This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json) Hash identifier: g5OKgaGauwLafLupCW28weHHq0QjXEoB/U+4JP8AgfQ= Subject key identifier: 21:10:CD:F1:0D:8D:B8:F6:E8:8D:F4:32:26:63:45:65:3E:10:64:52 Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8 Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8 Certificate serial: 019AF0518A58C3A0D2A7D067A7B94B462442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft Manifest number: 1103 Signing time: Fri 05 Dec 2025 21:01:06 +0000 Manifest this update: Fri 05 Dec 2025 21:01:06 +0000 Manifest next update: Sat 06 Dec 2025 21:01:06 +0000 Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=) 2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=) 3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: ag3SIRG2wydI+QQ7iLIVf13ePShBIAkTU5Z5HqY1/eE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:8a:58:c3:a0:d2:a7:d0:67:a7:b9:4b:46:24:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8 Validity Not Before: Dec 5 21:01:06 2025 GMT Not After : Dec 6 21:01:06 2025 GMT Subject: CN=2110cdf10d8db8f6e88df432266345653e106452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:31:f7:b1:aa:6c:aa:89:c6:20:43:33:c4: c3:d6:b3:64:a1:31:2a:6e:dc:e3:bc:ac:a7:33:6e: 1d:e3:4e:aa:ba:82:e9:26:21:f4:b6:0d:a3:be:d6: 65:07:bf:5c:59:3c:6b:72:d3:42:f4:c1:29:8b:d2: ee:3b:47:55:1f:22:4e:e5:da:3e:dc:7b:34:f0:a4: 3d:eb:f9:d9:d2:96:6e:2c:ee:29:75:96:34:ce:5c: 35:aa:fd:40:1a:e4:69:4a:f7:1e:dd:7a:0d:a1:18: fb:d6:d3:fd:65:e3:bd:4a:5f:a9:30:fe:2f:29:2a: fb:b7:8d:92:5c:62:69:2a:10:ff:f2:81:3c:12:b7: 32:b7:7f:74:bd:33:82:56:39:86:96:d5:23:c2:6c: e5:cd:3e:c7:59:75:19:b7:8e:10:ce:49:c7:31:5a: 01:4f:87:e5:e6:5e:c7:80:25:91:85:a3:0d:31:89: 13:4e:d3:93:a7:68:0e:f4:02:44:cf:af:01:7c:e7: 66:0c:68:a7:f8:92:eb:1e:93:94:5c:40:2e:58:cb: bd:b6:8d:6f:af:20:df:e7:e8:a5:a1:e1:b0:ad:da: 22:0a:1e:f4:99:33:aa:9c:92:3f:36:ea:29:6f:b5: 31:5b:36:9e:af:e0:c9:16:e8:9e:95:45:2c:b1:1d: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:CD:F1:0D:8D:B8:F6:E8:8D:F4:32:26:63:45:65:3E:10:64:52 X509v3 Authority Key Identifier: keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:65:0f:f1:11:bb:57:be:2a:05:09:b0:9d:f1:7d:ee:0d: 41:ca:5a:5a:da:c8:55:39:06:c3:d8:5b:34:41:82:1f:1a:95: 35:47:fc:96:41:75:91:d7:bd:f5:20:7b:8e:9f:8e:e9:8b:fc: 3e:92:0f:f2:dd:a1:71:36:5e:ef:c4:12:f6:8b:ef:1f:c0:8b: 7d:96:d4:d5:3d:62:5b:ab:53:9f:3c:01:b5:4a:bc:e1:41:15: 9f:57:3d:00:b8:36:23:5e:55:df:c5:9d:67:fb:88:9f:18:e4: 1b:fb:ba:d4:56:3b:ed:63:4c:dd:aa:08:32:61:cd:30:71:60: 03:e1:f2:e0:d0:fb:88:bd:49:ce:89:cb:9c:09:d0:e7:e4:3a: 65:c7:cd:e5:8e:79:15:92:26:9c:b4:0d:ed:2a:2d:14:dc:82: 84:1f:67:7f:27:71:9c:e1:5d:c0:6a:19:65:22:1c:31:bb:63: 6a:78:5b:fa:3d:e3:0e:3f:5c:34:b0:c0:c9:a3:78:4c:59:56: 13:69:a9:50:74:1c:43:bc:6e:88:4e:24:d3:09:99:be:0c:c1: d2:2e:da:f3:b8:14:36:9c:23:27:6a:48:f4:01:5a:ad:7b:54: d5:de:e4:9d:d6:1d:f3:6b:38:3b:34:b5:cb:7d:4f:8c:62:0f: d7:15:8f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUYpYw6DSp9Bnp7lLRiRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTk3YjQwYzZkNDQ2OWY5YjkxNGE3OGRjOGVjNDM5MzIz YjBmYjgwHhcNMjUxMjA1MjEwMTA2WhcNMjUxMjA2MjEwMTA2WjAzMTEwLwYDVQQD EygyMTEwY2RmMTBkOGRiOGY2ZTg4ZGY0MzIyNjYzNDU2NTNlMTA2NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iMx97GqbKqJxiBDM8TD1rNkoTEq btzjvKynM24d406quoLpJiH0tg2jvtZlB79cWTxrctNC9MEpi9LuO0dVHyJO5do+ 3Hs08KQ96/nZ0pZuLO4pdZY0zlw1qv1AGuRpSvce3XoNoRj71tP9ZeO9Sl+pMP4v KSr7t42SXGJpKhD/8oE8Ercyt390vTOCVjmGltUjwmzlzT7HWXUZt44QzknHMVoB T4fl5l7HgCWRhaMNMYkTTtOTp2gO9AJEz68BfOdmDGin+JLrHpOUXEAuWMu9to1v ryDf5+iloeGwrdoiCh70mTOqnJI/Nuopb7UxWzaer+DJFuielUUssR1xewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEQzfENjbj26I30MiZjRWU+EGRSMB8GA1UdIwQY MBaAFP9Ze0DG1Eafm5FKeNyOxDkyOw+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMt ZmZiMmVmNGJmZTI1LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iZmIyN2EtZjAwNS00OGNiLTk0NzMtZmZiMmVmNGJmZTI1 LzEvXzFsN1FNYlVScC1ia1VwNDNJN0VPVEk3RDdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW79lD/ER u1e+KgUJsJ3xfe4NQcpaWtrIVTkGw9hbNEGCHxqVNUf8lkF1kde99SB7jp+O6Yv8 PpIP8t2hcTZe78QS9ovvH8CLfZbU1T1iW6tTnzwBtUq84UEVn1c9ALg2I15V38Wd Z/uInxjkG/u61FY77WNM3aoIMmHNMHFgA+Hy4ND7iL1JzonLnAnQ5+Q6ZcfN5Y55 FZImnLQN7SotFNyChB9nfydxnOFdwGoZZSIcMbtjanhb+j3jDj9cNLDAyaN4TFlW E2mpUHQcQ7xuiE4k0wmZvgzB0i7a87gUNpwjJ2pI9AFarXtU1d7kndYd82s4OzS1 y31PjGIP1xWPHg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:08 2025 by rpki-client