This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json) Hash identifier: XEyHSKnN4J3SMbj4ArY1Xzfr8TZplPf+HRPleLJ2PuM= Subject key identifier: FF:B3:89:9F:00:36:47:15:74:AE:20:7E:BE:56:E6:EE:C3:06:65:29 Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Certificate serial: 019B40FFB72562305346E7FDEBF1E81CF593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft Manifest number: 098D Signing time: Sun 21 Dec 2025 13:00:58 +0000 Manifest this update: Sun 21 Dec 2025 13:00:58 +0000 Manifest next update: Mon 22 Dec 2025 13:00:58 +0000 Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=) 2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: 9J4ebNPhwwpgLcRX6rSiVAfX9KpIWrBvyTCwVeER/Ro=) 3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:b7:25:62:30:53:46:e7:fd:eb:f1:e8:1c:f5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Validity Not Before: Dec 21 13:00:58 2025 GMT Not After : Dec 22 13:00:58 2025 GMT Subject: CN=ffb3899f0036471574ae207ebe56e6eec3066529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:dd:e0:09:ec:2b:49:16:4f:6f:06:ef:a1: d4:e0:6f:62:3a:db:d8:66:4a:ab:ed:24:ba:54:40: 3f:1a:39:98:0e:e7:c2:ac:d3:31:b4:d2:ac:7f:c7: 12:0e:8a:65:89:eb:a6:ff:dc:e0:b1:3a:d9:7d:ba: b8:d4:58:8d:1d:7b:a7:9c:75:27:08:a5:27:96:6d: 74:ea:ef:eb:de:55:7a:ae:48:0b:61:99:ec:12:cd: 41:b8:a3:44:42:bf:45:e7:31:17:1e:7f:3b:b5:22: 0e:52:eb:dd:a6:09:a7:70:27:ff:6b:05:f1:de:9f: 89:92:a6:71:5a:f3:78:0e:e8:bb:91:8c:f5:f9:0f: 5b:3d:9a:19:f3:fb:04:4a:86:89:c8:cb:fd:ff:f3: 42:e5:43:1f:06:44:69:06:9d:c4:16:6a:0a:ef:77: ad:2c:b0:56:6f:29:cf:bb:e5:6b:78:86:4e:6b:08: 2e:bf:57:90:07:04:de:73:b5:66:57:0e:68:83:57: 3b:55:66:3f:09:60:8b:77:a3:d8:22:50:d3:d2:2f: 6d:a9:88:6b:5b:ae:7c:08:10:5c:34:1b:24:75:8d: f2:36:a7:ed:ef:42:a9:f9:58:0f:59:37:8e:46:33: 09:7a:66:21:2c:33:c4:1e:c4:07:dd:ba:9a:2c:e4: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B3:89:9F:00:36:47:15:74:AE:20:7E:BE:56:E6:EE:C3:06:65:29 X509v3 Authority Key Identifier: keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3a:3d:dd:c9:3c:a6:dc:8e:f1:0c:b0:4e:b9:f4:14:df:9c: d8:a2:e4:04:05:c1:b0:aa:2c:20:42:da:d9:df:62:9d:0b:2e: f9:14:78:e8:9c:c6:90:d7:e1:10:dc:1c:aa:76:cb:46:da:ce: 9f:a5:88:08:9c:21:46:8b:2f:12:ea:94:e6:a8:d5:02:59:70: 6c:21:24:c3:4f:1d:d0:22:96:55:74:52:4e:22:bc:ec:b8:23: a1:b2:01:4c:82:2e:ea:37:1b:c0:35:56:89:81:83:fa:27:ef: e0:1c:3c:cf:c8:f1:21:c2:eb:c6:3a:fa:7f:98:0b:23:08:38: 57:8a:c7:d4:4f:58:c1:97:4b:09:e8:d5:3d:e8:20:78:9d:89: af:34:4b:52:0d:17:bc:73:92:9a:51:e4:d0:39:cf:00:b8:c4: f3:0e:9c:38:86:19:a5:a9:e0:b9:0f:d5:72:b7:d2:09:73:8d: c4:07:8e:59:b9:5f:49:c4:d6:7c:ae:67:82:4c:3e:5f:be:a1: de:eb:8f:f0:45:ac:3a:2f:23:b1:58:17:60:5b:e2:1d:e5:fe: 27:e6:97:8f:3f:50:12:78:fc:11:3a:0d:f3:8b:dd:e5:78:a6: ca:da:3f:71:40:14:58:15:57:5a:52:34:2d:7b:a7:f7:8a:15: a0:f4:9e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/7clYjBTRuf96/HoHPWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1 YjJlMGUwHhcNMjUxMjIxMTMwMDU4WhcNMjUxMjIyMTMwMDU4WjAzMTEwLwYDVQQD EyhmZmIzODk5ZjAwMzY0NzE1NzRhZTIwN2ViZTU2ZTZlZWMzMDY2NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7evd4AnsK0kWT28G76HU4G9iOtvY Zkqr7SS6VEA/GjmYDufCrNMxtNKsf8cSDoplieum/9zgsTrZfbq41FiNHXunnHUn CKUnlm106u/r3lV6rkgLYZnsEs1BuKNEQr9F5zEXHn87tSIOUuvdpgmncCf/awXx 3p+JkqZxWvN4Dui7kYz1+Q9bPZoZ8/sESoaJyMv9//NC5UMfBkRpBp3EFmoK73et LLBWbynPu+VreIZOawguv1eQBwTec7VmVw5og1c7VWY/CWCLd6PYIlDT0i9tqYhr W658CBBcNBskdY3yNqft70Kp+VgPWTeORjMJemYhLDPEHsQH3bqaLOS8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ziZ8ANkcVdK4gfr5W5u7DBmUpMB8GA1UdIwQY MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3 LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTo93ck8 ptyO8QywTrn0FN+c2KLkBAXBsKosIELa2d9inQsu+RR46JzGkNfhENwcqnbLRtrO n6WICJwhRosvEuqU5qjVAllwbCEkw08d0CKWVXRSTiK87LgjobIBTIIu6jcbwDVW iYGD+ifv4Bw8z8jxIcLrxjr6f5gLIwg4V4rH1E9YwZdLCejVPeggeJ2JrzRLUg0X vHOSmlHk0DnPALjE8w6cOIYZpanguQ/VcrfSCXONxAeOWblfScTWfK5ngkw+X76h 3uuP8EWsOi8jsVgXYFviHeX+J+aXjz9QEnj8EToN84vd5Ximyto/cUAUWBVXWlI0 LXun94oVoPSegg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:50 2025 by rpki-client