This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json) Hash identifier: jK2IkjXQXQoeoSKvLIxUcwgsKxcIgQF4WelXrHPdWSI= Subject key identifier: 46:C4:B1:8E:8D:39:42:4D:3E:B5:90:AC:86:61:71:E8:9E:B7:40:C4 Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Certificate serial: 019AF24006EFB2BABB9F6337D4F978B33E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft Manifest number: 0717 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: NWVoDOX014CU6ypT+aIJm5dIB/IKSkvMUcfBS5us7V8=) 2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:06:ef:b2:ba:bb:9f:63:37:d4:f9:78:b3:3e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=46c4b18e8d39424d3eb590ac866171e89eb740c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:60:69:f4:d0:e2:74:ca:3b:ba:0f:62:ee: 93:14:7d:22:c7:78:c6:2c:41:66:83:36:3a:08:2c: 3d:9a:26:d2:b0:53:6f:46:2c:0b:b5:9c:9e:4f:aa: e8:61:f0:f0:1c:a5:9c:33:fb:71:a5:d8:45:3f:98: ab:ca:b3:ee:7c:95:24:69:b8:de:b5:db:15:ee:04: d1:71:45:1a:0c:33:c5:16:36:79:56:25:86:b5:2b: ba:ba:d7:82:89:a1:8a:90:70:36:72:ae:52:f2:94: ef:0a:4e:68:74:39:8a:15:90:b0:05:2b:86:92:a5: f5:30:06:c6:b9:bc:49:3e:4c:dd:54:7e:bd:c3:58: 9f:46:5a:7e:f2:df:ba:cc:2e:79:80:ad:1e:45:38: 05:c6:a4:a6:c6:49:8d:dc:5e:bc:78:f9:27:64:a1: d1:c0:c6:22:a6:01:1f:63:80:c0:bd:17:09:df:f1: f1:89:8c:35:87:e5:a1:65:89:05:90:2d:5a:a4:27: 18:d4:e4:4a:2b:45:30:1f:e8:e6:46:55:d7:a3:0d: 48:f7:cd:e5:02:01:a9:57:43:53:1a:d2:b2:0e:7b: ca:3c:b7:96:b5:15:52:c8:b1:4f:77:73:32:b6:93: c4:82:7c:31:07:ca:b5:1b:bf:92:fe:85:c7:fa:12: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C4:B1:8E:8D:39:42:4D:3E:B5:90:AC:86:61:71:E8:9E:B7:40:C4 X509v3 Authority Key Identifier: keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:96:27:0f:25:28:3e:a2:bc:41:15:cb:6f:e2:9b:02:1c:b4: 3b:dc:ba:da:70:81:2e:45:c2:66:6a:11:a1:04:ce:fd:ee:07: 34:8a:07:fe:dc:dd:ad:48:7f:65:6d:8f:0c:1a:c4:08:b6:77: 94:2f:3d:3f:6c:f4:de:fd:dd:17:ca:b6:54:7e:d8:ad:c5:7c: e4:45:36:5a:4a:99:f2:3f:f0:61:2a:10:8d:e0:7d:76:71:a3: 8b:e6:d4:6c:e8:d1:7b:5d:4b:7e:a7:57:97:fb:ea:c4:c5:d2: 42:2d:54:13:e4:45:6b:ac:35:ef:79:54:1d:c9:70:54:60:16: 79:e1:0d:f7:f4:7d:9c:61:80:d9:11:4b:61:ac:f7:72:bb:f8: 2f:a3:44:0d:28:c3:bc:d0:7c:1e:50:49:58:e2:39:46:94:39: 65:8e:06:2f:61:b4:67:1b:32:b0:2a:93:89:fc:18:01:b5:36: d9:85:d5:3e:45:dc:c7:68:79:9d:3a:d3:71:15:63:a4:74:ee: e7:ec:65:c1:e0:38:b1:ae:96:c3:4f:47:9d:5e:f3:e4:92:59: 7c:03:b0:7b:de:4d:ba:b9:6f:9f:c4:f3:ab:46:bf:eb:23:36: 17:d4:4b:a5:68:5d:52:a1:23:48:0a:a8:29:19:a8:7c:4e:62: 7c:55:e3:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAbvsrq7n2M31Pl4sz4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz YTk0YzEwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD Eyg0NmM0YjE4ZThkMzk0MjRkM2ViNTkwYWM4NjYxNzFlODllYjc0MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyJgafTQ4nTKO7oPYu6TFH0ix3jG LEFmgzY6CCw9mibSsFNvRiwLtZyeT6roYfDwHKWcM/txpdhFP5iryrPufJUkabje tdsV7gTRcUUaDDPFFjZ5ViWGtSu6uteCiaGKkHA2cq5S8pTvCk5odDmKFZCwBSuG kqX1MAbGubxJPkzdVH69w1ifRlp+8t+6zC55gK0eRTgFxqSmxkmN3F68ePknZKHR wMYipgEfY4DAvRcJ3/HxiYw1h+WhZYkFkC1apCcY1ORKK0UwH+jmRlXXow1I983l AgGpV0NTGtKyDnvKPLeWtRVSyLFPd3MytpPEgnwxB8q1G7+S/oXH+hLeZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbEsY6NOUJNPrWQrIZhceiet0DEMB8GA1UdIwQY MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2 LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5YnDyUo PqK8QRXLb+KbAhy0O9y62nCBLkXCZmoRoQTO/e4HNIoH/tzdrUh/ZW2PDBrECLZ3 lC89P2z03v3dF8q2VH7YrcV85EU2WkqZ8j/wYSoQjeB9dnGji+bUbOjRe11LfqdX l/vqxMXSQi1UE+RFa6w173lUHclwVGAWeeEN9/R9nGGA2RFLYaz3crv4L6NEDSjD vNB8HlBJWOI5RpQ5ZY4GL2G0ZxsysCqTifwYAbU22YXVPkXcx2h5nTrTcRVjpHTu 5+xlweA4sa6Ww09HnV7z5JJZfAOwe95Nurlvn8Tzq0a/6yM2F9RLpWhdUqEjSAqo KRmofE5ifFXjjw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:00 2025 by rpki-client