This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json) Hash identifier: M5A9vps+vRRPQG2a3Or63vdI3cc1erFG3LRtrclLIU4= Subject key identifier: 85:47:A5:C3:A2:77:16:6D:4E:4F:34:49:4D:03:AC:E7:A4:40:02:C9 Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019AF276E6FE523F9EFAD390AF78CB134A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: 7/2lHbtkCGd3Kccv8QjtN2csZgzt8yw8pUGTfSfa9cA=) 2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=) 3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e6:fe:52:3f:9e:fa:d3:90:af:78:cb:13:4a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=8547a5c3a277166d4e4f34494d03ace7a44002c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:f6:bd:94:c2:61:3f:e9:ad:8c:a1:fe:89: 1d:1c:5f:76:6e:82:61:61:b3:59:73:f7:a1:60:9e: b3:5e:6e:6e:a9:59:5a:bf:b9:9d:43:99:19:76:f4: 3a:04:e2:8f:4c:b9:3f:a0:be:92:c2:0f:16:7e:ce: 13:8c:d6:5b:d1:88:9e:f2:0f:d4:4b:91:0e:fc:f8: e3:28:11:32:25:f8:7d:26:1e:22:db:6d:e5:f5:9f: b2:6d:ca:d5:2a:8b:6e:a3:c4:ec:5d:11:4a:6d:5b: 0f:cb:f1:81:78:41:3e:b4:dc:b5:0d:f1:2a:11:cb: c4:ff:6a:7f:9f:92:6e:22:2b:52:fe:ce:ec:13:21: 8c:ad:ca:c4:19:8b:36:1d:19:ab:1c:f4:ba:00:54: 30:97:2f:a4:40:c2:35:29:ac:de:61:a3:83:89:d0: 09:37:19:a9:be:10:fe:3e:35:4b:82:04:48:ee:06: 7b:61:17:0b:fb:50:b8:e2:2c:db:cf:be:4a:64:4f: 38:35:d1:05:7a:3d:7c:2b:e7:f4:8c:05:db:35:76: cb:81:83:08:67:87:c8:1d:1c:c4:b3:1b:3a:1e:0a: ad:52:f0:ef:30:0d:73:b5:8f:f1:b3:e6:37:33:5a: 25:bd:52:c3:f2:f9:76:06:af:ea:cc:8d:2c:be:aa: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:47:A5:C3:A2:77:16:6D:4E:4F:34:49:4D:03:AC:E7:A4:40:02:C9 X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c2:7e:36:ea:5e:5b:f5:0b:41:51:05:60:75:b5:3e:60:86: 7d:6d:a6:cf:c5:3e:28:9c:90:d1:e2:3c:eb:26:d5:a1:f5:d0: cf:95:14:53:08:ff:9f:02:80:d8:fc:a4:bc:99:7b:a7:91:40: c3:bf:fb:76:93:0c:c7:03:58:98:64:64:46:9b:bf:c4:7c:d0: cc:60:4f:ef:5e:a0:a1:ec:77:5f:8b:46:4c:50:ec:07:12:d3: 15:8b:7f:97:22:9e:e5:54:97:ed:a3:1b:0c:48:ef:c9:2b:dc: 40:24:f3:05:14:cc:50:ff:68:b1:d9:8a:87:2d:82:66:3f:c9: 50:a3:98:f9:20:d7:28:aa:f2:86:97:f3:5d:a0:14:d4:04:7e: 23:07:de:07:61:20:90:ab:0f:f1:c3:45:cc:db:9f:39:a1:48: 0d:b1:b9:61:96:39:f5:88:c1:19:4e:dc:7a:ed:a0:e4:0c:e9: 89:b0:85:d0:f2:9b:62:48:02:65:9b:91:2c:cd:77:e7:a3:fa: 34:c9:09:4e:55:b4:ac:9a:98:17:54:3f:41:a0:48:1d:3c:d3: 9a:bc:45:23:a0:f1:4c:de:6c:72:d5:33:5e:25:f7:d7:42:46: db:47:87:42:3d:d0:36:43:6f:12:17:ed:94:40:fa:5c:4b:d6: a2:df:d7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydub+Uj+e+tOQr3jLE0qSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg4NTQ3YTVjM2EyNzcxNjZkNGU0ZjM0NDk0ZDAzYWNlN2E0NDAwMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoP2vZTCYT/prYyh/okdHF92boJh YbNZc/ehYJ6zXm5uqVlav7mdQ5kZdvQ6BOKPTLk/oL6Swg8Wfs4TjNZb0Yie8g/U S5EO/PjjKBEyJfh9Jh4i223l9Z+ybcrVKotuo8TsXRFKbVsPy/GBeEE+tNy1DfEq EcvE/2p/n5JuIitS/s7sEyGMrcrEGYs2HRmrHPS6AFQwly+kQMI1KazeYaODidAJ NxmpvhD+PjVLggRI7gZ7YRcL+1C44izbz75KZE84NdEFej18K+f0jAXbNXbLgYMI Z4fIHRzEsxs6HgqtUvDvMA1ztY/xs+Y3M1olvVLD8vl2Bq/qzI0svqqHKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVHpcOidxZtTk80SU0DrOekQALJMB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8J+Nupe W/ULQVEFYHW1PmCGfW2mz8U+KJyQ0eI86ybVofXQz5UUUwj/nwKA2PykvJl7p5FA w7/7dpMMxwNYmGRkRpu/xHzQzGBP716goex3X4tGTFDsBxLTFYt/lyKe5VSX7aMb DEjvySvcQCTzBRTMUP9osdmKhy2CZj/JUKOY+SDXKKryhpfzXaAU1AR+IwfeB2Eg kKsP8cNFzNufOaFIDbG5YZY59YjBGU7ceu2g5AzpibCF0PKbYkgCZZuRLM1356P6 NMkJTlW0rJqYF1Q/QaBIHTzTmrxFI6DxTN5sctUzXiX310JG20eHQj3QNkNvEhft lED6XEvWot/Xgg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:03 2025 by rpki-client