This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json) Hash identifier: 0zLTnR3LA4qX8OQAs+Y5A2KwrPvsmOpd770ESlCjnKE= Subject key identifier: A4:E7:D9:83:F3:9D:F2:31:48:5A:68:3D:6E:52:41:5A:07:17:05:CF Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90 Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790 Certificate serial: 019AF12DDC44CDE7273F3988C423A1193E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: 5qHYM+AUtJj2FrEzfh0wMbYkxmxp/TCcT/u2gohfveM=) 2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:dc:44:cd:e7:27:3f:39:88:c4:23:a1:19:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790 Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=a4e7d983f39df231485a683d6e52415a071705cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:09:2d:5b:c3:d9:1e:04:36:44:88:63:e9: 09:fc:b1:a0:5d:bf:52:e4:b4:73:f2:9e:48:46:0c: d6:78:7f:93:5d:30:ed:87:92:c4:64:63:42:48:15: 6c:95:93:1c:39:09:6e:5e:99:02:d5:fe:d2:e7:87: 66:a4:18:cc:31:53:c1:1a:c5:95:53:e5:62:73:3f: 94:9e:3e:37:4e:55:6b:7f:ca:54:71:3a:86:58:39: 51:7d:7b:93:4b:5b:c1:20:0d:95:07:a4:a9:fb:08: 75:2e:23:dc:f1:48:31:e9:41:68:14:c1:07:97:d2: 5b:cb:ae:da:7b:09:2d:30:eb:49:52:98:e6:35:e3: 08:51:0a:54:e8:43:07:52:b2:45:af:39:9a:cd:8f: a4:e2:f3:6c:42:19:6a:7c:de:32:50:a8:be:ab:2e: d5:3f:30:83:4c:4a:55:84:97:d0:9c:ca:f5:37:f8: 27:fb:5a:39:51:9f:55:a3:30:38:17:1b:82:f2:de: 8a:bf:22:c7:cb:ab:0b:a7:19:21:93:ee:e4:89:1c: fc:89:88:98:be:72:a8:ec:f1:82:ce:65:21:52:48: b6:a5:7a:61:67:9b:56:70:a2:1b:6a:55:ec:1b:8c: f9:5f:0e:0e:2d:db:56:ca:37:52:94:09:2d:e4:bb: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E7:D9:83:F3:9D:F2:31:48:5A:68:3D:6E:52:41:5A:07:17:05:CF X509v3 Authority Key Identifier: keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:12:a5:04:db:42:f6:41:2c:5d:a4:38:ea:c9:bc:20:d6:df: b9:d3:0c:a1:62:91:45:3b:84:f7:12:18:f7:6e:92:7a:e1:c7: 4c:c3:63:bb:32:db:a0:a3:15:b4:14:44:09:78:3c:19:3b:d4: 83:9f:ff:d6:01:ac:d2:1e:10:2e:77:57:f7:33:ed:d1:c3:10: 20:88:b3:eb:33:11:d8:ac:90:f6:65:27:e2:60:73:a4:dc:35: 85:fb:e7:78:31:6d:13:07:5d:72:04:dc:1a:10:ef:6d:fb:cb: a9:3d:20:d7:89:4a:dc:bb:ca:51:1a:fd:af:22:2a:76:a2:e5: f4:79:83:f9:f2:3e:b4:5c:00:1f:b2:29:bc:bc:49:77:01:4b: bc:da:a5:02:07:9e:ac:24:35:76:cf:13:65:22:ac:e4:e0:9d: 3b:10:ee:b9:ad:e7:d2:e8:c9:b2:45:95:02:57:68:5f:44:84: a1:c9:ac:c0:a0:bf:d8:d2:8f:b2:f5:86:49:f4:4f:cb:cd:c3: 60:bc:6f:8e:eb:eb:c2:f6:2e:17:c5:68:c4:d3:15:f0:ce:de: f3:bb:01:b6:34:ac:db:47:b2:12:c0:97:7f:4d:22:fa:0b:7a: 8e:7f:5b:d3:24:8a:9c:7b:37:1b:a3:b7:36:36:81:a3:62:7b: cb:3b:2f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdxEzecnPzmIxCOhGT5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTcwNTIwNzU5NjFlOWQ5MGMyN2QwNzEyNWE0YjQ0NmNh ZmQ3OTAwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EyhhNGU3ZDk4M2YzOWRmMjMxNDg1YTY4M2Q2ZTUyNDE1YTA3MTcwNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB8JLVvD2R4ENkSIY+kJ/LGgXb9S 5LRz8p5IRgzWeH+TXTDth5LEZGNCSBVslZMcOQluXpkC1f7S54dmpBjMMVPBGsWV U+Vicz+Unj43TlVrf8pUcTqGWDlRfXuTS1vBIA2VB6Sp+wh1LiPc8Ugx6UFoFMEH l9Jby67aewktMOtJUpjmNeMIUQpU6EMHUrJFrzmazY+k4vNsQhlqfN4yUKi+qy7V PzCDTEpVhJfQnMr1N/gn+1o5UZ9VozA4FxuC8t6KvyLHy6sLpxkhk+7kiRz8iYiY vnKo7PGCzmUhUki2pXphZ5tWcKIbalXsG4z5Xw4OLdtWyjdSlAkt5LuN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTn2YPznfIxSFpoPW5SQVoHFwXPMB8GA1UdIwQY MBaAFJdXBSB1lh6dkMJ9BxJaS0Rsr9eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEt YmVhZmUwZWZjMDljLzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEtYmVhZmUwZWZjMDlj LzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABKlBNtC 9kEsXaQ46sm8INbfudMMoWKRRTuE9xIY926SeuHHTMNjuzLboKMVtBRECXg8GTvU g5//1gGs0h4QLndX9zPt0cMQIIiz6zMR2KyQ9mUn4mBzpNw1hfvneDFtEwddcgTc GhDvbfvLqT0g14lK3LvKURr9ryIqdqLl9HmD+fI+tFwAH7IpvLxJdwFLvNqlAgee rCQ1ds8TZSKs5OCdOxDuua3n0ujJskWVAldoX0SEocmswKC/2NKPsvWGSfRPy83D YLxvjuvrwvYuF8VoxNMV8M7e87sBtjSs20eyEsCXf00i+gt6jn9b0ySKnHs3G6O3 NjaBo2J7yzsv0A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:08 2025 by rpki-client