This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json) Hash identifier: lKkUoswIojJkNqehiQPyTDyPVRZCrtOxQNcMV2AlvBo= Subject key identifier: 19:77:1F:AD:37:5E:3F:83:8C:EC:BF:48:3B:6F:61:EB:46:C2:2E:06 Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d Certificate serial: 019B3AFD4777206D02882643B9EC8623A233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft Manifest number: 0C69 Signing time: Sat 20 Dec 2025 09:00:35 +0000 Manifest this update: Sat 20 Dec 2025 09:00:35 +0000 Manifest next update: Sun 21 Dec 2025 09:00:35 +0000 Files and hashes: 1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=) 2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: OAfCoygYlM/NaqwGvqJtftamqsvnuvI0j6rNxziXFmE=) 3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=) 4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:47:77:20:6d:02:88:26:43:b9:ec:86:23:a2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d Validity Not Before: Dec 20 09:00:35 2025 GMT Not After : Dec 21 09:00:35 2025 GMT Subject: CN=19771fad375e3f838cecbf483b6f61eb46c22e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:c5:90:06:02:06:dd:3a:ec:14:af:a9:9f: ae:79:46:f0:4a:e6:1e:fa:e7:a2:db:e6:d4:80:57: a1:04:02:31:11:18:2e:81:e8:28:fd:08:e1:5a:8b: 18:c5:3b:f1:ed:8d:d7:64:0b:e7:3e:61:c5:e0:20: 08:9f:a7:8a:1e:fc:ae:45:d3:8a:e6:69:ae:c9:8e: 85:ee:9c:dd:05:04:ef:0f:1e:42:ad:4e:3c:56:d7: 6b:db:ab:9d:c6:ee:5e:59:b1:07:b9:3d:a0:49:ed: 7a:69:37:97:82:8a:8b:74:94:eb:53:cd:6a:ee:8c: 33:80:a7:1a:d6:96:33:aa:80:2b:5e:5c:38:34:a2: 34:d3:fc:fd:bf:16:1d:7e:bd:c0:c6:19:22:ff:1e: ff:4c:34:8c:e7:87:29:49:8f:18:21:77:d0:6b:20: a0:9e:7c:9c:63:36:80:42:d7:0b:7a:95:67:a5:a5: 9f:b7:a5:20:91:ad:d7:fb:b5:e0:6f:63:8b:37:ca: f4:5c:c5:1a:19:10:68:bc:6b:ed:f8:8b:99:16:d3: 1d:c9:c2:d5:5d:cc:b6:86:9f:72:58:c2:37:da:fd: ea:c0:63:36:66:d6:0b:a5:d0:36:32:bf:9d:7d:f6: 6e:bd:75:01:10:0a:e7:1d:00:4e:e5:15:ec:54:2f: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:77:1F:AD:37:5E:3F:83:8C:EC:BF:48:3B:6F:61:EB:46:C2:2E:06 X509v3 Authority Key Identifier: keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f5:5e:15:fc:c7:99:66:77:21:ad:f0:bc:b7:fb:99:73:f5: 28:45:55:50:b6:fd:60:f7:07:5a:71:a2:ee:09:b7:8e:aa:69: 59:14:f6:a9:45:e6:89:3a:77:49:77:56:9c:d8:18:fb:65:ca: 47:17:d4:ae:ed:d9:f1:85:66:61:43:60:df:a1:40:09:ab:0a: 2c:d7:49:2d:18:41:40:6e:41:90:33:14:fd:09:68:e1:82:64: 58:ac:87:08:06:54:c4:d7:b5:76:35:97:1d:0c:18:6b:48:85: b5:71:e4:57:93:5f:1b:00:ad:f8:4c:04:0b:44:52:66:3f:90: 6c:96:a4:46:54:75:af:26:14:00:6c:2a:a4:c5:72:45:47:2c: c2:7b:9f:d1:7f:cb:e9:87:0e:9a:c8:8d:d5:c0:f3:75:df:83: 54:70:1f:4d:aa:8a:e5:2b:80:a5:e6:be:2a:e2:3b:5c:cb:57: 6b:9a:d6:8c:0e:f7:ea:aa:5d:75:e1:a0:93:88:3d:6b:9f:a6: 03:56:71:a2:15:ac:f7:61:ae:f0:a0:cd:5a:d1:57:0d:c5:01: 6b:0b:3c:7e:cc:4a:d0:9f:37:2c:0f:31:c9:1a:d3:96:ad:a0: b8:1a:92:f8:c8:7d:00:fd:5a:b1:d5:5d:a0:2b:2e:fa:2d:3a: e3:a4:2c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/Ud3IG0CiCZDueyGI6IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2 M2FkMmQwHhcNMjUxMjIwMDkwMDM1WhcNMjUxMjIxMDkwMDM1WjAzMTEwLwYDVQQD EygxOTc3MWZhZDM3NWUzZjgzOGNlY2JmNDgzYjZmNjFlYjQ2YzIyZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBTFkAYCBt067BSvqZ+ueUbwSuYe +uei2+bUgFehBAIxERgugego/QjhWosYxTvx7Y3XZAvnPmHF4CAIn6eKHvyuRdOK 5mmuyY6F7pzdBQTvDx5CrU48Vtdr26udxu5eWbEHuT2gSe16aTeXgoqLdJTrU81q 7owzgKca1pYzqoArXlw4NKI00/z9vxYdfr3Axhki/x7/TDSM54cpSY8YIXfQayCg nnycYzaAQtcLepVnpaWft6Ugka3X+7Xgb2OLN8r0XMUaGRBovGvt+IuZFtMdycLV Xcy2hp9yWMI32v3qwGM2ZtYLpdA2Mr+dffZuvXUBEArnHQBO5RXsVC/tkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl3H603Xj+DjOy/SDtvYetGwi4GMB8GA1UdIwQY MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfVeFfzH mWZ3Ia3wvLf7mXP1KEVVULb9YPcHWnGi7gm3jqppWRT2qUXmiTp3SXdWnNgY+2XK RxfUru3Z8YVmYUNg36FACasKLNdJLRhBQG5BkDMU/Qlo4YJkWKyHCAZUxNe1djWX HQwYa0iFtXHkV5NfGwCt+EwEC0RSZj+QbJakRlR1ryYUAGwqpMVyRUcswnuf0X/L 6YcOmsiN1cDzdd+DVHAfTaqK5SuApea+KuI7XMtXa5rWjA736qpddeGgk4g9a5+m A1ZxohWs92Gu8KDNWtFXDcUBaws8fsxK0J83LA8xyRrTlq2guBqS+Mh9AP1asdVd oCsu+i0646QscA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:06:29 2025 by rpki-client