This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json) Hash identifier: n+6lEFFwDDnNq5+uVm6k3I01M0LR4Qee2NVcPUZa2zs= Subject key identifier: EA:82:4B:C1:D3:23:86:55:A5:8B:D7:98:0E:76:FE:01:AC:6F:5D:54 Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Certificate serial: 019B405BB9938D9CBDE72C37A9BFE9C022DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft Manifest number: 07E3 Signing time: Sun 21 Dec 2025 10:01:51 +0000 Manifest this update: Sun 21 Dec 2025 10:01:51 +0000 Manifest next update: Mon 22 Dec 2025 10:01:51 +0000 Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: mGrgF/HIlMaW//ALPbv8f7OGT/VkcQ236mR9dl/9Uu0=) 2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:b9:93:8d:9c:bd:e7:2c:37:a9:bf:e9:c0:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e Validity Not Before: Dec 21 10:01:51 2025 GMT Not After : Dec 22 10:01:51 2025 GMT Subject: CN=ea824bc1d3238655a58bd7980e76fe01ac6f5d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:51:b1:cf:4c:db:f4:a6:03:86:98:a9:a9: 83:84:58:9d:37:2f:f3:f7:71:fa:77:ee:c0:fb:dd: da:0c:5b:6f:72:2f:d1:5c:c2:f9:6a:9b:4d:35:20: c2:8f:d5:32:50:4c:9a:e3:05:34:77:08:80:68:e9: 59:48:a9:af:58:3b:3a:a9:ec:85:f8:0b:af:8e:f3: 9f:5a:74:de:2c:a6:29:e9:26:2e:b2:11:e2:08:0d: 00:0e:b9:71:16:37:4f:96:18:80:64:42:32:17:11: 34:69:83:4f:cc:9a:5c:69:29:a5:49:89:c2:01:68: ff:32:11:7e:38:09:75:cf:16:50:0f:b7:83:f8:46: 44:c4:29:89:7a:e9:a9:79:64:36:f8:be:9f:c5:b4: f2:76:f3:e8:0e:a0:bf:8a:ca:94:94:f1:13:d1:cb: eb:5f:2b:0f:fe:15:9b:c2:fd:20:9c:8d:88:56:42: ea:14:ce:af:bb:83:27:59:34:ed:f6:73:e4:c1:f6: 0a:ff:9e:74:ca:4b:37:0a:29:f8:db:c1:cc:14:82: 7b:a0:81:a7:aa:6b:17:67:db:c0:2e:a1:0c:0d:90: 1a:ac:27:e6:8f:29:f6:db:7f:fb:1f:a2:a0:e7:1b: aa:54:d6:4c:34:32:0f:0b:03:a6:ab:c2:18:35:69: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:82:4B:C1:D3:23:86:55:A5:8B:D7:98:0E:76:FE:01:AC:6F:5D:54 X509v3 Authority Key Identifier: keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:19:cd:20:0f:ba:f9:0b:c2:b8:0e:a5:9d:7e:7b:96:d2:d6: be:7d:0b:6c:37:46:a3:99:06:5e:15:52:09:bc:ed:18:1c:34: 17:63:5b:df:fe:7d:9e:3c:cb:1e:17:a7:7a:7a:b2:6f:f0:2c: 42:29:01:e3:c8:d5:2d:70:9f:cc:00:c4:09:19:66:44:4e:8d: 39:14:79:3d:9b:a2:2e:00:3e:9d:d3:92:48:54:90:84:85:fc: 18:57:83:e6:65:73:0d:d4:99:ad:89:aa:ea:b8:8b:c7:7d:50: e9:3d:5d:ff:8d:5d:b1:6e:af:0f:4b:f4:5e:29:7f:69:57:04: 1b:f3:99:f6:63:85:33:77:08:e7:e1:11:49:f1:90:ab:7f:f2: 29:57:a6:72:6f:85:02:fc:bb:7c:90:38:f4:30:35:a1:84:aa: c7:97:ba:e7:e9:d8:cb:ad:f5:87:20:08:f0:b7:f4:ca:5c:ab: d6:2b:df:18:ac:6e:65:76:bf:6b:f0:4d:65:ed:00:14:50:9a: 20:cd:99:05:37:cd:29:f7:08:95:76:b8:aa:fd:d0:8c:37:49: c5:ab:88:3a:49:a3:1e:2f:5a:39:3b:45:aa:30:38:6f:e5:33: 53:78:c7:8c:7d:1d:54:68:d4:c8:52:78:f0:bf:2e:95:2f:98: 70:b1:d2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7mTjZy95yw3qb/pwCLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz ZDI5M2UwHhcNMjUxMjIxMTAwMTUxWhcNMjUxMjIyMTAwMTUxWjAzMTEwLwYDVQQD EyhlYTgyNGJjMWQzMjM4NjU1YTU4YmQ3OTgwZTc2ZmUwMWFjNmY1ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiVRsc9M2/SmA4aYqamDhFidNy/z 93H6d+7A+93aDFtvci/RXML5aptNNSDCj9UyUEya4wU0dwiAaOlZSKmvWDs6qeyF +AuvjvOfWnTeLKYp6SYushHiCA0ADrlxFjdPlhiAZEIyFxE0aYNPzJpcaSmlSYnC AWj/MhF+OAl1zxZQD7eD+EZExCmJeumpeWQ2+L6fxbTydvPoDqC/isqUlPET0cvr XysP/hWbwv0gnI2IVkLqFM6vu4MnWTTt9nPkwfYK/550yks3Cin428HMFIJ7oIGn qmsXZ9vALqEMDZAarCfmjyn223/7H6Kg5xuqVNZMNDIPCwOmq8IYNWmguwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqCS8HTI4ZVpYvXmA52/gGsb11UMB8GA1UdIwQY MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4 LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRnNIA+6 +QvCuA6lnX57ltLWvn0LbDdGo5kGXhVSCbztGBw0F2Nb3/59njzLHhenenqyb/As QikB48jVLXCfzADECRlmRE6NORR5PZuiLgA+ndOSSFSQhIX8GFeD5mVzDdSZrYmq 6riLx31Q6T1d/41dsW6vD0v0Xil/aVcEG/OZ9mOFM3cI5+ERSfGQq3/yKVemcm+F Avy7fJA49DA1oYSqx5e65+nYy631hyAI8Lf0ylyr1ivfGKxuZXa/a/BNZe0AFFCa IM2ZBTfNKfcIlXa4qv3QjDdJxauIOkmjHi9aOTtFqjA4b+UzU3jHjH0dVGjUyFJ4 8L8ulS+YcLHSxg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:59 2025 by rpki-client