This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: J/YLxHeBO23tXmCl5gPhKcpNF+pP/EtLnhRy6+ElYkg= Subject key identifier: 7D:76:A8:27:47:0C:75:3F:51:BE:D6:5C:1D:95:2B:A2:8E:09:99:E9 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019AF12E7680EE2AD0194DA2A561D2A909AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0372 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: Wv089GSICUVa7R5l9nBwWmOh5O85Vfuld1wh3Hqk6j8=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 6: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 7: PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa (hash: o/bRmUIqx18lwwP9fu4h2MQE0btvhHW7pc9iZu6+fKY=) 8: hutlL6LVuoI5F8J-GDEW66ws8TE.roa (hash: uX8lahfVe3cF9uJcgVI4EHS2xzpfBCeEh1HHhGB55P0=) 9: lNcHZzpaUSR7jKBrw2KMUB_wdnQ.roa (hash: VpkbqwQLfn54zfo0+BFxVr9mX4T1GIk6TvAvX0OYx08=) 10: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 11: mtFjCXi6B1lVrIwoLZRGnHtawsY.roa (hash: AvY2AQMCjix08RE4/U4WL/kf92YbkwF1pj4+XzimXp4=) 12: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 13: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 14: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 15: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 16: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:76:80:ee:2a:d0:19:4d:a2:a5:61:d2:a9:09:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=7d76a827470c753f51bed65c1d952ba28e0999e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:9d:c5:0e:8d:d6:06:f4:ad:85:d6:88:42: 45:df:e5:c0:27:0c:5b:27:74:b4:09:9f:f1:28:ff: 4e:33:e9:e5:b1:36:6a:71:1a:6a:c1:27:22:ea:d8: 91:80:1b:51:85:54:ca:fc:46:c6:b3:3b:0e:86:0a: bb:4f:c3:95:f4:8b:30:11:25:92:23:ca:34:c3:03: 3c:f1:9b:89:f8:d7:56:6a:d4:ca:6d:4d:f2:29:a5: 50:ef:14:60:af:e3:08:58:29:8c:db:25:8c:4d:2a: 40:91:6f:dd:5c:b0:3c:ff:46:c0:b8:8c:e3:29:34: d3:cf:27:41:40:3b:a7:5f:64:29:c5:49:b3:ab:1c: 28:32:53:0e:a6:f4:b3:8b:fc:2d:7d:e8:bb:cd:cd: 5a:57:d5:8c:59:fa:fe:33:72:72:2a:18:2f:3e:b5: 18:ef:50:69:5a:79:d8:99:b7:ef:16:16:fd:2c:8d: 9c:61:69:4c:9f:86:2d:c8:27:16:59:f3:da:bf:55: c8:fc:5b:f8:e4:60:72:95:d4:1b:f7:b1:65:e6:25: 0c:6c:4d:7a:4b:d2:f9:17:2b:87:9b:51:8c:42:f9: 57:bf:eb:be:79:ac:76:ff:54:08:50:75:8d:c0:fa: c6:49:7f:0b:35:d0:54:fc:f8:2c:49:bb:fb:7e:e0: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:76:A8:27:47:0C:75:3F:51:BE:D6:5C:1D:95:2B:A2:8E:09:99:E9 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3d:dc:d2:45:f9:c8:3c:ce:fc:8c:b8:45:24:1a:c6:13:fc: e7:99:80:37:95:f3:39:68:22:73:f8:20:bc:28:92:c5:d2:5a: 92:cc:b6:b4:e8:31:ac:34:10:7a:00:49:8c:57:3c:f7:e6:71: 97:a0:71:78:0b:59:18:cd:83:0b:38:db:c5:80:d3:71:7f:56: 81:9e:41:cc:0c:57:41:3f:bd:89:94:fb:b7:00:d2:98:1b:ff: fb:38:43:4d:e7:f0:f2:23:29:43:33:76:f3:0b:82:4d:4b:55: 54:60:97:aa:12:59:e8:f4:96:1f:e0:68:5d:35:d4:80:d0:b1: da:6a:1e:fd:96:f2:70:71:b0:05:80:f5:53:00:66:e7:27:62: a6:1a:16:ef:c0:48:1c:c5:df:f7:91:f2:4e:5e:75:e2:6f:c4: 46:da:a7:c8:d3:cd:61:6b:5b:80:f0:d1:28:f8:bb:e5:89:80: 80:cc:c7:f4:5f:5c:86:93:1a:d8:88:93:7b:3d:de:53:1c:48: 09:36:cb:e5:0d:ff:e8:7b:eb:63:09:4f:86:12:2c:2a:a0:23: e7:f9:a4:6d:cd:2d:88:04:34:d6:90:d1:f9:3e:10:c3:83:0c: 42:e8:06:bd:e7:95:cf:20:57:e7:63:ef:91:db:69:6f:72:8b: 79:b0:26:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnaA7irQGU2ipWHSqQmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD Eyg3ZDc2YTgyNzQ3MGM3NTNmNTFiZWQ2NWMxZDk1MmJhMjhlMDk5OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HOdxQ6N1gb0rYXWiEJF3+XAJwxb J3S0CZ/xKP9OM+nlsTZqcRpqwSci6tiRgBtRhVTK/EbGszsOhgq7T8OV9IswESWS I8o0wwM88ZuJ+NdWatTKbU3yKaVQ7xRgr+MIWCmM2yWMTSpAkW/dXLA8/0bAuIzj KTTTzydBQDunX2QpxUmzqxwoMlMOpvSzi/wtfei7zc1aV9WMWfr+M3JyKhgvPrUY 71BpWnnYmbfvFhb9LI2cYWlMn4YtyCcWWfPav1XI/Fv45GByldQb97Fl5iUMbE16 S9L5FyuHm1GMQvlXv+u+eax2/1QIUHWNwPrGSX8LNdBU/PgsSbv7fuCLgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH12qCdHDHU/Ub7WXB2VK6KOCZnpMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz3c0kX5 yDzO/Iy4RSQaxhP855mAN5XzOWgic/ggvCiSxdJaksy2tOgxrDQQegBJjFc89+Zx l6BxeAtZGM2DCzjbxYDTcX9WgZ5BzAxXQT+9iZT7twDSmBv/+zhDTefw8iMpQzN2 8wuCTUtVVGCXqhJZ6PSWH+BoXTXUgNCx2moe/ZbycHGwBYD1UwBm5ydiphoW78BI HMXf95HyTl514m/ERtqnyNPNYWtbgPDRKPi75YmAgMzH9F9chpMa2IiTez3eUxxI CTbL5Q3/6HvrYwlPhhIsKqAj5/mkbc0tiAQ01pDR+T4Qw4MMQugGveeVzyBX52Pv kdtpb3KLebAmFA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:38 2025 by rpki-client