This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json) Hash identifier: w111PcGStDobh9SqVQIAi47/EsZjDLECMH53RkShOkQ= Subject key identifier: B9:FF:5E:4F:AD:F6:32:2F:BC:F6:82:2C:BB:E7:8B:CC:D8:B6:0B:B0 Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c Certificate serial: 019B27E469582C1DDE52D14409D04DBCAD99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 16:00:39 +0000 Manifest this update: Tue 16 Dec 2025 16:00:39 +0000 Manifest next update: Wed 17 Dec 2025 16:00:39 +0000 Files and hashes: 1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=) 2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: r9jcuQaKydajC/tS6Bu91OXFbhPms9el55hUqJDAXdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:69:58:2c:1d:de:52:d1:44:09:d0:4d:bc:ad:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c Validity Not Before: Dec 16 16:00:39 2025 GMT Not After : Dec 17 16:00:39 2025 GMT Subject: CN=b9ff5e4fadf6322fbcf6822cbbe78bccd8b60bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:5b:72:8e:1c:df:f5:c1:34:10:0b:00:80: 56:cb:03:0d:30:84:9e:29:68:37:b7:7b:99:83:39: f2:03:8d:ff:9b:87:1a:90:c6:b8:c8:71:d8:da:c8: 45:45:18:dd:7e:67:bf:41:7b:c7:fa:c4:f6:00:30: cb:11:14:b6:c4:09:b4:17:c2:2b:7f:38:6e:2e:51: f6:8a:df:9d:18:30:a7:91:c9:a4:84:28:b1:25:6b: c4:fe:2c:2c:4c:a5:d9:9e:1f:47:85:e3:a4:fc:fa: db:a0:a3:bb:da:0d:c0:12:a8:9b:e0:0e:e8:26:4c: fa:2b:26:27:4e:b6:77:12:9a:ca:cb:a1:75:6c:55: 72:49:21:47:5a:41:b6:99:bb:b5:dc:42:30:e9:56: 3a:6d:bc:73:c8:54:b9:0f:f6:7e:cb:18:01:6c:6d: f2:97:d5:a2:f8:57:60:f3:8c:21:48:e4:15:ce:a2: 13:2e:28:9a:e3:ac:dd:3e:ba:45:41:91:8e:57:b3: 63:92:bc:bd:17:7d:e0:c2:db:93:49:c8:23:be:9b: f3:a8:50:d5:62:8b:64:20:0f:83:0f:1e:5f:59:fd: fa:aa:2d:ea:2f:d5:98:03:e4:e7:ae:aa:c3:d7:70: f8:5c:b7:4a:be:b7:f5:78:2a:6d:40:65:bf:0b:bf: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FF:5E:4F:AD:F6:32:2F:BC:F6:82:2C:BB:E7:8B:CC:D8:B6:0B:B0 X509v3 Authority Key Identifier: keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:3f:30:7e:80:0a:d5:1d:51:7b:3d:e8:1f:77:ab:b5:51: 95:4b:6d:b1:5b:d0:2c:86:1a:2e:ab:57:43:22:85:ff:fa:33: 51:e1:a1:05:39:b2:09:6f:c1:0c:b6:05:30:3b:43:b6:8d:a4: b0:d1:05:81:d4:3e:b1:73:79:9e:c3:e5:e6:86:42:d0:7a:e2: f6:04:40:09:25:bc:12:55:03:ba:46:13:60:12:52:ea:fe:d2: 2b:53:04:78:1e:12:59:3b:85:0d:07:8c:8b:58:e7:72:ee:9a: 58:44:b5:c4:4a:01:51:58:bf:ab:1d:47:9e:79:fe:46:7a:df: e5:63:78:eb:6c:da:57:12:52:08:e1:72:81:a7:af:62:61:3c: 6d:03:bf:1b:9c:27:79:5c:37:c7:d1:e5:8e:70:1c:36:ed:15: 67:92:93:a7:8f:2e:71:d5:01:44:a0:f6:f3:5c:ce:f3:98:38: b8:14:3c:54:26:6d:a2:4d:af:88:7a:44:72:34:fa:d4:39:86: d9:c7:f3:c4:17:23:a9:53:1b:d6:fc:c2:fb:87:4a:52:da:b6: 82:d0:bd:f3:3d:30:55:aa:b8:1b:11:af:0a:94:f8:a5:c2:e9: d4:e4:50:c4:a8:bb:60:4e:fe:57:c0:cd:72:72:3d:02:fb:33: 62:56:d4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5GlYLB3eUtFECdBNvK2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZjQ2NzRlODIzNmJkZGMzZDIzMjdhMDJiMGFiZmJhNzlh NTQ4M2MwHhcNMjUxMjE2MTYwMDM5WhcNMjUxMjE3MTYwMDM5WjAzMTEwLwYDVQQD EyhiOWZmNWU0ZmFkZjYzMjJmYmNmNjgyMmNiYmU3OGJjY2Q4YjYwYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oBbco4c3/XBNBALAIBWywMNMISe KWg3t3uZgznyA43/m4cakMa4yHHY2shFRRjdfme/QXvH+sT2ADDLERS2xAm0F8Ir fzhuLlH2it+dGDCnkcmkhCixJWvE/iwsTKXZnh9HheOk/PrboKO72g3AEqib4A7o Jkz6KyYnTrZ3EprKy6F1bFVySSFHWkG2mbu13EIw6VY6bbxzyFS5D/Z+yxgBbG3y l9Wi+Fdg84whSOQVzqITLiia46zdPrpFQZGOV7Njkry9F33gwtuTScgjvpvzqFDV YotkIA+DDx5fWf36qi3qL9WYA+TnrqrD13D4XLdKvrf1eCptQGW/C78sPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn/Xk+t9jIvvPaCLLvni8zYtguwMB8GA1UdIwQY MBaAFJf0Z06CNr3cPSMnoCsKv7p5pUg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUt YWYyZWM1ZDhkYzNjLzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUtYWYyZWM1ZDhkYzNj LzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkc/MH6A CtUdUXs96B93q7VRlUttsVvQLIYaLqtXQyKF//ozUeGhBTmyCW/BDLYFMDtDto2k sNEFgdQ+sXN5nsPl5oZC0Hri9gRACSW8ElUDukYTYBJS6v7SK1MEeB4SWTuFDQeM i1jncu6aWES1xEoBUVi/qx1Hnnn+Rnrf5WN462zaVxJSCOFygaevYmE8bQO/G5wn eVw3x9HljnAcNu0VZ5KTp48ucdUBRKD281zO85g4uBQ8VCZtok2viHpEcjT61DmG 2cfzxBcjqVMb1vzC+4dKUtq2gtC98z0wVaq4GxGvCpT4pcLp1ORQxKi7YE7+V8DN cnI9AvszYlbUeA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:39 2025 by rpki-client