This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json) Hash identifier: pA4/PvG5rEQwjaXEFA3GLLV0JO1BUVg5wGsvSHOYz+8= Subject key identifier: FC:40:29:69:40:05:9D:97:43:F4:79:95:1F:D8:6B:25:8E:60:7E:33 Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78 Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778 Certificate serial: 019AF12DC227CC03C2DD55150F3F58C61120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 5mZgSyNqs8Lb+AHyff+iqWqGXoOXLUdbEr1g6MTUNJM=) 2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c2:27:cc:03:c2:dd:55:15:0f:3f:58:c6:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=fc40296940059d9743f479951fd86b258e607e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:12:ff:9f:0d:30:56:9e:d6:04:d6:0e:47: 60:fd:1b:d0:b3:a0:93:2d:f7:b8:c3:d8:54:70:af: eb:05:79:8c:79:7e:c6:fa:08:cf:97:a9:fb:be:47: 9f:59:8b:65:b8:3a:bc:3c:08:ee:4f:bb:9c:2c:ed: 87:c3:db:bc:3e:f9:c9:b0:b8:65:76:a3:e6:88:d8: 68:c9:59:51:08:f5:7c:53:d6:08:2e:85:51:83:11: dd:ce:a0:25:91:a5:1e:17:6c:f5:ae:d1:63:3e:5a: 3a:45:68:4b:03:ad:96:13:bc:35:cf:4b:e8:4a:48: 34:cb:e7:e7:b9:81:1a:22:95:77:da:7d:aa:3d:24: ca:23:b7:4c:bf:42:ef:d3:23:17:f5:29:b1:f1:da: bf:d5:d2:27:1d:df:16:db:09:32:dc:98:85:9b:e0: c2:94:46:ae:77:07:cf:e5:99:42:76:33:09:7c:2a: b5:7e:88:56:dc:f6:45:97:8f:96:c6:f1:56:b0:ce: 4f:55:2d:00:54:3c:44:5a:9a:bf:7f:a4:3a:63:b8: 06:7f:49:d5:80:cc:8d:6a:51:6a:6a:7a:7b:03:7b: 90:1d:0f:11:a9:f7:8f:7a:4e:66:b1:6e:a7:96:18: 71:88:7f:9b:59:44:86:22:14:cd:93:55:ad:00:9c: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:29:69:40:05:9D:97:43:F4:79:95:1F:D8:6B:25:8E:60:7E:33 X509v3 Authority Key Identifier: keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:87:fd:5c:38:8a:bd:f2:2e:e4:cb:1b:e0:c1:73:3c:98:5f: 29:6e:41:fa:e8:85:72:c8:d2:e7:01:82:6a:7f:d0:4c:07:22: 17:21:a4:9e:ed:17:8a:98:9c:91:80:ef:30:25:56:a6:e7:cf: 60:3b:03:bb:ea:69:fb:79:3b:74:be:9c:3b:42:23:a1:91:aa: 08:de:ab:00:d8:bf:d9:ff:d5:52:26:0b:0d:d2:3b:66:67:63: f2:30:0b:c4:39:86:90:0a:3d:42:cf:70:58:17:c1:68:5d:ab: 7f:72:6d:9f:2d:5e:18:b0:f6:f8:bb:88:7c:24:4f:a9:64:39: 1e:c5:08:54:c4:43:05:9a:2e:ec:2b:44:35:d9:bf:06:0b:58: 19:04:c3:cb:2f:a1:7d:36:b9:68:b5:80:74:36:0e:1b:f8:95: 76:1d:73:33:f8:86:f4:88:bd:58:39:45:09:9a:c9:b3:af:7e: b9:1e:f7:df:51:df:d9:e3:aa:78:01:9a:5b:f8:a8:e0:99:5f: c7:39:18:8e:89:35:94:e9:90:29:92:15:8f:87:a4:93:50:1d: 51:5e:73:6b:9f:0e:f6:8f:4c:d3:7b:93:04:c2:31:70:41:a3: 66:37:24:09:fc:55:6f:d6:0e:a3:27:b2:42:54:ab:09:b3:c7: 7a:df:a4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcInzAPC3VUVDz9YxhEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWNmYmIzNTUwYmYyYzc2NzRjYzUyZTljYmJmM2E5MzNm NWU3NzgwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EyhmYzQwMjk2OTQwMDU5ZDk3NDNmNDc5OTUxZmQ4NmIyNThlNjA3ZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2QS/58NMFae1gTWDkdg/RvQs6CT Lfe4w9hUcK/rBXmMeX7G+gjPl6n7vkefWYtluDq8PAjuT7ucLO2Hw9u8PvnJsLhl dqPmiNhoyVlRCPV8U9YILoVRgxHdzqAlkaUeF2z1rtFjPlo6RWhLA62WE7w1z0vo Skg0y+fnuYEaIpV32n2qPSTKI7dMv0Lv0yMX9Smx8dq/1dInHd8W2wky3JiFm+DC lEaudwfP5ZlCdjMJfCq1fohW3PZFl4+WxvFWsM5PVS0AVDxEWpq/f6Q6Y7gGf0nV gMyNalFqanp7A3uQHQ8RqfePek5msW6nlhhxiH+bWUSGIhTNk1WtAJxTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxAKWlABZ2XQ/R5lR/YayWOYH4zMB8GA1UdIwQY MBaAFJfs+7NVC/LHZ0zFLpy786kz9ed4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzkt OGM1MTE2OThmY2FlLzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xYzBlYTYtYTZkZi00NTIyLThiYzktOGM1MTE2OThmY2Fl LzEvbC16N3MxVUw4c2RuVE1VdW5MdnpxVFAxNTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABof9XDiK vfIu5Msb4MFzPJhfKW5B+uiFcsjS5wGCan/QTAciFyGknu0XipickYDvMCVWpufP YDsDu+pp+3k7dL6cO0IjoZGqCN6rANi/2f/VUiYLDdI7Zmdj8jALxDmGkAo9Qs9w WBfBaF2rf3Jtny1eGLD2+LuIfCRPqWQ5HsUIVMRDBZou7CtENdm/BgtYGQTDyy+h fTa5aLWAdDYOG/iVdh1zM/iG9Ii9WDlFCZrJs69+uR7331Hf2eOqeAGaW/io4Jlf xzkYjok1lOmQKZIVj4ekk1AdUV5za58O9o9M03uTBMIxcEGjZjckCfxVb9YOoyey QlSrCbPHet+kaA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:46 2025 by rpki-client