This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json) Hash identifier: AAbqzskbea//gnktLa+1HPCyK+TX2yYrshHsU5jOH7A= Subject key identifier: CA:43:95:1F:58:C5:78:2E:35:B3:09:F6:D2:D0:DA:6B:91:3C:85:D7 Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90 Certificate serial: 019B46272A4C036EF17C8BF2A378E9953169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft Manifest number: 14A5 Signing time: Mon 22 Dec 2025 13:02:10 +0000 Manifest this update: Mon 22 Dec 2025 13:02:10 +0000 Manifest next update: Tue 23 Dec 2025 13:02:10 +0000 Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=) 2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=) 3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: syd2v/tNZLCrq6io5JlwYRV7wv11py7ir75wGX/bMk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:2a:4c:03:6e:f1:7c:8b:f2:a3:78:e9:95:31:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90 Validity Not Before: Dec 22 13:02:10 2025 GMT Not After : Dec 23 13:02:10 2025 GMT Subject: CN=ca43951f58c5782e35b309f6d2d0da6b913c85d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:96:95:b3:e8:53:f6:f9:7f:7c:1d:d8:a0: 27:72:b4:63:83:ab:f2:c1:8a:60:11:44:db:21:52: 7d:bd:30:8c:ee:a4:81:c8:50:72:f4:38:05:a7:86: 49:d8:14:85:53:81:c2:97:0e:e0:bd:2e:75:fd:04: 28:ed:aa:b7:8a:59:7e:a3:bb:82:af:42:99:54:e3: 98:75:65:fa:cd:88:0a:69:02:c4:e8:52:84:54:eb: ad:e4:45:15:33:53:b6:8b:05:a9:40:bf:59:4f:bc: 2d:d7:8d:95:78:70:5d:21:e0:5a:5d:1d:af:5d:3c: 52:11:fa:0c:fc:51:f1:69:c2:d8:ef:0a:19:9c:23: 21:4b:0c:a0:29:e2:52:32:9e:6c:8a:cb:ef:74:3d: fe:e2:c1:f9:56:78:fd:f8:ce:4b:8e:47:49:76:c1: db:fb:97:04:3c:94:39:a9:c7:96:8c:53:f1:69:be: 8e:35:fe:f0:9e:66:82:5e:a0:3d:55:9a:74:cd:4a: 4b:02:d4:bb:01:9a:de:e4:e8:70:ac:de:db:28:42: 66:fe:11:e7:56:01:6d:9a:57:f0:f9:5b:a4:f6:ce: 1f:b1:0f:d5:e1:48:b5:88:56:37:5f:27:22:83:6f: 0f:5e:70:a4:7d:21:c0:bb:3d:5f:9c:f5:4f:24:94: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:95:1F:58:C5:78:2E:35:B3:09:F6:D2:D0:DA:6B:91:3C:85:D7 X509v3 Authority Key Identifier: keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:af:a7:33:49:62:f6:4b:30:6e:96:fc:16:a3:41:47:34:35: 02:47:60:12:77:ac:3f:80:05:e1:30:f5:60:ec:98:e9:00:4c: 80:b7:6a:f2:76:90:25:7d:48:22:4c:a2:d1:3c:8f:a5:3d:5c: fc:93:fd:d8:ea:3b:8b:80:1c:22:b5:24:a7:a1:25:b8:d9:5f: c0:f7:47:5a:67:ec:c0:ee:0a:c6:ac:74:3e:b0:6f:36:31:59: 9b:a5:07:33:d0:41:b5:7b:73:c4:24:c8:f1:3b:5b:13:68:6b: 54:6f:d5:93:5a:e9:0f:5a:dc:39:2a:1b:d0:35:b8:63:6c:5e: 0b:0a:ea:16:05:14:fd:ca:e8:e7:90:fe:2c:6b:ed:8b:8b:bc: 36:b6:86:fa:12:72:75:3f:42:fd:4a:44:bc:4a:55:6a:d7:e2: 42:ec:4b:0e:16:a7:fc:02:fb:05:2f:53:25:91:99:94:ef:86: e6:77:80:7b:f0:e9:5d:23:5c:9d:b8:4d:3b:dd:34:40:d3:0d: d8:6a:4b:27:15:91:41:1d:3c:4e:92:a2:f9:4b:37:42:39:f0: dd:3a:f8:51:94:89:71:17:41:7d:a3:d6:a3:3e:6c:4f:7f:8f: ee:a5:0d:1b:cf:52:70:fd:66:f0:e2:a4:ce:85:c9:9f:df:39: de:88:15:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJypMA27xfIvyo3jplTFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTk1MjlkZDMxNzA2NDVkNzZjZjZhYzA2NTk1MDZjYzY0 OWNhOTAwHhcNMjUxMjIyMTMwMjEwWhcNMjUxMjIzMTMwMjEwWjAzMTEwLwYDVQQD EyhjYTQzOTUxZjU4YzU3ODJlMzViMzA5ZjZkMmQwZGE2YjkxM2M4NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLWWlbPoU/b5f3wd2KAncrRjg6vy wYpgEUTbIVJ9vTCM7qSByFBy9DgFp4ZJ2BSFU4HClw7gvS51/QQo7aq3ill+o7uC r0KZVOOYdWX6zYgKaQLE6FKEVOut5EUVM1O2iwWpQL9ZT7wt142VeHBdIeBaXR2v XTxSEfoM/FHxacLY7woZnCMhSwygKeJSMp5sisvvdD3+4sH5Vnj9+M5LjkdJdsHb +5cEPJQ5qceWjFPxab6ONf7wnmaCXqA9VZp0zUpLAtS7AZre5OhwrN7bKEJm/hHn VgFtmlfw+Vuk9s4fsQ/V4Ui1iFY3Xycig28PXnCkfSHAuz1fnPVPJJTmbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpDlR9YxXguNbMJ9tLQ2muRPIXXMB8GA1UdIwQY MBaAFJdZUp3TFwZF12z2rAZZUGzGScqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYt ZGU0YWNjYjAwZGQ3LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hODZhOTEtNjM1Ni00YzJjLTlmOGYtZGU0YWNjYjAwZGQ3 LzEvbDFsU25kTVhCa1hYYlBhc0JsbFFiTVpKeXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq+nM0li 9kswbpb8FqNBRzQ1AkdgEnesP4AF4TD1YOyY6QBMgLdq8naQJX1IIkyi0TyPpT1c /JP92Oo7i4AcIrUkp6EluNlfwPdHWmfswO4Kxqx0PrBvNjFZm6UHM9BBtXtzxCTI 8TtbE2hrVG/Vk1rpD1rcOSob0DW4Y2xeCwrqFgUU/cro55D+LGvti4u8NraG+hJy dT9C/UpEvEpVatfiQuxLDhan/AL7BS9TJZGZlO+G5neAe/DpXSNcnbhNO900QNMN 2GpLJxWRQR08TpKi+Us3Qjnw3Tr4UZSJcRdBfaPWoz5sT3+P7qUNG89ScP1m8OKk zoXJn9853ogVpw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:16:11 2025 by rpki-client