This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: LBMhF5zEteYKsnM8CTJgKjcH/g+oCM8AaDJ/w2btmYs= Subject key identifier: 39:06:85:CF:BC:DD:6C:E3:A0:76:28:11:37:E0:AB:A7:14:72:A7:4E Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019AF50A69E61889A275F07EF571AC44FCF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0374 Signing time: Sat 06 Dec 2025 19:01:31 +0000 Manifest this update: Sat 06 Dec 2025 19:01:31 +0000 Manifest next update: Sun 07 Dec 2025 19:01:31 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: RNK00gAVZjqPUOv60bFxMs8sjJve9CBqIYMvur80Zr4=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 6: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 7: PIPf2jUefSz2ZFBXKna-6VzqQZ4.roa (hash: o/bRmUIqx18lwwP9fu4h2MQE0btvhHW7pc9iZu6+fKY=) 8: hutlL6LVuoI5F8J-GDEW66ws8TE.roa (hash: uX8lahfVe3cF9uJcgVI4EHS2xzpfBCeEh1HHhGB55P0=) 9: lNcHZzpaUSR7jKBrw2KMUB_wdnQ.roa (hash: VpkbqwQLfn54zfo0+BFxVr9mX4T1GIk6TvAvX0OYx08=) 10: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 11: mtFjCXi6B1lVrIwoLZRGnHtawsY.roa (hash: AvY2AQMCjix08RE4/U4WL/kf92YbkwF1pj4+XzimXp4=) 12: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 13: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 14: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 15: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 16: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:69:e6:18:89:a2:75:f0:7e:f5:71:ac:44:fc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Dec 6 19:01:31 2025 GMT Not After : Dec 7 19:01:31 2025 GMT Subject: CN=390685cfbcdd6ce3a076281137e0aba71472a74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:bc:1e:4f:5d:21:8e:b5:ab:d3:50:66:c2: c6:88:50:f1:4e:95:9f:41:3c:a5:9e:50:5d:bd:4d: 31:10:6c:ba:cf:1d:36:cb:72:5b:5a:c6:c0:75:f7: 48:8a:82:69:c1:95:ce:dc:33:1b:70:48:74:9d:30: 9d:10:8f:b6:f2:17:69:ec:72:dd:62:f9:3d:a1:4f: c2:45:f7:6a:7a:b2:dc:53:e6:51:25:4d:b4:ba:e1: 1f:e1:f4:5e:6a:f9:96:9e:33:b3:b3:1b:d0:b0:2c: 84:09:72:ec:66:d8:ae:4b:8d:1d:e2:37:09:f9:6e: ac:c3:da:d8:9f:c4:c0:70:ff:8e:ed:76:e0:59:04: a0:2a:f1:2d:5b:5b:d7:91:8b:9b:75:01:b0:73:26: 03:49:08:b7:87:e1:b1:81:10:f3:85:bb:26:a0:25: 0a:05:e8:8d:bd:2c:fe:40:31:50:35:02:1e:a6:ec: 5e:23:21:b8:84:4b:56:59:a4:a7:44:33:6a:39:96: c0:04:cc:f3:a8:f0:eb:b0:e7:d2:6a:4e:1f:12:0e: e9:ac:44:3c:70:05:2a:fa:f8:81:26:7c:1c:0c:a9: 29:ce:35:5f:56:b2:a5:30:47:68:24:90:cf:bb:bb: 91:f1:41:5c:a7:f0:b5:7f:17:a9:72:64:6b:59:ff: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:85:CF:BC:DD:6C:E3:A0:76:28:11:37:E0:AB:A7:14:72:A7:4E X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:24:d1:24:37:57:4d:e6:b3:c9:20:4b:fc:92:4d:e6:95:e3: 49:e8:1d:5a:fa:33:5f:40:8c:04:8b:0b:d7:56:e3:5d:b5:4b: 77:89:41:cb:ce:68:24:67:4f:31:79:62:d5:cb:a7:81:76:3f: d7:83:a4:2e:69:ad:53:93:28:3c:b0:05:3a:db:0e:2c:e3:e4: e6:39:9b:07:32:54:69:ad:49:c9:c8:af:6e:e2:81:14:6d:fe: a1:3c:98:2c:c5:99:88:7e:2b:46:9c:df:4c:eb:c9:ea:26:a2: 52:96:a1:a0:40:c7:84:7b:3b:5a:e8:12:d8:f9:46:91:bc:89: 04:d4:97:4d:8b:ef:c6:a0:38:46:b9:02:8c:8e:dd:75:44:18: 5c:9c:eb:61:3c:b6:e9:ee:1a:9f:f1:89:be:90:bd:e7:7c:ac: 04:27:82:8b:a5:27:a6:9a:d7:7a:3f:d1:37:69:79:54:e6:59: 13:af:c0:8b:98:05:52:77:68:02:f6:fb:48:a4:ae:4b:d0:4c: 3c:0b:96:57:80:64:5d:dd:3d:85:3f:fb:d6:2c:77:25:1c:6b: a3:37:67:fe:e8:32:36:a2:f5:60:3f:7b:6b:90:6b:77:1a:24: fd:4e:6b:95:2a:45:bd:fc:4f:1b:f1:f4:24:96:97:8d:5c:eb: e2:bf:c6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmnmGImidfB+9XGsRPzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMjA2MTkwMTMxWhcNMjUxMjA3MTkwMTMxWjAzMTEwLwYDVQQD EygzOTA2ODVjZmJjZGQ2Y2UzYTA3NjI4MTEzN2UwYWJhNzE0NzJhNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh68Hk9dIY61q9NQZsLGiFDxTpWf QTylnlBdvU0xEGy6zx02y3JbWsbAdfdIioJpwZXO3DMbcEh0nTCdEI+28hdp7HLd Yvk9oU/CRfdqerLcU+ZRJU20uuEf4fReavmWnjOzsxvQsCyECXLsZtiuS40d4jcJ +W6sw9rYn8TAcP+O7XbgWQSgKvEtW1vXkYubdQGwcyYDSQi3h+GxgRDzhbsmoCUK BeiNvSz+QDFQNQIepuxeIyG4hEtWWaSnRDNqOZbABMzzqPDrsOfSak4fEg7prEQ8 cAUq+viBJnwcDKkpzjVfVrKlMEdoJJDPu7uR8UFcp/C1fxepcmRrWf/SSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkGhc+83WzjoHYoETfgq6cUcqdOMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyTRJDdX TeazySBL/JJN5pXjSegdWvozX0CMBIsL11bjXbVLd4lBy85oJGdPMXli1cungXY/ 14OkLmmtU5MoPLAFOtsOLOPk5jmbBzJUaa1JycivbuKBFG3+oTyYLMWZiH4rRpzf TOvJ6iaiUpahoEDHhHs7WugS2PlGkbyJBNSXTYvvxqA4RrkCjI7ddUQYXJzrYTy2 6e4an/GJvpC953ysBCeCi6UnpprXej/RN2l5VOZZE6/Ai5gFUndoAvb7SKSuS9BM PAuWV4BkXd09hT/71ix3JRxrozdn/ugyNqL1YD97a5Brdxok/U5rlSpFvfxPG/H0 JJaXjVzr4r/Ghw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:19:20 2025 by rpki-client