This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json) Hash identifier: dobdciI0XqoGfmbUG6hnL/wWuUYRnlK3jfeL0QEg8uo= Subject key identifier: 57:4E:29:A9:E9:C2:64:D7:70:5F:1A:68:72:CD:31:6F:17:53:A3:20 Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Certificate serial: 019AF50AAF78FDB566985360F921AE2BFF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft Manifest number: 07BC Signing time: Sat 06 Dec 2025 19:01:49 +0000 Manifest this update: Sat 06 Dec 2025 19:01:49 +0000 Manifest next update: Sun 07 Dec 2025 19:01:49 +0000 Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: eUk1C+NozQzEWfSGNZSEkDefGeN2EUjKGT+nlUB4ABo=) 2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:af:78:fd:b5:66:98:53:60:f9:21:ae:2b:ff:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Validity Not Before: Dec 6 19:01:49 2025 GMT Not After : Dec 7 19:01:49 2025 GMT Subject: CN=574e29a9e9c264d7705f1a6872cd316f1753a320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:d5:fe:e8:ca:62:b5:bd:ca:d5:1d:75:a9: 26:f9:ba:aa:e2:ed:36:56:76:b8:8d:e3:cc:be:66: f7:c7:97:77:ac:ef:1b:1e:cd:ab:be:97:53:10:0a: b8:f1:38:b2:5a:5b:53:ca:27:3f:06:9f:5f:0e:0b: 6d:02:56:f4:af:b2:ac:ec:79:f2:9f:a2:ed:7f:06: 25:d3:3d:d0:2a:47:19:c0:da:46:f0:1b:75:67:08: 8b:97:69:9f:89:90:08:6d:e7:4c:ee:fe:c7:7a:aa: 03:a3:8d:09:a8:a9:50:78:07:d9:f2:26:e2:a2:31: fe:8e:22:7a:98:12:f7:cb:54:50:a3:df:d4:20:87: 73:b6:b3:72:31:a8:a7:55:84:3e:89:af:44:df:43: ca:dc:75:45:37:16:45:cd:e1:92:b3:11:b6:f8:cd: 3d:d9:f1:f2:4f:28:f2:ec:cc:91:70:e2:8f:63:37: bc:31:50:03:9e:4e:87:3c:45:02:75:aa:b6:07:7e: 3f:be:3f:e6:f1:0d:5e:f6:dc:4c:d2:89:9e:2e:7d: 8b:4f:4f:15:a0:7a:b6:ae:7a:f4:98:5f:b3:68:87: a4:0a:c9:28:5c:12:67:2a:38:9a:07:a0:a4:1e:c4: 2e:c7:29:04:25:59:97:ef:06:d0:89:ae:85:85:58: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:29:A9:E9:C2:64:D7:70:5F:1A:68:72:CD:31:6F:17:53:A3:20 X509v3 Authority Key Identifier: keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1b:3f:f4:cd:84:e4:75:5d:0b:52:d0:d1:5f:d5:a2:18:79: 66:84:c0:c0:47:0e:cd:64:78:2a:b3:ec:0b:f4:00:91:90:d8: 2b:95:81:cc:51:13:d2:b5:6f:7b:50:bc:1f:36:8a:97:d6:8e: 5f:f2:38:f3:59:39:ea:30:d6:c5:ad:9e:98:83:6d:d3:d7:e0: b6:6b:b6:84:68:09:fc:46:82:3c:cd:c0:e5:1d:94:72:ce:f0: 16:64:27:23:66:cc:5c:ad:3e:32:60:cf:7b:b4:29:82:b3:59: 41:43:ba:2d:16:e3:58:f5:b5:a1:49:9b:ae:3a:17:bb:e5:70: 79:2f:cf:f4:51:70:66:93:26:37:a4:be:da:a6:d5:82:39:04: 17:74:83:78:6f:9d:30:be:18:18:6c:01:20:8e:8a:33:5e:fe: 76:f5:36:c0:94:1c:76:45:b3:1c:d9:4a:67:09:7f:24:2f:f0: fa:ac:35:90:65:16:30:7c:9a:a6:16:6d:8d:81:ad:98:83:ce: fe:31:8f:8d:4b:3d:84:a1:e5:1a:3c:95:92:63:ca:c1:26:bf: b0:a1:db:db:45:97:3f:72:23:98:2d:7e:11:82:94:ab:3a:5d: fb:00:fa:30:31:bd:a5:03:19:9d:c0:b2:ef:e4:f0:35:44:34: d1:0c:16:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cq94/bVmmFNg+SGuK/+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz ZDI5M2UwHhcNMjUxMjA2MTkwMTQ5WhcNMjUxMjA3MTkwMTQ5WjAzMTEwLwYDVQQD Eyg1NzRlMjlhOWU5YzI2NGQ3NzA1ZjFhNjg3MmNkMzE2ZjE3NTNhMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y7V/ujKYrW9ytUddakm+bqq4u02 Vna4jePMvmb3x5d3rO8bHs2rvpdTEAq48TiyWltTyic/Bp9fDgttAlb0r7Ks7Hny n6LtfwYl0z3QKkcZwNpG8Bt1ZwiLl2mfiZAIbedM7v7HeqoDo40JqKlQeAfZ8ibi ojH+jiJ6mBL3y1RQo9/UIIdztrNyMainVYQ+ia9E30PK3HVFNxZFzeGSsxG2+M09 2fHyTyjy7MyRcOKPYze8MVADnk6HPEUCdaq2B34/vj/m8Q1e9txM0omeLn2LT08V oHq2rnr0mF+zaIekCskoXBJnKjiaB6CkHsQuxykEJVmX7wbQia6FhViTCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdOKanpwmTXcF8aaHLNMW8XU6MgMB8GA1UdIwQY MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4 LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRs/9M2E 5HVdC1LQ0V/Vohh5ZoTAwEcOzWR4KrPsC/QAkZDYK5WBzFET0rVve1C8HzaKl9aO X/I481k56jDWxa2emINt09fgtmu2hGgJ/EaCPM3A5R2Ucs7wFmQnI2bMXK0+MmDP e7QpgrNZQUO6LRbjWPW1oUmbrjoXu+VweS/P9FFwZpMmN6S+2qbVgjkEF3SDeG+d ML4YGGwBII6KM17+dvU2wJQcdkWzHNlKZwl/JC/w+qw1kGUWMHyaphZtjYGtmIPO /jGPjUs9hKHlGjyVkmPKwSa/sKHb20WXP3IjmC1+EYKUqzpd+wD6MDG9pQMZncCy 7+TwNUQ00QwWrA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:06 2025 by rpki-client