This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json) Hash identifier: AvQUTkxKAtqVJnMlF0GGXewg1ARirDljYmduIXsYNDI= Subject key identifier: 80:10:C5:13:B7:49:DD:E6:E9:5D:32:F1:B0:5C:91:AA:6F:34:46:5A Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Certificate serial: 019B5261723980A0A405C867DACBC350AA71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft Manifest number: 0996 Signing time: Wed 24 Dec 2025 22:01:16 +0000 Manifest this update: Wed 24 Dec 2025 22:01:16 +0000 Manifest next update: Thu 25 Dec 2025 22:01:16 +0000 Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=) 2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: rVnLymdpZyTnWrHEfJtreSd+TLh75Q/Xsgu9mT2ybjs=) 3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:72:39:80:a0:a4:05:c8:67:da:cb:c3:50:aa:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Validity Not Before: Dec 24 22:01:16 2025 GMT Not After : Dec 25 22:01:16 2025 GMT Subject: CN=8010c513b749dde6e95d32f1b05c91aa6f34465a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:f9:45:71:99:1f:31:32:c6:50:a2:54:4d: 84:4e:04:93:21:c4:f8:4c:dc:f7:da:80:c5:e1:f2: 6d:57:54:81:47:63:7c:2a:f9:c8:ca:2d:a9:6b:27: 61:2a:59:c0:31:26:8f:8c:85:6f:94:88:d8:59:b6: 90:a7:de:f8:50:f7:9a:30:4a:f0:4e:03:c2:42:ea: 80:80:57:67:b9:d2:e9:dd:a9:c5:e0:08:07:a4:f0: b9:6a:d4:7a:a4:4a:df:53:c5:71:52:c8:d4:75:15: 15:2a:af:79:b9:02:be:29:2a:e9:7e:d6:e9:d1:fa: eb:b7:cc:4f:9d:8b:2f:b8:eb:1d:87:d5:5b:d2:a3: b3:75:1f:8d:15:52:2b:a6:ff:3f:37:de:e5:f1:64: 26:5a:6c:ea:80:5d:42:67:4a:4b:84:35:35:7a:dd: e4:79:86:79:21:29:63:1a:64:a2:2f:89:98:f6:9c: 87:1c:6b:26:8e:8b:48:0f:26:12:ce:e9:8b:50:6e: 24:02:52:c4:c3:54:2b:cb:1b:8e:70:d9:a3:6e:36: ac:32:6b:a0:89:94:07:d1:25:eb:23:d3:ca:73:f0: a0:52:b5:ea:15:de:dc:db:60:20:d6:cc:37:10:c0: ce:27:9e:46:55:06:3c:ee:8e:bb:a8:a9:55:de:83: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:10:C5:13:B7:49:DD:E6:E9:5D:32:F1:B0:5C:91:AA:6F:34:46:5A X509v3 Authority Key Identifier: keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6c:3d:4c:4f:93:97:44:00:c3:66:00:09:ee:37:7d:84:68: f3:5f:2b:6e:87:d6:ab:60:a0:b7:f5:b7:66:7a:56:3b:7d:4d: b9:5f:77:e7:4e:aa:55:e1:ab:5a:a4:1f:f9:47:8e:89:d4:69: 5b:60:3a:d6:98:94:f6:d0:86:95:66:01:5b:6c:d2:fd:b0:30: b6:4e:4d:2c:0f:66:8c:4d:c6:04:8f:9b:03:c9:43:52:bc:59: fb:21:29:9d:9f:f4:b8:20:8e:3c:42:7a:97:55:55:2f:88:93: fb:0b:e9:71:3e:fc:04:60:bc:2b:21:c3:11:85:00:92:71:d2: 9b:b0:52:71:6d:92:78:e9:0c:95:88:99:46:4f:f0:66:4a:27: 95:32:ae:cc:5a:78:30:b2:f0:00:4e:e2:19:53:87:de:f2:c3: 7c:78:dd:9e:d7:58:75:9a:0f:52:e3:12:d0:3a:a9:f5:3c:72: 98:ad:ec:7c:84:f5:92:6e:70:fd:05:66:8c:9f:2c:bb:35:8d: a7:69:9d:b8:cd:08:ad:4e:fb:5f:00:e4:d1:9b:30:b1:1c:55: 21:03:61:f0:c9:b3:c3:45:c0:90:d2:3d:53:ef:fa:a8:9f:63: a8:35:89:f4:7a:4b:cd:48:2e:d7:66:6c:70:69:ea:9a:61:0b: f0:7b:8f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYXI5gKCkBchn2svDUKpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1 YjJlMGUwHhcNMjUxMjI0MjIwMTE2WhcNMjUxMjI1MjIwMTE2WjAzMTEwLwYDVQQD Eyg4MDEwYzUxM2I3NDlkZGU2ZTk1ZDMyZjFiMDVjOTFhYTZmMzQ0NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2L5RXGZHzEyxlCiVE2ETgSTIcT4 TNz32oDF4fJtV1SBR2N8KvnIyi2paydhKlnAMSaPjIVvlIjYWbaQp974UPeaMErw TgPCQuqAgFdnudLp3anF4AgHpPC5atR6pErfU8VxUsjUdRUVKq95uQK+KSrpftbp 0frrt8xPnYsvuOsdh9Vb0qOzdR+NFVIrpv8/N97l8WQmWmzqgF1CZ0pLhDU1et3k eYZ5ISljGmSiL4mY9pyHHGsmjotIDyYSzumLUG4kAlLEw1QryxuOcNmjbjasMmug iZQH0SXrI9PKc/CgUrXqFd7c22Ag1sw3EMDOJ55GVQY87o67qKlV3oNgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAQxRO3Sd3m6V0y8bBckapvNEZaMB8GA1UdIwQY MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3 LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmw9TE+T l0QAw2YACe43fYRo818rbofWq2Cgt/W3ZnpWO31NuV93506qVeGrWqQf+UeOidRp W2A61piU9tCGlWYBW2zS/bAwtk5NLA9mjE3GBI+bA8lDUrxZ+yEpnZ/0uCCOPEJ6 l1VVL4iT+wvpcT78BGC8KyHDEYUAknHSm7BScW2SeOkMlYiZRk/wZkonlTKuzFp4 MLLwAE7iGVOH3vLDfHjdntdYdZoPUuMS0Dqp9TxymK3sfIT1km5w/QVmjJ8suzWN p2mduM0IrU77XwDk0ZswsRxVIQNh8Mmzw0XAkNI9U+/6qJ9jqDWJ9HpLzUgu12Zs cGnqmmEL8HuPNA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:18 2025 by rpki-client