This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json) Hash identifier: kE+3AYXyjPgmLUep2mUa1P51Bw5h6YU9udxYdtdI8Fc= Subject key identifier: 79:B0:DB:AA:A0:17:A1:5D:64:24:58:8E:16:56:D0:5A:4D:EC:0E:95 Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483 Certificate serial: 019AF0BF3E9EDDED5A376ACBC75C655A290E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=) 2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: A8d30wWNtxhh7vI+oieYsDeH7ofadXiDxOvXOcdHO4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3e:9e:dd:ed:5a:37:6a:cb:c7:5c:65:5a:29:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965473d68572ea2238bdd875afa725a0405de483 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=79b0dbaaa017a15d6424588e1656d05a4dec0e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:d8:78:62:68:c3:6a:11:1c:ef:a7:c1:8e: 70:d8:e8:5a:dd:47:dd:6b:a3:50:26:af:84:61:e0: ec:43:a8:25:58:4e:82:93:7c:97:95:6a:0d:8d:cd: 5b:68:a1:35:8a:15:7f:04:23:2d:e7:6b:47:5a:95: e8:73:af:65:32:be:ad:24:79:d9:22:fe:20:bd:79: 99:fe:fc:41:ee:8e:b2:53:92:cd:ae:c5:e1:4d:55: 6d:44:2c:45:2e:e3:77:83:55:4d:a5:bf:3b:52:03: 5a:1d:9c:b2:bf:c3:50:cf:2c:fe:15:b6:1c:46:57: ea:c6:00:c3:ba:7c:96:9c:a7:69:fe:68:cf:8f:9f: 07:8b:1c:8b:b0:8d:9f:3b:ee:e5:0b:c5:ca:e7:d0: 76:ca:b5:0a:74:d0:9d:d5:d9:e4:42:95:aa:61:00: e0:8a:08:81:68:89:99:10:99:33:25:a7:fd:f0:0a: e8:97:79:ae:ec:04:8c:05:55:ba:7c:e5:0e:ad:45: d0:14:7d:c3:91:de:26:42:dc:08:80:70:de:a3:f1: bc:1a:08:3c:90:91:1c:27:74:d2:5c:97:21:0a:99: f4:cd:1a:af:70:a7:a5:8c:77:a4:70:9a:d3:6c:63: a7:12:74:e4:80:91:c3:da:93:f1:e9:6f:cf:0b:51: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:DB:AA:A0:17:A1:5D:64:24:58:8E:16:56:D0:5A:4D:EC:0E:95 X509v3 Authority Key Identifier: keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:06:60:33:ec:b4:76:b1:20:be:2c:07:0d:4b:51:a3:05: bb:e1:6e:6b:f0:ac:40:94:e5:02:fd:09:86:58:80:3a:b2:6b: 8e:5e:77:da:8e:b1:ef:d6:dc:d3:d6:8b:8a:89:0b:d7:c3:10: e3:c1:c3:42:97:17:5f:25:ba:2f:06:c9:be:d1:89:47:e0:46: 00:12:87:51:14:6c:95:57:8d:41:cd:80:ae:fd:dc:b2:46:b2: 90:d3:4d:4f:ef:a4:cc:8d:10:45:81:23:f7:73:62:aa:f2:35: f6:31:ed:b5:1a:60:2b:38:73:21:b5:8b:91:ae:a8:6c:c0:45: 22:dd:00:9a:aa:97:29:3b:41:a1:4d:6a:74:07:73:ce:94:d6: 9a:29:eb:a6:be:7d:0d:25:dd:17:5b:a0:61:ba:89:b5:93:ef: 68:fe:b2:95:7e:a7:00:85:8f:d1:d8:cf:cc:04:35:3c:e6:9c: 28:8e:0b:73:d3:72:6e:96:57:c7:2e:eb:f7:ff:ac:4a:e2:7d: fe:4e:f6:7b:09:ab:8a:57:05:e5:df:86:67:7a:44:8a:52:00: 21:9a:1f:62:89:d9:5f:36:3e:3a:f5:6d:86:6a:f4:dc:e4:45: a8:a8:5e:52:43:cd:71:c2:e7:a8:c7:36:c5:c2:46:3e:48:79: b4:54:03:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz6e3e1aN2rLx1xlWikOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1 ZGU0ODMwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD Eyg3OWIwZGJhYWEwMTdhMTVkNjQyNDU4OGUxNjU2ZDA1YTRkZWMwZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8XYeGJow2oRHO+nwY5w2Oha3Ufd a6NQJq+EYeDsQ6glWE6Ck3yXlWoNjc1baKE1ihV/BCMt52tHWpXoc69lMr6tJHnZ Iv4gvXmZ/vxB7o6yU5LNrsXhTVVtRCxFLuN3g1VNpb87UgNaHZyyv8NQzyz+FbYc RlfqxgDDunyWnKdp/mjPj58HixyLsI2fO+7lC8XK59B2yrUKdNCd1dnkQpWqYQDg igiBaImZEJkzJaf98Arol3mu7ASMBVW6fOUOrUXQFH3Dkd4mQtwIgHDeo/G8Ggg8 kJEcJ3TSXJchCpn0zRqvcKeljHekcJrTbGOnEnTkgJHD2pPx6W/PC1EQjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmw26qgF6FdZCRYjhZW0FpN7A6VMB8GA1UdIwQY MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCsGYDPs tHaxIL4sBw1LUaMFu+Fua/CsQJTlAv0JhliAOrJrjl532o6x79bc09aLiokL18MQ 48HDQpcXXyW6LwbJvtGJR+BGABKHURRslVeNQc2Arv3cskaykNNNT++kzI0QRYEj 93NiqvI19jHttRpgKzhzIbWLka6obMBFIt0AmqqXKTtBoU1qdAdzzpTWminrpr59 DSXdF1ugYbqJtZPvaP6ylX6nAIWP0djPzAQ1POacKI4Lc9NybpZXxy7r9/+sSuJ9 /k72ewmrilcF5d+GZ3pEilIAIZofYonZXzY+OvVthmr03ORFqKheUkPNccLnqMc2 xcJGPkh5tFQDxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:19 2025 by rpki-client