This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json) Hash identifier: eKJ0FWCU+h/rhSn1kKitRysxCk9j/isNonRQkVk1m2Q= Subject key identifier: 09:D3:05:B1:B9:C0:0D:C9:94:1C:0B:A0:48:3D:35:94:AA:2C:67:E6 Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6 Certificate serial: 019B3F116BE637AD7F1A817D9A2BB40E1CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft Manifest number: 154A Signing time: Sun 21 Dec 2025 04:01:04 +0000 Manifest this update: Sun 21 Dec 2025 04:01:04 +0000 Manifest next update: Mon 22 Dec 2025 04:01:04 +0000 Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=) 2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: jlQzFUU9mBt+FSkkoEVGIj9oPS7BcV0twrcWOy/RrS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:6b:e6:37:ad:7f:1a:81:7d:9a:2b:b4:0e:1c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6 Validity Not Before: Dec 21 04:01:04 2025 GMT Not After : Dec 22 04:01:04 2025 GMT Subject: CN=09d305b1b9c00dc9941c0ba0483d3594aa2c67e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:45:e0:86:d3:dd:37:55:92:82:78:f6:55:47: 6e:07:75:23:d1:49:f1:3f:2f:7d:cd:48:ac:d6:b3: 61:9d:67:af:ae:be:70:bd:4c:27:02:b7:ec:9a:1d: 34:ba:72:e9:2f:c6:1d:f1:ed:8d:64:53:1b:e3:f7: 1f:6c:38:d8:6b:97:05:02:d7:c3:70:77:9e:c6:c7: cd:3b:27:f9:e5:a8:d9:04:03:e4:60:4d:d3:42:e3: 53:b9:c7:04:24:e2:f9:38:a7:17:f4:37:37:88:82: 6b:44:31:02:f9:f9:bb:01:89:1c:88:c8:03:1c:68: 19:77:32:21:f9:7e:ad:06:63:c1:2f:de:e9:2f:5f: 64:a1:9d:33:73:8c:72:0b:57:81:fa:de:28:22:4e: 34:75:26:6e:60:d7:b1:72:3a:36:f7:51:84:b7:ce: f5:0c:f2:55:ba:a4:f9:23:fa:16:a5:d8:62:60:a6: 97:f7:31:16:4f:14:de:00:30:de:68:37:30:27:bc: c6:4f:cd:31:29:8a:08:78:92:bd:f7:96:9f:32:cb: 99:d3:bf:5a:ea:5b:8e:75:59:3e:07:4e:9e:21:f6: be:85:b7:79:fd:cd:fd:48:43:37:99:c8:a4:f5:5b: 23:a8:62:53:7f:71:34:f9:54:45:50:58:15:3b:2c: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:05:B1:B9:C0:0D:C9:94:1C:0B:A0:48:3D:35:94:AA:2C:67:E6 X509v3 Authority Key Identifier: keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:22:f2:3f:ce:a7:55:cf:45:11:f0:79:75:ea:54:2a:1f:32: 5f:16:5f:df:fd:38:8f:8b:65:b0:ba:6d:63:a7:68:1d:7c:a8: 7f:2f:77:99:b0:b6:6c:ee:47:9c:74:67:95:5b:82:40:f3:a1: 4a:c5:2c:26:a8:1e:51:1f:04:1d:dc:25:00:94:ac:fc:a2:ec: 65:1d:a0:e9:e8:ca:69:f5:ec:91:c2:78:3b:16:fd:84:58:f8: 87:d2:8c:b0:a6:59:33:e9:79:e6:a8:61:ac:10:db:0b:22:a5: 4e:d9:4c:a1:94:f0:09:11:ff:48:a4:55:8c:40:9f:cb:4c:9a: b7:fe:af:19:27:f9:b7:fd:dc:57:27:b7:32:60:c7:48:e3:34: 6e:56:46:ba:44:7f:27:9b:7d:ee:a5:a8:35:18:91:f4:c7:82: 3d:de:0b:49:15:07:74:b5:2b:df:10:bf:e0:99:9d:21:09:1a: 74:11:46:6f:2b:99:3f:f3:89:97:d7:1c:be:53:f4:29:f3:b0: 27:32:6d:ff:7c:d6:ec:5e:7a:c7:b6:58:76:30:27:70:6a:81: 5a:ca:1e:61:a1:ea:7d:4a:c8:04:06:e1:d2:b7:c4:ab:18:a6: f1:f9:83:a2:70:2f:34:ce:38:05:76:38:8f:ca:97:c5:a1:89: ba:f3:49:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EWvmN61/GoF9miu0Dhz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz MTI3YzYwHhcNMjUxMjIxMDQwMTA0WhcNMjUxMjIyMDQwMTA0WjAzMTEwLwYDVQQD EygwOWQzMDViMWI5YzAwZGM5OTQxYzBiYTA0ODNkMzU5NGFhMmM2N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50XghtPdN1WSgnj2VUduB3Uj0Unx Py99zUis1rNhnWevrr5wvUwnArfsmh00unLpL8Yd8e2NZFMb4/cfbDjYa5cFAtfD cHeexsfNOyf55ajZBAPkYE3TQuNTuccEJOL5OKcX9Dc3iIJrRDEC+fm7AYkciMgD HGgZdzIh+X6tBmPBL97pL19koZ0zc4xyC1eB+t4oIk40dSZuYNexcjo291GEt871 DPJVuqT5I/oWpdhiYKaX9zEWTxTeADDeaDcwJ7zGT80xKYoIeJK995afMsuZ079a 6luOdVk+B06eIfa+hbd5/c39SEM3mcik9VsjqGJTf3E0+VRFUFgVOyyWcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnTBbG5wA3JlBwLoEg9NZSqLGfmMB8GA1UdIwQY MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyLyP86n Vc9FEfB5depUKh8yXxZf3/04j4tlsLptY6doHXyofy93mbC2bO5HnHRnlVuCQPOh SsUsJqgeUR8EHdwlAJSs/KLsZR2g6ejKafXskcJ4Oxb9hFj4h9KMsKZZM+l55qhh rBDbCyKlTtlMoZTwCRH/SKRVjECfy0yat/6vGSf5t/3cVye3MmDHSOM0blZGukR/ J5t97qWoNRiR9MeCPd4LSRUHdLUr3xC/4JmdIQkadBFGbyuZP/OJl9ccvlP0KfOw JzJt/3zW7F56x7ZYdjAncGqBWsoeYaHqfUrIBAbh0rfEqxim8fmDonAvNM44BXY4 j8qXxaGJuvNJBw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:42:29 2025 by rpki-client