This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: 4es1URYpbobjXlQUt9qp1wB4I2hlZJdf9Arzto5sQGo= Subject key identifier: 00:36:8C:DB:4B:C1:1F:4C:90:BD:6E:0E:94:80:02:7E:B3:2C:12:E6 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019B273F8EDDCE22A0C139DA82911EE4F7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 038E Signing time: Tue 16 Dec 2025 13:00:35 +0000 Manifest this update: Tue 16 Dec 2025 13:00:35 +0000 Manifest next update: Wed 17 Dec 2025 13:00:35 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: pUMNbT3KAPjsluxpuwVp4YuSPt2yAbMR6+A4HO47AFg=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 6: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 7: PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa (hash: o/bRmUIqx18lwwP9fu4h2MQE0btvhHW7pc9iZu6+fKY=) 8: hutlL6LVuoI5F8J-GDEW66ws8TE.roa (hash: uX8lahfVe3cF9uJcgVI4EHS2xzpfBCeEh1HHhGB55P0=) 9: lNcHZzpaUSR7jKBrw2KMUB_wdnQ.roa (hash: VpkbqwQLfn54zfo0+BFxVr9mX4T1GIk6TvAvX0OYx08=) 10: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 11: mtFjCXi6B1lVrIwoLZRGnHtawsY.roa (hash: AvY2AQMCjix08RE4/U4WL/kf92YbkwF1pj4+XzimXp4=) 12: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 13: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 14: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 15: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 16: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:8e:dd:ce:22:a0:c1:39:da:82:91:1e:e4:f7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Dec 16 13:00:35 2025 GMT Not After : Dec 17 13:00:35 2025 GMT Subject: CN=00368cdb4bc11f4c90bd6e0e9480027eb32c12e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:01:85:52:3b:1f:cd:34:0b:a6:33:a2:b1: d2:cd:d2:7a:c9:a2:b1:d0:37:d1:ea:bb:01:93:e1: 50:61:d1:82:ea:cc:a4:ff:2b:7a:34:57:4d:50:9a: 52:0a:ae:04:3e:53:97:d5:b9:bc:94:85:75:15:03: 5d:55:cb:1c:11:5d:57:00:db:76:00:6c:65:ba:aa: f9:4d:96:18:55:0a:33:9b:2a:a1:29:c2:1d:02:4b: 76:17:a3:2b:c7:cb:7b:dd:6e:15:0e:72:ee:7e:5b: 5f:6d:b0:2e:4e:5d:f4:75:5f:f5:22:12:78:7a:54: f5:ee:ff:51:a4:a2:0f:63:a4:9a:b8:bd:51:aa:41: 7b:b9:bc:36:c8:6a:90:47:ad:76:b7:a8:5e:46:79: b7:4b:b0:85:62:21:9b:a8:19:c3:55:b9:3e:b1:ac: 3a:34:5f:46:60:95:1b:96:cb:1f:0a:ec:48:c1:53: 78:fe:19:de:33:a7:6e:d0:81:94:2e:f7:ad:b1:0d: eb:2b:3c:c5:a1:08:5e:71:50:41:f0:92:1a:31:44: bf:4a:b0:ae:9b:aa:23:48:4a:a9:4a:fc:bc:b0:75: 79:4b:b2:9f:3e:fc:10:39:51:fe:60:a6:86:31:60: 51:da:06:9b:71:43:96:59:07:22:b3:99:ed:fe:f9: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:8C:DB:4B:C1:1F:4C:90:BD:6E:0E:94:80:02:7E:B3:2C:12:E6 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:56:58:1e:a8:1e:c7:59:8c:f3:70:1a:ba:88:af:0d:00: c4:75:52:11:5e:35:f9:a7:88:bc:b2:d2:1a:06:87:0f:4b:a9: 7b:49:b8:e7:a4:ff:a8:ec:b3:6e:4e:59:5d:56:48:68:37:e9: cd:a8:a5:df:ef:8c:80:22:b2:bb:0e:05:da:3b:5d:37:07:80: 80:eb:c2:aa:19:3f:fe:1c:3a:86:f0:89:cc:82:fd:18:f2:36: 68:e1:0e:95:74:ff:ae:74:83:dd:8d:ab:3a:7a:85:03:ae:4b: d2:f3:9e:86:02:3e:cd:9a:bc:bd:3e:5c:73:ff:8d:bc:2a:ba: 46:32:b8:61:26:ff:78:e4:7a:c6:f0:64:ef:0f:92:59:a9:2f: 68:4b:c5:cc:70:24:5b:e2:ae:96:59:b1:94:95:f5:f6:4c:67: ba:11:9b:e9:b3:24:90:a9:4f:f6:e2:27:c2:ef:08:01:5d:62: b7:27:7f:6a:29:6f:06:6f:24:15:e3:39:31:78:57:43:05:46: d9:45:95:ea:4c:1e:d5:a3:a3:91:07:40:81:2b:83:fd:a6:58: c5:72:6f:a6:3f:5b:9f:5b:b4:e5:5c:f6:dd:26:34:d9:ba:77: 93:a7:76:3c:af:96:1a:13:2f:8b:46:f7:77:f3:70:14:f3:db: f4:ab:06:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP47dziKgwTnagpEe5Pf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMjE2MTMwMDM1WhcNMjUxMjE3MTMwMDM1WjAzMTEwLwYDVQQD EygwMDM2OGNkYjRiYzExZjRjOTBiZDZlMGU5NDgwMDI3ZWIzMmMxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwREBhVI7H800C6YzorHSzdJ6yaKx 0DfR6rsBk+FQYdGC6syk/yt6NFdNUJpSCq4EPlOX1bm8lIV1FQNdVcscEV1XANt2 AGxluqr5TZYYVQozmyqhKcIdAkt2F6Mrx8t73W4VDnLufltfbbAuTl30dV/1IhJ4 elT17v9RpKIPY6SauL1RqkF7ubw2yGqQR612t6heRnm3S7CFYiGbqBnDVbk+saw6 NF9GYJUblssfCuxIwVN4/hneM6du0IGULvetsQ3rKzzFoQhecVBB8JIaMUS/SrCu m6ojSEqpSvy8sHV5S7KfPvwQOVH+YKaGMWBR2gabcUOWWQcis5nt/vmrPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA2jNtLwR9MkL1uDpSAAn6zLBLmMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5FWWB6o HsdZjPNwGrqIrw0AxHVSEV41+aeIvLLSGgaHD0upe0m456T/qOyzbk5ZXVZIaDfp zail3++MgCKyuw4F2jtdNweAgOvCqhk//hw6hvCJzIL9GPI2aOEOlXT/rnSD3Y2r OnqFA65L0vOehgI+zZq8vT5cc/+NvCq6RjK4YSb/eOR6xvBk7w+SWakvaEvFzHAk W+KullmxlJX19kxnuhGb6bMkkKlP9uInwu8IAV1ityd/ailvBm8kFeM5MXhXQwVG 2UWV6kwe1aOjkQdAgSuD/aZYxXJvpj9bn1u05Vz23SY02bp3k6d2PK+WGhMvi0b3 d/NwFPPb9KsGcw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:14:23 2025 by rpki-client