This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json) Hash identifier: whQaY9p19eNu73lxJNZwqKY8mAVNNxgTaw+sFK8H5VY= Subject key identifier: EC:11:F1:91:86:D3:5E:AC:1F:A7:A3:A4:8C:7F:0C:E0:86:46:60:DA Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Certificate serial: 019AF23FC9877B81459EEC9AB44C37E9F5DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: CM1I0g6vXtA41a0rBYPAv0a0YtI.roa (hash: x+yWLPFvIYaQ0HKjxHn7eS1o7Fpl3blU8cO8iwEiSFM=) 2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=) 3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: Ep8SlMqHLF/rpa4rNx8bJyR0+gh2uGQQoMNqv8zyKjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c9:87:7b:81:45:9e:ec:9a:b4:4c:37:e9:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=ec11f19186d35eac1fa7a3a48c7f0ce0864660da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:d1:1c:f6:b8:98:89:be:18:8a:a2:3f:f1: a6:11:6a:78:7f:fc:a6:28:38:9b:48:7c:c0:47:47: bd:13:39:8a:5c:69:a3:2a:96:14:0a:c4:5b:1d:fc: 61:91:2d:6b:de:2b:fb:2f:b8:b5:75:3f:77:87:f3: 70:f9:0b:fc:dc:1e:5e:fc:18:92:16:15:aa:df:11: e3:5c:94:5d:00:1e:35:86:fc:39:5d:eb:79:f8:46: bd:c1:22:57:12:41:b2:79:1e:21:52:66:dd:67:b7: 4b:71:1c:fc:ca:6c:21:9d:b4:f7:fe:46:c0:56:22: a7:22:d2:c0:5b:78:b7:f9:d5:23:a5:dc:60:c0:73: 4d:c0:de:2a:81:62:10:6d:79:82:df:93:2a:e0:49: db:18:de:e6:57:f8:74:6a:3b:e9:9c:cf:fa:6c:89: c7:06:5e:84:6f:10:0a:e2:17:e1:8c:b4:fa:2e:80: cb:0d:b6:fa:98:e1:74:0a:e2:69:e6:49:a9:38:fc: 01:94:ce:88:01:81:e4:90:05:40:e5:95:39:d9:f3: f7:c4:4b:85:b9:85:0e:69:78:85:77:11:5d:8d:5b: 48:b1:3a:46:96:f1:38:fa:e4:58:f3:c1:31:19:6a: 8f:c7:d4:5e:e4:fa:c6:71:35:4d:21:13:16:14:fb: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:F1:91:86:D3:5E:AC:1F:A7:A3:A4:8C:7F:0C:E0:86:46:60:DA X509v3 Authority Key Identifier: keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a3:ac:e5:bc:14:a0:30:8e:5b:be:bd:1f:3b:6d:81:4f:16: a7:44:5e:f6:37:d1:83:96:40:72:c1:13:53:14:ab:8f:67:04: dd:fb:71:33:68:7b:a8:cb:b2:b8:d0:56:aa:8b:47:63:74:f2: 25:0e:19:a6:28:6b:f9:5d:c7:90:6a:1a:11:79:98:1f:24:19: 8c:3b:ba:1a:f6:c3:f2:bf:45:65:64:32:af:ab:a0:f4:cf:74: bd:8c:46:99:ea:82:ae:2c:bf:8a:b0:57:a4:b2:70:43:79:f7: 7c:ff:89:cc:2c:42:19:cd:7c:36:72:8e:80:22:47:a1:41:fd: ec:e6:b2:12:17:60:80:b6:9d:ff:67:ee:17:9a:54:cd:e8:f0: 71:be:bd:40:ff:f0:10:65:1e:3a:3c:04:db:b5:df:b1:7e:e0: 0d:67:10:ab:39:7a:e7:b3:5f:5c:3d:07:ec:bd:12:07:df:65: 37:36:98:80:e9:ac:19:14:10:d6:ab:dd:d6:22:f2:ea:b5:b7: ed:56:6c:51:db:32:4f:30:ab:b5:af:df:13:df:72:4a:50:4d: ee:79:bf:45:b8:e1:cb:b4:31:07:30:87:cf:e5:d6:8e:74:c6: c9:45:4e:c6:3c:62:76:3a:ee:97:ad:c4:4e:49:ca:cf:41:7c: 61:28:65:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8mHe4FFnuyatEw36fXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YmMzY2RhYzQ2NDA4YzBjOGEzNTgxNzg4YjUxMGQwZjA0 ZTlkMWYwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD EyhlYzExZjE5MTg2ZDM1ZWFjMWZhN2EzYTQ4YzdmMGNlMDg2NDY2MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XzRHPa4mIm+GIqiP/GmEWp4f/ym KDibSHzAR0e9EzmKXGmjKpYUCsRbHfxhkS1r3iv7L7i1dT93h/Nw+Qv83B5e/BiS FhWq3xHjXJRdAB41hvw5Xet5+Ea9wSJXEkGyeR4hUmbdZ7dLcRz8ymwhnbT3/kbA ViKnItLAW3i3+dUjpdxgwHNNwN4qgWIQbXmC35Mq4EnbGN7mV/h0ajvpnM/6bInH Bl6EbxAK4hfhjLT6LoDLDbb6mOF0CuJp5kmpOPwBlM6IAYHkkAVA5ZU52fP3xEuF uYUOaXiFdxFdjVtIsTpGlvE4+uRY88ExGWqPx9Re5PrGcTVNIRMWFPvMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwR8ZGG016sH6ejpIx/DOCGRmDaMB8GA1UdIwQY MBaAFJS8PNrEZAjAyKNYF4i1ENDwTp0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEt YzYwNDcyZTlmNzE3LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEtYzYwNDcyZTlmNzE3 LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaOs5bwU oDCOW769HzttgU8Wp0Re9jfRg5ZAcsETUxSrj2cE3ftxM2h7qMuyuNBWqotHY3Ty JQ4Zpihr+V3HkGoaEXmYHyQZjDu6GvbD8r9FZWQyr6ug9M90vYxGmeqCriy/irBX pLJwQ3n3fP+JzCxCGc18NnKOgCJHoUH97OayEhdggLad/2fuF5pUzejwcb69QP/w EGUeOjwE27XfsX7gDWcQqzl657NfXD0H7L0SB99lNzaYgOmsGRQQ1qvd1iLy6rW3 7VZsUdsyTzCrta/fE99ySlBN7nm/Rbjhy7QxBzCHz+XWjnTGyUVOxjxidjrul63E TknKz0F8YShlUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:07 2025 by rpki-client