This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json) Hash identifier: u10axLuUQqohKzvnncnLwVStmFi9fuDwOmGYEaboWkk= Subject key identifier: 11:0D:0E:BA:D4:A5:55:70:C9:A3:DB:35:38:1D:F6:EC:11:CE:18:EF Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019B39EB1B560DD34125544647DBB5095009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:01:07 +0000 Manifest this update: Sat 20 Dec 2025 04:01:07 +0000 Manifest next update: Sun 21 Dec 2025 04:01:07 +0000 Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: lx5CzdkwWuQTV8VEv7w7tJF00aihZPX5qx6mvEid7oQ=) 2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=) 3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1b:56:0d:d3:41:25:54:46:47:db:b5:09:50:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Dec 20 04:01:07 2025 GMT Not After : Dec 21 04:01:07 2025 GMT Subject: CN=110d0ebad4a55570c9a3db35381df6ec11ce18ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:93:cd:63:e6:03:71:28:dd:db:7b:be:7d: a1:f5:69:94:d9:e3:9f:b8:17:a9:32:fa:17:24:de: 07:96:c4:f6:25:ef:dd:5a:e4:18:67:d2:6d:c0:0f: 3b:8d:83:8d:85:bf:25:5f:ca:57:40:48:d0:8d:c8: de:12:f0:3a:d3:6b:5a:9f:f3:26:c4:56:fc:9a:b5: 50:37:5d:3b:28:19:5f:6d:76:fb:e5:ce:02:7c:b0: d7:db:3d:f1:52:6d:85:ab:a0:66:d1:02:1b:9e:ec: 3a:ed:c0:0f:30:0e:fb:ff:ed:1f:1d:d3:50:e3:b5: bc:02:f1:dc:67:e7:b3:97:28:62:ad:c9:88:05:f1: 33:94:55:5a:af:5f:89:b1:f6:84:be:2f:93:b1:66: af:43:69:88:24:38:f1:9b:85:f8:48:da:86:75:0f: c6:fb:22:cd:57:d6:88:fc:00:fc:90:07:7d:15:18: 88:43:17:04:2a:bd:38:95:70:64:f5:a7:07:8f:98: d4:2d:02:22:56:52:46:f0:61:84:5e:cb:02:17:8e: 34:d6:4a:f1:1e:15:bc:a8:b8:e2:ea:e4:b8:08:7d: 0a:85:0a:da:df:d6:5d:97:2d:17:fd:78:2c:fd:75: 74:6a:2d:85:73:fb:a5:04:96:b9:b0:d7:bc:be:0f: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0D:0E:BA:D4:A5:55:70:C9:A3:DB:35:38:1D:F6:EC:11:CE:18:EF X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9f:40:28:fa:66:1c:76:80:d5:40:ad:f7:e7:d5:6d:5f:a4: ab:41:c4:c8:1e:3f:fc:1a:f1:36:86:9e:59:f3:2a:02:5c:13: 82:f5:8d:44:41:f4:c3:6d:73:da:34:cb:3a:a0:b3:de:07:b9: e9:8e:ec:9a:92:0e:cf:8b:3a:aa:30:66:46:8b:60:e2:1c:b5: 52:a2:d2:dc:2a:f3:97:98:c6:28:12:07:75:bb:80:bc:3f:c5: 7d:2d:fe:2e:9c:60:3c:e3:a2:6c:bb:9c:5a:29:79:3d:c6:24: 1e:f5:93:59:65:0b:be:3a:8b:e8:ce:0f:18:a2:cd:bd:1b:55: dc:b9:19:50:35:c7:97:9a:d5:71:dc:df:1d:d4:24:e3:15:e7: a1:44:76:bb:ec:9a:d0:81:06:e1:de:30:53:bd:77:19:96:17: e0:cb:f7:79:df:97:c7:91:f6:95:f0:15:09:4b:f1:ab:f0:be: 9e:cd:9d:37:bd:b3:23:7b:ff:d1:ac:f7:f0:c7:06:c6:27:34: b9:64:25:3b:8c:cc:f5:11:9d:9c:72:e6:bd:36:34:6a:3c:57: ac:ab:5f:d5:8d:6b:81:bd:47:a8:52:76:ff:c5:00:d4:55:72: dc:09:3d:ae:48:2c:3c:a2:83:b4:46:c1:47:a6:8c:45:3c:62: bb:5d:ba:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xtWDdNBJVRGR9u1CVAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjUxMjIwMDQwMTA3WhcNMjUxMjIxMDQwMTA3WjAzMTEwLwYDVQQD EygxMTBkMGViYWQ0YTU1NTcwYzlhM2RiMzUzODFkZjZlYzExY2UxOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/2TzWPmA3Eo3dt7vn2h9WmU2eOf uBepMvoXJN4HlsT2Je/dWuQYZ9JtwA87jYONhb8lX8pXQEjQjcjeEvA602tan/Mm xFb8mrVQN107KBlfbXb75c4CfLDX2z3xUm2Fq6Bm0QIbnuw67cAPMA77/+0fHdNQ 47W8AvHcZ+ezlyhircmIBfEzlFVar1+JsfaEvi+TsWavQ2mIJDjxm4X4SNqGdQ/G +yLNV9aI/AD8kAd9FRiIQxcEKr04lXBk9acHj5jULQIiVlJG8GGEXssCF4401krx HhW8qLji6uS4CH0KhQra39Zdly0X/Xgs/XV0ai2Fc/ulBJa5sNe8vg/rvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBENDrrUpVVwyaPbNTgd9uwRzhjvMB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ9AKPpm HHaA1UCt9+fVbV+kq0HEyB4//BrxNoaeWfMqAlwTgvWNREH0w21z2jTLOqCz3ge5 6Y7smpIOz4s6qjBmRotg4hy1UqLS3Crzl5jGKBIHdbuAvD/FfS3+LpxgPOOibLuc Wil5PcYkHvWTWWULvjqL6M4PGKLNvRtV3LkZUDXHl5rVcdzfHdQk4xXnoUR2u+ya 0IEG4d4wU713GZYX4Mv3ed+Xx5H2lfAVCUvxq/C+ns2dN72zI3v/0az38McGxic0 uWQlO4zM9RGdnHLmvTY0ajxXrKtf1Y1rgb1HqFJ2/8UA1FVy3Ak9rkgsPKKDtEbB R6aMRTxiu126XA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:18:20 2025 by rpki-client