This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json) Hash identifier: scIx36ANd6KJoLMFjJE6DpxCWuKOCG1kREwhMEpYgIk= Subject key identifier: B2:57:71:2D:52:81:14:4A:AC:8E:E8:A1:25:F2:0D:7F:1E:7A:ED:E3 Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Certificate serial: 019B3AFE1FB63758066BE0441C0B5583C48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft Manifest number: 1770 Signing time: Sat 20 Dec 2025 09:01:31 +0000 Manifest this update: Sat 20 Dec 2025 09:01:31 +0000 Manifest next update: Sun 21 Dec 2025 09:01:31 +0000 Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: M0Z95B5eZfNRH8eN3p/dZaaIDe0cCS8QeMhH/UJibiE=) 2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:1f:b6:37:58:06:6b:e0:44:1c:0b:55:83:c4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Validity Not Before: Dec 20 09:01:31 2025 GMT Not After : Dec 21 09:01:31 2025 GMT Subject: CN=b257712d5281144aac8ee8a125f20d7f1e7aede3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:98:00:60:37:5f:b1:7d:00:e9:68:ce:f4: f5:9a:27:9c:6b:c7:cd:d6:cb:ce:aa:de:ac:96:f5: 2e:f3:7c:c2:01:06:7d:da:9e:d9:0c:c4:92:4c:d2: dd:aa:d9:52:bc:05:c9:9f:e8:89:5b:b6:b1:e8:38: e0:59:cd:8c:b5:cd:c0:13:ab:45:1f:0d:54:0e:35: f9:13:68:b5:3e:0a:5f:b9:5f:75:96:37:ca:ef:0b: bf:2b:33:21:bf:ab:78:9a:a7:1a:01:8e:47:b8:3b: 02:d1:35:47:3e:5d:7a:b2:7b:43:b7:80:8e:57:50: 2e:0d:2d:d2:0e:77:7d:73:d3:e6:1c:a1:68:4a:6f: 24:85:36:8c:91:06:ba:b2:2f:3b:3b:c2:aa:19:42: da:ec:82:5f:b2:61:47:c7:6b:6b:2b:b7:dc:b8:e5: f5:dd:f2:10:76:9e:73:b2:d8:3a:c7:c2:32:15:94: 83:69:88:58:7d:9d:2e:df:a4:4b:4c:bf:43:1f:78: db:61:5d:71:de:6d:48:87:e7:15:5a:0b:be:1a:f7: c6:81:f1:98:bd:74:fb:a8:e4:8e:8a:5a:d2:f8:0f: 8e:f3:5d:f7:06:4a:46:76:3f:f0:3a:10:d8:34:f9: e5:df:34:f5:76:0a:94:4b:c7:f0:bb:cd:e1:72:bc: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:57:71:2D:52:81:14:4A:AC:8E:E8:A1:25:F2:0D:7F:1E:7A:ED:E3 X509v3 Authority Key Identifier: keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c5:30:08:a8:aa:50:68:69:d5:c9:15:b7:ff:6c:20:ed:02: 3c:76:b3:bf:29:04:cb:ff:7b:d1:d6:f2:14:ee:63:6f:c0:27: 7d:01:41:9a:13:20:bf:0f:0b:9f:53:2f:09:1e:ca:d3:67:33: 94:8d:d9:e3:f0:87:61:c1:73:95:a9:b7:ba:6f:6f:c1:dd:f5: c0:90:16:10:e3:a7:02:5f:92:4d:09:82:15:d1:57:00:da:e1: e5:fb:db:19:fb:59:93:0d:a0:f6:f5:83:bc:c3:49:d0:05:bd: b7:65:93:02:e7:3b:13:3b:c1:88:09:a3:ba:91:59:14:ab:4c: b2:2a:85:98:2b:d1:b4:73:aa:51:c5:d4:bb:7f:4e:e6:c7:74: 3c:da:9c:31:94:0c:29:0f:31:85:b5:4c:69:d1:66:07:07:ae: 4d:14:73:42:31:2d:1d:b0:7d:b0:0d:9e:07:ed:9d:15:51:22: 34:e7:11:6a:a1:8c:7b:c0:67:e0:a0:ab:c5:87:17:08:04:0a: 40:d5:a1:57:23:1c:38:48:1a:53:33:e1:ca:9e:a2:14:b0:bd: 3b:cb:64:30:c9:df:1e:d8:9a:cb:9d:eb:e4:d0:b1:dc:84:24: 9b:2e:c1:34:54:00:b9:5b:90:c0:86:fa:12:54:fa:3a:18:8c: 98:66:36:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/h+2N1gGa+BEHAtVg8SMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy YjY5MDEwHhcNMjUxMjIwMDkwMTMxWhcNMjUxMjIxMDkwMTMxWjAzMTEwLwYDVQQD EyhiMjU3NzEyZDUyODExNDRhYWM4ZWU4YTEyNWYyMGQ3ZjFlN2FlZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2YAGA3X7F9AOlozvT1mieca8fN 1svOqt6slvUu83zCAQZ92p7ZDMSSTNLdqtlSvAXJn+iJW7ax6DjgWc2Mtc3AE6tF Hw1UDjX5E2i1PgpfuV91ljfK7wu/KzMhv6t4mqcaAY5HuDsC0TVHPl16sntDt4CO V1AuDS3SDnd9c9PmHKFoSm8khTaMkQa6si87O8KqGULa7IJfsmFHx2trK7fcuOX1 3fIQdp5zstg6x8IyFZSDaYhYfZ0u36RLTL9DH3jbYV1x3m1Ih+cVWgu+GvfGgfGY vXT7qOSOilrS+A+O8133BkpGdj/wOhDYNPnl3zT1dgqUS8fwu83hcrwQAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJXcS1SgRRKrI7ooSXyDX8eeu3jMB8GA1UdIwQY MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsUwCKiq UGhp1ckVt/9sIO0CPHazvykEy/970dbyFO5jb8AnfQFBmhMgvw8Ln1MvCR7K02cz lI3Z4/CHYcFzlam3um9vwd31wJAWEOOnAl+STQmCFdFXANrh5fvbGftZkw2g9vWD vMNJ0AW9t2WTAuc7EzvBiAmjupFZFKtMsiqFmCvRtHOqUcXUu39O5sd0PNqcMZQM KQ8xhbVMadFmBweuTRRzQjEtHbB9sA2eB+2dFVEiNOcRaqGMe8Bn4KCrxYcXCAQK QNWhVyMcOEgaUzPhyp6iFLC9O8tkMMnfHtiay53r5NCx3IQkmy7BNFQAuVuQwIb6 ElT6OhiMmGY2gw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:24 2025 by rpki-client