This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json) Hash identifier: DvHw9A191lJK+oijhmXpODDnFJzPnrS3uRNfPCyF9dQ= Subject key identifier: 1B:6B:E5:22:5A:EC:22:FD:CD:99:BD:D9:6E:9B:79:7B:5D:88:D0:E2 Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019AF2ADE130B45557A5E30831763B058F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft Manifest number: 1517 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: 2t_P7Z4EHzx6RCn0NGvyeQ2m4hw.roa (hash: 6yZ6J/mreE0RoEYWMI2NLTt5Zn18y6jZiBf2p+Imiq4=) 2: 8sek3R_CiH2Ce26peT_yPJJM1Q4.roa (hash: MMoHl1B7kl6idkVB+mLHeo7h0pXBE+uaRVofbjNMtN0=) 3: R1LtSR--SIXBiaZh4E5Q6En2fhk.roa (hash: QyJjIQmpOVOlqsTG9jHRUnt61S51UgFdXw/l/jQZvj8=) 4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: SJmPxz8DQnxS6PpO8IUqq7xTxASJe/IwKXMQCIlYRiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e1:30:b4:55:57:a5:e3:08:31:76:3b:05:8f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=1b6be5225aec22fdcd99bdd96e9b797b5d88d0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:33:76:cb:eb:0f:ed:db:21:16:3d:bf:a5: 2e:5f:32:eb:21:d5:69:7f:bd:65:5c:cd:53:02:be: 86:1e:5c:92:59:aa:be:63:1d:96:dd:97:23:0f:07: 4f:9b:2e:da:72:2f:da:1c:c5:44:da:05:e7:27:21: 51:5d:bf:48:a0:22:f8:91:cc:2e:57:64:a0:6d:30: 22:7a:20:a7:b8:ba:2c:f0:75:4b:a4:97:85:f6:a0: e3:cc:0b:6c:e5:9a:81:07:89:97:ed:5a:e2:04:70: 42:6f:c9:91:29:b3:09:7c:1a:6d:97:94:c0:ab:d3: c2:6e:bb:77:f7:d8:79:c1:40:7c:67:5d:8f:c2:18: f1:71:05:3b:fb:6e:68:d5:66:fe:e8:1d:52:3e:5d: 70:b0:39:3c:3a:2a:09:93:86:06:13:ac:52:f1:95: d0:59:19:ca:92:dc:d4:33:e1:c0:c2:6e:64:e9:0d: d6:ef:41:8b:20:46:67:2b:b6:74:5e:4e:e8:99:af: 2f:7a:0a:61:bd:d3:1f:01:e8:30:24:be:18:6e:4f: d1:b5:ed:47:dd:5e:8b:eb:4f:ae:2a:23:fc:dc:1c: 46:4e:93:37:75:62:de:6c:98:b7:b2:6f:95:bf:b7: 0f:9c:d4:c3:29:91:de:8f:0e:b0:cc:f7:30:c5:2b: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:E5:22:5A:EC:22:FD:CD:99:BD:D9:6E:9B:79:7B:5D:88:D0:E2 X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:40:99:6a:f6:17:66:99:56:8e:67:a7:3e:10:bc:05:1c: 35:91:ef:bf:00:43:2e:ca:97:d0:41:d3:75:24:25:6d:09:21: 82:a8:67:80:77:6d:2a:37:ab:a6:bb:af:8f:63:ce:27:4c:b1: 23:3c:78:3b:b9:d8:38:4a:b7:98:91:ee:c7:73:d2:7c:6a:09: 8a:7a:a2:38:71:6c:97:14:26:cc:bb:78:11:36:56:07:8f:e4: b7:c8:d3:ea:5a:7c:40:55:ce:99:13:3f:d4:40:ec:16:90:a8: 3b:9a:fc:43:1d:f0:94:12:10:bd:40:6d:d7:53:ae:70:50:2a: 3f:1b:8b:7c:bc:57:07:56:d6:e6:35:62:19:95:2d:4f:56:7c: 5d:84:3a:d7:19:2f:55:90:11:d7:f3:4b:0c:da:08:68:c9:e2: 5f:33:fd:ee:73:a9:52:b5:b8:bd:63:e0:43:9f:9a:31:45:61: ad:31:cd:9a:90:d5:a2:bf:a8:e3:29:cb:df:74:b4:99:9c:3b: ea:3a:2f:53:ee:a1:c2:50:39:47:4b:b9:9e:68:27:7e:43:fc: 2d:d0:a2:f6:79:16:57:80:ed:ca:86:e9:f2:5b:28:b2:f0:94: 0a:b9:92:cc:6a:18:bc:9d:c5:fd:03:fc:76:b2:65:e8:d4:8c: 9d:c4:5d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreEwtFVXpeMIMXY7BY8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EygxYjZiZTUyMjVhZWMyMmZkY2Q5OWJkZDk2ZTliNzk3YjVkODhkMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rMzdsvrD+3bIRY9v6UuXzLrIdVp f71lXM1TAr6GHlySWaq+Yx2W3ZcjDwdPmy7aci/aHMVE2gXnJyFRXb9IoCL4kcwu V2SgbTAieiCnuLos8HVLpJeF9qDjzAts5ZqBB4mX7VriBHBCb8mRKbMJfBptl5TA q9PCbrt399h5wUB8Z12PwhjxcQU7+25o1Wb+6B1SPl1wsDk8OioJk4YGE6xS8ZXQ WRnKktzUM+HAwm5k6Q3W70GLIEZnK7Z0Xk7oma8vegphvdMfAegwJL4Ybk/Rte1H 3V6L60+uKiP83BxGTpM3dWLebJi3sm+Vv7cPnNTDKZHejw6wzPcwxSvSRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtr5SJa7CL9zZm92W6beXtdiNDiMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVVAmWr2 F2aZVo5npz4QvAUcNZHvvwBDLsqX0EHTdSQlbQkhgqhngHdtKjerpruvj2POJ0yx Izx4O7nYOEq3mJHux3PSfGoJinqiOHFslxQmzLt4ETZWB4/kt8jT6lp8QFXOmRM/ 1EDsFpCoO5r8Qx3wlBIQvUBt11OucFAqPxuLfLxXB1bW5jViGZUtT1Z8XYQ61xkv VZAR1/NLDNoIaMniXzP97nOpUrW4vWPgQ5+aMUVhrTHNmpDVor+o4ynL33S0mZw7 6jovU+6hwlA5R0u5nmgnfkP8LdCi9nkWV4Dtyobp8lsosvCUCrmSzGoYvJ3F/QP8 drJl6NSMncRdEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:55 2025 by rpki-client