This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft File: l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json) Hash identifier: ZylvHnSZreuTk45Kg49rRCE6tm50kP5wOdwSPLysWJI= Subject key identifier: 12:B9:7E:1A:55:75:BC:F6:60:D2:23:1E:1E:6C:22:E1:D0:8F:AD:20 Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44 Certificate issuer: /CN=978f41e290285473c2a1e2be7f66f63452ed4644 Certificate serial: 019AF12DACE30EA132AAFF19229621FB4BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft Manifest number: 1695 Signing time: Sat 06 Dec 2025 01:01:33 +0000 Manifest this update: Sat 06 Dec 2025 01:01:33 +0000 Manifest next update: Sun 07 Dec 2025 01:01:33 +0000 Files and hashes: 1: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (hash: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=) 2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: RJ/ws1z36C/aB8rmTmmc4L2seadbpaN43swYhdsHZ+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ac:e3:0e:a1:32:aa:ff:19:22:96:21:fb:4b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644 Validity Not Before: Dec 6 01:01:33 2025 GMT Not After : Dec 7 01:01:33 2025 GMT Subject: CN=12b97e1a5575bcf660d2231e1e6c22e1d08fad20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:59:01:de:8d:91:31:ce:c7:d8:08:db:d5: d6:11:c2:52:28:ce:4b:70:65:bf:57:b6:80:23:b2: c8:35:bc:7f:6c:ce:bf:ba:b8:52:9a:c1:cd:ee:a6: 09:50:f6:13:12:03:78:38:b5:ae:63:09:df:e4:f5: fd:08:60:90:39:e6:d0:39:d3:8e:94:6a:af:0a:79: aa:b8:f4:25:38:5d:38:ea:ca:31:cd:76:a3:a5:38: 9c:d9:61:67:76:11:c1:d6:8e:d9:01:8f:d9:21:92: 08:0b:57:02:a9:d5:7e:31:20:39:70:48:74:42:a5: 13:10:ea:c8:61:98:92:4b:35:dc:ec:f4:73:32:84: 13:7b:23:3b:9d:1e:67:c2:8f:2f:2d:c6:2a:c5:cf: 60:ff:f3:48:6d:63:10:14:28:cf:7d:d3:b5:b9:87: 5c:70:22:b1:b6:82:e2:86:ed:94:ee:e5:73:21:70: 99:59:ca:4b:e8:ef:37:ab:90:d5:51:37:0d:15:38: 7d:8d:9e:e2:8b:ab:04:13:09:94:d5:dc:c1:69:44: 70:34:03:9c:7c:19:c1:c1:5e:8a:cf:1e:30:ab:ed: 6b:d4:a9:c1:2d:03:58:aa:2a:4f:aa:81:29:6f:a5: a4:36:5d:9a:cf:44:5b:ba:77:65:a6:1c:4b:d8:69: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:7E:1A:55:75:BC:F6:60:D2:23:1E:1E:6C:22:E1:D0:8F:AD:20 X509v3 Authority Key Identifier: keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:6c:77:55:16:54:e7:a9:13:ae:ec:a9:f2:26:04:f1:14: 57:68:d9:6a:ba:01:aa:99:b4:5c:db:23:2c:a6:f7:cc:ee:54: 89:41:5a:c0:75:d9:64:7c:48:07:aa:f0:4b:7b:89:14:cc:de: 7a:db:45:03:4b:9a:a9:ba:f0:cf:9f:32:08:07:d2:c5:b4:4d: 57:a7:05:a3:25:5c:d2:f6:4c:53:79:88:ee:09:aa:81:1f:92: a8:8e:9d:07:b1:8c:52:51:29:ce:44:c2:cb:96:7f:1b:7c:0c: 42:63:00:2b:83:05:ec:c6:d5:0e:6d:d3:e4:1c:bb:b3:4e:1e: 2e:20:64:91:f9:82:b9:9d:86:ea:d4:af:29:ef:1e:e7:cb:9c: 98:46:e9:c7:fb:18:80:89:42:d3:24:08:49:ad:af:06:f3:2d: fa:36:cc:cc:d1:51:0b:70:98:bc:0a:eb:5c:c9:6a:c8:42:35: f8:dd:ae:2c:63:fb:fc:17:6d:ee:85:3a:e5:d9:5b:3d:5f:5a: 8a:1f:99:9f:05:c1:7c:2d:7c:b6:ce:84:29:55:95:ef:34:70: 36:f8:87:01:da:ca:27:c0:27:04:d4:b0:58:27:ad:32:ba:06: 1b:93:1f:6e:be:fa:92:fb:a4:c2:b1:47:2a:12:be:a6:b3:6f: 98:79:d3:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLazjDqEyqv8ZIpYh+0vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OGY0MWUyOTAyODU0NzNjMmExZTJiZTdmNjZmNjM0NTJl ZDQ2NDQwHhcNMjUxMjA2MDEwMTMzWhcNMjUxMjA3MDEwMTMzWjAzMTEwLwYDVQQD EygxMmI5N2UxYTU1NzViY2Y2NjBkMjIzMWUxZTZjMjJlMWQwOGZhZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9lZAd6NkTHOx9gI29XWEcJSKM5L cGW/V7aAI7LINbx/bM6/urhSmsHN7qYJUPYTEgN4OLWuYwnf5PX9CGCQOebQOdOO lGqvCnmquPQlOF046soxzXajpTic2WFndhHB1o7ZAY/ZIZIIC1cCqdV+MSA5cEh0 QqUTEOrIYZiSSzXc7PRzMoQTeyM7nR5nwo8vLcYqxc9g//NIbWMQFCjPfdO1uYdc cCKxtoLihu2U7uVzIXCZWcpL6O83q5DVUTcNFTh9jZ7ii6sEEwmU1dzBaURwNAOc fBnBwV6Kzx4wq+1r1KnBLQNYqipPqoEpb6WkNl2az0RbundlphxL2GlQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK5fhpVdbz2YNIjHh5sIuHQj60gMB8GA1UdIwQY MBaAFJePQeKQKFRzwqHivn9m9jRS7UZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzIt MzU3N2IxZWZkYzc4LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzItMzU3N2IxZWZkYzc4 LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW5sd1UW VOepE67sqfImBPEUV2jZaroBqpm0XNsjLKb3zO5UiUFawHXZZHxIB6rwS3uJFMze ettFA0uaqbrwz58yCAfSxbRNV6cFoyVc0vZMU3mI7gmqgR+SqI6dB7GMUlEpzkTC y5Z/G3wMQmMAK4MF7MbVDm3T5By7s04eLiBkkfmCuZ2G6tSvKe8e58ucmEbpx/sY gIlC0yQISa2vBvMt+jbMzNFRC3CYvArrXMlqyEI1+N2uLGP7/Bdt7oU65dlbPV9a ih+ZnwXBfC18ts6EKVWV7zRwNviHAdrKJ8AnBNSwWCetMroGG5Mfbr76kvukwrFH KhK+prNvmHnTAg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:44 2025 by rpki-client