This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json) Hash identifier: hKk18ns1iJES8TKSWPKcX1pHAJTqbTMlm5bNknp46E8= Subject key identifier: AD:88:A9:F6:C1:4C:11:1E:90:FA:63:ED:FD:6C:54:A7:E6:89:36:72 Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019AF12E4E0DE5DA0EDE19A5D51EFCE5B7C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft Manifest number: 0CBB Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=) 2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=) 3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: t33y69MWTKe0BHgJh++6nzbFX+p6hv8dVmOipyug7HM=) 4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:0d:e5:da:0e:de:19:a5:d5:1e:fc:e5:b7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=ad88a9f6c14c111e90fa63edfd6c54a7e6893672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:39:49:19:16:76:56:a0:00:a3:7c:39:68: 0d:ba:b1:84:d4:8a:9a:42:ae:b8:29:92:31:d8:05: 75:53:24:6c:f8:40:7b:48:84:53:7d:9d:87:2c:63: 95:d7:f0:ea:7f:04:e6:37:b2:e5:10:5f:80:07:4b: a0:f0:09:1e:8e:5c:ee:27:ff:51:67:31:28:fa:c4: 36:4c:4c:33:ca:21:95:ee:88:60:74:b7:db:4e:cc: d6:82:5f:a6:3b:d9:45:07:98:81:06:44:8b:d8:00: ac:24:58:27:cb:20:39:48:ac:b2:bd:e6:16:6b:bb: 30:34:b5:b1:62:7d:33:c8:9c:34:80:ca:b8:e3:2d: c0:ab:98:b4:bb:d3:eb:73:c7:9f:fa:60:17:3b:bb: 56:bf:39:4c:e7:e5:4a:cc:ca:1b:63:e2:bc:cc:12: a3:f2:dc:45:d1:c3:ef:5d:4d:05:34:f2:8e:93:ed: c4:93:47:b8:1f:bb:75:70:1e:82:33:d2:5c:b8:c5: 0f:98:86:6b:9a:ac:ca:cc:c5:d3:bf:a5:17:51:89: fc:9a:40:69:18:df:ad:2d:77:7b:61:6e:08:2e:68: a4:a3:f9:7f:90:c1:bc:ae:cd:a3:6b:e2:d7:05:66: dc:ad:62:32:db:7e:02:e5:9a:a2:64:ea:49:d4:95: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:A9:F6:C1:4C:11:1E:90:FA:63:ED:FD:6C:54:A7:E6:89:36:72 X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f5:16:be:41:60:1f:69:fb:a5:7b:97:0a:89:a4:ff:f2:f1: 42:0f:e7:11:b3:fe:f7:fe:5e:a7:cf:ca:16:20:47:3d:ea:db: 55:8b:7c:ef:1f:b7:8d:47:08:95:c7:b2:35:18:bc:96:33:bc: da:04:3f:6d:47:c4:2d:29:46:8a:1a:a7:c3:24:e9:69:e6:bd: 07:f6:42:8e:1b:a2:c1:1e:64:ee:47:c4:87:73:bb:89:80:34: 6e:6f:29:bf:c4:f5:20:b6:f7:89:f4:d2:d3:06:df:8f:cb:1b: 96:bf:03:31:28:c7:d3:07:25:6d:b8:50:a5:cf:96:67:59:d9: e3:e5:4e:ea:f3:7e:58:d5:9c:99:af:5f:49:dc:68:06:9b:cc: eb:fa:81:4a:d5:84:42:01:02:d8:0f:61:2f:90:59:4b:80:64: 15:59:7e:ed:90:bd:2a:ea:37:21:07:51:4c:f1:a2:4b:d0:f3: cc:1b:af:f1:04:cd:cf:0d:7e:54:89:3f:6e:52:84:11:d1:99: 9b:e3:fb:83:9c:a4:88:d0:ad:1c:18:a7:c6:83:b7:72:35:42: 5b:a5:38:f9:25:9b:15:67:cb:27:20:3e:78:31:0e:7f:c3:82: dc:ef:e7:83:eb:da:88:79:64:e2:08:20:ac:a0:dd:df:f7:9a: 8b:a2:ad:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk4N5doO3hml1R785bfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EyhhZDg4YTlmNmMxNGMxMTFlOTBmYTYzZWRmZDZjNTRhN2U2ODkzNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmo5SRkWdlagAKN8OWgNurGE1Iqa Qq64KZIx2AV1UyRs+EB7SIRTfZ2HLGOV1/DqfwTmN7LlEF+AB0ug8AkejlzuJ/9R ZzEo+sQ2TEwzyiGV7ohgdLfbTszWgl+mO9lFB5iBBkSL2ACsJFgnyyA5SKyyveYW a7swNLWxYn0zyJw0gMq44y3Aq5i0u9Prc8ef+mAXO7tWvzlM5+VKzMobY+K8zBKj 8txF0cPvXU0FNPKOk+3Ek0e4H7t1cB6CM9JcuMUPmIZrmqzKzMXTv6UXUYn8mkBp GN+tLXd7YW4ILmiko/l/kMG8rs2ja+LXBWbcrWIy234C5ZqiZOpJ1JWi7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2IqfbBTBEekPpj7f1sVKfmiTZyMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/UWvkFg H2n7pXuXComk//LxQg/nEbP+9/5ep8/KFiBHPerbVYt87x+3jUcIlceyNRi8ljO8 2gQ/bUfELSlGihqnwyTpaea9B/ZCjhuiwR5k7kfEh3O7iYA0bm8pv8T1ILb3ifTS 0wbfj8sblr8DMSjH0wclbbhQpc+WZ1nZ4+VO6vN+WNWcma9fSdxoBpvM6/qBStWE QgEC2A9hL5BZS4BkFVl+7ZC9Kuo3IQdRTPGiS9DzzBuv8QTNzw1+VIk/blKEEdGZ m+P7g5ykiNCtHBinxoO3cjVCW6U4+SWbFWfLJyA+eDEOf8OC3O/ng+vaiHlk4ggg rKDd3/eai6Kt6g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:09 2025 by rpki-client