This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json) Hash identifier: GadFkMm2OIQUNFD7zm1hQhbtNcOGxhe2IPEPg+FS5Wo= Subject key identifier: B4:BF:B1:83:55:60:5B:2C:CD:6F:C3:D4:A3:AB:5A:57:2C:41:05:56 Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62 Certificate serial: 019AF1D1A93AE525C2302DED24D28A9AC644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=) 2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: RkyFPZHuL82hKZ/e620gD/Mh751qcRNM+kKg0Bxf2to=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:3a:e5:25:c2:30:2d:ed:24:d2:8a:9a:c6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=b4bfb18355605b2ccd6fc3d4a3ab5a572c410556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:07:68:00:54:2b:df:41:4d:af:9e:97:34: d7:b3:ca:0a:92:a6:36:7b:bf:38:cc:17:17:5e:b5: 86:0f:5c:28:5f:f7:b6:20:56:89:e2:9c:50:f0:a5: 64:5f:2c:02:e9:f7:d5:61:b0:ab:c4:77:00:b1:ce: b8:f3:5e:31:05:4f:e5:6f:4d:8c:5f:42:81:55:f9: f2:f3:7b:df:39:9a:b3:03:d9:49:e1:a5:97:d9:82: 3e:57:08:4e:59:03:ca:72:09:1b:79:0b:f5:fe:e1: 73:79:6a:aa:75:29:e0:1c:da:c2:9e:e6:97:49:49: f9:89:b7:b0:a7:6e:6b:c7:86:78:f0:8e:80:39:78: fe:5e:05:50:b6:18:c2:b4:7b:a3:07:94:91:95:dd: 86:89:03:fd:f6:c1:7c:45:c2:3d:b3:f8:a9:d0:7e: 4d:5b:e9:66:70:d0:2f:6a:9a:46:85:8f:5c:49:1b: 14:aa:ec:49:07:db:27:08:66:95:00:58:88:e7:0b: 54:38:c9:10:9c:42:ec:7f:3e:3e:e7:92:bb:0b:80: 42:80:04:9a:c5:39:8a:28:b3:81:88:c4:44:50:b7: f8:98:a8:3b:e2:75:5e:ad:93:4f:74:a9:6b:54:23: cb:4a:55:5d:3c:c5:b6:07:9a:7e:32:8b:fb:45:a6: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:B1:83:55:60:5B:2C:CD:6F:C3:D4:A3:AB:5A:57:2C:41:05:56 X509v3 Authority Key Identifier: keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4b:50:3d:fc:d9:25:e2:81:86:08:0e:be:57:97:78:d5:9c: f2:15:39:a4:8d:4b:27:24:21:58:01:c4:6b:17:78:a7:90:b1: 2e:81:a5:79:97:9f:65:04:79:a4:08:e4:8b:bf:29:14:cb:d7: 20:9d:47:53:a4:45:16:41:80:b9:9f:d0:24:f9:52:5d:f9:a2: f5:fe:f2:7b:ad:f7:db:c2:3b:75:a8:35:7c:a6:4b:f9:96:f7: b4:41:54:24:ff:c8:77:b3:1e:48:00:43:af:1c:fe:3f:67:27: ed:dd:e6:ad:56:0c:7d:54:a0:48:69:ad:d3:40:34:db:92:a6: 1b:3b:06:7d:5b:73:19:86:3b:38:ec:ee:dc:6a:33:a5:e0:1b: 1d:fa:18:a0:16:87:2f:2e:20:44:38:89:b1:a8:1c:57:06:83: ab:1e:46:80:11:e6:bd:6f:63:ab:92:6c:9a:cb:c4:f6:dc:51: 78:57:4f:12:d9:55:f3:aa:18:11:cf:de:b7:b1:01:bb:7a:a6: b7:cd:fa:6f:7d:77:39:12:0e:c3:ef:78:10:a7:d7:1a:d6:e6: 3d:82:7f:a5:35:36:df:d4:f2:90:25:dc:ce:f8:19:60:c9:e9: 7a:1e:ec:06:1a:95:2d:5c:b6:82:df:78:a6:3e:47:0a:7f:3f: 9e:51:b9:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ak65SXCMC3tJNKKmsZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmY1YmU3M2YxODIzMjc0NDk4ZGY1MmEzNzUzNWQxM2Rh NWJlNjIwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhiNGJmYjE4MzU1NjA1YjJjY2Q2ZmMzZDRhM2FiNWE1NzJjNDEwNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+wHaABUK99BTa+elzTXs8oKkqY2 e784zBcXXrWGD1woX/e2IFaJ4pxQ8KVkXywC6ffVYbCrxHcAsc64814xBU/lb02M X0KBVfny83vfOZqzA9lJ4aWX2YI+VwhOWQPKcgkbeQv1/uFzeWqqdSngHNrCnuaX SUn5ibewp25rx4Z48I6AOXj+XgVQthjCtHujB5SRld2GiQP99sF8RcI9s/ip0H5N W+lmcNAvappGhY9cSRsUquxJB9snCGaVAFiI5wtUOMkQnELsfz4+55K7C4BCgASa xTmKKLOBiMREULf4mKg74nVerZNPdKlrVCPLSlVdPMW2B5p+Mov7RaYtgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS/sYNVYFsszW/D1KOrWlcsQQVWMB8GA1UdIwQY MBaAFJe/W+c/GCMnRJjfUqN1NdE9pb5iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUt M2Y0NDUxOTY2NWFjLzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUtM2Y0NDUxOTY2NWFj LzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEtQPfzZ JeKBhggOvleXeNWc8hU5pI1LJyQhWAHEaxd4p5CxLoGleZefZQR5pAjki78pFMvX IJ1HU6RFFkGAuZ/QJPlSXfmi9f7ye63328I7dag1fKZL+Zb3tEFUJP/Id7MeSABD rxz+P2cn7d3mrVYMfVSgSGmt00A025KmGzsGfVtzGYY7OOzu3GozpeAbHfoYoBaH Ly4gRDiJsagcVwaDqx5GgBHmvW9jq5JsmsvE9txReFdPEtlV86oYEc/et7EBu3qm t836b313ORIOw+94EKfXGtbmPYJ/pTU239TykCXczvgZYMnpeh7sBhqVLVy2gt94 pj5HCn8/nlG5cw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:14 2025 by rpki-client