This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json) Hash identifier: pjxYG29TFV0zfshfsfRgRWKIJvdYibPy/UZV248mNDI= Subject key identifier: F2:9C:36:97:CE:30:70:CD:CF:11:63:AB:BB:75:46:B3:CF:91:8E:BC Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e Certificate serial: 019B18715BA167732737E974EEBB6633011F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft Manifest number: 0664 Signing time: Sat 13 Dec 2025 16:00:40 +0000 Manifest this update: Sat 13 Dec 2025 16:00:40 +0000 Manifest next update: Sun 14 Dec 2025 16:00:40 +0000 Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: /XdcH9jlGbT7giuybaI3dQvrmuaTga9yACzQKChvQRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:5b:a1:67:73:27:37:e9:74:ee:bb:66:33:01:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e Validity Not Before: Dec 13 16:00:40 2025 GMT Not After : Dec 14 16:00:40 2025 GMT Subject: CN=f29c3697ce3070cdcf1163abbb7546b3cf918ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:5e:4e:5e:58:ff:94:c8:fe:4a:e3:b9:2e: e2:5c:76:60:dd:1f:5e:c8:3f:3a:6b:b4:24:74:4d: f7:22:2f:52:fc:41:7e:e3:c4:f8:71:ab:4f:58:6b: cc:fd:18:f4:50:e6:75:88:2e:e5:88:74:a6:f3:b1: d3:af:0a:7f:04:29:98:68:55:11:99:f0:f0:2b:a2: 64:01:55:7b:cf:29:6b:dd:0e:bd:fe:7d:31:c1:c6: eb:6d:40:ee:85:7d:97:8f:e1:f3:4d:4e:37:c7:02: 84:35:97:2f:a6:d6:62:d0:b2:7a:a2:de:a9:bb:14: cc:30:13:6f:73:bf:05:4d:50:00:88:80:02:ec:32: 13:14:45:84:9c:d9:87:05:12:2e:29:47:cb:3f:95: 43:fe:bb:b7:2f:b8:09:58:36:6b:ee:33:bb:d1:7f: d9:f3:67:2b:d8:ea:0c:fd:5c:91:3c:de:da:db:4d: 22:6f:ce:05:0b:13:7b:2c:b9:c1:72:4e:16:e8:42: f5:0e:f9:dd:fe:64:55:5b:55:af:9e:a3:2c:95:53: b1:7e:2f:41:97:65:de:7b:76:7a:89:2a:c0:dd:96: 9d:28:95:13:63:fb:29:00:74:a0:8d:98:39:0a:51: bf:ee:4b:22:13:56:05:7d:b0:bc:a3:45:9a:ce:42: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9C:36:97:CE:30:70:CD:CF:11:63:AB:BB:75:46:B3:CF:91:8E:BC X509v3 Authority Key Identifier: keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6f:b4:2f:13:5b:dd:34:40:9d:aa:c2:b1:80:f2:24:37:be: 2c:6f:eb:2d:26:89:67:dd:5a:c6:55:05:4c:93:60:d9:18:fd: a8:92:c0:8e:6a:f3:c8:e9:26:34:83:ad:86:a7:44:95:66:62: 24:b7:e3:3c:4e:01:91:93:05:38:74:52:16:d7:24:b3:27:b0: 58:b4:74:5f:af:ac:c3:c2:a0:35:73:ee:79:1f:a1:80:45:aa: 57:28:c1:16:d3:e1:6a:9b:45:f1:ea:f5:ec:7b:ad:c8:f2:27: b0:e1:33:71:b1:bc:9e:9a:d6:a8:4c:41:d4:d2:f9:42:6c:f2: b2:7d:54:94:c2:6c:b0:a2:c1:22:42:69:4e:9c:34:cc:de:b7: 87:0f:f3:d9:b8:11:96:d9:7b:be:c2:45:54:c7:ae:5b:24:61: ee:a4:3a:b7:cc:78:99:81:41:1f:e5:01:22:5e:ac:b3:b6:25: c1:ac:62:01:9f:40:36:5c:f1:22:68:4c:35:aa:f9:3a:68:4d: bc:f3:2e:f8:15:6a:02:01:a6:bd:37:7b:02:8d:c7:36:45:78: 10:3d:a5:a5:41:cc:17:04:29:65:0b:56:4d:2f:8f:05:d4:1c: d2:8d:98:b5:dc:26:60:d7:8d:cd:fc:8c:7b:5a:a1:62:4f:a0: a2:ff:e8:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcVuhZ3MnN+l07rtmMwEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzhjYzljNTk0YmM4ZThmMTQ1NDU2ZjQxNTY2ZDhjYmQ0 YWFkM2UwHhcNMjUxMjEzMTYwMDQwWhcNMjUxMjE0MTYwMDQwWjAzMTEwLwYDVQQD EyhmMjljMzY5N2NlMzA3MGNkY2YxMTYzYWJiYjc1NDZiM2NmOTE4ZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPVeTl5Y/5TI/krjuS7iXHZg3R9e yD86a7QkdE33Ii9S/EF+48T4catPWGvM/Rj0UOZ1iC7liHSm87HTrwp/BCmYaFUR mfDwK6JkAVV7zylr3Q69/n0xwcbrbUDuhX2Xj+HzTU43xwKENZcvptZi0LJ6ot6p uxTMMBNvc78FTVAAiIAC7DITFEWEnNmHBRIuKUfLP5VD/ru3L7gJWDZr7jO70X/Z 82cr2OoM/VyRPN7a200ib84FCxN7LLnBck4W6EL1Dvnd/mRVW1WvnqMslVOxfi9B l2Xee3Z6iSrA3ZadKJUTY/spAHSgjZg5ClG/7ksiE1YFfbC8o0WazkIDtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKcNpfOMHDNzxFjq7t1RrPPkY68MB8GA1UdIwQY MBaAFJd4zJxZS8jo8UVFb0FWbYy9Sq0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgt ZTgwMmNkNmRhNjA4LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jNjA1ZmItZGRkYy00NzRjLThkNDgtZTgwMmNkNmRhNjA4 LzEvbDNqTW5GbEx5T2p4UlVWdlFWWnRqTDFLclQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm+0LxNb 3TRAnarCsYDyJDe+LG/rLSaJZ91axlUFTJNg2Rj9qJLAjmrzyOkmNIOthqdElWZi JLfjPE4BkZMFOHRSFtcksyewWLR0X6+sw8KgNXPueR+hgEWqVyjBFtPhaptF8er1 7HutyPInsOEzcbG8nprWqExB1NL5Qmzysn1UlMJssKLBIkJpTpw0zN63hw/z2bgR ltl7vsJFVMeuWyRh7qQ6t8x4mYFBH+UBIl6ss7YlwaxiAZ9ANlzxImhMNar5OmhN vPMu+BVqAgGmvTd7Ao3HNkV4ED2lpUHMFwQpZQtWTS+PBdQc0o2YtdwmYNeNzfyM e1qhYk+gov/oqg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:40 2025 by rpki-client