This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json) Hash identifier: 1Q/hQ6HYL5zhZpBiORKen9Iw0M3jX3pLPfLF8k61b8k= Subject key identifier: A2:DB:68:D4:88:23:32:B1:C6:C5:78:15:0E:04:71:5C:38:FE:F9:4B Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79 Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579 Certificate serial: 019AF2769DFDBD1258FE10B6FE47AD9BE8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft Manifest number: 1558 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=) 2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: kvnL5pFNgLLpTs0JFzFr8SEqkP6VFuZcXfkDi1MgUkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9d:fd:bd:12:58:fe:10:b6:fe:47:ad:9b:e8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=a2db68d4882332b1c6c578150e04715c38fef94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:57:52:04:c4:8a:8e:90:6c:89:ba:dd:1d: a9:73:4a:ab:31:93:2c:7b:f2:19:09:7f:f5:dc:bd: 53:3c:02:3d:7b:a2:ab:f4:c5:d3:b5:98:2e:19:07: 2c:33:48:b1:fe:30:21:f1:62:25:79:dd:df:6f:ce: 9e:ca:41:5e:47:4a:99:0b:5e:2d:6a:ab:13:bf:7b: d7:1f:a9:65:34:31:49:ba:8c:45:4c:e1:26:aa:7f: 4d:61:cf:6c:48:7f:ec:39:76:39:2a:cf:08:26:88: 21:7c:b8:20:9a:da:45:83:1f:05:4c:34:a5:08:62: d5:5a:f2:ba:e7:23:19:39:58:18:43:fc:0d:d5:d6: 6c:44:f4:34:5d:16:c0:b7:b2:5a:7e:b5:be:57:25: 31:4b:a8:29:a6:34:16:d8:83:40:f5:d3:a2:85:e9: dc:f9:1a:d8:8e:88:0c:79:c4:8e:4f:e0:79:24:10: 66:3d:68:8e:46:93:0e:36:e8:57:c4:e5:20:81:8b: ac:86:72:ea:0a:98:2a:e3:5c:0d:e6:23:16:d4:b2: 59:ac:08:8a:0d:54:57:80:73:28:e3:fa:89:82:05: 2a:05:9b:1a:f6:8d:3a:fc:2d:99:82:30:72:40:7a: 62:9e:cc:4c:38:7c:65:77:90:f1:f5:1b:63:d7:4b: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DB:68:D4:88:23:32:B1:C6:C5:78:15:0E:04:71:5C:38:FE:F9:4B X509v3 Authority Key Identifier: keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:43:d4:b5:56:a2:32:88:0c:48:8d:21:03:4d:8f:ed:bf:c0: 9b:51:0d:d1:d0:4e:44:e9:07:44:bf:6e:a2:a4:f0:2d:5f:ee: 1d:02:bd:8c:0b:b7:fc:ec:d9:95:6d:2c:54:c7:e8:a2:3e:4d: 51:40:3f:b3:a9:11:d6:ac:b0:53:0b:68:d6:72:45:d5:12:02: fc:0b:0a:9d:e1:78:a6:10:52:2b:f9:92:8e:62:a8:e5:b8:9f: 32:e5:b6:16:08:54:99:ec:6f:ac:ca:7c:c0:88:7a:9e:b6:02: 47:d5:be:5a:2d:b3:4c:9a:bb:e1:38:d6:aa:01:7e:44:25:dd: 37:6c:94:a7:3c:6b:ae:41:f2:47:4d:d8:82:57:98:0e:bb:ea: 60:34:ac:32:8a:e4:24:4c:64:89:f9:c2:e6:40:e4:80:5b:f2: 88:5a:a9:63:67:47:ab:26:88:76:82:82:14:97:21:48:fe:3f: 10:e7:9c:48:47:9b:5d:28:3f:4a:04:37:59:9a:6f:b3:a4:65: fb:61:19:39:c2:18:9e:26:b5:c5:d3:8f:bd:2a:9d:7e:ea:fb: bc:c0:0e:f1:0b:95:74:4f:ce:15:1f:df:05:28:7c:2a:4c:e7: a2:b5:98:bb:6e:3b:69:b0:61:cb:9c:0e:63:66:41:a5:ed:27: aa:6b:e4:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp39vRJY/hC2/ketm+i6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi ZTk1NzkwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EyhhMmRiNjhkNDg4MjMzMmIxYzZjNTc4MTUwZTA0NzE1YzM4ZmVmOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UJXUgTEio6QbIm63R2pc0qrMZMs e/IZCX/13L1TPAI9e6Kr9MXTtZguGQcsM0ix/jAh8WIled3fb86eykFeR0qZC14t aqsTv3vXH6llNDFJuoxFTOEmqn9NYc9sSH/sOXY5Ks8IJoghfLggmtpFgx8FTDSl CGLVWvK65yMZOVgYQ/wN1dZsRPQ0XRbAt7JafrW+VyUxS6gppjQW2INA9dOihenc +RrYjogMecSOT+B5JBBmPWiORpMONuhXxOUggYushnLqCpgq41wN5iMW1LJZrAiK DVRXgHMo4/qJggUqBZsa9o06/C2ZgjByQHpinsxMOHxld5Dx9Rtj10u03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLbaNSIIzKxxsV4FQ4EcVw4/vlLMB8GA1UdIwQY MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkPUtVai MogMSI0hA02P7b/Am1EN0dBOROkHRL9uoqTwLV/uHQK9jAu3/OzZlW0sVMfooj5N UUA/s6kR1qywUwto1nJF1RIC/AsKneF4phBSK/mSjmKo5bifMuW2FghUmexvrMp8 wIh6nrYCR9W+Wi2zTJq74TjWqgF+RCXdN2yUpzxrrkHyR03YgleYDrvqYDSsMork JExkifnC5kDkgFvyiFqpY2dHqyaIdoKCFJchSP4/EOecSEebXSg/SgQ3WZpvs6Rl +2EZOcIYnia1xdOPvSqdfur7vMAO8QuVdE/OFR/fBSh8KkznorWYu247abBhy5wO Y2ZBpe0nqmvkqA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:48 2025 by rpki-client