This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json) Hash identifier: g2iWOQM/l48y4iztnmhiFnqtx778nLyoGZtmeJHmZcM= Subject key identifier: 18:2E:AF:9B:C4:35:B8:EA:F0:60:97:B4:6F:16:75:BB:1B:E9:E6:18 Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4 Certificate serial: 019B364568B05EC8115EF7BBC046F73EB570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft Manifest number: 1487 Signing time: Fri 19 Dec 2025 11:01:16 +0000 Manifest this update: Fri 19 Dec 2025 11:01:16 +0000 Manifest next update: Sat 20 Dec 2025 11:01:16 +0000 Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: uSVqR1q5lE0eLDbJ6JqviKcRMzuDw1NEN1QB+NhU4Vc=) 2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:68:b0:5e:c8:11:5e:f7:bb:c0:46:f7:3e:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4 Validity Not Before: Dec 19 11:01:16 2025 GMT Not After : Dec 20 11:01:16 2025 GMT Subject: CN=182eaf9bc435b8eaf06097b46f1675bb1be9e618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:6b:4f:75:49:a9:40:ca:38:98:ed:e3:1b: 0f:37:60:b5:3a:07:01:ce:76:60:3f:76:d9:02:a6: 93:9c:9e:6b:8b:15:20:63:ed:3d:1c:cb:a9:9a:27: 18:d8:d6:d5:45:52:29:2f:6a:41:0d:d6:4f:ea:cd: 5a:9f:95:89:13:3a:4d:e0:d7:e2:e8:2d:9a:a6:b5: 71:11:13:99:c9:53:39:94:d0:a8:70:94:89:e1:5a: d0:ac:ac:31:e3:86:71:eb:70:61:76:62:e3:9b:cf: ab:87:8f:1b:ad:26:ab:95:f6:91:da:84:86:f9:da: e2:e7:85:e3:f5:48:b1:c8:37:45:ff:9e:ae:8a:fb: 99:13:13:c4:13:df:f2:23:2b:91:54:03:b3:8c:71: a5:2f:eb:5e:01:02:19:b2:c4:58:c3:3f:c3:9e:4b: f4:d0:36:12:f6:e9:2b:67:43:ef:36:33:47:b1:0d: 5b:34:9c:d8:66:70:c1:b2:6a:c3:b1:2c:03:08:e4: 2f:ea:40:ed:11:03:72:4f:97:26:d5:38:c5:3e:af: 6a:d5:a6:39:f1:e4:b2:3f:14:d1:29:6d:d4:55:6b: be:d4:41:10:9a:06:7e:ba:d7:dc:3c:8b:ec:06:54: 20:10:17:79:22:32:77:d7:9d:4f:57:a2:b6:82:b3: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:AF:9B:C4:35:B8:EA:F0:60:97:B4:6F:16:75:BB:1B:E9:E6:18 X509v3 Authority Key Identifier: keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:85:26:52:38:89:98:aa:4c:7b:a7:77:2d:4e:73:30:e2:16: a6:84:a7:32:1d:1f:f7:61:8a:cd:a6:7f:ee:a3:4f:24:d9:5d: ed:ad:ca:76:cb:de:af:ef:ce:f7:0d:4f:f8:40:62:5e:41:ac: c1:fd:17:59:b7:1c:b1:9b:3f:c3:3a:93:42:86:08:63:d4:24: 89:be:a1:e0:81:d7:f1:a7:27:c5:10:e6:77:62:5c:2e:9d:2f: 9e:33:51:f6:02:8e:28:fb:a5:6a:3f:5b:b8:f3:28:b3:a9:10: 4a:ea:26:f0:35:bc:59:17:04:de:66:05:16:f0:95:3e:7a:a5: a3:81:0e:24:fc:aa:d4:76:1f:5b:7e:53:ae:04:42:61:39:a4: b5:94:fe:c7:4d:eb:ce:14:1b:1e:50:2a:30:c7:8b:77:57:60: 43:ed:4e:56:9f:ac:b5:5b:4d:a1:58:6b:2a:30:c8:e7:91:20: c6:7d:22:18:1b:db:7e:5e:b5:15:64:16:cf:23:fd:5d:05:14: 40:50:8c:b1:d0:38:ee:fa:ea:da:f9:e7:c2:5d:61:4f:da:ec: d1:72:5a:8c:fd:e4:47:49:d9:38:55:38:48:0e:7f:ee:6d:e0: 3c:12:5f:ad:19:e0:06:9b:09:60:e9:69:e7:18:ad:07:ed:67: 9d:34:94:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RWiwXsgRXve7wEb3PrVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDlhZDc2NTlkYTEzNGVkNDgwNzRmNGRiOTM0MWNlODc1 MTdkZjQwHhcNMjUxMjE5MTEwMTE2WhcNMjUxMjIwMTEwMTE2WjAzMTEwLwYDVQQD EygxODJlYWY5YmM0MzViOGVhZjA2MDk3YjQ2ZjE2NzViYjFiZTllNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKprT3VJqUDKOJjt4xsPN2C1OgcB znZgP3bZAqaTnJ5rixUgY+09HMupmicY2NbVRVIpL2pBDdZP6s1an5WJEzpN4Nfi 6C2aprVxEROZyVM5lNCocJSJ4VrQrKwx44Zx63BhdmLjm8+rh48brSarlfaR2oSG +dri54Xj9UixyDdF/56uivuZExPEE9/yIyuRVAOzjHGlL+teAQIZssRYwz/Dnkv0 0DYS9ukrZ0PvNjNHsQ1bNJzYZnDBsmrDsSwDCOQv6kDtEQNyT5cm1TjFPq9q1aY5 8eSyPxTRKW3UVWu+1EEQmgZ+utfcPIvsBlQgEBd5IjJ3151PV6K2grOU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgur5vENbjq8GCXtG8Wdbsb6eYYMB8GA1UdIwQY MBaAFJdJrXZZ2hNO1IB09NuTQc6HUX30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUt MzJkNzljYzQ5ZjIyLzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUtMzJkNzljYzQ5ZjIy LzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYUmUjiJ mKpMe6d3LU5zMOIWpoSnMh0f92GKzaZ/7qNPJNld7a3Kdsver+/O9w1P+EBiXkGs wf0XWbccsZs/wzqTQoYIY9Qkib6h4IHX8acnxRDmd2JcLp0vnjNR9gKOKPulaj9b uPMos6kQSuom8DW8WRcE3mYFFvCVPnqlo4EOJPyq1HYfW35TrgRCYTmktZT+x03r zhQbHlAqMMeLd1dgQ+1OVp+stVtNoVhrKjDI55Egxn0iGBvbfl61FWQWzyP9XQUU QFCMsdA47vrq2vnnwl1hT9rs0XJajP3kR0nZOFU4SA5/7m3gPBJfrRngBpsJYOlp 5xitB+1nnTSU5A== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:53 2025 by rpki-client