6c:b3:a4:9d:0b:b4:18:f5:06:e1:64:7e:c8:9e: 05:b3:37:ec:cb:38:38:61:ee:a3:2d:9f:71:59:6a: 50:aa:ff:8b:29:c1:82:a4:85:6c:6f:c2:4d:42:fb: a6:2d:74:4c:41:42:c0:cf:9e:2b:f8:0d:b3:8a:2e: 4b:95:dc:ba:85:f1:0a:a8:2e:f2:48:de:f7:49:72: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:D0:5D:29:3A:32:69:34:0A:C9:C2:B7:18:57:32:09:D8:08:E9 X509v3 Authority Key Identifier: keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:03:20:21:69:54:5d:b0:c1:e0:37:e5:8b:d9:26:b1:ef:60: 5c:d6:ca:5e:ba:2d:b5:5c:28:65:50:2b:f8:71:70:0a:b4:4a: 64:90:6c:f7:4b:de:42:d5:2c:ee:ff:8c:13:4b:d1:15:fc:57: 4e:94:2a:ca:f6:5e:89:03:53:a0:bf:ce:9a:f5:36:75:1d:f4: 0d:6c:bf:ec:1f:b3:52:b9:dd:71:27:a9:bc:dd:7f:38:0c:d8: c6:f8:c0:dd:67:39:14:1c:32:97:64:06:65:1f:01:e6:f8:81: f7:91:29:36:04:09:de:2f:3c:84:35:0f:d2:ae:af:2e:1e:3d: 1f:1b:af:a2:14:61:c7:d1:d7:0b:ac:34:2e:33:55:cb:f7:3c: 05:a8:d2:09:ea:98:90:a0:e7:ab:3e:87:a0:f0:1a:ed:78:b0: f5:14:c3:bb:46:df:df:f4:4d:31:14:11:df:c0:ad:45:27:84: 3f:6c:94:50:73:16:0d:fc:24:a1:12:d9:8b:a2:2e:7e:7c:b7: e7:89:4a:24:99:7f:2b:dc:58:4b:22:b5:8b:5b:95:9d:3b:d0: 01:63:1c:92:f5:f8:fe:72:0b:b1:44:76:b0:6c:1d:b9:32:b5: 02:bb:e5:13:39:f3:8e:f9:08:ff:85:02:36:e4:35:c8:cc:ba: bd:a9:2b:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpR7aAB7Lmi8CxtCP6jxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTU4NjAzNWFiZTIzNTY5YzIxMzVlMzIwZGJkMWEyNTVi ODQwMzQwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhhOTBlZDA1ZDI5M2EzMjY5MzQwYWM5YzJiNzE4NTczMjA5ZDgwOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5d7xjgusu1cdIBHYY2UPve+Vks 6A5QPduW8qxPkbjgsWHGDvn/kjJrLJOCDTxC2c3sW/6153CbvrztoWR7/yukx2CL Flx1VhsJeL+Usevhb1r7mqGemJQ7X9E09orTnb1wYwAjjfLMnRzXvfKZ3c+B3sx9 UahobphDmpzmGnlRwtLn8qebS1y6yoaKZdRXuSmc5yv4adRNt38q7oxM/AYAKXDs K0tJwvm8yGuEcRZ2gboCbLOknQu0GPUG4WR+yJ4Fszfsyzg4Ye6jLZ9xWWpQqv+L KcGCpIVsb8JNQvumLXRMQULAz54r+A2zii5Lldy6hfEKqC7ySN73SXJVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkO0F0pOjJpNArJwrcYVzIJ2AjpMB8GA1UdIwQY MBaAFJeVhgNaviNWnCE14yDb0aJVuEA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgt NzI0MGMzNjAwMGQ3LzEvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgtNzI0MGMzNjAwMGQ3 LzEvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgMgIWlU XbDB4Dfli9kmse9gXNbKXrottVwoZVAr+HFwCrRKZJBs90veQtUs7v+ME0vRFfxX TpQqyvZeiQNToL/OmvU2dR30DWy/7B+zUrndcSepvN1/OAzYxvjA3Wc5FBwyl2QG ZR8B5viB95EpNgQJ3i88hDUP0q6vLh49HxuvohRhx9HXC6w0LjNVy/c8BajSCeqY kKDnqz6HoPAa7Xiw9RTDu0bf3/RNMRQR38CtRSeEP2yUUHMWDfwkoRLZi6Iufny3 54lKJJl/K9xYSyK1i1uVnTvQAWMckvX4/nILsUR2sGwduTK1ArvlEznzjvkI/4UC NuQ1yMy6vakr/g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:31 2025 by rpki-client