This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json) Hash identifier: FIdshx+qmLUVMBCby7H1fqGT1ZwmWnbyaEUIVSxOXfE= Subject key identifier: DD:20:8D:24:7D:A3:E5:82:34:AE:23:F6:11:1D:64:CC:05:15:B4:AD Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55 Certificate serial: 019B0F6E43FA5C6728733A26DFBC11F73227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft Manifest number: 0ED6 Signing time: Thu 11 Dec 2025 22:00:43 +0000 Manifest this update: Thu 11 Dec 2025 22:00:43 +0000 Manifest next update: Fri 12 Dec 2025 22:00:43 +0000 Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=) 2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: RajhyoxCEWnKmTi4ph9BA1yXVmfYEaqvfUDIi7hWGz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:43:fa:5c:67:28:73:3a:26:df:bc:11:f7:32:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55 Validity Not Before: Dec 11 22:00:43 2025 GMT Not After : Dec 12 22:00:43 2025 GMT Subject: CN=dd208d247da3e58234ae23f6111d64cc0515b4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:57:40:97:f2:bf:d2:e6:84:d5:c0:d1:1d: f6:4f:22:58:67:8f:8d:1d:bf:ce:3a:1c:62:c0:81: de:9d:bb:ed:a1:23:42:0a:a7:ba:d9:46:49:14:95: 00:b2:96:dc:0f:f4:f8:0c:cb:96:5f:3f:bc:f7:16: 57:98:36:6a:ad:38:20:5e:6c:2f:75:81:34:39:78: 8c:8e:7e:93:8d:82:3d:dc:4f:e1:6f:19:1f:77:f2: f4:78:06:ee:70:87:28:52:f6:a5:1b:6b:da:65:f9: 3a:e2:b9:fc:6a:93:dc:df:65:d1:01:19:93:ba:15: 13:57:8e:5c:32:94:cc:36:68:10:24:f1:55:34:a9: 80:58:2c:a7:d2:79:f0:67:b0:07:9a:ef:a4:68:4a: 85:c4:11:2a:b3:49:cf:3f:67:dc:6f:59:89:89:61: 46:ab:10:b9:8b:6c:23:92:9d:18:cb:8e:c5:e6:d6: 1c:15:87:79:b3:e2:c5:67:5e:07:85:2f:2d:99:03: 9f:7f:fc:52:44:fd:22:fe:92:af:cf:6f:97:9f:93: 2d:3e:8c:80:6d:7e:ac:8b:5f:74:00:f9:5b:db:d1: fd:00:78:7a:32:fa:1c:0e:11:c0:4d:4e:48:da:86: ee:8d:05:71:8f:51:da:65:00:e7:fa:6a:cf:d0:b6: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:8D:24:7D:A3:E5:82:34:AE:23:F6:11:1D:64:CC:05:15:B4:AD X509v3 Authority Key Identifier: keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0f:c7:a9:0d:e7:22:5a:5e:fc:e6:45:d2:9d:7a:25:7c:bc: 26:50:a4:ef:82:31:20:ca:2c:bc:68:34:50:2a:ee:99:35:c6: fe:0c:6c:f2:d9:ee:6b:a2:cf:e9:34:53:01:a0:0b:1a:9a:9c: 4a:d9:72:86:2b:f4:73:6a:a7:85:d5:ca:40:40:ff:52:9f:41: 4a:b1:a7:26:6b:6b:6d:f9:c8:41:8f:99:d2:a9:26:97:e2:11: 9e:2a:db:b0:8d:2b:f6:b2:e2:bc:53:52:f3:fe:6c:b1:ee:90: 59:aa:34:c7:35:56:af:10:88:62:c4:ef:6f:93:e4:34:96:55: 5f:75:4a:f3:8c:66:a3:19:7d:e7:10:a5:b8:8f:c5:db:32:d7: 1e:49:3a:69:6d:b4:62:69:ff:68:e0:5a:eb:ce:e6:ea:1d:54: 2c:5a:c0:52:23:b9:83:30:bd:1b:92:05:0d:6e:58:2a:a1:a4: ad:e8:ee:97:8a:4b:44:5f:8f:4c:74:0a:57:c5:43:74:37:5b: f4:f4:f1:ed:90:94:95:00:19:33:3a:05:c2:fb:ca:e2:1f:0c: f4:4f:45:12:74:f0:37:10:40:31:91:8b:b8:bb:01:1f:c2:ed: bc:48:a4:6a:26:cd:f7:e8:a7:4b:be:73:44:08:e8:36:bf:00: 30:5e:9d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbkP6XGcoczom37wR9zInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi MmRjNTUwHhcNMjUxMjExMjIwMDQzWhcNMjUxMjEyMjIwMDQzWjAzMTEwLwYDVQQD EyhkZDIwOGQyNDdkYTNlNTgyMzRhZTIzZjYxMTFkNjRjYzA1MTViNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPlXQJfyv9LmhNXA0R32TyJYZ4+N Hb/OOhxiwIHenbvtoSNCCqe62UZJFJUAspbcD/T4DMuWXz+89xZXmDZqrTggXmwv dYE0OXiMjn6TjYI93E/hbxkfd/L0eAbucIcoUvalG2vaZfk64rn8apPc32XRARmT uhUTV45cMpTMNmgQJPFVNKmAWCyn0nnwZ7AHmu+kaEqFxBEqs0nPP2fcb1mJiWFG qxC5i2wjkp0Yy47F5tYcFYd5s+LFZ14HhS8tmQOff/xSRP0i/pKvz2+Xn5MtPoyA bX6si190APlb29H9AHh6MvocDhHATU5I2obujQVxj1HaZQDn+mrP0Lbe8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0gjSR9o+WCNK4j9hEdZMwFFbStMB8GA1UdIwQY MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg/HqQ3n Ilpe/OZF0p16JXy8JlCk74IxIMosvGg0UCrumTXG/gxs8tnua6LP6TRTAaALGpqc Stlyhiv0c2qnhdXKQED/Up9BSrGnJmtrbfnIQY+Z0qkml+IRnirbsI0r9rLivFNS 8/5sse6QWao0xzVWrxCIYsTvb5PkNJZVX3VK84xmoxl95xCluI/F2zLXHkk6aW20 Ymn/aOBa687m6h1ULFrAUiO5gzC9G5IFDW5YKqGkrejul4pLRF+PTHQKV8VDdDdb 9PTx7ZCUlQAZMzoFwvvK4h8M9E9FEnTwNxBAMZGLuLsBH8LtvEikaibN9+inS75z RAjoNr8AMF6dDw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:02 2025 by rpki-client