This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json) Hash identifier: vl4Lxi3N3Ssy7D4NXsTP4OEYIOQX+utPzV4SBOqULPQ= Subject key identifier: 1B:D7:2E:4E:31:EF:24:E1:FE:A7:26:32:90:26:66:CB:F8:CD:ED:A7 Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Certificate serial: 019B3C7FAC203BCFB846D59DA5E290B4361D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:38 +0000 Manifest this update: Sat 20 Dec 2025 16:02:38 +0000 Manifest next update: Sun 21 Dec 2025 16:02:38 +0000 Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: 2ZyFqucyAeQMRdBkoOA5ByTwehu3HzkhSTsdP1nVQzI=) 2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:ac:20:3b:cf:b8:46:d5:9d:a5:e2:90:b4:36:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac Validity Not Before: Dec 20 16:02:38 2025 GMT Not After : Dec 21 16:02:38 2025 GMT Subject: CN=1bd72e4e31ef24e1fea72632902666cbf8cdeda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:74:87:e6:4d:5c:68:25:8e:3a:1c:26:09: ec:4d:3d:9a:a8:e2:7c:c1:88:12:1b:df:fc:ff:1a: d2:b3:1f:1b:5d:31:d9:7b:57:47:18:1f:0c:b9:f2: 16:85:e5:e8:9c:86:e6:f5:e1:55:e9:18:28:8e:b4: fe:f4:3d:48:c2:f3:b8:b0:8f:78:22:02:90:6c:58: d5:b0:86:49:ec:1e:60:fe:d4:8d:0c:4c:7e:7b:92: a0:64:49:55:d3:fb:d9:99:06:18:37:ff:4a:62:1c: ec:30:a8:36:16:b7:0b:2e:da:31:43:87:96:58:2b: 21:d8:fc:ae:eb:64:81:a2:f8:1b:0f:2d:71:eb:6e: ba:fa:ae:c9:90:d6:d3:1c:c0:82:42:1c:4f:db:87: d5:27:8d:af:62:41:75:53:45:e8:6f:6a:85:3e:20: 7f:55:6d:5b:75:1d:90:68:15:fe:12:a0:00:3b:f4: 67:42:73:10:6d:0d:f5:9b:ef:2d:13:4d:06:d3:6d: 16:e7:e7:34:3f:6f:f6:9f:90:d1:9d:81:97:dd:37: 52:3d:9c:2b:ea:c2:c1:c1:00:a8:b4:d4:f5:66:cf: 44:47:a1:10:cc:97:aa:4b:77:09:f5:a0:df:b7:f0: f9:d7:11:37:5b:a9:e1:20:52:3e:fb:81:d0:67:7a: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D7:2E:4E:31:EF:24:E1:FE:A7:26:32:90:26:66:CB:F8:CD:ED:A7 X509v3 Authority Key Identifier: keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:b2:2f:cf:22:17:0a:bf:13:ac:d9:07:bb:92:0c:54:4b: e0:df:53:25:38:74:e5:f9:ad:58:5a:3a:16:dc:4f:d8:18:4c: bd:44:22:87:d9:75:6e:bb:99:f9:a5:b6:2c:65:76:9f:09:04: f6:4e:37:6d:b3:e4:75:cd:08:f2:75:94:37:4f:0a:1d:27:dc: e4:1f:f6:7d:af:f0:7e:a3:5f:d9:d5:28:09:96:17:f2:ce:5b: db:86:62:7d:85:0e:72:d3:a9:62:60:7c:b8:24:a9:65:99:c1: bd:e7:2a:0f:0d:73:6c:a3:40:04:90:61:ad:bd:4e:74:13:a2: 09:4a:c5:ac:1f:83:23:ac:d3:00:eb:fa:85:7a:2d:69:8c:45: 7b:aa:41:76:f3:03:15:93:fd:57:1d:93:8d:54:30:ea:3c:d6: 6a:90:04:69:a1:55:87:89:2d:f7:7b:91:0e:be:27:44:00:22: 7d:2f:70:ce:c6:5d:43:b8:91:02:44:3f:aa:57:f5:54:ee:c6: ba:83:f4:7b:80:84:4e:8b:b3:d6:5e:8d:0d:86:f6:4b:d3:83: 37:13:46:91:6b:a9:5c:b4:37:09:f0:47:34:dc:07:b9:8a:6f: d5:e3:55:df:14:c6:7c:fc:52:34:d2:8a:8c:69:8b:d1:99:df: 54:4b:99:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6wgO8+4RtWdpeKQtDYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm YWFiYWMwHhcNMjUxMjIwMTYwMjM4WhcNMjUxMjIxMTYwMjM4WjAzMTEwLwYDVQQD EygxYmQ3MmU0ZTMxZWYyNGUxZmVhNzI2MzI5MDI2NjZjYmY4Y2RlZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDR0h+ZNXGgljjocJgnsTT2aqOJ8 wYgSG9/8/xrSsx8bXTHZe1dHGB8MufIWheXonIbm9eFV6RgojrT+9D1IwvO4sI94 IgKQbFjVsIZJ7B5g/tSNDEx+e5KgZElV0/vZmQYYN/9KYhzsMKg2FrcLLtoxQ4eW WCsh2Pyu62SBovgbDy1x6266+q7JkNbTHMCCQhxP24fVJ42vYkF1U0Xob2qFPiB/ VW1bdR2QaBX+EqAAO/RnQnMQbQ31m+8tE00G020W5+c0P2/2n5DRnYGX3TdSPZwr 6sLBwQCotNT1Zs9ER6EQzJeqS3cJ9aDft/D51xE3W6nhIFI++4HQZ3of5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvXLk4x7yTh/qcmMpAmZsv4ze2nMB8GA1UdIwQY MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt MmRjZDZhMDBjYTEyLzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgGyL88i Fwq/E6zZB7uSDFRL4N9TJTh05fmtWFo6FtxP2BhMvUQih9l1bruZ+aW2LGV2nwkE 9k43bbPkdc0I8nWUN08KHSfc5B/2fa/wfqNf2dUoCZYX8s5b24ZifYUOctOpYmB8 uCSpZZnBvecqDw1zbKNABJBhrb1OdBOiCUrFrB+DI6zTAOv6hXotaYxFe6pBdvMD FZP9Vx2TjVQw6jzWapAEaaFVh4kt93uRDr4nRAAifS9wzsZdQ7iRAkQ/qlf1VO7G uoP0e4CETouz1l6NDYb2S9ODNxNGkWupXLQ3CfBHNNwHuYpv1eNV3xTGfPxSNNKK jGmL0ZnfVEuZ6A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:27 2025 by rpki-client