This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json) Hash identifier: 8JbWROYIzDNnNSWMXB1fBPwaQW1dbgyFmhz2BtKUxOQ= Subject key identifier: EA:92:F0:68:B1:E8:7D:95:E8:1E:98:DB:3D:DC:44:8F:CB:01:D6:A0 Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4 Certificate serial: 019B383327965E58025498CEACC950D28DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft Manifest number: 1488 Signing time: Fri 19 Dec 2025 20:00:35 +0000 Manifest this update: Fri 19 Dec 2025 20:00:35 +0000 Manifest next update: Sat 20 Dec 2025 20:00:35 +0000 Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: yTxc3273YAj2A3FE/Aa8Tfu+R6GxH78Ijm3anuz+MDk=) 2: mv-gyPT3AAUqYw5fkKue_M69yD0.asa (hash: pG0VFppChD1L8nts7G+N3RIXaIJY8yOyzeP60c1h49M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:27:96:5e:58:02:54:98:ce:ac:c9:50:d2:8d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4 Validity Not Before: Dec 19 20:00:35 2025 GMT Not After : Dec 20 20:00:35 2025 GMT Subject: CN=ea92f068b1e87d95e81e98db3ddc448fcb01d6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:0f:e7:9c:2b:83:69:34:eb:0f:46:cc:69: 43:42:87:d9:90:e5:a9:b0:a4:10:44:e2:a8:df:c6: eb:ce:cd:0d:f6:00:31:3f:18:3d:cc:d6:7c:df:d8: b5:b1:a6:a8:16:88:41:c7:d4:7a:36:99:47:af:32: 82:7b:e0:cc:17:25:12:71:11:ae:64:14:d2:9c:b1: 54:58:fe:19:11:58:df:53:ce:16:f3:39:22:ae:96: 76:40:8c:cc:56:96:f8:0b:fb:aa:63:91:7b:fe:ca: 4d:49:d8:c9:b3:e1:96:dd:bb:d5:fd:b0:62:03:f9: ea:a8:87:96:ca:b3:c0:ec:36:86:f7:7c:c1:cf:cb: 42:9f:84:b5:c8:a9:05:5b:0f:16:62:a2:98:42:f2: 46:f8:9c:a8:70:49:84:fb:79:8b:e9:b8:6c:a9:2b: de:c0:71:82:5d:59:9f:22:ee:15:50:c4:43:87:9b: 5f:a5:13:2c:47:26:db:cf:71:f3:e1:92:b0:08:fa: 91:dc:0a:d2:ad:5b:f8:37:73:bf:41:62:bf:bd:14: c4:5d:5e:78:84:16:76:33:47:41:ad:26:0f:5c:a6: b3:5c:a9:40:22:1c:40:b5:b8:bb:6b:c1:74:22:ca: 12:28:2d:a8:7d:e7:89:b3:a8:d7:32:ff:85:a2:94: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:92:F0:68:B1:E8:7D:95:E8:1E:98:DB:3D:DC:44:8F:CB:01:D6:A0 X509v3 Authority Key Identifier: keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:49:9f:2f:b3:4d:31:9a:27:79:b5:a2:03:55:88:e8:b1:0a: ca:5b:d7:3f:15:7e:ab:e0:0e:eb:7f:29:f0:23:6a:32:c7:90: ce:c9:b5:b3:d2:5e:a2:08:dc:be:45:da:44:42:a0:e4:68:ad: 68:0a:ef:e0:fc:76:9d:eb:0b:48:11:2a:35:65:d8:ff:07:b4: bb:31:66:fc:31:d9:a4:ec:36:54:78:c3:df:1a:b4:91:72:98: dd:8e:be:68:52:12:dd:0d:86:3b:7c:2f:b2:09:e5:7a:d0:3a: b8:5b:b8:8e:e5:15:59:35:57:5b:31:c9:ac:56:9d:3a:40:d9: c4:85:8b:a6:17:fc:6c:27:0c:78:d9:f4:f8:5b:fe:03:7d:23: 5a:dc:86:9d:c7:f3:88:42:a6:30:8c:ef:5c:76:72:54:45:0c: 48:a7:98:b5:f1:bd:5b:84:76:e7:36:ed:c7:52:53:06:cc:1c: 88:e3:ba:70:d1:d7:d1:75:17:be:82:1c:0d:b6:14:71:39:76: 47:c5:c0:52:a1:14:d3:10:04:96:95:52:76:5c:09:8f:c8:67: e7:61:d3:a3:c4:8b:29:78:5a:c8:b1:79:4f:69:3f:48:3e:7c: 73:33:c5:2f:75:39:0d:40:ea:95:1c:71:c6:41:63:83:1a:ae: 09:93:13:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4MyeWXlgCVJjOrMlQ0o37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NDlhZDc2NTlkYTEzNGVkNDgwNzRmNGRiOTM0MWNlODc1 MTdkZjQwHhcNMjUxMjE5MjAwMDM1WhcNMjUxMjIwMjAwMDM1WjAzMTEwLwYDVQQD EyhlYTkyZjA2OGIxZTg3ZDk1ZTgxZTk4ZGIzZGRjNDQ4ZmNiMDFkNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjgP55wrg2k06w9GzGlDQofZkOWp sKQQROKo38brzs0N9gAxPxg9zNZ839i1saaoFohBx9R6NplHrzKCe+DMFyUScRGu ZBTSnLFUWP4ZEVjfU84W8zkirpZ2QIzMVpb4C/uqY5F7/spNSdjJs+GW3bvV/bBi A/nqqIeWyrPA7DaG93zBz8tCn4S1yKkFWw8WYqKYQvJG+JyocEmE+3mL6bhsqSve wHGCXVmfIu4VUMRDh5tfpRMsRybbz3Hz4ZKwCPqR3ArSrVv4N3O/QWK/vRTEXV54 hBZ2M0dBrSYPXKazXKlAIhxAtbi7a8F0IsoSKC2ofeeJs6jXMv+FopQGYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqS8Gix6H2V6B6Y2z3cRI/LAdagMB8GA1UdIwQY MBaAFJdJrXZZ2hNO1IB09NuTQc6HUX30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUt MzJkNzljYzQ5ZjIyLzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNzAxMWEtNmUxNS00ZTliLWJhOWUtMzJkNzljYzQ5ZjIy LzEvbDBtdGRsbmFFMDdVZ0hUMDI1TkJ6b2RSZmZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUmfL7NN MZonebWiA1WI6LEKylvXPxV+q+AO638p8CNqMseQzsm1s9JeogjcvkXaREKg5Git aArv4Px2nesLSBEqNWXY/we0uzFm/DHZpOw2VHjD3xq0kXKY3Y6+aFIS3Q2GO3wv sgnletA6uFu4juUVWTVXWzHJrFadOkDZxIWLphf8bCcMeNn0+Fv+A30jWtyGncfz iEKmMIzvXHZyVEUMSKeYtfG9W4R25zbtx1JTBswciOO6cNHX0XUXvoIcDbYUcTl2 R8XAUqEU0xAElpVSdlwJj8hn52HTo8SLKXhayLF5T2k/SD58czPFL3U5DUDqlRxx xkFjgxquCZMT3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:54 2025 by rpki-client