This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json) Hash identifier: fCgLk6Mf+IRARUe6lIM1BPQzuvxsU0lBGpaC4vztMa0= Subject key identifier: 28:35:88:03:78:2A:E0:32:D1:7A:76:CF:FE:58:A1:DD:EF:54:4B:AA Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef Certificate serial: 019B6DA1063176659DCD167A8AF68A0022C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft Manifest number: 094C Signing time: Tue 30 Dec 2025 05:00:27 +0000 Manifest this update: Tue 30 Dec 2025 05:00:27 +0000 Manifest next update: Wed 31 Dec 2025 05:00:27 +0000 Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: 0JY5+p2pvn5WYv3Phl50K1GQ/yf74XuuTPotKQbvOv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:06:31:76:65:9d:cd:16:7a:8a:f6:8a:00:22:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef Validity Not Before: Dec 30 05:00:27 2025 GMT Not After : Dec 31 05:00:27 2025 GMT Subject: CN=28358803782ae032d17a76cffe58a1ddef544baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:f0:70:01:37:02:02:72:82:42:d2:66:cc: 04:04:75:c9:a0:e1:fa:fe:96:38:d1:2d:3f:e7:f8: 8f:40:0a:cf:66:30:66:de:0e:c8:7d:3f:4f:a5:73: 85:09:3a:57:5e:8b:86:85:99:b0:68:ed:7c:cc:66: fb:16:9d:61:39:0e:03:54:ed:5b:11:18:f6:c7:1e: 30:d0:1e:51:07:0e:44:22:74:39:9d:25:1d:dc:27: 03:97:c0:0f:2e:e6:6e:33:bf:a1:24:57:a4:bd:8a: ea:9b:6e:a9:4f:21:44:e6:35:3f:9c:6e:f7:25:64: ec:d1:15:13:c7:9e:03:c9:06:b0:97:b6:c3:de:0d: 50:2e:b3:be:a6:49:34:3e:35:d8:19:2f:8d:aa:68: 25:48:25:3e:87:d4:9d:53:bd:af:bf:fb:16:c4:b3: 21:3e:d6:b9:a6:f4:5b:01:70:33:26:8b:1e:62:5c: 7f:64:a3:d1:1e:0d:b0:75:45:96:bc:7e:94:e6:15: ef:3a:3d:63:35:82:ac:b8:40:8b:75:a0:7d:79:33: 07:8d:fa:ce:8d:d5:66:9b:a8:69:a0:3f:4f:7a:78: 2f:b2:2c:50:fa:e0:0e:bf:c7:77:b8:a3:0c:4e:12: 11:b4:b5:4c:de:b0:48:70:f4:57:44:c6:8c:c7:29: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:35:88:03:78:2A:E0:32:D1:7A:76:CF:FE:58:A1:DD:EF:54:4B:AA X509v3 Authority Key Identifier: keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2e:47:7f:02:4c:6f:ed:d6:f3:e6:34:94:66:89:ac:60:91: 82:29:8a:d6:c7:31:15:2b:d3:67:34:1d:a3:e3:1d:83:ab:33: 30:fd:af:5f:08:0b:2d:b8:bc:c9:5f:4a:48:73:c0:f3:22:ac: 7c:c4:a4:60:9c:c4:60:5a:e3:60:4a:31:fb:d3:75:b8:5a:72: 48:45:2b:e7:54:10:e6:ff:35:cb:d1:f9:c9:13:d8:74:16:c8: f6:88:82:ec:ee:7c:01:df:d1:47:07:ba:d4:00:3e:b1:29:ec: db:42:75:b1:4c:3d:ef:b3:20:71:98:31:de:7d:65:4a:f6:81: bc:d8:44:27:ad:a1:f5:4a:7c:75:ef:67:73:86:9a:ba:09:9d: 37:57:2e:10:cf:96:c2:73:ff:45:bb:cd:b6:61:c7:5a:48:f3: 5d:2b:07:06:7a:a8:8f:8a:e3:cb:4c:8a:77:e3:48:96:74:0e: 81:30:75:73:30:97:0f:9f:4f:8d:8b:77:da:03:7c:cf:8f:48: 86:a0:35:fc:98:32:e2:44:f7:15:8d:b5:e0:cf:a2:44:5a:7a: de:4e:71:02:86:8c:7f:fc:95:43:7e:a9:02:b6:7b:36:17:59: c1:49:43:4e:5c:01:45:c1:8a:98:80:c1:78:3b:24:f9:65:ea: 07:b2:8d:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoQYxdmWdzRZ6ivaKACLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YjZjYjQ4ODQxY2U1MTliMjgzNTljYWYxYmNlMzQwZTMz NjgxZWYwHhcNMjUxMjMwMDUwMDI3WhcNMjUxMjMxMDUwMDI3WjAzMTEwLwYDVQQD EygyODM1ODgwMzc4MmFlMDMyZDE3YTc2Y2ZmZTU4YTFkZGVmNTQ0YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXfwcAE3AgJygkLSZswEBHXJoOH6 /pY40S0/5/iPQArPZjBm3g7IfT9PpXOFCTpXXouGhZmwaO18zGb7Fp1hOQ4DVO1b ERj2xx4w0B5RBw5EInQ5nSUd3CcDl8APLuZuM7+hJFekvYrqm26pTyFE5jU/nG73 JWTs0RUTx54DyQawl7bD3g1QLrO+pkk0PjXYGS+NqmglSCU+h9SdU72vv/sWxLMh Pta5pvRbAXAzJoseYlx/ZKPRHg2wdUWWvH6U5hXvOj1jNYKsuECLdaB9eTMHjfrO jdVmm6hpoD9PengvsixQ+uAOv8d3uKMMThIRtLVM3rBIcPRXRMaMxymWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg1iAN4KuAy0Xp2z/5Yod3vVEuqMB8GA1UdIwQY MBaAFJe2y0iEHOUZsoNZyvG840DjNoHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMt NDZlYTY1NmJmMzg5LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iZGQ5MmUtM2IxMS00MTZmLWFlOTMtNDZlYTY1NmJmMzg5 LzEvbDdiTFNJUWM1Um15ZzFuSzhiempRT00yZ2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi5HfwJM b+3W8+Y0lGaJrGCRgimK1scxFSvTZzQdo+Mdg6szMP2vXwgLLbi8yV9KSHPA8yKs fMSkYJzEYFrjYEox+9N1uFpySEUr51QQ5v81y9H5yRPYdBbI9oiC7O58Ad/RRwe6 1AA+sSns20J1sUw977MgcZgx3n1lSvaBvNhEJ62h9Up8de9nc4aaugmdN1cuEM+W wnP/RbvNtmHHWkjzXSsHBnqoj4rjy0yKd+NIlnQOgTB1czCXD59PjYt32gN8z49I hqA1/Jgy4kT3FY214M+iRFp63k5xAoaMf/yVQ36pArZ7NhdZwUlDTlwBRcGKmIDB eDsk+WXqB7KNiw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:14:24 2025 by rpki-client