This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json) Hash identifier: 9iPFst4KXGSI4fa6VMceZwmfo6UiLuadVDTf36bJ1pk= Subject key identifier: DB:5A:DA:FC:24:64:5E:0F:B4:E3:BD:8B:33:60:BB:CA:EC:9B:BE:AD Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6 Certificate serial: 019B46CAAD5D1E37A1148E05712D53C10CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft Manifest number: 154E Signing time: Mon 22 Dec 2025 16:00:46 +0000 Manifest this update: Mon 22 Dec 2025 16:00:46 +0000 Manifest next update: Tue 23 Dec 2025 16:00:46 +0000 Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=) 2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: n9Cwi6GLC7ySW8B7K/aCm+zlygikFqsYz94t2QPP+IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:ad:5d:1e:37:a1:14:8e:05:71:2d:53:c1:0c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6 Validity Not Before: Dec 22 16:00:46 2025 GMT Not After : Dec 23 16:00:46 2025 GMT Subject: CN=db5adafc24645e0fb4e3bd8b3360bbcaec9bbead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:21:5b:bb:90:2a:e0:64:5c:95:b5:f8:65: e6:04:5e:27:df:d0:92:20:9c:87:c7:82:aa:6a:f2: d9:d5:e6:bd:17:a9:ec:f1:69:b9:7e:58:10:e5:6f: bd:55:2f:53:75:17:01:ef:7b:47:98:92:c1:24:bb: c9:42:fa:a3:e1:46:03:a9:77:41:d5:3c:42:aa:3b: 4c:b6:5b:13:a8:df:b4:d8:d5:e0:6a:0a:30:88:c5: 94:d1:06:f3:c4:cc:4d:f0:a1:49:48:07:79:4d:16: d7:7c:f6:02:da:94:af:90:24:46:97:42:0b:cc:f2: 0d:6e:17:97:5d:aa:7e:f1:2a:fd:f1:2c:c3:45:88: 10:89:d7:79:8f:84:e6:f0:a7:a5:ff:f0:24:b1:c6: 59:37:d3:fe:67:35:fe:d6:4a:24:b6:bf:9c:3e:24: 04:5e:6e:53:3f:d0:b8:a7:81:12:ee:e6:27:56:24: 6c:23:53:74:ee:f0:2d:7e:98:2b:a5:55:c6:5d:3c: 2e:65:1a:ac:eb:46:82:c9:f2:e4:8e:26:fc:7b:6d: 12:51:5e:c7:85:3c:96:e3:1d:97:a1:8f:5e:40:9f: 60:01:57:a2:55:a1:5f:80:54:f2:2a:94:51:32:a9: c8:04:0d:08:a4:b6:50:07:f3:a8:6a:39:84:75:e2: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5A:DA:FC:24:64:5E:0F:B4:E3:BD:8B:33:60:BB:CA:EC:9B:BE:AD X509v3 Authority Key Identifier: keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:94:b0:8d:e1:ea:ee:0a:d7:4e:96:b6:2d:39:2b:a9:44:e2: 80:de:3d:64:d5:e6:f6:d9:ec:3a:dd:79:e7:cf:5a:20:40:2e: d2:b9:34:0d:0a:27:f5:3d:0f:ed:94:47:65:fc:fa:88:b5:db: e9:9d:41:89:1f:4e:00:4b:c8:02:7d:74:a7:a7:4d:1e:bd:29: 9a:cf:d5:25:9c:88:f3:e6:08:93:bd:54:c0:6d:3f:f9:0b:24: f6:b4:d8:d6:f4:73:71:18:5d:90:d8:1a:1c:13:cb:2c:b7:bc: ff:47:12:eb:d4:02:7f:61:d9:1a:10:44:0b:e5:5b:34:97:f0: df:93:eb:94:54:46:d3:3a:36:c7:42:78:2b:19:21:48:dc:35: ac:f7:fe:04:23:d6:42:1b:e9:5e:69:5a:e7:a5:e0:c3:12:d0: 07:91:b6:3c:5b:bf:e4:fd:e0:18:f9:8a:80:0f:15:6b:b3:b1: 98:79:46:01:98:ae:d9:76:32:7b:b5:77:f7:6e:b1:cd:5b:4c: 40:33:3f:ca:af:cd:a3:05:54:c9:39:22:f9:4e:bd:3d:3e:17: b8:8c:7a:50:a4:cb:58:53:d0:c6:23:cc:c6:08:cf:09:6c:5a: f1:51:43:46:49:7c:ee:1a:d5:d1:e8:cc:e0:67:21:f7:b6:00: 8c:51:09:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyq1dHjehFI4FcS1TwQz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz MTI3YzYwHhcNMjUxMjIyMTYwMDQ2WhcNMjUxMjIzMTYwMDQ2WjAzMTEwLwYDVQQD EyhkYjVhZGFmYzI0NjQ1ZTBmYjRlM2JkOGIzMzYwYmJjYWVjOWJiZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyAhW7uQKuBkXJW1+GXmBF4n39CS IJyHx4KqavLZ1ea9F6ns8Wm5flgQ5W+9VS9TdRcB73tHmJLBJLvJQvqj4UYDqXdB 1TxCqjtMtlsTqN+02NXgagowiMWU0QbzxMxN8KFJSAd5TRbXfPYC2pSvkCRGl0IL zPINbheXXap+8Sr98SzDRYgQidd5j4Tm8Kel//AkscZZN9P+ZzX+1koktr+cPiQE Xm5TP9C4p4ES7uYnViRsI1N07vAtfpgrpVXGXTwuZRqs60aCyfLkjib8e20SUV7H hTyW4x2XoY9eQJ9gAVeiVaFfgFTyKpRRMqnIBA0IpLZQB/OoajmEdeLv9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNta2vwkZF4PtOO9izNgu8rsm76tMB8GA1UdIwQY MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1pSwjeHq 7grXTpa2LTkrqUTigN49ZNXm9tnsOt15589aIEAu0rk0DQon9T0P7ZRHZfz6iLXb 6Z1BiR9OAEvIAn10p6dNHr0pms/VJZyI8+YIk71UwG0/+Qsk9rTY1vRzcRhdkNga HBPLLLe8/0cS69QCf2HZGhBEC+VbNJfw35PrlFRG0zo2x0J4KxkhSNw1rPf+BCPW QhvpXmla56XgwxLQB5G2PFu/5P3gGPmKgA8Va7OxmHlGAZiu2XYye7V3926xzVtM QDM/yq/NowVUyTki+U69PT4XuIx6UKTLWFPQxiPMxgjPCWxa8VFDRkl87hrV0ejM 4Gch97YAjFEJ3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 20:32:42 2025 by rpki-client