This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json) Hash identifier: l0pBJTL82xn5ZSiTUMveuCwsWlB8m5rwyNmXPN6gsJk= Subject key identifier: FF:D4:37:E0:DC:00:7F:16:09:F5:64:21:39:F8:C7:63:FE:F2:99:46 Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55 Certificate serial: 019B77B71CC73E0325BDA6CFA43362FDCA14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft Manifest number: 0F0C Signing time: Thu 01 Jan 2026 04:00:47 +0000 Manifest this update: Thu 01 Jan 2026 04:00:47 +0000 Manifest next update: Fri 02 Jan 2026 04:00:47 +0000 Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=) 2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: dR1fGIB1tmfDpTBnNDTBbZzFO66IA+R2wSzZj4FRPAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:1c:c7:3e:03:25:bd:a6:cf:a4:33:62:fd:ca:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55 Validity Not Before: Jan 1 04:00:47 2026 GMT Not After : Jan 2 04:00:47 2026 GMT Subject: CN=ffd437e0dc007f1609f5642139f8c763fef29946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:ef:6a:b0:7c:6a:54:3b:14:02:22:10:de: cf:63:e9:3e:ec:92:ed:a9:0e:20:be:5d:c6:89:aa: 47:43:21:5c:c6:21:19:4b:c3:5e:78:42:9e:5d:71: c2:fe:8a:d0:56:0d:b9:35:1a:69:52:09:7d:a8:ee: a0:ba:d2:a1:13:80:45:bb:4e:7d:e1:18:b2:97:34: 69:28:6d:6d:27:5b:b5:a6:0b:24:c0:ed:e6:9c:e1: 9b:39:29:c6:20:7d:87:91:5d:0e:4b:6e:9b:0f:a4: 46:62:dc:2a:99:da:71:ab:0d:22:d1:0b:65:b4:d3: f3:1a:28:85:15:8f:b5:2f:b4:bb:31:77:d3:97:5d: b1:b0:76:61:e9:02:1a:79:d2:32:b6:f2:14:3f:9a: b4:6f:e4:f5:0f:0e:85:73:10:a5:22:b1:99:0e:91: fb:06:04:5a:bb:f4:b0:de:b6:c3:dc:6a:98:bb:ba: 3b:c7:4d:38:c3:f4:e2:de:e0:59:77:cf:0c:f2:1e: ee:be:1d:62:33:8f:2f:85:64:65:f1:19:f1:d9:64: 4e:44:39:65:6f:08:08:b2:da:44:50:65:41:5a:a1: d2:93:3c:4a:84:b5:91:c9:f3:31:2d:a9:44:83:29: 67:35:58:3f:e6:31:01:a0:81:ad:6a:71:25:dc:b4: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D4:37:E0:DC:00:7F:16:09:F5:64:21:39:F8:C7:63:FE:F2:99:46 X509v3 Authority Key Identifier: keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ec:f8:90:fa:61:2f:a2:46:10:aa:ed:56:88:bb:75:8c:95: cd:bf:51:68:f5:a7:d0:71:65:8e:d5:25:09:01:92:00:50:e1: c2:6f:21:fe:1e:63:25:3f:3f:80:8e:c0:35:4d:b9:a4:37:ee: 6a:08:66:a4:ed:e1:24:23:36:4c:33:cc:8e:0b:f4:cc:45:18: c0:b1:1e:7d:7c:73:f8:03:2c:e5:1a:8f:b1:e1:65:79:08:60: 20:b5:f5:f4:00:0c:ba:ab:5f:6f:e3:16:f3:4b:3d:44:f9:2e: b1:49:00:54:77:f5:e1:36:64:44:3b:4a:69:24:c9:57:e4:df: e7:d7:ae:6c:a3:a3:9f:5f:49:1e:46:33:08:51:25:36:07:d7: 76:3c:71:c4:cc:a2:fd:13:75:db:28:19:05:d4:39:2b:ec:71: 62:c9:e4:55:33:4a:fb:0e:ca:7c:d3:1d:1d:e9:2c:d3:ae:b2: 9a:91:fc:5d:76:00:cb:5a:73:9f:01:91:92:62:cc:9d:dd:f7: 2a:8e:6d:92:49:ca:97:66:22:ee:f7:fe:1b:17:8f:77:f2:78: 36:43:8a:4b:c6:3e:13:d9:cf:13:c9:8c:49:5b:ac:a1:f0:ff: c0:e7:29:be:44:b0:31:90:8c:cf:9d:cc:2a:ab:dd:72:db:5d: 6f:d7:f8:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3txzHPgMlvabPpDNi/coUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi MmRjNTUwHhcNMjYwMTAxMDQwMDQ3WhcNMjYwMTAyMDQwMDQ3WjAzMTEwLwYDVQQD EyhmZmQ0MzdlMGRjMDA3ZjE2MDlmNTY0MjEzOWY4Yzc2M2ZlZjI5OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbrvarB8alQ7FAIiEN7PY+k+7JLt qQ4gvl3GiapHQyFcxiEZS8NeeEKeXXHC/orQVg25NRppUgl9qO6gutKhE4BFu059 4RiylzRpKG1tJ1u1pgskwO3mnOGbOSnGIH2HkV0OS26bD6RGYtwqmdpxqw0i0Qtl tNPzGiiFFY+1L7S7MXfTl12xsHZh6QIaedIytvIUP5q0b+T1Dw6FcxClIrGZDpH7 BgRau/Sw3rbD3GqYu7o7x004w/Ti3uBZd88M8h7uvh1iM48vhWRl8Rnx2WRORDll bwgIstpEUGVBWqHSkzxKhLWRyfMxLalEgylnNVg/5jEBoIGtanEl3LR1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/UN+DcAH8WCfVkITn4x2P+8plGMB8GA1UdIwQY MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+z4kPph L6JGEKrtVoi7dYyVzb9RaPWn0HFljtUlCQGSAFDhwm8h/h5jJT8/gI7ANU25pDfu aghmpO3hJCM2TDPMjgv0zEUYwLEefXxz+AMs5RqPseFleQhgILX19AAMuqtfb+MW 80s9RPkusUkAVHf14TZkRDtKaSTJV+Tf59eubKOjn19JHkYzCFElNgfXdjxxxMyi /RN12ygZBdQ5K+xxYsnkVTNK+w7KfNMdHeks066ympH8XXYAy1pznwGRkmLMnd33 Ko5tkknKl2Yi7vf+GxePd/J4NkOKS8Y+E9nPE8mMSVusofD/wOcpvkSwMZCMz53M Kqvdcttdb9f45A== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:21 2026 by rpki-client