This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json) Hash identifier: DT6/FvfFCTMS3eoupzadfPvJhkfBag+3FjSOAZahLcw= Subject key identifier: 25:19:A2:A2:63:DC:31:87:24:83:C7:7A:33:A0:C4:42:DB:0B:AF:01 Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483 Certificate serial: 019B2E8BB93F4DE5B6477276CB85A905ECA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 23:01:07 +0000 Manifest this update: Wed 17 Dec 2025 23:01:07 +0000 Manifest next update: Thu 18 Dec 2025 23:01:07 +0000 Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=) 2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 86SidTVsN5JT4uCaz6n6sicZhFJxNTRZX4izkSyyuGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:b9:3f:4d:e5:b6:47:72:76:cb:85:a9:05:ec:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965473d68572ea2238bdd875afa725a0405de483 Validity Not Before: Dec 17 23:01:07 2025 GMT Not After : Dec 18 23:01:07 2025 GMT Subject: CN=2519a2a263dc31872483c77a33a0c442db0baf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:f4:e6:41:1e:1c:22:58:7d:70:a0:2e:4b: 3b:35:0e:0f:78:52:a0:65:fc:14:41:63:a4:c2:8e: 92:eb:65:6e:dd:ed:21:cd:2f:c9:18:65:af:41:79: 31:81:cf:22:6c:51:75:97:e5:34:4e:1a:c0:34:48: 2b:e6:47:8f:a1:ad:94:aa:d1:fb:ac:c7:64:e5:a3: ec:e1:f7:59:91:c5:a7:33:aa:cf:b9:83:ab:38:c4: 3c:f2:ae:87:58:e0:00:2b:5d:65:a1:d6:5b:4c:f7: 53:bf:13:2d:26:02:9e:e1:cc:32:a2:80:b3:45:9f: 2f:96:1d:19:07:64:ac:75:42:47:98:40:e2:d9:b3: 46:ee:b1:55:92:12:f1:b8:85:a7:3c:bb:d2:0a:a9: 20:6f:01:22:64:e7:a2:06:3a:52:ec:cc:7c:22:c2: e1:b6:b5:36:d0:08:75:f5:d8:eb:28:a7:56:51:fb: c9:e5:cb:2e:18:0a:21:ca:0a:c4:99:05:6e:f5:59: a8:47:dd:57:d8:bb:a2:22:9e:5c:ae:ed:3a:ea:8f: 29:7f:72:1c:24:c7:10:94:48:f3:95:43:bf:05:0f: a2:6e:f2:25:6d:e0:bc:ab:48:c1:37:0d:a4:79:4b: e5:41:57:a5:02:69:13:56:1e:5a:da:88:a0:aa:15: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:A2:A2:63:DC:31:87:24:83:C7:7A:33:A0:C4:42:DB:0B:AF:01 X509v3 Authority Key Identifier: keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c2:28:ce:6b:47:04:30:10:d6:e3:66:eb:96:55:83:9b:f9: 7d:6c:9d:79:be:11:7f:76:7f:a4:7c:02:c6:74:fe:2e:c9:d5: 89:b1:93:97:81:1c:13:37:da:00:d2:8b:19:cf:33:c8:04:b3: 6b:ed:50:65:93:f4:b2:c8:b7:b7:b1:15:eb:56:05:8d:56:5b: 8d:7b:ac:2e:3e:41:84:c9:5d:91:7d:53:4a:7e:7c:43:8f:14: 42:fa:ba:93:34:e9:d8:dc:0c:d1:6c:df:1b:0a:c7:76:e1:db: 13:60:b6:32:5b:4d:64:70:95:e3:ae:a9:2d:17:06:7b:56:48: 02:f7:5e:d7:28:6e:8f:8c:22:98:a3:06:f7:63:eb:ab:fb:cf: d1:5d:fa:37:2c:09:84:50:a3:be:22:38:a0:7d:31:83:9e:c3: e9:e9:0a:00:1a:a5:88:52:e6:44:4e:4a:a9:09:78:2f:ef:a3: 39:19:f1:64:a4:26:c4:2e:c4:76:f6:4f:4f:cf:77:af:07:85: 47:fb:e9:0e:af:e2:2b:42:1f:04:c2:da:bc:4b:a4:e1:60:51: 9d:79:66:78:5c:a2:d9:f9:a7:d4:5b:d8:24:1f:38:0f:35:71: cd:23:ec:f6:e4:28:a9:36:72:78:77:f2:7f:a6:4b:a3:14:ab: b1:ea:0f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui7k/TeW2R3J2y4WpBeylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1 ZGU0ODMwHhcNMjUxMjE3MjMwMTA3WhcNMjUxMjE4MjMwMTA3WjAzMTEwLwYDVQQD EygyNTE5YTJhMjYzZGMzMTg3MjQ4M2M3N2EzM2EwYzQ0MmRiMGJhZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFP05kEeHCJYfXCgLks7NQ4PeFKg ZfwUQWOkwo6S62Vu3e0hzS/JGGWvQXkxgc8ibFF1l+U0ThrANEgr5kePoa2UqtH7 rMdk5aPs4fdZkcWnM6rPuYOrOMQ88q6HWOAAK11lodZbTPdTvxMtJgKe4cwyooCz RZ8vlh0ZB2SsdUJHmEDi2bNG7rFVkhLxuIWnPLvSCqkgbwEiZOeiBjpS7Mx8IsLh trU20Ah19djrKKdWUfvJ5csuGAohygrEmQVu9VmoR91X2LuiIp5cru066o8pf3Ic JMcQlEjzlUO/BQ+ibvIlbeC8q0jBNw2keUvlQVelAmkTVh5a2oigqhXX9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUZoqJj3DGHJIPHejOgxELbC68BMB8GA1UdIwQY MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMIozmtH BDAQ1uNm65ZVg5v5fWydeb4Rf3Z/pHwCxnT+LsnVibGTl4EcEzfaANKLGc8zyASz a+1QZZP0ssi3t7EV61YFjVZbjXusLj5BhMldkX1TSn58Q48UQvq6kzTp2NwM0Wzf GwrHduHbE2C2MltNZHCV466pLRcGe1ZIAvde1yhuj4wimKMG92Prq/vP0V36NywJ hFCjviI4oH0xg57D6ekKABqliFLmRE5KqQl4L++jORnxZKQmxC7EdvZPT893rweF R/vpDq/iK0IfBMLavEuk4WBRnXlmeFyi2fmn1FvYJB84DzVxzSPs9uQoqTZyeHfy f6ZLoxSrseoPpw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:13:23 2025 by rpki-client