This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json) Hash identifier: LXLexm0rkxLBrhb0O5tKrL8C7+KbouK8C2ND7HwQS6s= Subject key identifier: B0:63:30:98:76:09:C4:EE:4D:40:C9:18:E3:6C:AD:84:4E:43:8C:BB Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3 Certificate serial: 019B65E833AC6325C20CB1652583849DA162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft Manifest number: 1053 Signing time: Sun 28 Dec 2025 17:01:14 +0000 Manifest this update: Sun 28 Dec 2025 17:01:14 +0000 Manifest next update: Mon 29 Dec 2025 17:01:14 +0000 Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: 0KH/iJE6nTXcwqA9JTjqftXW2KSlE9bbXgmdaorBQZQ=) 2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=) 3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:33:ac:63:25:c2:0c:b1:65:25:83:84:9d:a1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3 Validity Not Before: Dec 28 17:01:14 2025 GMT Not After : Dec 29 17:01:14 2025 GMT Subject: CN=b06330987609c4ee4d40c918e36cad844e438cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:59:47:91:4a:e1:a8:97:75:66:78:f4:5b: 04:17:81:eb:13:0e:8c:0d:27:24:a7:bf:2d:6c:38: c2:7e:05:06:8f:16:7a:35:99:4d:36:23:7e:e3:40: 6e:07:ab:44:1f:b8:37:5b:ed:93:db:e5:df:4c:11: 57:f6:c8:80:15:7f:02:46:76:02:4b:b2:2c:e0:1f: 29:13:87:27:7c:dc:2b:e7:de:51:b5:47:81:31:b0: ea:6f:9a:70:b3:ee:fa:06:42:1b:22:ef:3a:91:7f: a3:9f:be:3b:42:93:ce:bd:75:35:f4:78:c4:7d:49: b3:63:6b:a5:c1:87:b3:d7:8d:a9:2b:c3:46:5e:12: c4:e7:21:1a:37:79:90:23:7a:57:b6:62:80:d3:15: 43:0c:2c:5a:ca:6e:dd:c0:14:ba:38:7e:f7:dd:7f: ee:b4:64:c0:60:11:c9:28:75:1e:3d:06:5d:ab:7b: 46:76:f0:0b:f6:1f:16:de:4d:aa:a9:1c:02:d7:9f: 1f:cd:e7:29:ac:43:a2:3f:7f:cc:54:e7:25:7f:70: a7:09:68:4c:80:05:bd:63:39:04:03:1f:5a:42:29: 54:fe:fd:6d:26:40:06:9f:55:ec:22:bc:65:74:c9: e5:8d:6b:09:20:88:3b:1e:10:1d:17:b8:ec:f3:e4: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:30:98:76:09:C4:EE:4D:40:C9:18:E3:6C:AD:84:4E:43:8C:BB X509v3 Authority Key Identifier: keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:27:e4:2e:ed:75:6f:ae:65:61:5f:e3:5e:1e:1b:33:71:c7: 31:ec:ee:8e:b1:6a:7f:40:63:6c:3a:3a:6e:02:ba:00:2c:a5: 53:cd:59:a4:15:37:64:0f:8e:70:05:4d:68:4b:f8:70:75:a9: 20:af:7b:16:34:07:2c:e0:95:ae:9f:13:fb:83:28:46:75:b1: a7:32:6f:31:53:19:b4:b3:e5:96:ce:94:fc:7a:71:78:73:7a: 3f:56:d2:c3:13:5b:b4:e1:38:64:ac:43:8e:6f:74:21:f0:15: b0:68:a7:25:c8:90:9c:a6:ab:11:64:33:f9:bc:23:b7:2a:fb: 68:b2:f9:cf:b2:6f:f0:66:df:6f:94:72:d0:5a:e3:3f:57:c8: 2a:86:b8:77:dc:5b:f7:b6:f4:ef:d6:a8:66:e6:f0:ae:60:3f: d3:4b:f4:c2:92:bb:54:da:5f:20:57:cd:10:ba:6f:3b:af:16: 3a:e9:aa:bb:0f:8b:36:74:f8:8e:28:cb:8f:b1:b6:01:be:7b: 5c:cb:82:60:b8:3f:09:80:22:51:34:5c:53:b5:b6:72:f4:c2: c5:72:51:a5:7f:59:db:cb:6d:40:b6:5f:eb:bc:0e:36:6e:18: 12:da:e5:d7:0a:d4:e1:22:ec:78:74:a7:cc:15:07:13:ff:9a: f7:83:61:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6DOsYyXCDLFlJYOEnaFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDM3OTM1M2UzYzk0OGRmZDk4ZGEwYTU5ZTk3OTIzNTNh NGQwZTMwHhcNMjUxMjI4MTcwMTE0WhcNMjUxMjI5MTcwMTE0WjAzMTEwLwYDVQQD EyhiMDYzMzA5ODc2MDljNGVlNGQ0MGM5MThlMzZjYWQ4NDRlNDM4Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiatZR5FK4aiXdWZ49FsEF4HrEw6M DSckp78tbDjCfgUGjxZ6NZlNNiN+40BuB6tEH7g3W+2T2+XfTBFX9siAFX8CRnYC S7Is4B8pE4cnfNwr595RtUeBMbDqb5pws+76BkIbIu86kX+jn747QpPOvXU19HjE fUmzY2ulwYez142pK8NGXhLE5yEaN3mQI3pXtmKA0xVDDCxaym7dwBS6OH733X/u tGTAYBHJKHUePQZdq3tGdvAL9h8W3k2qqRwC158fzecprEOiP3/MVOclf3CnCWhM gAW9YzkEAx9aQilU/v1tJkAGn1XsIrxldMnljWsJIIg7HhAdF7js8+QgFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBjMJh2CcTuTUDJGONsrYROQ4y7MB8GA1UdIwQY MBaAFC/TeTU+PJSN/ZjaClnpeSNTpNDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEt OWUyMjU2MWJjYTg4LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEtOWUyMjU2MWJjYTg4 LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCfkLu11 b65lYV/jXh4bM3HHMezujrFqf0BjbDo6bgK6ACylU81ZpBU3ZA+OcAVNaEv4cHWp IK97FjQHLOCVrp8T+4MoRnWxpzJvMVMZtLPlls6U/HpxeHN6P1bSwxNbtOE4ZKxD jm90IfAVsGinJciQnKarEWQz+bwjtyr7aLL5z7Jv8Gbfb5Ry0FrjP1fIKoa4d9xb 97b079aoZubwrmA/00v0wpK7VNpfIFfNELpvO68WOumquw+LNnT4jijLj7G2Ab57 XMuCYLg/CYAiUTRcU7W2cvTCxXJRpX9Z28ttQLZf67wONm4YEtrl1wrU4SLseHSn zBUHE/+a94NhEg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:30:13 2025 by rpki-client