This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json) Hash identifier: s6ariz8Y6/fNtrCH8gdaqeiRATuFxj8+uiJXervBRlE= Subject key identifier: 92:93:E0:80:AA:7B:6B:18:B8:F1:41:8C:2D:F2:D1:27:02:28:8D:06 Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Certificate serial: 019B4FCEB90E95A2747D61FD02C81E9664EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 10:01:46 +0000 Manifest this update: Wed 24 Dec 2025 10:01:46 +0000 Manifest next update: Thu 25 Dec 2025 10:01:46 +0000 Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: Kq5Nh6Psv+UvkS29Doj5atSacONOUVKai2e/BQ5bb1c=) 2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:b9:0e:95:a2:74:7d:61:fd:02:c8:1e:96:64:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Validity Not Before: Dec 24 10:01:46 2025 GMT Not After : Dec 25 10:01:46 2025 GMT Subject: CN=9293e080aa7b6b18b8f1418c2df2d12702288d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:ef:be:ce:57:4f:13:a2:fc:69:25:fb:3a: bc:c1:c0:61:3a:39:a9:ed:59:7e:83:7d:a3:65:fd: 78:23:d9:f4:3a:88:27:29:78:cd:38:14:e1:5b:d9: 6a:28:f6:62:04:d6:85:6b:5d:f3:31:8e:72:f1:c6: 6f:76:32:22:c9:74:17:54:04:b8:dc:60:67:de:e0: b5:fd:98:05:6f:a3:15:99:3e:07:1e:b2:02:b3:db: c1:33:1d:84:03:e1:ad:0a:b3:65:4a:a2:d5:3e:1a: 32:bd:70:bf:95:d7:68:86:a1:36:d4:bb:ea:0d:8a: af:08:d5:ef:1b:0e:a9:34:70:21:3d:d7:69:9a:60: 49:40:eb:3c:bd:90:47:78:6b:1c:e4:28:88:00:5f: 20:9d:20:96:63:01:e8:3a:c3:3e:49:b8:05:86:43: f5:5b:12:fe:c1:3b:c3:b1:7d:da:2e:1e:f5:95:f3: c8:cd:a9:9a:78:c0:70:1f:a8:62:ff:89:3a:d8:fe: 70:97:96:00:f0:0f:2a:8f:a6:d1:a1:24:2d:f2:71: df:ce:6c:d0:3e:2f:fd:4a:1d:82:43:54:d5:93:ae: 17:33:ac:83:56:58:f0:73:ee:5f:26:4e:e3:40:2f: b8:d4:3c:a9:9f:a3:e4:64:8b:b2:d1:e5:a0:e1:6e: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:E0:80:AA:7B:6B:18:B8:F1:41:8C:2D:F2:D1:27:02:28:8D:06 X509v3 Authority Key Identifier: keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7b:af:9c:62:d5:9f:dd:20:37:69:93:6a:c7:f6:7d:86:7c: cb:88:cd:03:24:2d:58:a7:da:a7:89:92:71:22:f6:a9:e4:b7: b4:04:86:8f:2e:d2:43:49:f9:0b:e3:06:e8:8f:23:dc:bd:00: 01:3c:26:c7:fb:a0:1a:c6:6a:1d:f2:79:f5:67:04:30:89:5b: e2:34:75:28:9f:63:85:4e:ea:ef:39:90:30:91:74:f9:a3:94: ee:c2:17:f0:ac:1c:ca:37:4c:5a:61:f9:fd:03:fc:ad:d2:94: ef:cf:f5:30:c7:d3:b8:ea:93:7c:a5:ac:bb:b3:9b:93:3d:73: 17:f5:fc:c6:77:ea:ab:e8:a8:df:3c:cb:b5:ee:69:67:17:24: fa:80:cf:e4:a6:16:c7:59:1f:ae:7f:71:73:01:f2:05:65:04: 80:fd:00:33:03:6d:7e:05:08:47:82:f2:92:f4:77:f3:a6:4c: 49:87:c4:e7:9c:49:31:43:92:6c:45:33:de:f5:75:c5:10:f4: 0a:9c:45:50:cd:6e:f7:5f:d2:39:50:59:50:ee:3c:8a:ec:94: bf:cd:23:cf:92:64:bc:86:9b:6d:30:de:98:d2:76:a2:4b:20: 9a:6d:2b:0c:7f:60:5a:dd:fc:0f:23:b6:61:84:67:e5:18:00: 9a:5e:9c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzrkOlaJ0fWH9AsgelmTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWNhZmQ1ZWZkMmRmMmM5YjMwOWJiZDVlZWQ0N2E2OTE4 OTg0YjAwHhcNMjUxMjI0MTAwMTQ2WhcNMjUxMjI1MTAwMTQ2WjAzMTEwLwYDVQQD Eyg5MjkzZTA4MGFhN2I2YjE4YjhmMTQxOGMyZGYyZDEyNzAyMjg4ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Xvvs5XTxOi/Gkl+zq8wcBhOjmp 7Vl+g32jZf14I9n0OognKXjNOBThW9lqKPZiBNaFa13zMY5y8cZvdjIiyXQXVAS4 3GBn3uC1/ZgFb6MVmT4HHrICs9vBMx2EA+GtCrNlSqLVPhoyvXC/lddohqE21Lvq DYqvCNXvGw6pNHAhPddpmmBJQOs8vZBHeGsc5CiIAF8gnSCWYwHoOsM+SbgFhkP1 WxL+wTvDsX3aLh71lfPIzamaeMBwH6hi/4k62P5wl5YA8A8qj6bRoSQt8nHfzmzQ Pi/9Sh2CQ1TVk64XM6yDVljwc+5fJk7jQC+41Dypn6PkZIuy0eWg4W7qCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKT4ICqe2sYuPFBjC3y0ScCKI0GMB8GA1UdIwQY MBaAFC9cr9Xv0t8smzCbvV7tR6aRiYSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEt YWQ4MjdlM2VkZjZjLzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEtYWQ4MjdlM2VkZjZj LzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXuvnGLV n90gN2mTasf2fYZ8y4jNAyQtWKfap4mScSL2qeS3tASGjy7SQ0n5C+MG6I8j3L0A ATwmx/ugGsZqHfJ59WcEMIlb4jR1KJ9jhU7q7zmQMJF0+aOU7sIX8KwcyjdMWmH5 /QP8rdKU78/1MMfTuOqTfKWsu7Obkz1zF/X8xnfqq+io3zzLte5pZxck+oDP5KYW x1kfrn9xcwHyBWUEgP0AMwNtfgUIR4LykvR386ZMSYfE55xJMUOSbEUz3vV1xRD0 CpxFUM1u91/SOVBZUO48iuyUv80jz5JkvIabbTDemNJ2oksgmm0rDH9gWt38DyO2 YYRn5RgAml6cMQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:13:56 2025 by rpki-client