This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json) Hash identifier: U+H3/Z6itD0eatCyTJ+5SEjbYmMTGEfHk2BBJTIafsw= Subject key identifier: 0C:F9:C7:80:8B:84:4D:90:87:D2:A8:BA:DA:46:97:05:D0:4D:A8:8C Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de Certificate serial: 019B21ABCEC86ADC2C7201903F5FD26D06A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 11:01:06 +0000 Manifest this update: Mon 15 Dec 2025 11:01:06 +0000 Manifest next update: Tue 16 Dec 2025 11:01:06 +0000 Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=) 2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: vnwe4b1AziQWp+HRogiSP5uk2VyRI9VBCe0XkV69qMA=) 3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:ce:c8:6a:dc:2c:72:01:90:3f:5f:d2:6d:06:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de Validity Not Before: Dec 15 11:01:06 2025 GMT Not After : Dec 16 11:01:06 2025 GMT Subject: CN=0cf9c7808b844d9087d2a8bada469705d04da88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:0c:48:7a:40:12:63:5d:85:34:dc:e4:78: 63:a2:40:b1:c0:a9:77:2b:47:0b:06:bd:b8:1f:20: ba:83:eb:27:51:cd:95:9e:f1:da:39:b5:76:be:ed: 82:0d:81:e8:50:d7:9e:53:b0:7c:51:67:d0:82:55: 09:fa:a0:f2:05:63:23:9d:a5:27:24:6e:92:f7:08: 84:14:a0:c1:ca:7a:4e:3a:f8:d5:15:9e:7a:0e:db: 50:f4:d4:6a:05:81:4c:40:54:f7:2e:f7:d2:07:1d: b5:66:8d:cb:cd:4b:16:38:29:c8:9c:78:83:05:26: 0f:e0:f1:9c:40:14:eb:c9:9c:c1:9b:33:54:25:5b: d2:56:05:8f:c3:e4:40:29:89:de:d8:6a:97:6d:b9: c1:05:41:2e:bd:7a:d2:cb:37:a8:2e:d1:24:50:ab: d9:bf:33:64:56:a8:85:21:4b:e2:39:2e:65:7e:cc: 67:48:4e:49:a0:ee:c6:5d:63:4a:c0:bf:e6:c7:fc: e3:35:fe:40:47:b8:91:cd:c5:86:90:54:27:5a:08: 5b:0d:92:7c:26:48:c0:90:06:ef:23:b3:e2:69:68: 2c:d6:a6:04:f9:e7:13:56:3e:84:43:bc:33:f0:08: 07:b1:fc:89:40:bc:32:3e:99:5a:e8:22:ba:10:cb: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F9:C7:80:8B:84:4D:90:87:D2:A8:BA:DA:46:97:05:D0:4D:A8:8C X509v3 Authority Key Identifier: keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:45:1e:aa:53:6e:dd:9f:cc:f3:cf:2e:44:d2:30:e5:e8: 4c:45:71:4c:5a:e9:74:cd:3f:a7:c6:4d:1d:7f:c6:a5:ac:f4: 83:97:1b:3e:c3:65:4b:bb:8a:aa:d2:0e:f5:89:c3:95:d4:06: 0f:3a:7e:c8:5a:e3:e6:92:50:98:e0:ac:57:c7:cf:62:a5:b8: bb:a1:37:92:0a:c1:e6:86:8d:d6:26:a5:52:92:c8:dc:94:73: 7a:64:e8:ef:da:74:9a:f1:f8:19:ea:fc:f2:98:89:9d:04:e2: 4e:98:b1:46:f6:fc:65:a7:79:58:c4:05:3a:2f:81:c4:f6:f6: 8b:c9:55:56:a7:e0:b1:36:ea:49:10:2f:e1:29:c3:08:88:2e: bd:24:64:b5:5a:66:67:2e:0d:de:b3:a9:0c:c4:d7:87:bb:0d: 53:0c:e2:57:4d:2e:e8:f5:6a:0f:e8:17:d2:f0:c8:6e:0e:2f: a4:01:81:c8:3c:3f:d5:93:df:77:5f:78:38:02:8a:d1:a9:ad: 2a:ed:0b:9a:5c:a1:41:26:5b:c0:e0:b3:c0:90:b9:c1:c8:b4: 6c:22:25:4b:e1:21:b7:b6:68:1f:dd:9b:76:16:d8:a8:f3:7e: b4:43:79:7d:94:28:31:9f:40:03:81:cb:19:4e:ca:10:5d:58: b5:73:f9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq87IatwscgGQP1/SbQakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFhNTU1YTMyOWVkZDg2NjA2Y2MwZTNlMjk2YmQ0Nzhh YzczZGUwHhcNMjUxMjE1MTEwMTA2WhcNMjUxMjE2MTEwMTA2WjAzMTEwLwYDVQQD EygwY2Y5Yzc4MDhiODQ0ZDkwODdkMmE4YmFkYTQ2OTcwNWQwNGRhODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujEMSHpAEmNdhTTc5HhjokCxwKl3 K0cLBr24HyC6g+snUc2VnvHaObV2vu2CDYHoUNeeU7B8UWfQglUJ+qDyBWMjnaUn JG6S9wiEFKDBynpOOvjVFZ56DttQ9NRqBYFMQFT3LvfSBx21Zo3LzUsWOCnInHiD BSYP4PGcQBTryZzBmzNUJVvSVgWPw+RAKYne2GqXbbnBBUEuvXrSyzeoLtEkUKvZ vzNkVqiFIUviOS5lfsxnSE5JoO7GXWNKwL/mx/zjNf5AR7iRzcWGkFQnWghbDZJ8 JkjAkAbvI7PiaWgs1qYE+ecTVj6EQ7wz8AgHsfyJQLwyPpla6CK6EMvFWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz5x4CLhE2Qh9KoutpGlwXQTaiMMB8GA1UdIwQY MBaAFJeqpVWjKe3YZgbMDj4pa9R4rHPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjIt N2ZkMGRlYWUzMmM1LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xMTk1YWItZWQ0MS00NTJmLWJjMjItN2ZkMGRlYWUzMmM1 LzEvbDZxbFZhTXA3ZGhtQnN3T1BpbHIxSGlzYzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF5FHqpT bt2fzPPPLkTSMOXoTEVxTFrpdM0/p8ZNHX/Gpaz0g5cbPsNlS7uKqtIO9YnDldQG Dzp+yFrj5pJQmOCsV8fPYqW4u6E3kgrB5oaN1ialUpLI3JRzemTo79p0mvH4Ger8 8piJnQTiTpixRvb8Zad5WMQFOi+BxPb2i8lVVqfgsTbqSRAv4SnDCIguvSRktVpm Zy4N3rOpDMTXh7sNUwziV00u6PVqD+gX0vDIbg4vpAGByDw/1ZPfd194OAKK0amt Ku0LmlyhQSZbwOCzwJC5wci0bCIlS+Eht7ZoH92bdhbYqPN+tEN5fZQoMZ9AA4HL GU7KEF1YtXP5EA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:54 2025 by rpki-client