This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json) Hash identifier: qlachm/OBW5FW+dWLSEq0WZxnXBD/UvRAQ/mMIVk7J0= Subject key identifier: 2A:83:65:3E:56:8A:3C:26:7F:74:36:F5:0D:0B:4D:91:AB:6B:FE:44 Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Certificate serial: 019AF1640EED5B4356D70E8A5ED63EE45F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft Manifest number: 14C8 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=) 2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: aPspRCfpTu892k55nH2a/hti0Xn/rYmcmseUzUxIvDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0e:ed:5b:43:56:d7:0e:8a:5e:d6:3e:e4:5f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=2a83653e568a3c267f7436f50d0b4d91ab6bfe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:df:a9:cc:3c:7b:03:45:7c:bb:41:54:83: 41:97:22:ac:3f:94:f5:7f:3f:20:2e:60:c3:ec:d6: bf:7d:97:d9:60:ac:d5:38:6e:59:f7:6e:c9:90:71: 0f:25:eb:f7:2b:50:b0:e4:fb:93:e0:1c:a5:f8:d8: 2a:f9:9b:37:04:4b:83:82:22:32:21:16:2f:fd:92: 11:72:f8:66:7f:26:25:de:5a:3b:1b:7a:2f:64:23: cb:19:0b:12:57:9f:c0:d9:ff:5a:9f:69:74:05:f6: f1:e4:08:5c:32:4c:f2:1b:17:2a:a6:71:ea:0e:b8: 6c:bd:c7:a9:b0:9a:ae:4f:48:14:1f:fe:83:84:a8: 53:04:93:2a:34:25:ef:72:89:3f:53:ba:39:e0:be: e4:3f:41:83:1f:32:ee:b7:05:9b:f0:d7:df:19:3d: 36:11:51:70:13:a6:d9:33:ba:a5:0b:f7:c8:17:40: 5d:22:5d:58:8b:8c:a1:c6:9c:46:de:ba:dc:71:ea: 31:23:7f:67:ff:63:3f:28:36:63:eb:4e:67:3f:73: 80:61:0c:4a:b6:67:0d:25:9a:1f:77:3f:e5:6d:0f: 35:66:43:0a:00:25:45:a2:22:33:1d:6d:ff:83:c8: 6d:b6:49:3e:57:34:87:be:47:c0:e3:33:9f:5f:55: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:65:3E:56:8A:3C:26:7F:74:36:F5:0D:0B:4D:91:AB:6B:FE:44 X509v3 Authority Key Identifier: keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:91:19:03:c8:cc:2a:a5:1d:6f:68:ed:98:1a:60:49:bb:ba: 04:35:c7:8e:e6:2f:91:86:5e:4f:b4:a2:f3:24:89:47:09:c1: 0f:1f:55:37:38:d7:f7:65:7a:b0:34:27:56:49:99:c4:99:e0: cd:7d:f1:ba:6b:45:e8:6b:47:34:51:40:41:42:4c:a4:f3:1d: 33:63:19:ac:41:d1:4a:d1:b5:6a:7f:1d:6a:34:b2:4c:4a:23: b5:e3:61:b8:ea:e8:4c:26:5f:66:fa:98:fb:29:09:a8:49:56: 8f:dc:41:8a:3e:05:47:d7:5b:b7:dd:da:d3:41:de:2e:83:10: f7:25:54:6e:fc:77:77:55:bd:57:71:10:3d:00:82:49:dc:7b: 0c:e3:0d:ca:45:61:9a:7a:b9:a2:d3:18:f9:49:d2:60:50:9a: 61:43:6a:33:23:64:a3:e9:b7:60:b3:9d:2e:b9:97:f8:e8:a0: e4:19:17:bd:6c:39:5c:ab:58:cb:42:46:eb:ff:f3:af:0f:f1: 45:a9:75:00:32:30:82:f5:92:c9:09:ca:a0:82:e5:15:cd:c6: 04:5c:f4:a9:97:91:01:f8:5a:0b:ee:28:34:13:e7:12:33:3e: 00:4a:b9:cd:a3:f3:3f:46:97:bc:10:67:65:7e:81:30:2e:a4: d2:27:84:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA7tW0NW1w6KXtY+5F8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTEzNWRkNDI1MTlmZGRhM2RkM2ZkYWE5ZGIzMzU3ODE1 ZmFkNzUwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EygyYTgzNjUzZTU2OGEzYzI2N2Y3NDM2ZjUwZDBiNGQ5MWFiNmJmZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue7fqcw8ewNFfLtBVINBlyKsP5T1 fz8gLmDD7Na/fZfZYKzVOG5Z927JkHEPJev3K1Cw5PuT4Byl+Ngq+Zs3BEuDgiIy IRYv/ZIRcvhmfyYl3lo7G3ovZCPLGQsSV5/A2f9an2l0Bfbx5AhcMkzyGxcqpnHq DrhsvcepsJquT0gUH/6DhKhTBJMqNCXvcok/U7o54L7kP0GDHzLutwWb8NffGT02 EVFwE6bZM7qlC/fIF0BdIl1Yi4yhxpxG3rrcceoxI39n/2M/KDZj605nP3OAYQxK tmcNJZofdz/lbQ81ZkMKACVFoiIzHW3/g8httkk+VzSHvkfA4zOfX1ULuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqDZT5Wijwmf3Q29Q0LTZGra/5EMB8GA1UdIwQY MBaAFJZRNd1CUZ/do90/2qnbM1eBX611MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEt MDdlZTI0MmUxMzZkLzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEtMDdlZTI0MmUxMzZk LzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZEZA8jM KqUdb2jtmBpgSbu6BDXHjuYvkYZeT7Si8ySJRwnBDx9VNzjX92V6sDQnVkmZxJng zX3xumtF6GtHNFFAQUJMpPMdM2MZrEHRStG1an8dajSyTEojteNhuOroTCZfZvqY +ykJqElWj9xBij4FR9dbt93a00HeLoMQ9yVUbvx3d1W9V3EQPQCCSdx7DOMNykVh mnq5otMY+UnSYFCaYUNqMyNko+m3YLOdLrmX+Oig5BkXvWw5XKtYy0JG6//zrw/x Ral1ADIwgvWSyQnKoILlFc3GBFz0qZeRAfhaC+4oNBPnEjM+AEq5zaPzP0aXvBBn ZX6BMC6k0ieELQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:01 2025 by rpki-client