This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json) Hash identifier: pbJMIwb9oI1BP1+QiyNbNfzSCEElWxjkzCat0myLiko= Subject key identifier: 51:D9:66:59:73:FB:DE:D9:6F:98:CF:29:1C:D9:ED:90:8B:83:DD:8E Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Certificate serial: 019B4B15B66239D3A97FB91A0BFDA220F4D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft Manifest number: 1796 Signing time: Tue 23 Dec 2025 12:01:12 +0000 Manifest this update: Tue 23 Dec 2025 12:01:12 +0000 Manifest next update: Wed 24 Dec 2025 12:01:12 +0000 Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=) 2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=) 3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=) 4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: w+QBxE6ANTaTo4Qc+QZw0ujlqdc6FLYKriV7IHGq6XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:b6:62:39:d3:a9:7f:b9:1a:0b:fd:a2:20:f4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5 Validity Not Before: Dec 23 12:01:12 2025 GMT Not After : Dec 24 12:01:12 2025 GMT Subject: CN=51d9665973fbded96f98cf291cd9ed908b83dd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:3f:4b:c1:2b:f6:c7:95:da:24:9f:65:d6: 86:2a:28:34:73:76:82:32:6a:66:9a:d9:29:21:55: 5b:76:c4:fe:f7:f5:66:3d:03:d2:ca:30:26:35:df: 6a:6e:e1:2b:03:0f:7c:30:ce:71:5c:56:22:d6:70: 4f:f1:66:48:f7:e4:df:d0:2a:48:37:8a:55:fa:94: 71:fa:3a:5f:de:ac:1c:66:2a:17:dd:08:df:6c:93: 06:b4:66:d0:a4:f9:14:45:72:db:b6:c0:e0:46:ed: 35:14:5e:61:33:3f:07:36:ff:8d:4e:a3:67:bc:f4: b9:8a:5b:f5:79:b1:3e:7d:e1:84:15:b1:c3:80:3e: b5:1a:44:b3:44:23:23:41:4a:d3:65:6c:a4:67:04: c8:c7:10:d7:0c:cd:47:ac:a0:cb:18:97:6d:de:5e: d4:93:0c:51:e2:6b:1a:01:a0:35:f7:b7:26:97:e2: 38:61:3b:11:46:47:d7:44:b1:92:80:2b:4c:a3:0b: c8:9c:c8:f5:50:d9:85:a2:81:65:bc:6f:e8:27:bb: b2:c9:f6:cf:e3:13:71:2f:33:4f:d8:a6:ff:34:2f: f9:6a:b0:2e:0a:3b:a2:b5:f3:0f:ac:c2:26:55:90: 8d:32:86:c9:95:5b:4e:d9:e8:61:d9:2f:d6:9c:22: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D9:66:59:73:FB:DE:D9:6F:98:CF:29:1C:D9:ED:90:8B:83:DD:8E X509v3 Authority Key Identifier: keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bd:d9:25:16:ed:c2:8b:a2:8f:9f:d8:4a:d1:ee:d3:e7:87: bb:e5:90:4b:b9:a9:23:82:f5:b6:1e:bc:a5:19:2f:0a:63:02: 9a:d6:16:e6:a1:66:12:61:47:76:d8:17:87:57:9c:cd:df:a8: 43:16:83:e6:75:a3:b8:54:0d:25:19:9c:6d:f3:9a:48:e5:d4: 1e:66:ad:cb:42:27:de:9c:6e:f3:69:5d:56:2d:ae:ce:5a:d5: ec:c0:52:c8:42:bd:43:ac:0c:2e:de:44:7c:07:ba:a9:29:ec: 34:ad:5f:e4:dc:f0:21:15:cc:a3:f7:c2:e9:12:21:1a:36:2d: 1a:0d:2f:39:85:5f:71:af:c7:31:af:b8:26:63:8b:f8:eb:ee: 52:76:f9:af:03:d8:ba:fa:84:84:67:10:b8:b4:4e:9b:4e:57: a8:4e:c5:f3:51:93:8c:18:c8:2e:ba:12:14:5d:c0:72:76:e3: 10:1c:5a:b2:90:6f:66:8b:b3:66:75:cb:f1:71:9c:77:d8:2a: d6:49:f3:15:a1:bb:51:fc:dd:f1:bd:10:98:aa:ca:23:46:e6: 34:67:80:1b:87:e4:8b:49:08:94:ab:27:b3:9a:92:4c:16:b1: 89:86:83:9b:1b:93:fd:e3:aa:ae:d5:28:90:5d:9c:f4:e7:56: 0f:ca:62:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFbZiOdOpf7kaC/2iIPTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0 MTViZjUwHhcNMjUxMjIzMTIwMTEyWhcNMjUxMjI0MTIwMTEyWjAzMTEwLwYDVQQD Eyg1MWQ5NjY1OTczZmJkZWQ5NmY5OGNmMjkxY2Q5ZWQ5MDhiODNkZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6g/S8Er9seV2iSfZdaGKig0c3aC MmpmmtkpIVVbdsT+9/VmPQPSyjAmNd9qbuErAw98MM5xXFYi1nBP8WZI9+Tf0CpI N4pV+pRx+jpf3qwcZioX3QjfbJMGtGbQpPkURXLbtsDgRu01FF5hMz8HNv+NTqNn vPS5ilv1ebE+feGEFbHDgD61GkSzRCMjQUrTZWykZwTIxxDXDM1HrKDLGJdt3l7U kwxR4msaAaA197cml+I4YTsRRkfXRLGSgCtMowvInMj1UNmFooFlvG/oJ7uyyfbP 4xNxLzNP2Kb/NC/5arAuCjuitfMPrMImVZCNMobJlVtO2ehh2S/WnCLG0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHZZllz+97Zb5jPKRzZ7ZCLg92OMB8GA1UdIwQY MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt OGFkYWMxN2U5MGFlLzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP73ZJRbt wouij5/YStHu0+eHu+WQS7mpI4L1th68pRkvCmMCmtYW5qFmEmFHdtgXh1eczd+o QxaD5nWjuFQNJRmcbfOaSOXUHmaty0In3pxu82ldVi2uzlrV7MBSyEK9Q6wMLt5E fAe6qSnsNK1f5NzwIRXMo/fC6RIhGjYtGg0vOYVfca/HMa+4JmOL+OvuUnb5rwPY uvqEhGcQuLROm05XqE7F81GTjBjILroSFF3AcnbjEBxaspBvZouzZnXL8XGcd9gq 1knzFaG7Ufzd8b0QmKrKI0bmNGeAG4fki0kIlKsns5qSTBaxiYaDmxuT/eOqrtUo kF2c9OdWD8pivw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:51:22 2025 by rpki-client