This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json) Hash identifier: ko5RqtY6Xa9Szq/1KAHvv7+1PfVYs7UcI+XaUZNBC/E= Subject key identifier: 5E:61:3F:DC:FE:8A:FC:E6:34:00:20:B8:CC:A7:76:9A:9C:C2:3B:20 Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Certificate serial: 019B597676C28F72EC99FF011C7B26B3CF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:01:34 +0000 Manifest this update: Fri 26 Dec 2025 07:01:34 +0000 Manifest next update: Sat 27 Dec 2025 07:01:34 +0000 Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: tYFF+zrTVDcTi3GN6jbOQhHDTQDSbCBAehvEGxQHPQo=) 2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:76:c2:8f:72:ec:99:ff:01:1c:7b:26:b3:cf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0 Validity Not Before: Dec 26 07:01:34 2025 GMT Not After : Dec 27 07:01:34 2025 GMT Subject: CN=5e613fdcfe8afce6340020b8cca7769a9cc23b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:f8:26:2f:40:4d:30:ac:7b:5e:d9:48:da: 37:96:4c:27:54:b5:fc:0e:ca:0b:58:a9:5e:a4:ac: 0b:f9:b4:2a:87:9c:4e:cf:e8:e3:b5:b9:71:81:b4: 66:3f:4e:33:e8:e4:60:cc:e2:a6:3e:d0:77:3e:d9: 50:91:e9:26:31:a0:1a:00:81:55:e7:1a:65:5a:7b: 1f:25:8f:f6:df:e2:f6:bc:4c:ac:50:c6:c8:ab:cc: 48:21:92:d1:6e:63:d9:a2:a4:41:1c:54:80:79:ad: 47:19:d5:54:d8:1f:d1:ad:ea:48:e7:88:6d:57:2c: 42:33:da:fd:63:05:db:f5:d6:b9:ca:56:44:b5:a1: c2:a6:67:f5:cf:e4:f6:3c:b4:ee:c0:e7:e7:c6:6a: 5d:e8:1b:be:94:6d:80:5f:47:5d:46:20:fa:8c:99: da:21:32:a3:25:25:78:87:9f:8d:7f:a7:f3:b7:4e: af:43:63:42:fc:79:aa:e3:0d:dc:43:ce:37:5d:c3: 88:67:eb:8e:ad:d4:1e:46:b1:02:36:f5:b8:5e:a9: 27:d8:71:d3:70:32:01:12:eb:ec:86:c6:a9:02:ca: fd:56:37:0f:fa:7b:67:a8:42:46:90:12:33:47:6e: fe:3e:0c:41:4e:37:d9:87:66:73:19:e3:c9:11:60: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:3F:DC:FE:8A:FC:E6:34:00:20:B8:CC:A7:76:9A:9C:C2:3B:20 X509v3 Authority Key Identifier: keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b5:63:fc:b3:0e:6d:7c:93:27:f7:b5:32:37:dc:19:8d:a6: 73:f4:69:84:cb:5e:19:71:86:e3:b1:c7:18:b4:72:50:df:fa: 0a:f1:0b:d2:f6:77:96:a8:24:cb:2f:bc:7b:a2:58:4e:a0:30: 82:56:2f:c2:6b:ec:69:17:a0:b2:7b:e4:bd:a2:71:90:b7:21: fa:55:5d:90:e6:b7:38:56:0c:14:2d:9d:a3:d7:ce:51:7d:82: 9a:b8:e2:25:5d:c9:3e:b7:0b:b9:ff:94:dd:0b:76:fc:90:bb: 83:99:ee:02:50:4d:f1:da:c6:07:60:22:5e:04:b0:09:65:ae: d6:5d:38:dd:4d:55:82:93:89:35:7f:39:05:ae:e0:65:b2:0a: bc:c9:26:64:3c:50:75:74:b7:67:d9:9a:fd:1f:36:3d:03:bb: e2:23:f7:a9:1b:69:26:64:e3:9e:34:60:17:48:11:12:68:4e: a5:a3:08:fd:23:5a:7d:0a:6f:83:dc:64:a0:95:87:01:51:4b: 18:a3:d1:1b:c1:f8:4a:56:b4:13:a8:de:58:a8:41:23:de:2c: bc:bc:c1:48:ae:8f:dd:5e:0e:0f:51:52:e0:27:3b:7c:cc:ac: 7d:77:75:80:3e:e9:c7:6f:03:cd:0b:69:1b:29:35:3d:d6:d4: ba:6d:7a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnbCj3Lsmf8BHHsms898MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNWNhZmQ1ZWZkMmRmMmM5YjMwOWJiZDVlZWQ0N2E2OTE4 OTg0YjAwHhcNMjUxMjI2MDcwMTM0WhcNMjUxMjI3MDcwMTM0WjAzMTEwLwYDVQQD Eyg1ZTYxM2ZkY2ZlOGFmY2U2MzQwMDIwYjhjY2E3NzY5YTljYzIzYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ur4Ji9ATTCse17ZSNo3lkwnVLX8 DsoLWKlepKwL+bQqh5xOz+jjtblxgbRmP04z6ORgzOKmPtB3PtlQkekmMaAaAIFV 5xplWnsfJY/23+L2vEysUMbIq8xIIZLRbmPZoqRBHFSAea1HGdVU2B/RrepI54ht VyxCM9r9YwXb9da5ylZEtaHCpmf1z+T2PLTuwOfnxmpd6Bu+lG2AX0ddRiD6jJna ITKjJSV4h5+Nf6fzt06vQ2NC/Hmq4w3cQ843XcOIZ+uOrdQeRrECNvW4Xqkn2HHT cDIBEuvshsapAsr9VjcP+ntnqEJGkBIzR27+PgxBTjfZh2ZzGePJEWDboQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5hP9z+ivzmNAAguMyndpqcwjsgMB8GA1UdIwQY MBaAFC9cr9Xv0t8smzCbvV7tR6aRiYSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEt YWQ4MjdlM2VkZjZjLzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8zYjBiYTYtZmMzMS00ZWM2LTgxNjEtYWQ4MjdlM2VkZjZj LzEvTDF5djFlX1MzeXliTUp1OVh1MUhwcEdKaExBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrVj/LMO bXyTJ/e1MjfcGY2mc/RphMteGXGG47HHGLRyUN/6CvEL0vZ3lqgkyy+8e6JYTqAw glYvwmvsaRegsnvkvaJxkLch+lVdkOa3OFYMFC2do9fOUX2CmrjiJV3JPrcLuf+U 3Qt2/JC7g5nuAlBN8drGB2AiXgSwCWWu1l043U1VgpOJNX85Ba7gZbIKvMkmZDxQ dXS3Z9ma/R82PQO74iP3qRtpJmTjnjRgF0gREmhOpaMI/SNafQpvg9xkoJWHAVFL GKPRG8H4Sla0E6jeWKhBI94svLzBSK6P3V4OD1FS4Cc7fMysfXd1gD7px28DzQtp Gyk1PdbUum16Dw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:08 2025 by rpki-client