This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json) Hash identifier: k2bTwW67ewp/QaAckTYuuvbS6j5thiSok8LqsXaGBMA= Subject key identifier: E6:A5:D7:F9:FD:94:27:6F:8E:8C:0A:D1:4B:A2:CA:FF:46:28:ED:C7 Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483 Certificate serial: 019AFA6708F09DE5A3ACCBFADEC5BA1E1A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 20:00:47 +0000 Manifest this update: Sun 07 Dec 2025 20:00:47 +0000 Manifest next update: Mon 08 Dec 2025 20:00:47 +0000 Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=) 2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: EksubclH8wohfNzFkulgUmZmzligWmUpbe1cl8jjdj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:08:f0:9d:e5:a3:ac:cb:fa:de:c5:ba:1e:1a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=965473d68572ea2238bdd875afa725a0405de483 Validity Not Before: Dec 7 20:00:47 2025 GMT Not After : Dec 8 20:00:47 2025 GMT Subject: CN=e6a5d7f9fd94276f8e8c0ad14ba2caff4628edc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:e2:b2:c7:b4:9d:3d:d5:0c:15:62:a3:7b: 78:bc:6e:28:3b:6e:9a:48:84:34:d4:52:44:ce:ae: 82:db:f0:cd:5e:9b:e4:c9:72:c2:73:27:41:f8:a1: e0:55:89:0f:8d:3a:f6:27:3f:15:af:80:8e:d1:89: 90:96:90:80:98:cf:f5:6b:f0:58:de:19:6d:31:ac: aa:13:18:af:ad:0e:b0:e2:8c:d0:43:b4:80:2e:d5: 60:f5:97:1e:fb:7c:fe:ca:ef:0b:da:de:2d:77:28: 0b:01:95:c6:24:39:c7:79:6a:9c:1c:a6:6c:28:95: b7:9b:b3:62:67:dc:c9:12:57:1d:3b:d9:0b:93:3f: 7b:18:7e:6b:6f:7d:6a:00:31:f8:75:a3:31:af:52: e5:65:0a:e0:9b:4a:3f:8a:41:3a:36:80:cd:ce:84: 0a:9c:b9:21:97:50:77:3a:3e:67:37:1e:05:60:32: 9c:16:31:bc:30:db:ef:e9:b5:98:ee:12:89:f2:ba: 98:68:fc:09:42:41:8e:74:dd:af:be:4b:c6:79:00: 22:92:fc:61:46:83:c6:ac:f0:bc:fb:45:af:55:6e: 25:81:e2:6b:ef:56:96:4e:e6:e3:b3:ab:e5:9e:57: c9:3c:ed:d3:a9:f8:13:c9:f8:ad:b1:b5:1d:8b:7a: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A5:D7:F9:FD:94:27:6F:8E:8C:0A:D1:4B:A2:CA:FF:46:28:ED:C7 X509v3 Authority Key Identifier: keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5c:77:c8:5d:18:b7:f4:b9:60:33:30:d7:7b:65:63:55:ec: c0:ec:02:95:ec:c6:26:76:08:04:5f:09:b0:e5:9e:e1:c4:a1: 0e:5d:f1:9e:5d:5f:33:b5:32:14:da:f2:d9:1a:2c:d5:1e:5c: 7e:b5:9f:84:84:1e:6c:9d:b8:9a:f5:65:b3:0c:bc:62:e1:e0: 07:28:7e:16:03:95:a3:22:d8:4f:eb:fb:7d:bb:c4:bc:e1:4a: af:96:af:b5:5e:f9:97:9e:f9:47:3d:ed:eb:21:1d:76:2a:90: cb:52:e5:82:90:c6:51:c8:b3:7d:07:3a:10:4d:26:0d:fd:ce: 84:bf:2d:04:40:d4:9c:cd:71:1e:87:1a:35:ae:e7:80:6d:ae: d5:a3:48:b1:03:6e:fd:04:82:5b:b5:c6:c5:6b:55:e2:06:2e: d4:59:a2:21:3b:02:37:95:f8:64:16:62:c2:f9:5d:c7:a1:c6: 8c:ba:7f:7b:d6:dd:33:26:f7:50:00:00:29:21:db:58:f4:60: b2:e9:8c:e4:05:eb:7e:ef:49:e0:af:01:91:3d:55:d2:14:a9: 3e:ca:7f:dc:2b:fd:d7:16:ee:39:97:70:2f:69:82:9a:0e:c1: 5b:a1:10:7b:67:6d:c7:8e:70:ab:1d:56:b0:17:55:14:33:e1: 45:01:f9:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6ZwjwneWjrMv63sW6HhqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1 ZGU0ODMwHhcNMjUxMjA3MjAwMDQ3WhcNMjUxMjA4MjAwMDQ3WjAzMTEwLwYDVQQD EyhlNmE1ZDdmOWZkOTQyNzZmOGU4YzBhZDE0YmEyY2FmZjQ2MjhlZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F3isse0nT3VDBVio3t4vG4oO26a SIQ01FJEzq6C2/DNXpvkyXLCcydB+KHgVYkPjTr2Jz8Vr4CO0YmQlpCAmM/1a/BY 3hltMayqExivrQ6w4ozQQ7SALtVg9Zce+3z+yu8L2t4tdygLAZXGJDnHeWqcHKZs KJW3m7NiZ9zJElcdO9kLkz97GH5rb31qADH4daMxr1LlZQrgm0o/ikE6NoDNzoQK nLkhl1B3Oj5nNx4FYDKcFjG8MNvv6bWY7hKJ8rqYaPwJQkGOdN2vvkvGeQAikvxh RoPGrPC8+0WvVW4lgeJr71aWTubjs6vlnlfJPO3TqfgTyfitsbUdi3pUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOal1/n9lCdvjowK0Uuiyv9GKO3HMB8GA1UdIwQY MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1x3yF0Y t/S5YDMw13tlY1XswOwClezGJnYIBF8JsOWe4cShDl3xnl1fM7UyFNry2Ros1R5c frWfhIQebJ24mvVlswy8YuHgByh+FgOVoyLYT+v7fbvEvOFKr5avtV75l575Rz3t 6yEddiqQy1LlgpDGUcizfQc6EE0mDf3OhL8tBEDUnM1xHocaNa7ngG2u1aNIsQNu /QSCW7XGxWtV4gYu1FmiITsCN5X4ZBZiwvldx6HGjLp/e9bdMyb3UAAAKSHbWPRg sumM5AXrfu9J4K8BkT1V0hSpPsp/3Cv91xbuOZdwL2mCmg7BW6EQe2dtx45wqx1W sBdVFDPhRQH5Ag== -----END CERTIFICATE-----Generated at Mon Dec 8 00:15:45 2025 by rpki-client