This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json) Hash identifier: gFVlMRpep4WNCe9CTMi0Yf3V0TlAootwev5A2RmBL9M= Subject key identifier: 73:F3:82:19:80:97:16:F0:82:47:7C:BE:6D:FB:EC:7E:0B:B0:95:BA Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3 Certificate serial: 019B3B6BBEAF660BD8CB0E2D594071877FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft Manifest number: 103D Signing time: Sat 20 Dec 2025 11:01:15 +0000 Manifest this update: Sat 20 Dec 2025 11:01:15 +0000 Manifest next update: Sun 21 Dec 2025 11:01:15 +0000 Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: LMgJhrFrL4mxUOQ8ao/gqjn2Beqck9tQobrhpG4diR0=) 2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=) 3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:be:af:66:0b:d8:cb:0e:2d:59:40:71:87:7f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3 Validity Not Before: Dec 20 11:01:15 2025 GMT Not After : Dec 21 11:01:15 2025 GMT Subject: CN=73f38219809716f082477cbe6dfbec7e0bb095ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:0f:0b:7e:47:2d:dd:35:c3:2f:b0:b9:d9: ce:39:2a:b6:17:4a:1f:c5:1a:b4:ee:29:7a:ad:22: cb:b8:37:fc:5f:79:99:d1:09:ca:d8:89:8c:d5:82: da:81:df:4c:16:e5:63:9f:19:dd:54:a8:6a:3d:91: b9:74:7b:a7:bf:ad:a0:10:e2:9b:f8:bc:2e:bb:d4: e9:6e:19:a7:8c:52:a1:b9:6b:39:a1:ba:42:11:cb: 9c:47:ec:05:3c:35:81:f7:cb:83:32:66:56:b0:a3: 25:9f:6c:c5:48:58:c8:a5:8f:74:bd:6e:a5:b2:30: 37:4c:a2:05:e7:eb:43:44:f6:3a:d2:3c:1f:8d:91: 59:72:73:3b:91:43:fb:9c:9c:da:31:58:5b:1f:c5: 9b:05:ce:81:76:13:f8:10:30:c2:30:26:df:1a:a3: 9d:80:32:91:24:45:9d:07:cc:e1:42:cf:41:af:9f: fa:b6:b0:02:7d:72:0b:6c:f9:09:26:14:01:c2:a6: 52:49:41:31:fb:23:84:39:96:99:a3:1f:72:a4:d7: 8a:eb:1d:9d:e4:28:eb:26:d4:dc:fb:7d:3a:b0:3a: 37:5b:e6:0c:3a:37:c9:5e:6c:d4:bb:7e:80:07:e0: d1:98:cb:83:64:74:0d:d6:a8:a4:dc:79:77:c6:52: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:82:19:80:97:16:F0:82:47:7C:BE:6D:FB:EC:7E:0B:B0:95:BA X509v3 Authority Key Identifier: keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:39:55:46:9a:13:87:fb:44:9b:79:37:a7:87:7f:27:1c:0f: 53:91:ec:a4:2b:c4:ac:6a:47:ba:d1:e3:6e:12:ee:0d:85:db: 9d:82:be:88:72:8d:71:8c:07:52:a2:5d:74:b2:e9:72:0d:a0: 96:e1:8b:1a:09:57:87:44:0d:55:9d:66:74:2d:da:63:c6:f8: 71:ef:18:41:17:74:41:af:ed:ad:9a:e5:c3:c7:10:23:b3:a9: 4d:bc:75:8d:d2:c3:54:19:b8:33:2c:d9:47:b9:17:2e:a8:d6: 93:10:e1:f9:b9:30:58:5c:5e:24:6d:f5:bf:e6:fa:ec:00:72: 87:6c:3c:bc:49:41:0f:eb:88:55:22:13:17:4c:5e:3d:90:6d: 4e:34:40:90:27:96:b5:8d:43:99:fa:5c:66:f4:d7:68:04:9b: cc:91:1d:5d:f0:16:4b:39:9f:ee:6c:b2:f8:44:5a:ba:19:64: 8d:37:5b:33:c9:7f:0f:dd:11:d5:ee:20:ae:25:43:79:ed:49: c8:f1:2c:c3:8e:69:9e:fe:fc:21:d4:4f:db:5c:63:5f:0d:7c: 94:50:bc:8c:3c:e1:47:12:c8:b3:4d:8b:cd:24:19:c0:c6:f7: 7b:68:4c:d8:f1:92:cb:3c:8c:2a:05:4c:83:2b:af:a6:fb:11: 34:58:b5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a76vZgvYyw4tWUBxh3/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZDM3OTM1M2UzYzk0OGRmZDk4ZGEwYTU5ZTk3OTIzNTNh NGQwZTMwHhcNMjUxMjIwMTEwMTE1WhcNMjUxMjIxMTEwMTE1WjAzMTEwLwYDVQQD Eyg3M2YzODIxOTgwOTcxNmYwODI0NzdjYmU2ZGZiZWM3ZTBiYjA5NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYYPC35HLd01wy+wudnOOSq2F0of xRq07il6rSLLuDf8X3mZ0QnK2ImM1YLagd9MFuVjnxndVKhqPZG5dHunv62gEOKb +Lwuu9TpbhmnjFKhuWs5obpCEcucR+wFPDWB98uDMmZWsKMln2zFSFjIpY90vW6l sjA3TKIF5+tDRPY60jwfjZFZcnM7kUP7nJzaMVhbH8WbBc6BdhP4EDDCMCbfGqOd gDKRJEWdB8zhQs9Br5/6trACfXILbPkJJhQBwqZSSUEx+yOEOZaZox9ypNeK6x2d 5CjrJtTc+306sDo3W+YMOjfJXmzUu36AB+DRmMuDZHQN1qik3Hl3xlKW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPzghmAlxbwgkd8vm377H4LsJW6MB8GA1UdIwQY MBaAFC/TeTU+PJSN/ZjaClnpeSNTpNDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEt OWUyMjU2MWJjYTg4LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEtOWUyMjU2MWJjYTg4 LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzlVRpoT h/tEm3k3p4d/JxwPU5HspCvErGpHutHjbhLuDYXbnYK+iHKNcYwHUqJddLLpcg2g luGLGglXh0QNVZ1mdC3aY8b4ce8YQRd0Qa/trZrlw8cQI7OpTbx1jdLDVBm4MyzZ R7kXLqjWkxDh+bkwWFxeJG31v+b67AByh2w8vElBD+uIVSITF0xePZBtTjRAkCeW tY1DmfpcZvTXaASbzJEdXfAWSzmf7myy+ERauhlkjTdbM8l/D90R1e4griVDee1J yPEsw45pnv78IdRP21xjXw18lFC8jDzhRxLIs02LzSQZwMb3e2hM2PGSyzyMKgVM gyuvpvsRNFi1Nw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:58:38 2025 by rpki-client