This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json) Hash identifier: i+GvcfDsLbT0JAbsQP3N55m+wdON4hj3jnnq1BwTcCA= Subject key identifier: F5:34:FB:57:87:45:48:D8:A0:CA:42:D5:71:48:1B:A1:FA:11:73:83 Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B687B858D3E30B203400E03FE4E9A77D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft Manifest number: 06EC Signing time: Mon 29 Dec 2025 05:01:24 +0000 Manifest this update: Mon 29 Dec 2025 05:01:24 +0000 Manifest next update: Tue 30 Dec 2025 05:01:24 +0000 Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=) 2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=) 3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: 8NtNESm+2mGLGfED97ol0zVi8FmlljlKFJuBIU/PIt0=) 4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:85:8d:3e:30:b2:03:40:0e:03:fe:4e:9a:77:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Dec 29 05:01:24 2025 GMT Not After : Dec 30 05:01:24 2025 GMT Subject: CN=f534fb57874548d8a0ca42d571481ba1fa117383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:0e:ea:1c:5a:e5:77:82:77:b1:a5:f9:c0: 94:3b:15:52:b7:69:f9:b9:48:9b:16:69:68:53:eb: 1c:dd:aa:a0:bd:1a:3f:dd:8c:41:90:82:c2:59:6c: ff:7d:85:81:46:69:69:94:3e:22:83:f1:7e:23:3b: 0c:92:6c:6d:2d:46:a1:62:d9:5d:8f:51:60:3e:32: b5:24:d2:8e:19:fb:38:a8:0d:49:8e:af:9f:78:1f: 75:dc:d3:65:92:43:f1:c9:5c:10:8e:0d:bb:d6:97: c6:05:76:14:f8:8e:be:b8:62:7c:83:5e:18:33:03: e1:5c:cf:da:60:cb:7d:3c:c1:d0:5f:cf:32:79:b2: 95:05:c7:d9:ff:f4:69:2f:f9:a1:bf:cd:65:e3:e0: 49:01:1c:43:8b:e0:5b:3a:1c:91:fc:32:8c:d3:d9: e5:6b:47:16:83:d1:33:89:fb:fc:c3:96:5b:9c:9d: eb:2f:8c:8d:99:46:a1:65:c9:51:c8:3e:ff:2c:c4: 6a:82:95:34:77:e2:9e:8b:c5:2a:5a:f6:b5:79:19: c6:e2:16:eb:09:90:1a:f6:46:16:fc:c6:9f:41:0e: 1c:7e:26:95:b2:f4:68:40:e9:19:29:33:b5:2b:be: e5:ab:04:26:e4:e0:5a:ae:f7:eb:4c:2c:54:70:8b: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:34:FB:57:87:45:48:D8:A0:CA:42:D5:71:48:1B:A1:FA:11:73:83 X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cc:1a:ef:e5:78:bb:99:28:3d:f9:cf:25:53:0d:5d:3b:35: 56:e8:7a:2c:43:78:d6:61:0e:3f:0f:23:f4:c3:f3:da:c6:4e: 55:3f:a5:90:2e:a8:d0:7f:e0:e1:33:59:a9:b6:bb:a9:1e:ee: 4a:67:d4:de:54:3a:99:c7:34:57:4c:b7:16:2e:39:cf:c0:be: 9a:0e:81:ce:87:1b:23:ae:3e:f0:ec:bf:8a:eb:18:81:c6:0b: b9:bb:36:82:e1:59:6a:a0:3e:15:d6:1c:5b:06:f3:22:1b:41: 67:64:ab:bc:1d:65:35:2e:3f:2e:4f:92:a5:f5:e8:10:e8:27: b2:41:3b:a8:66:4e:73:d8:cf:37:c8:75:2c:09:31:27:ba:cb: 5a:0a:e2:51:5a:19:34:18:89:69:db:82:ea:6e:b7:d1:23:d6: db:d0:e9:4a:4b:39:28:85:13:d4:6c:0c:c9:53:8c:cb:48:6e: b9:4f:b2:5a:d7:2e:70:2c:03:05:1b:34:01:38:a0:4e:e7:c7: a0:d1:f5:3f:78:5e:21:ae:aa:0b:5a:b1:7b:f4:b9:f8:ec:85: 19:ec:61:20:86:1c:71:6e:3a:c7:89:8b:2b:19:a8:5d:5b:ac: 4f:6d:e0:1c:1c:ed:3b:f9:a9:55:ff:29:ac:b6:d8:33:7f:fb: de:78:36:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoe4WNPjCyA0AOA/5OmnfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjUxMjI5MDUwMTI0WhcNMjUxMjMwMDUwMTI0WjAzMTEwLwYDVQQD EyhmNTM0ZmI1Nzg3NDU0OGQ4YTBjYTQyZDU3MTQ4MWJhMWZhMTE3MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDgO6hxa5XeCd7Gl+cCUOxVSt2n5 uUibFmloU+sc3aqgvRo/3YxBkILCWWz/fYWBRmlplD4ig/F+IzsMkmxtLUahYtld j1FgPjK1JNKOGfs4qA1Jjq+feB913NNlkkPxyVwQjg271pfGBXYU+I6+uGJ8g14Y MwPhXM/aYMt9PMHQX88yebKVBcfZ//RpL/mhv81l4+BJARxDi+BbOhyR/DKM09nl a0cWg9Ezifv8w5ZbnJ3rL4yNmUahZclRyD7/LMRqgpU0d+Kei8UqWva1eRnG4hbr CZAa9kYW/MafQQ4cfiaVsvRoQOkZKTO1K77lqwQm5OBarvfrTCxUcItgWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU0+1eHRUjYoMpC1XFIG6H6EXODMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcwa7+V4 u5koPfnPJVMNXTs1Vuh6LEN41mEOPw8j9MPz2sZOVT+lkC6o0H/g4TNZqba7qR7u SmfU3lQ6mcc0V0y3Fi45z8C+mg6BzocbI64+8Oy/iusYgcYLubs2guFZaqA+FdYc WwbzIhtBZ2SrvB1lNS4/Lk+SpfXoEOgnskE7qGZOc9jPN8h1LAkxJ7rLWgriUVoZ NBiJaduC6m630SPW29DpSks5KIUT1GwMyVOMy0huuU+yWtcucCwDBRs0ATigTufH oNH1P3heIa6qC1qxe/S5+OyFGexhIIYccW46x4mLKxmoXVusT23gHBztO/mpVf8p rLbYM3/73ng2mQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:18 2025 by rpki-client