This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json) Hash identifier: MwR93BJJgKBmLwzAfPh/Picx87O8Gm62MIze8X/jh9M= Subject key identifier: 9B:5B:28:5A:BC:B5:3D:62:BB:99:CA:AA:32:B1:43:34:93:CE:5F:62 Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90 Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790 Certificate serial: 019B32D7D49E2D7F975736A97C0858166C4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:02:44 +0000 Manifest this update: Thu 18 Dec 2025 19:02:44 +0000 Manifest next update: Fri 19 Dec 2025 19:02:44 +0000 Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: e4rCWwuKozgA0Q3gtMTLM8El/n4YYqboXqd9EefqtN0=) 2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:d4:9e:2d:7f:97:57:36:a9:7c:08:58:16:6c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790 Validity Not Before: Dec 18 19:02:44 2025 GMT Not After : Dec 19 19:02:44 2025 GMT Subject: CN=9b5b285abcb53d62bb99caaa32b1433493ce5f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:44:f0:b4:f7:dd:be:a2:e7:b3:86:d2:bb: 84:44:c6:aa:54:cb:dd:09:b4:a8:80:c5:cf:d7:c1: 9f:c8:68:23:34:04:10:bf:42:50:2d:fc:c5:65:16: 30:20:76:a0:17:29:3c:82:0a:1a:fa:58:58:18:d2: 9f:b8:9c:77:ff:9a:b9:f4:88:d4:75:1c:92:5d:4d: b7:2b:75:b8:31:50:9c:3b:c1:30:eb:7e:65:08:7a: d3:58:3d:c7:56:25:ae:2a:91:28:24:90:fe:a1:39: 50:91:c7:cd:ed:d7:bf:f3:1a:7a:f4:19:50:91:49: a6:83:9f:d3:3d:be:26:1b:34:6f:2a:1a:b3:b4:c4: 1a:35:1d:39:7f:a5:29:ac:b1:ab:a3:2e:db:80:f8: 18:53:71:a1:82:ef:12:b8:21:67:78:6c:22:7e:47: bd:6a:2c:d0:e1:ac:68:20:4e:34:8a:3e:6e:fa:06: 45:be:ae:32:0c:37:00:e1:05:76:fa:40:d2:12:01: ec:9e:89:d0:27:74:22:d8:14:04:b1:80:73:d4:7f: 5f:6f:c6:34:2b:36:34:ec:28:c6:40:73:48:6f:e0: 0c:d8:33:8d:cf:4c:3e:50:f9:26:68:64:80:ac:9a: 59:88:35:fe:dc:4a:c7:73:4b:3e:0c:39:c5:46:33: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5B:28:5A:BC:B5:3D:62:BB:99:CA:AA:32:B1:43:34:93:CE:5F:62 X509v3 Authority Key Identifier: keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3f:5a:67:2f:4e:b0:fd:28:e4:48:a8:68:3f:9f:39:c3:13: 76:3b:37:e0:76:b4:79:55:2f:93:a0:cf:dc:0e:43:71:66:a8: 2b:10:67:47:ae:db:09:cb:26:b6:88:66:79:e5:65:fa:07:57: 25:45:fd:c1:77:46:e4:90:93:12:c3:60:43:96:97:df:20:06: cd:62:86:8b:58:7e:a6:95:6d:24:0e:84:f8:fe:5e:a3:e8:16: 05:ac:e9:d8:48:ba:70:81:27:09:23:84:8d:60:c0:00:e2:e3: a1:6d:db:e3:e8:51:de:b0:5e:3a:f4:56:0e:86:1f:2b:4f:d4: 46:88:4e:ea:9e:16:b8:59:6a:39:78:c7:0a:dd:03:38:a7:70: 29:42:e3:d1:78:be:b0:7d:aa:bc:dc:16:b8:33:67:48:90:7a: e5:a1:af:63:7b:39:af:d3:9f:62:5e:e3:ff:6b:7e:7d:3c:34: 0d:11:81:ef:e6:91:c5:a3:eb:07:20:78:ad:1b:01:bb:f4:93: 98:ea:98:d4:74:50:0b:32:39:04:76:d3:f2:cb:59:3d:03:37: 87:17:87:1a:f5:b8:8c:5d:7d:30:d1:63:38:b6:08:68:43:9f: 61:fa:7e:3a:f7:af:76:5c:f2:f5:48:6b:fe:6d:74:10:82:3a: 25:3d:54:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy19SeLX+XVzapfAhYFmxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTcwNTIwNzU5NjFlOWQ5MGMyN2QwNzEyNWE0YjQ0NmNh ZmQ3OTAwHhcNMjUxMjE4MTkwMjQ0WhcNMjUxMjE5MTkwMjQ0WjAzMTEwLwYDVQQD Eyg5YjViMjg1YWJjYjUzZDYyYmI5OWNhYWEzMmIxNDMzNDkzY2U1ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eJE8LT33b6i57OG0ruERMaqVMvd CbSogMXP18GfyGgjNAQQv0JQLfzFZRYwIHagFyk8ggoa+lhYGNKfuJx3/5q59IjU dRySXU23K3W4MVCcO8Ew635lCHrTWD3HViWuKpEoJJD+oTlQkcfN7de/8xp69BlQ kUmmg5/TPb4mGzRvKhqztMQaNR05f6UprLGroy7bgPgYU3Ghgu8SuCFneGwifke9 aizQ4axoIE40ij5u+gZFvq4yDDcA4QV2+kDSEgHsnonQJ3Qi2BQEsYBz1H9fb8Y0 KzY07CjGQHNIb+AM2DONz0w+UPkmaGSArJpZiDX+3ErHc0s+DDnFRjMGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtbKFq8tT1iu5nKqjKxQzSTzl9iMB8GA1UdIwQY MBaAFJdXBSB1lh6dkMJ9BxJaS0Rsr9eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEt YmVhZmUwZWZjMDljLzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85NjhkNDEtNGQ3Ny00MmJlLTgwYjEtYmVhZmUwZWZjMDlj LzEvbDFjRklIV1dIcDJRd24wSEVscExSR3l2MTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj9aZy9O sP0o5EioaD+fOcMTdjs34Ha0eVUvk6DP3A5DcWaoKxBnR67bCcsmtohmeeVl+gdX JUX9wXdG5JCTEsNgQ5aX3yAGzWKGi1h+ppVtJA6E+P5eo+gWBazp2Ei6cIEnCSOE jWDAAOLjoW3b4+hR3rBeOvRWDoYfK0/URohO6p4WuFlqOXjHCt0DOKdwKULj0Xi+ sH2qvNwWuDNnSJB65aGvY3s5r9OfYl7j/2t+fTw0DRGB7+aRxaPrByB4rRsBu/ST mOqY1HRQCzI5BHbT8stZPQM3hxeHGvW4jF19MNFjOLYIaEOfYfp+Ovevdlzy9Uhr /m10EII6JT1UTg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:53 2025 by rpki-client