This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json) Hash identifier: 52ygf/Lh+ELjPYnt9xqpotxc8J8un003x/MdpjOFZC8= Subject key identifier: 23:1C:04:86:1A:63:97:B0:F6:F7:4E:70:64:D0:6C:53:1C:ED:57:9A Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B3DFEDB246D096B8F8A8D907408A1787D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft Manifest number: 06D6 Signing time: Sat 20 Dec 2025 23:01:10 +0000 Manifest this update: Sat 20 Dec 2025 23:01:10 +0000 Manifest next update: Sun 21 Dec 2025 23:01:10 +0000 Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=) 2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=) 3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: wE88mA9EdNvqNttndH8x1tOhuT7WqgWDNMv8Z4NxVpc=) 4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:db:24:6d:09:6b:8f:8a:8d:90:74:08:a1:78:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Dec 20 23:01:10 2025 GMT Not After : Dec 21 23:01:10 2025 GMT Subject: CN=231c04861a6397b0f6f74e7064d06c531ced579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:7d:7f:aa:84:ae:29:d5:30:e8:e2:db:fe: 7d:c0:af:cf:32:20:ee:d3:38:28:e5:3c:fd:08:5c: d8:ec:a7:cc:51:6d:e9:ea:f7:39:0e:6e:b3:25:83: 3c:a2:6a:5d:97:a6:15:d7:52:71:3c:98:a8:7c:67: 1d:ea:2c:ea:95:95:aa:5a:e0:74:b3:35:03:b4:c4: 7e:66:d0:38:09:ec:72:0c:71:5d:e7:02:8e:73:97: 7e:d8:29:eb:11:79:04:48:cb:be:5d:08:84:c2:ce: 3d:fb:6a:aa:6d:30:ed:b4:a4:19:7f:0f:66:d2:bc: ae:9f:cd:b7:35:01:5c:a4:6b:ff:a3:43:5c:36:dd: d6:e2:71:be:7e:23:25:8c:43:44:11:40:d3:23:52: 64:9c:64:f0:27:72:61:bb:56:10:94:a1:55:d1:50: bd:8a:ef:d8:48:00:83:7b:34:7e:fc:39:13:18:85: 38:03:f6:7a:f6:97:d8:e3:fd:62:d5:86:c9:19:e6: d7:37:e7:17:91:79:a3:bc:c7:16:66:47:77:7d:21: ac:3a:bc:3d:5d:1f:70:40:78:16:7f:e2:30:a6:a4: ba:fd:e1:5f:9f:61:ae:4c:fd:d3:c0:47:fd:dd:c4: 0d:a2:19:f5:65:d3:ff:47:cf:47:33:37:ec:ae:b5: e6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:04:86:1A:63:97:B0:F6:F7:4E:70:64:D0:6C:53:1C:ED:57:9A X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:05:38:ba:52:3c:fe:52:d0:04:8d:a4:5e:42:ae:66:e2:93: f9:51:9c:6b:e3:74:1f:7f:f4:83:84:ed:19:bf:07:e7:a9:8a: 2e:a9:17:f4:0a:c1:43:66:57:9e:f2:f9:79:c0:af:d4:43:64: fa:8b:6c:03:0a:27:4f:f4:4f:8d:6d:9e:c9:86:67:90:a0:3c: 33:6c:0b:84:54:97:ec:89:2a:fb:46:97:23:67:e4:8b:11:25: a4:a3:3c:6f:26:74:09:7c:27:d6:ea:cf:31:30:70:28:62:58: 84:0f:9c:e3:bc:3f:22:c1:74:a6:26:aa:03:46:08:fc:30:90: fa:f3:f6:bc:27:ed:f8:dd:0c:b5:b7:12:8b:dd:58:80:f5:4f: e6:94:09:59:96:04:8a:98:1a:eb:27:a9:66:06:e2:44:bb:40: 76:c0:a9:7a:7b:37:6c:ca:c4:9e:7d:45:31:3d:36:e5:b4:df: f0:ae:0b:74:17:18:6d:07:b1:58:65:a4:e7:ce:44:53:d2:7e: 50:8e:b2:79:04:c8:d9:0f:83:0e:32:4d:8d:39:fa:03:94:db: b5:f6:f6:b4:6a:42:0f:7f:38:22:b6:dc:bc:d1:e7:6e:b1:09: 07:06:5f:54:c3:73:f3:a4:ba:ae:8c:cd:e1:49:55:7d:cd:cd: c8:c8:3d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tskbQlrj4qNkHQIoXh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjUxMjIwMjMwMTEwWhcNMjUxMjIxMjMwMTEwWjAzMTEwLwYDVQQD EygyMzFjMDQ4NjFhNjM5N2IwZjZmNzRlNzA2NGQwNmM1MzFjZWQ1NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaB9f6qErinVMOji2/59wK/PMiDu 0zgo5Tz9CFzY7KfMUW3p6vc5Dm6zJYM8ompdl6YV11JxPJiofGcd6izqlZWqWuB0 szUDtMR+ZtA4CexyDHFd5wKOc5d+2CnrEXkESMu+XQiEws49+2qqbTDttKQZfw9m 0ryun823NQFcpGv/o0NcNt3W4nG+fiMljENEEUDTI1JknGTwJ3Jhu1YQlKFV0VC9 iu/YSACDezR+/DkTGIU4A/Z69pfY4/1i1YbJGebXN+cXkXmjvMcWZkd3fSGsOrw9 XR9wQHgWf+IwpqS6/eFfn2GuTP3TwEf93cQNohn1ZdP/R89HMzfsrrXmGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMcBIYaY5ew9vdOcGTQbFMc7VeaMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwU4ulI8 /lLQBI2kXkKuZuKT+VGca+N0H3/0g4TtGb8H56mKLqkX9ArBQ2ZXnvL5ecCv1ENk +otsAwonT/RPjW2eyYZnkKA8M2wLhFSX7Ikq+0aXI2fkixElpKM8byZ0CXwn1urP MTBwKGJYhA+c47w/IsF0piaqA0YI/DCQ+vP2vCft+N0MtbcSi91YgPVP5pQJWZYE ipga6yepZgbiRLtAdsCpens3bMrEnn1FMT025bTf8K4LdBcYbQexWGWk585EU9J+ UI6yeQTI2Q+DDjJNjTn6A5Tbtfb2tGpCD384IrbcvNHnbrEJBwZfVMNz86S6rozN 4UlVfc3NyMg93g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:39 2025 by rpki-client