This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json) Hash identifier: 9UoJEZFFnNfoivuWar+KmAzykhLr4Yv4c1rlyk69ZPY= Subject key identifier: A0:04:CF:48:EF:90:E4:82:7F:9D:FC:8B:A7:DF:C3:3C:75:B2:8A:4E Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034 Certificate serial: 019B2B8A74FFBD70DD9FA84F5795CB08F89F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft Manifest number: 117A Signing time: Wed 17 Dec 2025 09:00:52 +0000 Manifest this update: Wed 17 Dec 2025 09:00:52 +0000 Manifest next update: Thu 18 Dec 2025 09:00:52 +0000 Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=) 2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: +bUWhlsIYQQzqaVq2jge/qkiTE1sK0GQlSq69uD1MWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:74:ff:bd:70:dd:9f:a8:4f:57:95:cb:08:f8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979586035abe23569c2135e320dbd1a255b84034 Validity Not Before: Dec 17 09:00:52 2025 GMT Not After : Dec 18 09:00:52 2025 GMT Subject: CN=a004cf48ef90e4827f9dfc8ba7dfc33c75b28a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:9e:12:53:3d:83:b7:21:fc:1c:92:0e:74: 8e:5e:f8:85:a5:1a:7e:8f:6a:e4:b0:48:60:48:11: 0a:42:12:22:83:92:23:da:ec:09:d3:87:af:4a:a0: 59:9f:a0:d2:0a:ec:c6:89:2f:86:a7:a1:e1:36:3a: e4:51:35:5e:1a:61:33:6c:a6:7a:1d:46:4d:a0:5a: e5:79:aa:69:a6:59:b8:14:60:85:bf:ad:63:40:b1: 0b:54:44:88:bf:bc:d6:40:34:b7:bb:bb:fb:6c:46: ad:b4:54:44:9d:3d:56:0f:e1:74:4f:04:1b:a1:37: 05:71:6b:98:36:0e:25:02:a7:81:da:15:b9:a8:a4: e9:5f:2d:c2:de:cf:b7:49:5f:3f:23:c6:97:35:43: c4:9b:f8:e3:47:73:5b:0e:34:ad:03:4d:5b:3e:80: 52:a0:89:8e:2f:76:e5:f2:84:8c:7a:1e:0a:ab:bf: b6:e2:3f:83:e7:8c:54:19:f8:cb:86:7a:ae:b6:95: 83:88:24:64:66:4a:c8:ec:dc:ae:1c:42:10:3e:5b: 28:27:a4:86:7c:9a:72:ef:d5:d7:11:c5:70:71:cc: 91:b7:5f:50:51:a9:d0:14:ca:8a:e4:2c:19:f5:e0: 40:56:22:a9:f1:0d:3d:e6:7c:bb:5d:cf:5e:4a:67: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:04:CF:48:EF:90:E4:82:7F:9D:FC:8B:A7:DF:C3:3C:75:B2:8A:4E X509v3 Authority Key Identifier: keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b7:6c:fa:7c:7d:ef:f1:f7:22:f3:37:28:c9:63:f3:7b:32: 08:af:fd:33:ce:6b:04:e1:cb:de:9c:7b:f1:82:06:1a:7b:32: 48:a6:c7:38:85:8a:18:0f:2a:e2:7c:31:50:93:7f:0c:ab:82: c4:6a:b6:1c:b4:2b:c5:95:18:83:2f:7a:52:ec:b1:b9:a4:45: 42:3f:d0:1f:aa:13:96:92:ee:7f:ea:20:35:ff:8d:c5:8e:4f: 54:36:65:ca:3c:64:ad:cc:f7:4f:a5:06:c2:23:fc:7d:b9:5e: 03:cc:a6:1e:f8:92:c9:a9:8b:b1:c3:74:0d:70:50:12:7b:80: 60:25:be:ad:65:06:25:f5:b3:e4:2a:ac:00:52:b9:95:f3:d2: 84:ef:ce:a8:6c:cb:e9:5d:e0:61:9e:00:bf:d0:2f:2b:fc:6d: 7d:7e:b5:5b:72:82:06:c4:2c:cc:eb:31:31:14:d5:e9:01:40: bb:88:9a:73:a8:f3:d0:f2:f7:76:72:02:af:eb:2c:d4:aa:d0: 9f:6e:b6:e7:17:dd:ba:8f:a6:ce:e3:91:d4:e9:66:53:f4:83: c1:7f:c7:49:a4:fe:a0:54:20:e4:f0:46:9a:15:46:37:66:b9: 9e:f7:74:f5:b3:f9:b8:94:82:40:7f:18:e7:ac:4c:97:0d:63: 43:4f:db:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinT/vXDdn6hPV5XLCPifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTU4NjAzNWFiZTIzNTY5YzIxMzVlMzIwZGJkMWEyNTVi ODQwMzQwHhcNMjUxMjE3MDkwMDUyWhcNMjUxMjE4MDkwMDUyWjAzMTEwLwYDVQQD EyhhMDA0Y2Y0OGVmOTBlNDgyN2Y5ZGZjOGJhN2RmYzMzYzc1YjI4YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAyeElM9g7ch/BySDnSOXviFpRp+ j2rksEhgSBEKQhIig5Ij2uwJ04evSqBZn6DSCuzGiS+Gp6HhNjrkUTVeGmEzbKZ6 HUZNoFrleappplm4FGCFv61jQLELVESIv7zWQDS3u7v7bEattFREnT1WD+F0TwQb oTcFcWuYNg4lAqeB2hW5qKTpXy3C3s+3SV8/I8aXNUPEm/jjR3NbDjStA01bPoBS oImOL3bl8oSMeh4Kq7+24j+D54xUGfjLhnqutpWDiCRkZkrI7NyuHEIQPlsoJ6SG fJpy79XXEcVwccyRt19QUanQFMqK5CwZ9eBAViKp8Q095ny7Xc9eSmdgSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAEz0jvkOSCf538i6ffwzx1sopOMB8GA1UdIwQY MBaAFJeVhgNaviNWnCE14yDb0aJVuEA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgt NzI0MGMzNjAwMGQ3LzEvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMDFiOWYtZTRkOC00ZGFjLWJmMDgtNzI0MGMzNjAwMGQ3 LzEvbDVXR0ExcS1JMWFjSVRYaklOdlJvbFc0UURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrds+nx9 7/H3IvM3KMlj83syCK/9M85rBOHL3px78YIGGnsySKbHOIWKGA8q4nwxUJN/DKuC xGq2HLQrxZUYgy96UuyxuaRFQj/QH6oTlpLuf+ogNf+NxY5PVDZlyjxkrcz3T6UG wiP8fbleA8ymHviSyamLscN0DXBQEnuAYCW+rWUGJfWz5CqsAFK5lfPShO/OqGzL 6V3gYZ4Av9AvK/xtfX61W3KCBsQszOsxMRTV6QFAu4iac6jz0PL3dnICr+ss1KrQ n2625xfduo+mzuOR1OlmU/SDwX/HSaT+oFQg5PBGmhVGN2a5nvd09bP5uJSCQH8Y 56xMlw1jQ0/bNA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:13 2025 by rpki-client