This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json) Hash identifier: ZBGPrLV8oDoTY9kNH7+K7NyYAABrmZppvr3GWXQcL0E= Subject key identifier: 2E:D8:3E:DA:D6:6A:27:0A:FB:F6:07:F7:49:AC:1F:05:C4:0B:96:13 Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Certificate serial: 019AF31C11DF0DD68FCB512835D0E74D590E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:34 +0000 Manifest this update: Sat 06 Dec 2025 10:01:34 +0000 Manifest next update: Sun 07 Dec 2025 10:01:34 +0000 Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: b1vacwutsopEBytwod7f+RU7UEPnGVKLIR0A4xyt7cM=) 2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:11:df:0d:d6:8f:cb:51:28:35:d0:e7:4d:59:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Validity Not Before: Dec 6 10:01:34 2025 GMT Not After : Dec 7 10:01:34 2025 GMT Subject: CN=2ed83edad66a270afbf607f749ac1f05c40b9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:e4:d2:82:e1:dc:b6:a3:01:f4:29:f2:d7: 0d:bb:09:b6:b1:c7:79:35:29:ea:65:18:01:bc:08: 04:69:4f:cb:a0:76:b8:da:53:08:80:4f:88:7b:b4: 9f:70:63:ae:1a:ed:1a:ef:42:c0:ba:68:4d:4e:ba: d4:1c:f4:a2:34:ac:9f:a8:34:82:6e:13:ce:fa:b6: 88:6f:af:94:21:2c:13:59:18:15:74:67:16:45:bc: 37:4d:77:75:c7:2b:1a:dd:b2:e3:74:a3:6a:4b:25: 9b:48:74:32:2b:d7:23:24:20:dd:9f:a0:ae:ac:ce: 53:37:de:a8:17:b8:14:c6:44:7f:35:a8:7f:54:5a: 24:f5:d0:fe:d8:f1:60:28:21:c9:af:05:60:fb:35: 21:be:d5:b6:f6:b8:45:84:02:31:11:82:c2:d4:d5: cd:2c:26:ec:59:4e:a2:0b:fd:69:71:06:8b:ef:49: 77:1c:ee:0b:a6:20:ae:f1:27:e0:4e:80:36:b3:09: 4b:78:38:54:c2:f9:c5:17:f8:03:06:31:89:00:23: 48:ab:d2:b2:0a:99:1b:c5:1c:59:b3:69:42:18:39: 77:f1:77:fa:35:5d:23:65:56:a1:7b:51:bc:2d:34: d4:c9:7f:c9:19:16:ff:4b:67:4a:77:a8:e1:e3:60: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D8:3E:DA:D6:6A:27:0A:FB:F6:07:F7:49:AC:1F:05:C4:0B:96:13 X509v3 Authority Key Identifier: keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:85:4c:c6:ee:76:85:44:dd:69:69:11:72:3f:b5:cf:22:40: 67:19:57:f3:90:ee:c7:85:82:81:b2:a3:a5:27:e6:2c:fe:90: 7b:9b:b1:5b:ef:6b:38:e5:a1:ff:ed:3b:bd:33:86:0b:74:b9: 2c:d9:f3:de:d8:99:f1:4c:a6:ec:9e:85:e8:7f:bd:1b:01:d1: d4:85:79:23:25:34:ab:b9:0e:19:53:94:db:16:5c:88:b1:83: 82:f9:d4:1f:1d:b6:77:2d:a2:b4:15:e1:29:cc:1e:08:7a:4e: f0:a4:d3:f4:3a:ae:18:e0:f2:4d:66:4f:ca:e2:07:83:1e:d2: fe:1f:36:98:56:94:40:76:2f:05:9d:59:97:af:b8:5d:a9:9d: 76:66:78:c7:bf:22:15:91:8d:08:1e:45:ee:5e:7d:57:e1:b6: a8:c1:ee:95:b0:ac:6e:71:cc:6d:e4:10:64:59:06:d7:27:6e: fd:f2:1c:b2:52:37:1d:3d:f4:66:ec:ff:df:bb:d7:48:9e:22: 6e:8a:ac:fc:5e:15:56:b3:38:1b:2a:fa:a8:3b:23:a8:04:ef: b7:3b:c7:36:0d:08:29:fe:1a:76:5b:1b:d0:1a:2e:b1:9d:83: 14:73:51:07:a0:4a:4c:de:56:5d:b1:35:d7:c1:c7:c5:8e:cb: 8b:62:a3:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBHfDdaPy1EoNdDnTVkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWNhZmQ1ZWZkMmRmMmM5YjMwOWJiZDVlZWQ0N2E2OTE4 OTg0YjAwHhcNMjUxMjA2MTAwMTM0WhcNMjUxMjA3MTAwMTM0WjAzMTEwLwYDVQQD EygyZWQ4M2VkYWQ2NmEyNzBhZmJmNjA3Zjc0OWFjMWYwNWM0MGI5NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCvk0oLh3LajAfQp8tcNuwm2scd5 NSnqZRgBvAgEaU/LoHa42lMIgE+Ie7SfcGOuGu0a70LAumhNTrrUHPSiNKyfqDSC bhPO+raIb6+UISwTWRgVdGcWRbw3TXd1xysa3bLjdKNqSyWbSHQyK9cjJCDdn6Cu rM5TN96oF7gUxkR/Nah/VFok9dD+2PFgKCHJrwVg+zUhvtW29rhFhAIxEYLC1NXN LCbsWU6iC/1pcQaL70l3HO4LpiCu8SfgToA2swlLeDhUwvnFF/gDBjGJACNIq9Ky CpkbxRxZs2lCGDl38Xf6NV0jZVahe1G8LTTUyX/JGRb/S2dKd6jh42DqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7YPtrWaicK+/YH90msHwXEC5YTMB8GA1UdIwQY MBaAFC9cr9Xv0t8smzCbvV7tR6aRiYSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEt YWQ4MjdlM2VkZjZjLzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEtYWQ4MjdlM2VkZjZj LzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIVMxu52 hUTdaWkRcj+1zyJAZxlX85Dux4WCgbKjpSfmLP6Qe5uxW+9rOOWh/+07vTOGC3S5 LNnz3tiZ8Uym7J6F6H+9GwHR1IV5IyU0q7kOGVOU2xZciLGDgvnUHx22dy2itBXh KcweCHpO8KTT9DquGODyTWZPyuIHgx7S/h82mFaUQHYvBZ1Zl6+4XamddmZ4x78i FZGNCB5F7l59V+G2qMHulbCsbnHMbeQQZFkG1ydu/fIcslI3HT30Zuz/37vXSJ4i boqs/F4VVrM4Gyr6qDsjqATvtzvHNg0IKf4adlsb0BousZ2DFHNRB6BKTN5WXbE1 18HHxY7Li2Kjgw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:22 2025 by rpki-client