This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json) Hash identifier: uXAW8VtLSNaCwHIZnIjLEKUPqc4FnnUGucmWN/b93hU= Subject key identifier: 3D:CB:A1:28:AA:E0:B2:0F:69:18:CD:B7:3C:A1:B6:34:A5:CF:2B:5E Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62 Certificate serial: 019B563DAF4315C153DC4A7CF5B1198A1EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 16:00:41 +0000 Manifest this update: Thu 25 Dec 2025 16:00:41 +0000 Manifest next update: Fri 26 Dec 2025 16:00:41 +0000 Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=) 2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: XP4e3adHPMOxoRHalB1CbvyswdPD5IVcSmMLlW5+dLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:af:43:15:c1:53:dc:4a:7c:f5:b1:19:8a:1e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62 Validity Not Before: Dec 25 16:00:41 2025 GMT Not After : Dec 26 16:00:41 2025 GMT Subject: CN=3dcba128aae0b20f6918cdb73ca1b634a5cf2b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:bf:1f:9f:14:14:ac:5e:26:b3:ca:ee:a0: be:86:a7:67:dd:e9:81:a1:c3:93:fe:5c:dd:f0:7f: 22:88:d7:63:40:14:f4:db:59:f8:e9:4f:64:06:85: 37:0b:90:c6:47:ff:4b:3b:4b:10:25:24:69:4e:b6: 63:07:f9:51:77:d0:fe:81:d1:35:1c:66:55:59:a8: da:f4:58:af:4c:14:dd:c2:83:76:fd:ed:57:11:31: cb:e2:5d:00:86:4a:68:d2:4f:8e:68:f3:62:ee:4c: 97:04:8c:ed:ac:03:a8:58:24:65:33:c2:1b:8d:c5: 9e:9b:51:cf:3c:b5:4f:ea:76:b5:3b:26:10:6d:33: 52:77:73:1b:84:5f:e4:46:5c:3b:e0:2d:07:4a:ed: 60:7e:7b:33:fc:dc:fa:71:15:e7:92:ac:5e:9a:cd: 29:a9:dd:64:92:7d:ad:ee:ee:1b:c8:a2:c8:ed:a1: 08:dc:ec:10:9b:f1:33:ee:75:52:67:bd:31:1f:f0: 9d:66:3c:da:83:52:04:9f:22:ac:b6:f0:49:3f:65: 43:d9:f9:a4:88:e2:8c:be:52:c7:b5:63:cb:08:7a: 09:51:4f:03:a3:8a:23:27:d8:22:30:69:30:3b:35: 3a:34:81:46:7d:37:7a:bd:b2:8c:8d:3b:66:89:19: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:A1:28:AA:E0:B2:0F:69:18:CD:B7:3C:A1:B6:34:A5:CF:2B:5E X509v3 Authority Key Identifier: keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:05:44:86:1b:3c:e3:db:31:de:3e:43:2e:ec:a4:7e:b5: fb:4b:b3:eb:7a:4b:5b:1e:2c:65:ec:94:68:83:38:e9:4c:a4: 89:9c:9b:32:84:08:87:0b:a4:15:8c:f6:c0:1c:68:0c:84:56: 57:bd:eb:12:70:4d:66:61:b5:4c:35:dc:5e:da:3f:94:92:ca: af:82:c1:8f:e2:c5:2d:c1:78:ef:df:34:be:f9:ee:a0:55:af: f2:d9:79:98:8a:9a:84:e8:1c:09:8c:99:f5:b5:b8:a9:9a:7a: d6:28:5b:15:82:8c:49:21:13:a5:d2:16:0f:ec:21:ef:bc:fc: ce:c6:99:6b:a4:fb:75:24:cb:94:6d:16:1b:8b:47:5c:86:8a: 71:e4:31:d6:fc:56:0d:e4:50:f7:4c:ec:80:ea:45:e7:ad:1f: e3:9e:a4:50:25:0f:39:a4:56:4e:7e:e6:92:c4:7b:8a:a9:9a: df:8e:57:4e:39:30:06:7d:e9:0b:ed:fb:ae:28:a3:82:69:f6: 3e:bb:6a:38:af:3c:eb:50:b2:2e:14:30:84:a0:68:1b:f3:99: 82:cc:01:ab:96:31:4c:45:9b:a9:f7:7a:91:7c:1d:d8:59:42: 47:23:69:b7:3b:bb:4c:82:f5:83:2c:ff:11:08:46:3c:67:ee: e9:8c:2e:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPa9DFcFT3Ep89bEZih7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmY1YmU3M2YxODIzMjc0NDk4ZGY1MmEzNzUzNWQxM2Rh NWJlNjIwHhcNMjUxMjI1MTYwMDQxWhcNMjUxMjI2MTYwMDQxWjAzMTEwLwYDVQQD EygzZGNiYTEyOGFhZTBiMjBmNjkxOGNkYjczY2ExYjYzNGE1Y2YyYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTW/H58UFKxeJrPK7qC+hqdn3emB ocOT/lzd8H8iiNdjQBT021n46U9kBoU3C5DGR/9LO0sQJSRpTrZjB/lRd9D+gdE1 HGZVWaja9FivTBTdwoN2/e1XETHL4l0Ahkpo0k+OaPNi7kyXBIztrAOoWCRlM8Ib jcWem1HPPLVP6na1OyYQbTNSd3MbhF/kRlw74C0HSu1gfnsz/Nz6cRXnkqxems0p qd1kkn2t7u4byKLI7aEI3OwQm/Ez7nVSZ70xH/CdZjzag1IEnyKstvBJP2VD2fmk iOKMvlLHtWPLCHoJUU8Do4ojJ9giMGkwOzU6NIFGfTd6vbKMjTtmiRlWPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3LoSiq4LIPaRjNtzyhtjSlzyteMB8GA1UdIwQY MBaAFJe/W+c/GCMnRJjfUqN1NdE9pb5iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUt M2Y0NDUxOTY2NWFjLzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82MDkwYWItYjhmYS00M2Q5LThkMTUtM2Y0NDUxOTY2NWFj LzEvbDc5YjV6OFlJeWRFbU45U28zVTEwVDJsdm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhUFRIYb POPbMd4+Qy7spH61+0uz63pLWx4sZeyUaIM46UykiZybMoQIhwukFYz2wBxoDIRW V73rEnBNZmG1TDXcXto/lJLKr4LBj+LFLcF47980vvnuoFWv8tl5mIqahOgcCYyZ 9bW4qZp61ihbFYKMSSETpdIWD+wh77z8zsaZa6T7dSTLlG0WG4tHXIaKceQx1vxW DeRQ90zsgOpF560f456kUCUPOaRWTn7mksR7iqma345XTjkwBn3pC+37riijgmn2 PrtqOK8861CyLhQwhKBoG/OZgswBq5YxTEWbqfd6kXwd2FlCRyNptzu7TIL1gyz/ EQhGPGfu6YwuFA== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:57 2025 by rpki-client