This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json) Hash identifier: BawtupDvEjuruC471YD9AMJ2sP8W89BW/aZXLh6yoCI= Subject key identifier: 9A:9E:90:DE:7D:E9:7E:B8:DC:29:FE:34:31:90:C9:09:4F:D8:71:DC Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Certificate serial: 019B3BA24915C0B9E4BC77E0B9C5A46B9918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft Manifest number: 073D Signing time: Sat 20 Dec 2025 12:00:49 +0000 Manifest this update: Sat 20 Dec 2025 12:00:49 +0000 Manifest next update: Sun 21 Dec 2025 12:00:49 +0000 Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: 42KNFpwIgOX5CG9I0OlDJGIsgG0FJE8GCg9UlU+iKBQ=) 2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:49:15:c0:b9:e4:bc:77:e0:b9:c5:a4:6b:99:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Validity Not Before: Dec 20 12:00:49 2025 GMT Not After : Dec 21 12:00:49 2025 GMT Subject: CN=9a9e90de7de97eb8dc29fe343190c9094fd871dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:8d:a6:4d:22:6a:53:89:a5:60:f2:04:04: d9:cd:62:ce:f8:ba:68:47:76:97:22:5f:e0:24:08: c1:d8:54:1d:bc:f8:c5:b4:dd:d6:e6:0d:ef:d3:f4: 9b:15:04:22:8a:89:6e:b8:aa:a2:b0:99:3a:db:d5: 65:39:9e:c8:c1:89:c3:62:80:13:8b:7c:26:4d:42: ed:c8:17:d1:61:6f:bb:17:d3:c7:40:96:2f:cc:f4: 80:67:25:b1:88:ca:ec:b0:d5:87:19:8e:c3:5c:69: 14:1d:3a:17:4e:e3:02:1b:81:1e:9c:1d:73:4f:1d: 77:1b:ff:be:aa:0a:3c:eb:f5:15:f7:a0:2e:bf:a5: 8b:7e:59:b4:80:65:fc:e9:e3:fe:9e:63:6e:4b:ef: f2:ae:fa:2e:a1:3a:be:a4:79:e1:5f:21:40:62:18: e8:29:76:52:4a:d7:71:e2:c5:b2:c5:e5:21:cb:9f: ef:89:fd:98:ce:d3:9f:d7:a9:0d:a0:45:8f:92:d0: 0a:b7:d3:45:a2:f6:00:17:09:29:a6:94:51:b0:0c: 27:8d:e5:ba:34:6f:d8:3f:ec:c0:1c:ba:4b:21:49: 70:77:9b:b2:b2:7b:2d:70:3d:3d:45:4d:dc:79:1f: db:02:e2:66:6a:f1:b6:01:63:6e:93:ca:98:48:f2: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:90:DE:7D:E9:7E:B8:DC:29:FE:34:31:90:C9:09:4F:D8:71:DC X509v3 Authority Key Identifier: keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:19:fa:5b:75:41:62:a4:49:3b:04:fe:2f:d5:a1:fb:0c:75: c1:a5:c8:4f:5f:e7:45:88:71:1b:e6:33:c8:e0:62:4f:50:53: 49:f9:12:07:3f:07:1a:fb:d1:5c:c2:b6:c9:69:ef:ea:c8:dc: 15:c4:33:b2:f0:d2:11:5f:7d:2b:69:5d:9c:f5:f8:6b:0b:e6: cd:25:13:1d:a8:d0:80:c1:52:d9:70:87:85:21:a3:85:38:18: 13:bb:57:9b:42:9e:99:42:d6:5c:90:74:0a:dd:cf:09:dd:36: d0:2f:54:7a:1a:a4:a8:1b:3b:f8:a3:0b:23:4f:d4:b8:02:26: 88:be:18:04:ef:c5:64:b8:36:b4:6f:e1:47:4f:b6:0d:d1:84: 29:1b:02:df:1f:d2:6c:36:e7:df:25:b9:85:6b:5d:02:ea:58: 85:3c:08:4d:97:e8:6d:c5:8f:a2:32:56:8c:be:48:21:cb:61: 9e:e7:66:01:1c:04:49:9e:9f:d0:bb:66:36:98:a0:d5:e5:67: 90:aa:61:b4:fe:20:ae:41:e6:cb:89:81:f0:f4:01:cb:4a:de: 24:f8:f5:89:7d:3f:02:97:c5:81:f9:cc:45:00:90:6f:21:d1: f4:b1:4f:17:30:ed:29:91:f8:47:c4:87:95:87:11:5e:f1:cc: 2e:1a:4a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7okkVwLnkvHfgucWka5kYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz YTk0YzEwHhcNMjUxMjIwMTIwMDQ5WhcNMjUxMjIxMTIwMDQ5WjAzMTEwLwYDVQQD Eyg5YTllOTBkZTdkZTk3ZWI4ZGMyOWZlMzQzMTkwYzkwOTRmZDg3MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtamNpk0ialOJpWDyBATZzWLO+Lpo R3aXIl/gJAjB2FQdvPjFtN3W5g3v0/SbFQQiioluuKqisJk629VlOZ7IwYnDYoAT i3wmTULtyBfRYW+7F9PHQJYvzPSAZyWxiMrssNWHGY7DXGkUHToXTuMCG4EenB1z Tx13G/++qgo86/UV96Auv6WLflm0gGX86eP+nmNuS+/yrvouoTq+pHnhXyFAYhjo KXZSStdx4sWyxeUhy5/vif2YztOf16kNoEWPktAKt9NFovYAFwkpppRRsAwnjeW6 NG/YP+zAHLpLIUlwd5uysnstcD09RU3ceR/bAuJmavG2AWNuk8qYSPIi5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqekN596X643Cn+NDGQyQlP2HHcMB8GA1UdIwQY MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2 LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURn6W3VB YqRJOwT+L9Wh+wx1waXIT1/nRYhxG+YzyOBiT1BTSfkSBz8HGvvRXMK2yWnv6sjc FcQzsvDSEV99K2ldnPX4awvmzSUTHajQgMFS2XCHhSGjhTgYE7tXm0KemULWXJB0 Ct3PCd020C9UehqkqBs7+KMLI0/UuAImiL4YBO/FZLg2tG/hR0+2DdGEKRsC3x/S bDbn3yW5hWtdAupYhTwITZfobcWPojJWjL5IIcthnudmARwESZ6f0LtmNpig1eVn kKphtP4grkHmy4mB8PQBy0reJPj1iX0/ApfFgfnMRQCQbyHR9LFPFzDtKZH4R8SH lYcRXvHMLhpKSg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:46:14 2025 by rpki-client