This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json) Hash identifier: 5mJgte6fcFVErgXF/Dw0O8W1wUUNn0XMt0wuFITv+xo= Subject key identifier: 95:7B:0D:0F:A4:83:72:C8:60:71:23:C5:A4:9D:C2:1A:3B:A6:EC:FA Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5 Certificate serial: 019B59772E5BD3E999598B525C53247AC483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:02:21 +0000 Manifest this update: Fri 26 Dec 2025 07:02:21 +0000 Manifest next update: Sat 27 Dec 2025 07:02:21 +0000 Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: zbFWYEV1pF+isyIPx28kJ5sAmD5tAMBwc3yrgwXAnVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2e:5b:d3:e9:99:59:8b:52:5c:53:24:7a:c4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5 Validity Not Before: Dec 26 07:02:21 2025 GMT Not After : Dec 27 07:02:21 2025 GMT Subject: CN=957b0d0fa48372c8607123c5a49dc21a3ba6ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:75:02:c1:63:d2:50:af:3a:f8:7f:38:3a: 06:40:ee:ca:8e:40:ca:0e:8f:34:65:88:ef:b0:dc: d8:8f:fe:e0:8c:c9:3b:54:d5:b1:cb:9f:cf:fb:66: d9:21:14:f6:39:26:47:a2:96:78:28:c7:db:a3:15: 90:6b:80:be:67:5c:c4:db:6a:e5:07:50:39:6c:51: 7d:f0:a5:9d:15:b0:13:79:1d:23:ef:0f:62:11:3a: 88:16:9b:5a:01:9d:49:64:37:0a:8f:63:28:b1:1a: 1a:c5:ab:d6:d7:09:eb:f4:51:dc:bb:da:1b:d7:c8: 25:c1:5c:c5:8c:93:4e:3b:b6:25:a2:d7:50:fb:23: 59:c1:19:4c:ba:7e:d0:80:2f:79:cb:48:7e:e7:de: 78:62:93:e4:d5:02:31:db:8b:64:eb:ba:b0:64:f8: dd:77:d2:a9:58:fa:14:0c:06:1c:3e:b6:af:49:6c: 5b:d4:db:44:cd:9e:b8:d4:64:2b:24:c8:d2:74:c7: 4c:3d:33:f1:5e:50:b1:e0:40:1e:15:f9:f4:e9:5d: 31:d3:ec:08:4f:97:9d:24:ea:28:f2:1e:81:60:64: 90:e0:c8:b2:5b:e0:ed:17:9b:8a:82:7e:b0:17:cf: 9d:5f:e3:ca:2b:b4:bd:b7:13:d4:92:5b:5d:0d:ab: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:0D:0F:A4:83:72:C8:60:71:23:C5:A4:9D:C2:1A:3B:A6:EC:FA X509v3 Authority Key Identifier: keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:65:6b:0c:58:8d:3c:e0:74:0b:00:f6:f6:42:3c:b4:81:e1: d4:a1:36:f2:94:97:76:c8:dc:ce:cf:84:07:97:65:6c:85:b6: c3:3f:0d:a6:6b:23:53:22:87:e2:ed:49:19:84:59:b3:15:c8: 38:3a:e3:3d:00:bd:54:a0:fc:17:07:29:43:94:9a:ec:28:ee: 71:1b:e2:87:33:ff:e3:5f:9d:d5:06:0e:4b:2f:02:f0:bf:11: b3:18:be:ed:f5:5b:c2:6c:c7:79:07:9a:0d:c3:53:18:8f:74: 16:d5:1e:ba:ad:69:af:63:db:1b:db:87:56:4f:db:fa:40:22: 3e:e6:52:a4:0e:73:22:42:2a:0f:9c:97:e6:02:5e:04:0e:0f: b9:db:08:ef:3f:a5:a3:55:0a:b3:63:c9:c7:11:9b:d1:fd:94: 03:1d:62:24:27:30:e5:23:d0:d3:07:6f:72:0b:81:2a:37:a7: 43:aa:91:d7:d5:d9:fa:a1:16:d1:1d:aa:d7:13:1d:e4:7a:cb: 6f:79:85:b2:6b:66:48:de:20:d5:9a:00:e3:de:6f:04:d2:60: 5e:ae:05:ae:86:69:ad:6b:e1:ef:94:e5:3e:9c:37:49:fd:64: 3a:f8:00:dc:e1:fd:da:20:33:a7:23:ed:4f:19:52:ad:86:60: 29:41:b1:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdy5b0+mZWYtSXFMkesSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTI2YTg1MTIxM2U1YTYzYWMyOTQ3OGVkMTM2NzA4Mjlm Y2ExYTUwHhcNMjUxMjI2MDcwMjIxWhcNMjUxMjI3MDcwMjIxWjAzMTEwLwYDVQQD Eyg5NTdiMGQwZmE0ODM3MmM4NjA3MTIzYzVhNDlkYzIxYTNiYTZlY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlB1AsFj0lCvOvh/ODoGQO7KjkDK Do80ZYjvsNzYj/7gjMk7VNWxy5/P+2bZIRT2OSZHopZ4KMfboxWQa4C+Z1zE22rl B1A5bFF98KWdFbATeR0j7w9iETqIFptaAZ1JZDcKj2MosRoaxavW1wnr9FHcu9ob 18glwVzFjJNOO7YlotdQ+yNZwRlMun7QgC95y0h+5954YpPk1QIx24tk67qwZPjd d9KpWPoUDAYcPravSWxb1NtEzZ641GQrJMjSdMdMPTPxXlCx4EAeFfn06V0x0+wI T5edJOoo8h6BYGSQ4MiyW+DtF5uKgn6wF8+dX+PKK7S9txPUkltdDatlDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV7DQ+kg3LIYHEjxaSdwho7puz6MB8GA1UdIwQY MBaAFJdSaoUSE+WmOsKUeO0TZwgp/KGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQt ZTJkY2U5M2E0NTI5LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80YmU4NmEtMGFlYi00YjE4LWE2YzQtZTJkY2U5M2E0NTI5 LzEvbDFKcWhSSVQ1YVk2d3BSNDdSTm5DQ244b2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGVrDFiN POB0CwD29kI8tIHh1KE28pSXdsjczs+EB5dlbIW2wz8NpmsjUyKH4u1JGYRZsxXI ODrjPQC9VKD8FwcpQ5Sa7CjucRvihzP/41+d1QYOSy8C8L8Rsxi+7fVbwmzHeQea DcNTGI90FtUeuq1pr2PbG9uHVk/b+kAiPuZSpA5zIkIqD5yX5gJeBA4PudsI7z+l o1UKs2PJxxGb0f2UAx1iJCcw5SPQ0wdvcguBKjenQ6qR19XZ+qEW0R2q1xMd5HrL b3mFsmtmSN4g1ZoA495vBNJgXq4FroZprWvh75TlPpw3Sf1kOvgA3OH92iAzpyPt TxlSrYZgKUGxkw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:40 2025 by rpki-client