This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json) Hash identifier: LYwOyi/bKALPLwCU60uknt1lGjQ011SKlqoN+D8Tx0c= Subject key identifier: A3:C1:35:80:08:B5:5D:90:19:D1:CD:D0:23:09:AD:9B:4F:E4:11:9F Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5 Certificate serial: 019B51BC9A5F3BE8AF00FAF5E3535FB98C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 19:01:13 +0000 Manifest this update: Wed 24 Dec 2025 19:01:13 +0000 Manifest next update: Thu 25 Dec 2025 19:01:13 +0000 Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: RxzQVrYzcVKH5UENyv3FoCQgr1MDZ/E5cxJxojuKKBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9a:5f:3b:e8:af:00:fa:f5:e3:53:5f:b9:8c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5 Validity Not Before: Dec 24 19:01:13 2025 GMT Not After : Dec 25 19:01:13 2025 GMT Subject: CN=a3c1358008b55d9019d1cdd02309ad9b4fe4119f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:41:9b:13:76:93:ca:6b:d1:6f:63:19:e7: c2:6c:e7:9a:4b:a4:4c:79:d6:bb:96:87:e8:ed:1a: 1d:82:1f:0f:f6:87:6a:35:af:2f:da:2b:4e:7d:1c: ae:a6:ad:5e:84:55:d3:30:f1:ac:d8:2e:85:78:fb: 4a:17:35:61:5e:37:41:f1:f1:8e:80:33:32:19:74: ee:5c:71:0a:27:2a:53:02:c1:8e:06:95:70:56:05: 8f:17:e6:f0:61:67:da:6c:68:ee:42:02:ba:e2:49: 44:42:42:82:7f:91:bd:cc:4b:23:8d:8a:91:92:70: 8d:e8:86:b6:b8:bb:89:b4:a9:b2:b8:56:44:65:10: d4:2f:c4:24:88:f5:53:3f:71:04:ff:63:1e:f0:37: 4f:1d:39:03:93:b6:55:7c:97:b4:22:e2:18:ba:c4: 63:bb:62:4e:c2:14:93:86:a7:2e:38:09:92:36:a4: 78:f5:50:e3:95:f8:e4:1a:02:84:04:44:35:fe:23: 93:23:61:d8:4f:0d:dd:f5:53:6d:f7:dd:49:48:1f: 01:af:f0:1c:2c:ae:53:a5:6a:5c:4f:5c:13:85:de: 38:87:a7:c3:bb:a1:96:b6:0b:49:74:3d:e1:4e:c9: 97:df:bf:fa:eb:89:a7:7e:ff:16:eb:17:16:5f:40: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C1:35:80:08:B5:5D:90:19:D1:CD:D0:23:09:AD:9B:4F:E4:11:9F X509v3 Authority Key Identifier: keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:64:e9:92:25:14:15:a3:e8:ba:cc:e7:9e:4e:6b:c5:7e:f8: 41:34:7f:67:b3:b0:ac:59:90:fd:21:11:fc:80:de:84:0c:85: 8b:e1:29:a4:13:49:99:93:9e:68:14:b8:47:fa:79:bd:4e:6c: d8:6f:1e:2b:c1:d1:71:40:d9:bd:b1:66:ea:a5:e6:b3:60:53: d7:a3:df:cb:e9:00:b0:69:96:39:c6:dd:f3:23:ac:aa:5a:d3: 62:72:b2:e4:f7:6c:bb:d7:90:3a:3d:e4:3c:03:f2:54:7a:03: 36:1e:10:c0:38:b1:43:f4:b0:27:d7:32:95:37:54:24:79:2d: ce:ba:09:80:81:c4:82:ee:97:ab:28:18:cd:2c:fd:5f:79:7f: ce:d5:75:53:67:c0:54:84:e6:ca:c9:53:e9:05:79:af:7d:71: 77:ce:ad:5b:2f:70:31:eb:8b:a6:84:30:3b:28:55:d0:d4:e1: 0e:3d:14:be:b5:c6:c3:52:22:0e:c7:56:f7:55:1e:a8:8c:af: 29:cc:9e:75:7a:2e:59:a9:ed:b8:35:b7:cd:22:c7:fc:26:14: a4:4a:b4:9c:e1:08:7c:8c:dd:68:f9:ac:5c:19:6c:75:42:f6: 79:14:f4:04:a9:9d:34:d1:16:bb:9f:91:ec:1c:78:9c:bf:b3: 31:75:f9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJpfO+ivAPr141NfuYyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm Y2ExYTUwHhcNMjUxMjI0MTkwMTEzWhcNMjUxMjI1MTkwMTEzWjAzMTEwLwYDVQQD EyhhM2MxMzU4MDA4YjU1ZDkwMTlkMWNkZDAyMzA5YWQ5YjRmZTQxMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r9BmxN2k8pr0W9jGefCbOeaS6RM eda7lofo7Rodgh8P9odqNa8v2itOfRyupq1ehFXTMPGs2C6FePtKFzVhXjdB8fGO gDMyGXTuXHEKJypTAsGOBpVwVgWPF+bwYWfabGjuQgK64klEQkKCf5G9zEsjjYqR knCN6Ia2uLuJtKmyuFZEZRDUL8QkiPVTP3EE/2Me8DdPHTkDk7ZVfJe0IuIYusRj u2JOwhSThqcuOAmSNqR49VDjlfjkGgKEBEQ1/iOTI2HYTw3d9VNt991JSB8Br/Ac LK5TpWpcT1wThd44h6fDu6GWtgtJdD3hTsmX37/664mnfv8W6xcWX0DTnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPBNYAItV2QGdHN0CMJrZtP5BGfMB8GA1UdIwQY MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5 LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmTpkiUU FaPousznnk5rxX74QTR/Z7OwrFmQ/SER/IDehAyFi+EppBNJmZOeaBS4R/p5vU5s 2G8eK8HRcUDZvbFm6qXms2BT16Pfy+kAsGmWOcbd8yOsqlrTYnKy5Pdsu9eQOj3k PAPyVHoDNh4QwDixQ/SwJ9cylTdUJHktzroJgIHEgu6XqygYzSz9X3l/ztV1U2fA VITmyslT6QV5r31xd86tWy9wMeuLpoQwOyhV0NThDj0UvrXGw1IiDsdW91UeqIyv KcyedXouWantuDW3zSLH/CYUpEq0nOEIfIzdaPmsXBlsdUL2eRT0BKmdNNEWu5+R 7Bx4nL+zMXX5pA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:21:15 2025 by rpki-client