This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json) Hash identifier: Yxy7TMUiDuBey2djMwuhiY6xCBccvqu1GGZI2PnDo6g= Subject key identifier: 86:F4:61:1E:B9:3B:96:CF:21:53:AB:4A:25:1C:82:54:E4:D0:B6:62 Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Certificate serial: 019B59E3B86DA3002A99A14E7B5BB3070F16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft Manifest number: 1780 Signing time: Fri 26 Dec 2025 09:00:54 +0000 Manifest this update: Fri 26 Dec 2025 09:00:54 +0000 Manifest next update: Sat 27 Dec 2025 09:00:54 +0000 Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: Ta9nAYsdwOgvUTnMaYt1lKVsuYKkVK7t4fYry/LAGFA=) 2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b8:6d:a3:00:2a:99:a1:4e:7b:5b:b3:07:0f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901 Validity Not Before: Dec 26 09:00:54 2025 GMT Not After : Dec 27 09:00:54 2025 GMT Subject: CN=86f4611eb93b96cf2153ab4a251c8254e4d0b662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:d9:e3:08:0e:c5:ae:f4:b5:53:a5:7b:47: 5b:eb:05:7f:5a:7f:48:56:45:2c:4c:aa:a2:ab:e5: 90:35:7c:9b:0b:a6:a3:01:f8:5a:be:9b:a2:43:12: ad:fe:19:b4:b3:ec:7a:19:e0:bf:51:58:50:63:5b: 41:e0:f4:65:a3:8c:ff:df:63:5a:b2:0a:01:88:bd: 08:19:da:9e:2d:d9:b7:a9:6c:6c:56:c2:9f:53:83: 1f:b2:89:f1:11:27:0f:a1:d5:4c:6d:04:98:d3:cd: cc:03:fa:32:88:37:45:22:97:e3:d3:11:7a:c5:fa: 40:e5:0c:ee:ab:41:80:82:a2:33:8b:04:df:42:43: 4c:c8:04:80:52:3c:ec:7c:1b:39:55:68:f6:7a:fc: 0d:70:52:bc:96:7c:80:8c:af:2e:49:3d:8d:94:b5: 36:7a:d5:6d:5f:7f:5e:47:2e:91:29:24:59:ab:0f: fa:f2:5f:df:2c:fd:b5:00:a2:f2:a4:18:74:b0:b2: 84:a1:20:78:59:09:86:fd:38:13:d6:87:27:b7:bb: be:26:66:09:8a:27:c4:e8:14:f8:fb:dc:5b:fe:a5: 4e:60:65:8d:00:1b:60:44:4f:9e:f0:c5:1a:ca:8f: 1a:6e:50:65:db:21:80:1b:c8:93:da:96:4e:da:a8: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:61:1E:B9:3B:96:CF:21:53:AB:4A:25:1C:82:54:E4:D0:B6:62 X509v3 Authority Key Identifier: keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:11:53:50:d3:e9:c2:dd:12:71:5a:82:49:f7:59:89:1f: ab:60:21:78:73:ec:7d:11:3b:37:fc:9e:e6:c0:1e:6f:cd:a0: c5:a6:90:f6:48:64:af:c0:80:bd:1f:a1:a1:34:b5:7b:07:1d: 1d:59:b0:a3:df:53:a6:ac:b2:41:22:97:b5:53:ef:c1:4d:ad: fc:a5:1c:04:7d:0c:de:0c:1d:0b:20:ab:c2:83:cb:35:e7:4f: 18:fe:a7:9c:a2:94:5e:d7:af:76:7d:58:bb:55:9c:f9:95:a6: 00:d7:07:00:8a:0a:de:5e:d0:c7:dc:1b:d8:e5:b7:0a:2e:53: 25:65:59:83:a2:67:b3:0a:2f:83:88:a5:c4:5a:9b:56:79:37: 5b:b2:0c:f2:64:ea:96:1f:4d:dd:db:6e:3a:34:86:b0:5a:08: a0:22:99:b1:56:31:c4:e0:28:78:fa:9d:a1:90:95:74:64:c8: 75:5d:7c:80:3c:75:e7:97:39:3c:6e:45:33:9e:c1:a1:2a:1f: 9b:31:0c:d5:53:d5:8f:ea:84:6f:b9:41:e4:97:e2:d2:a5:c7: 75:ac:4e:28:c6:e3:0d:03:1f:cc:75:b4:28:bb:bf:8b:4d:24: 9c:3a:65:b1:70:3a:6e:b5:3e:74:51:c3:3c:ea:cf:a8:95:7b: 4c:3a:6e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47htowAqmaFOe1uzBw8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWZhYjVjOWE0ZTEzODAzMmU1YjMwMGVhM2VkZDllNGQy YjY5MDEwHhcNMjUxMjI2MDkwMDU0WhcNMjUxMjI3MDkwMDU0WjAzMTEwLwYDVQQD Eyg4NmY0NjExZWI5M2I5NmNmMjE1M2FiNGEyNTFjODI1NGU0ZDBiNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmnZ4wgOxa70tVOle0db6wV/Wn9I VkUsTKqiq+WQNXybC6ajAfhavpuiQxKt/hm0s+x6GeC/UVhQY1tB4PRlo4z/32Na sgoBiL0IGdqeLdm3qWxsVsKfU4MfsonxEScPodVMbQSY083MA/oyiDdFIpfj0xF6 xfpA5Qzuq0GAgqIziwTfQkNMyASAUjzsfBs5VWj2evwNcFK8lnyAjK8uST2NlLU2 etVtX39eRy6RKSRZqw/68l/fLP21AKLypBh0sLKEoSB4WQmG/TgT1ocnt7u+JmYJ iifE6BT4+9xb/qVOYGWNABtgRE+e8MUayo8ablBl2yGAG8iT2pZO2qjV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb0YR65O5bPIVOrSiUcglTk0LZiMB8GA1UdIwQY MBaAFC9fq1yaThOAMuWzAOo+3Z5NK2kBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMt YWE1MmMwMGRlOWMxLzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MDAwZTAtNjlkOC00MTNlLWIyYTMtYWE1MmMwMGRlOWMx LzEvTDEtclhKcE9FNEF5NWJNQTZqN2RuazByYVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHYRU1DT 6cLdEnFagkn3WYkfq2AheHPsfRE7N/ye5sAeb82gxaaQ9khkr8CAvR+hoTS1ewcd HVmwo99TpqyyQSKXtVPvwU2t/KUcBH0M3gwdCyCrwoPLNedPGP6nnKKUXtevdn1Y u1Wc+ZWmANcHAIoK3l7Qx9wb2OW3Ci5TJWVZg6Jnswovg4ilxFqbVnk3W7IM8mTq lh9N3dtuOjSGsFoIoCKZsVYxxOAoePqdoZCVdGTIdV18gDx155c5PG5FM57BoSof mzEM1VPVj+qEb7lB5Jfi0qXHdaxOKMbjDQMfzHW0KLu/i00knDplsXA6brU+dFHD POrPqJV7TDpuKg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:08 2025 by rpki-client