This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json) Hash identifier: Upegd4ILe6inwV84r/QQWWS0XqEsVHIDqBG9+Tsg8jc= Subject key identifier: 9D:D1:D4:71:44:55:24:AA:5B:E9:FA:F8:F2:63:23:79:AA:D4:20:7C Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 019B243EA547D7FCF77AAB2568EEA235FE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft Manifest number: 0929 Signing time: Mon 15 Dec 2025 23:00:43 +0000 Manifest this update: Mon 15 Dec 2025 23:00:43 +0000 Manifest next update: Tue 16 Dec 2025 23:00:43 +0000 Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=) 2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=) 3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: piFroXVEX9ga6WL7wEhr8vAL0ZnWcMVCvaT++IMpZSg=) 4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:a5:47:d7:fc:f7:7a:ab:25:68:ee:a2:35:fe:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Dec 15 23:00:43 2025 GMT Not After : Dec 16 23:00:43 2025 GMT Subject: CN=9dd1d471445524aa5be9faf8f2632379aad4207c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:fc:42:f7:d0:7b:04:0b:98:52:c0:7e:9b: ef:fc:e6:ba:a8:bd:14:48:99:e9:9b:70:84:3d:d0: fe:9e:07:37:4d:d8:a9:21:be:67:36:17:c8:41:bc: b1:74:a4:86:64:47:2f:07:86:82:87:ca:05:fb:11: dd:fc:68:05:d7:9a:4d:e5:9b:19:fb:a6:e2:fd:7e: aa:c3:48:79:8c:8d:52:4f:6b:99:8c:ed:ae:0c:43: 3f:0e:8e:ad:2e:ac:ae:2b:09:83:70:8b:81:62:32: 90:cf:24:1f:13:cf:43:62:34:1f:49:91:b6:04:f6: 19:44:9f:4c:24:0e:e9:a5:eb:4d:7e:d6:01:60:f6: ea:72:be:8c:9e:3a:b3:38:5c:8e:33:3f:dc:05:0c: af:21:4f:eb:e3:51:4c:1d:c0:4b:a3:86:99:8b:e1: 5f:dc:dd:e8:65:83:1e:98:b8:cd:3c:d6:83:80:0e: 7a:48:3c:cf:91:8e:77:95:02:fe:80:dd:ec:ba:cc: 2f:25:c3:04:21:a3:38:b5:9e:e5:45:7e:7e:ce:ec: 23:bb:49:dc:89:ab:00:9d:ef:a8:5a:47:50:c4:bc: 6d:d1:04:3e:75:cc:2f:03:a5:73:ba:81:7d:c6:36: 89:6c:47:cd:7b:be:c5:bd:d5:09:a9:11:80:b9:2a: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:D4:71:44:55:24:AA:5B:E9:FA:F8:F2:63:23:79:AA:D4:20:7C X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:5f:45:81:2c:78:58:f7:2c:f6:55:b6:c8:f5:12:57:98: 5f:5b:9b:90:29:46:26:76:b0:25:fd:0c:32:57:d9:c1:e4:e7: 22:30:1f:14:95:48:27:ca:d8:75:79:2e:ae:9d:95:c3:03:7b: a8:8b:b2:44:45:33:4a:c0:2d:ed:94:ed:6d:71:0d:45:5f:2a: e0:1c:a3:ea:f5:da:ad:be:a7:8d:7e:a8:08:80:46:f5:10:c2: f7:9b:5a:61:b4:2f:05:c9:5b:57:bf:45:df:01:2e:12:88:3a: 59:fc:6b:02:39:05:21:29:90:00:f5:9e:91:89:5c:88:43:67: 7c:3b:87:69:60:ef:50:1a:cf:89:e7:ab:26:72:ed:ca:8d:97: d4:ca:a1:2a:0c:42:bb:ff:e8:5f:da:fd:c0:a1:61:d8:b4:18: cd:ec:86:cd:76:60:cc:3d:dd:4a:14:e8:0b:60:53:b0:f8:5f: c6:b3:a1:eb:ce:fb:d6:02:83:0c:c5:91:c7:46:87:c6:40:4f: be:ee:80:3b:0e:00:ca:38:03:c3:cd:9f:74:68:b8:e5:53:83: 85:2b:d6:40:5d:f0:bb:65:20:a9:a4:e1:c9:18:38:ae:ee:46: d4:5b:3d:8c:85:fb:77:7b:42:e3:df:3c:6d:7b:89:36:0b:64: 26:02:6d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPqVH1/z3eqslaO6iNf40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjUxMjE1MjMwMDQzWhcNMjUxMjE2MjMwMDQzWjAzMTEwLwYDVQQD Eyg5ZGQxZDQ3MTQ0NTUyNGFhNWJlOWZhZjhmMjYzMjM3OWFhZDQyMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscH8QvfQewQLmFLAfpvv/Oa6qL0U SJnpm3CEPdD+ngc3TdipIb5nNhfIQbyxdKSGZEcvB4aCh8oF+xHd/GgF15pN5ZsZ +6bi/X6qw0h5jI1ST2uZjO2uDEM/Do6tLqyuKwmDcIuBYjKQzyQfE89DYjQfSZG2 BPYZRJ9MJA7ppetNftYBYPbqcr6MnjqzOFyOMz/cBQyvIU/r41FMHcBLo4aZi+Ff 3N3oZYMemLjNPNaDgA56SDzPkY53lQL+gN3suswvJcMEIaM4tZ7lRX5+zuwju0nc iasAne+oWkdQxLxt0QQ+dcwvA6VzuoF9xjaJbEfNe77FvdUJqRGAuSreXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3R1HFEVSSqW+n6+PJjI3mq1CB8MB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkJfRYEs eFj3LPZVtsj1EleYX1ubkClGJnawJf0MMlfZweTnIjAfFJVIJ8rYdXkurp2VwwN7 qIuyREUzSsAt7ZTtbXENRV8q4Byj6vXarb6njX6oCIBG9RDC95taYbQvBclbV79F 3wEuEog6WfxrAjkFISmQAPWekYlciENnfDuHaWDvUBrPieerJnLtyo2X1MqhKgxC u//oX9r9wKFh2LQYzeyGzXZgzD3dShToC2BTsPhfxrOh68771gKDDMWRx0aHxkBP vu6AOw4AyjgDw82fdGi45VODhSvWQF3wu2UgqaThyRg4ru5G1Fs9jIX7d3tC4988 bXuJNgtkJgJt1w== -----END CERTIFICATE-----Generated at Tue Dec 16 06:19:35 2025 by rpki-client