This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json) Hash identifier: 0mmYNdGG4JdM0FHKB1XX3ViBpZWjtsoscOvnA/fnBbo= Subject key identifier: F3:F3:5B:AE:DA:2F:8D:CA:C2:84:44:BD:D1:CE:FC:48:F1:86:B4:F8 Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Certificate serial: 019B0F3739460580BA73AFB7CC13C7B74EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft Manifest number: 0B73 Signing time: Thu 11 Dec 2025 21:00:35 +0000 Manifest this update: Thu 11 Dec 2025 21:00:35 +0000 Manifest next update: Fri 12 Dec 2025 21:00:35 +0000 Files and hashes: 1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: mz8DyQd6llJatvbYAV328rLRkwJN5iSb9/g/LHv5l6M=) 2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:39:46:05:80:ba:73:af:b7:cc:13:c7:b7:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85 Validity Not Before: Dec 11 21:00:35 2025 GMT Not After : Dec 12 21:00:35 2025 GMT Subject: CN=f3f35baeda2f8dcac28444bdd1cefc48f186b4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:93:ba:2c:32:73:b8:bb:93:e0:94:98:b2: 9d:dd:c6:6a:62:61:c2:d9:30:fc:11:97:b0:7c:ce: a9:b4:29:d9:52:cb:e5:db:9c:80:83:7a:6b:d8:2d: b5:28:fa:5c:6c:93:22:91:d0:9b:ab:90:8c:07:73: f0:8c:2b:62:26:98:55:8c:09:42:5c:4f:63:09:77: a0:97:30:c7:7b:68:62:f5:6b:86:97:80:3c:d7:68: 9f:19:5d:f9:1c:82:97:62:86:90:ac:6d:c2:b2:62: 63:90:24:e7:1c:1b:43:6d:49:d9:64:69:37:ef:c3: 22:7e:f9:d7:5e:6d:61:f7:8c:ec:c1:f4:1e:ce:d1: c0:c1:d4:e7:d1:3e:15:6d:69:21:3e:a7:77:51:03: 53:17:71:ca:d1:7f:ac:27:09:f5:1b:01:16:da:68: 77:05:48:79:f1:56:a5:ff:2c:ef:28:0f:48:fb:1e: 75:ac:ab:d1:df:d3:75:7b:9e:b0:08:ab:de:7e:21: c6:25:8b:ae:d6:3f:77:36:9f:3e:aa:9f:a6:42:a5: df:35:84:47:81:79:76:a8:e1:e4:be:2d:5e:ce:5f: 33:19:15:a0:af:bc:87:5d:e4:93:2a:fd:cb:48:98: 2b:c6:6f:ba:c0:37:e7:40:5e:bc:b6:10:dc:fd:62: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:5B:AE:DA:2F:8D:CA:C2:84:44:BD:D1:CE:FC:48:F1:86:B4:F8 X509v3 Authority Key Identifier: keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:21:2c:04:25:4f:85:43:16:4f:6b:52:17:5a:63:8b:4f:d4: d5:03:c2:a9:14:c1:ea:7c:08:23:16:84:14:ff:ba:9f:30:a7: c3:1e:de:e3:26:8b:64:a4:72:90:b8:da:ec:dc:b1:db:a6:d1: 65:7b:db:a7:1c:53:cd:56:1a:d9:1e:88:a4:44:6e:38:0b:dd: 69:70:de:e7:7f:9e:86:f6:b3:5e:e4:7a:c9:b8:e0:ed:6e:ca: c9:5d:0a:83:77:ae:04:f5:4c:d0:5e:27:48:aa:bc:eb:98:29: 09:5c:11:0d:99:35:be:32:f0:ff:e6:91:83:17:0b:f4:2e:a8: 93:97:41:60:1a:ff:95:0c:39:c2:4c:bd:2d:6d:a3:4d:c6:03: e3:b7:29:ae:c4:3e:c1:4c:e0:05:30:5b:64:40:4e:14:8e:d7: 19:8f:4d:85:24:f8:ed:9b:b0:2d:b9:9e:6e:f2:7c:c8:2a:56: 08:0a:7e:d8:ee:62:91:f0:55:67:40:60:82:31:33:a8:42:32: 71:a4:9a:53:1e:d2:6f:ef:19:c3:1a:cd:b3:bd:4f:1f:ae:c5: c6:54:9c:2e:a5:69:c6:3c:4f:fd:20:39:00:47:3c:7b:c6:39: a7:e1:be:17:8c:0d:09:fc:fc:4f:33:1d:74:1b:20:9e:35:45: 31:65:9f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzlGBYC6c6+3zBPHt072MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNTkzYjI1NGE5YzNmYWM4MTY1MjUwMmYxYzQzYzIyMDFj MTZhODUwHhcNMjUxMjExMjEwMDM1WhcNMjUxMjEyMjEwMDM1WjAzMTEwLwYDVQQD EyhmM2YzNWJhZWRhMmY4ZGNhYzI4NDQ0YmRkMWNlZmM0OGYxODZiNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVSTuiwyc7i7k+CUmLKd3cZqYmHC 2TD8EZewfM6ptCnZUsvl25yAg3pr2C21KPpcbJMikdCbq5CMB3PwjCtiJphVjAlC XE9jCXeglzDHe2hi9WuGl4A812ifGV35HIKXYoaQrG3CsmJjkCTnHBtDbUnZZGk3 78MifvnXXm1h94zswfQeztHAwdTn0T4VbWkhPqd3UQNTF3HK0X+sJwn1GwEW2mh3 BUh58Val/yzvKA9I+x51rKvR39N1e56wCKvefiHGJYuu1j93Np8+qp+mQqXfNYRH gXl2qOHkvi1ezl8zGRWgr7yHXeSTKv3LSJgrxm+6wDfnQF68thDc/WLPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPzW67aL43KwoREvdHO/EjxhrT4MB8GA1UdIwQY MBaAFC9ZOyVKnD+sgWUlAvHEPCIBwWqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzIt YzNiYjg0NzYwMGNkLzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lZjM2MDgtYWNkNC00NWUxLTlkMzItYzNiYjg0NzYwMGNk LzEvTDFrN0pVcWNQNnlCWlNVQzhjUThJZ0hCYW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCEsBCVP hUMWT2tSF1pji0/U1QPCqRTB6nwIIxaEFP+6nzCnwx7e4yaLZKRykLja7Nyx26bR ZXvbpxxTzVYa2R6IpERuOAvdaXDe53+ehvazXuR6ybjg7W7KyV0Kg3euBPVM0F4n SKq865gpCVwRDZk1vjLw/+aRgxcL9C6ok5dBYBr/lQw5wky9LW2jTcYD47cprsQ+ wUzgBTBbZEBOFI7XGY9NhST47ZuwLbmebvJ8yCpWCAp+2O5ikfBVZ0BggjEzqEIy caSaUx7Sb+8ZwxrNs71PH67FxlScLqVpxjxP/SA5AEc8e8Y5p+G+F4wNCfz8TzMd dBsgnjVFMWWflQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:08 2025 by rpki-client