This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json) Hash identifier: SJ5sxhzd7H96U7hlJ3xOjQM0FD5R+dSfwrOa9nf0bqc= Subject key identifier: FC:A5:42:32:1F:9F:B6:80:7E:93:56:EC:C5:48:C3:F9:A7:78:31:D4 Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8 Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8 Certificate serial: 019AF31DAC33413251DFEF62A8000AA3BDD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 10:03:19 +0000 Manifest this update: Sat 06 Dec 2025 10:03:19 +0000 Manifest next update: Sun 07 Dec 2025 10:03:19 +0000 Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: RdBEzdmaiMP0dvKMKIZhuE1DS8JvTh9kzU2CTswM/xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:ac:33:41:32:51:df:ef:62:a8:00:0a:a3:bd:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8 Validity Not Before: Dec 6 10:03:19 2025 GMT Not After : Dec 7 10:03:19 2025 GMT Subject: CN=fca542321f9fb6807e9356ecc548c3f9a77831d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:fc:c5:53:f7:5f:8d:22:0d:fe:9c:e9:b9: dd:27:b6:ac:81:52:41:0d:ba:1e:f8:5f:13:90:a5: 79:1f:a7:bf:e6:dd:65:a7:56:85:68:db:fd:be:ba: 17:61:82:94:32:22:5e:d2:2f:eb:f4:fe:96:fc:00: 2a:4f:f2:9e:65:54:4f:a7:d4:e5:93:09:bc:d5:34: 24:72:02:54:a5:57:00:bc:98:93:c0:a1:0c:28:cb: 9d:7e:b1:88:82:ee:76:11:f9:0f:c6:d3:cd:9b:0e: cd:5a:f8:33:04:19:45:86:cf:4f:1e:76:e2:76:7a: fe:b1:e9:49:96:c4:31:2f:79:0c:26:99:a7:cd:a6: 5f:54:72:c4:a0:41:75:67:6f:c0:f3:25:ff:91:18: 95:b5:a5:d7:8a:19:3e:5f:a5:48:39:6d:bb:da:46: b8:dd:e6:a7:a3:01:db:8c:af:62:13:1d:f4:a0:99: 05:ca:b0:f8:58:f9:6a:96:13:d4:12:18:9d:76:c7: d5:ef:4e:0d:ce:cb:ec:5d:1a:51:0d:67:77:a6:cf: 8d:68:f0:4d:d4:88:46:48:b9:3c:38:87:6b:10:09: 94:ce:3c:e1:d9:95:3d:71:94:52:9a:cc:0a:7d:76: ee:9f:d1:05:8d:03:8d:dc:65:23:4f:16:ee:d7:0b: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A5:42:32:1F:9F:B6:80:7E:93:56:EC:C5:48:C3:F9:A7:78:31:D4 X509v3 Authority Key Identifier: keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ce:63:d9:3d:b6:b1:34:8b:a9:14:6e:f0:1c:49:20:a6:4e: 16:11:29:b4:9b:c2:95:3b:9e:d7:7a:a0:4d:52:6a:47:5a:c0: c5:d8:21:e4:2e:5d:7c:33:76:17:80:09:15:2c:10:ab:38:5d: 58:58:ff:a8:cb:e4:2a:5a:12:b8:30:c8:7f:a2:03:c6:1e:97: 6f:29:4a:31:7d:dc:d8:a7:ea:a2:f0:93:86:48:58:72:db:79: ae:74:ab:7c:a5:28:3d:b3:55:fa:1d:8e:2b:1c:b0:4d:cd:71: bd:1c:e7:54:58:04:36:23:b8:34:cf:ac:bd:8c:8c:d9:81:67: 98:f1:b0:fd:e1:3b:85:ce:58:1a:dc:24:8a:0e:59:ed:7f:d3: 88:69:4d:5f:27:9a:52:4e:16:ad:e9:d3:c8:d8:0e:5c:6d:b6: e4:d6:e0:e6:5b:b6:ea:1e:35:0a:6a:5f:26:68:b3:bc:21:dd: 29:04:71:b1:d3:12:6f:88:47:f2:3a:c2:fd:63:f2:ab:ad:27: 2f:47:9f:55:20:92:21:53:18:fe:69:04:44:de:57:c2:42:7c: ac:1f:ee:3f:c5:ad:5c:5d:58:00:9a:3f:06:ad:67:af:3c:50: 6c:73:5e:df:a0:05:1e:92:17:f7:22:ab:e8:27:d0:3b:56:aa: 73:66:d2:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHawzQTJR3+9iqAAKo73ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDk3N2Y4NzBhZjk0ZDZkYzExNmFlMjZkOTBmMGU2NjU4 ZTMyYTgwHhcNMjUxMjA2MTAwMzE5WhcNMjUxMjA3MTAwMzE5WjAzMTEwLwYDVQQD EyhmY2E1NDIzMjFmOWZiNjgwN2U5MzU2ZWNjNTQ4YzNmOWE3NzgzMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno38xVP3X40iDf6c6bndJ7asgVJB Dboe+F8TkKV5H6e/5t1lp1aFaNv9vroXYYKUMiJe0i/r9P6W/AAqT/KeZVRPp9Tl kwm81TQkcgJUpVcAvJiTwKEMKMudfrGIgu52EfkPxtPNmw7NWvgzBBlFhs9PHnbi dnr+selJlsQxL3kMJpmnzaZfVHLEoEF1Z2/A8yX/kRiVtaXXihk+X6VIOW272ka4 3eanowHbjK9iEx30oJkFyrD4WPlqlhPUEhiddsfV704NzsvsXRpRDWd3ps+NaPBN 1IhGSLk8OIdrEAmUzjzh2ZU9cZRSmswKfXbun9EFjQON3GUjTxbu1wtcjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPylQjIfn7aAfpNW7MVIw/mneDHUMB8GA1UdIwQY MBaAFJbZd/hwr5TW3BFq4m2Q8OZljjKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzkt Y2MzMzdiZmI1OGIxLzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80MTBiZTItMzc0ZC00MzliLTllYzktY2MzMzdiZmI1OGIx LzEvbHRsMy1IQ3ZsTmJjRVdyaWJaRHc1bVdPTXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM5j2T22 sTSLqRRu8BxJIKZOFhEptJvClTue13qgTVJqR1rAxdgh5C5dfDN2F4AJFSwQqzhd WFj/qMvkKloSuDDIf6IDxh6XbylKMX3c2KfqovCThkhYctt5rnSrfKUoPbNV+h2O KxywTc1xvRznVFgENiO4NM+svYyM2YFnmPGw/eE7hc5YGtwkig5Z7X/TiGlNXyea Uk4WrenTyNgOXG225Nbg5lu26h41CmpfJmizvCHdKQRxsdMSb4hH8jrC/WPyq60n L0efVSCSIVMY/mkERN5XwkJ8rB/uP8WtXF1YAJo/Bq1nrzxQbHNe36AFHpIX9yKr 6CfQO1aqc2bSbA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:20 2025 by rpki-client