This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: gy403zfm78LzBP8mh9FBGYW4TtgoLH8m0/CxLbuCHHw= Subject key identifier: A3:8D:00:08:BD:2E:F0:20:2F:88:C2:52:39:37:D6:35:DE:9C:EA:44 Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019B10B85CDFCF200BEE231DAF59D6027D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 1757 Signing time: Fri 12 Dec 2025 04:01:16 +0000 Manifest this update: Fri 12 Dec 2025 04:01:16 +0000 Manifest next update: Sat 13 Dec 2025 04:01:16 +0000 Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: WYr0FL3Hwv8/mFn/HPxobAKMTqonzBwY60v1OpLXTY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:5c:df:cf:20:0b:ee:23:1d:af:59:d6:02:7d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Dec 12 04:01:16 2025 GMT Not After : Dec 13 04:01:16 2025 GMT Subject: CN=a38d0008bd2ef0202f88c2523937d635de9cea44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:a1:e5:c2:c8:fc:8d:80:f2:1a:a1:10:e8: b8:b8:88:d2:0d:1a:23:67:3e:9e:ac:41:19:4d:8c: 72:d5:90:e1:9d:e9:30:97:d1:0e:a8:d9:2b:59:aa: b9:df:6b:df:b5:0d:49:07:6f:01:e0:e7:53:06:54: 6f:d5:57:99:c5:b2:1a:82:ba:e1:a1:6d:6b:c7:aa: 19:80:91:01:51:2e:10:eb:6b:a5:3c:f2:da:41:5d: 25:ef:90:ed:9c:35:95:5c:29:3e:be:e1:0e:e1:9b: 86:7d:ce:c6:5a:e5:ee:a7:92:18:77:5c:14:f7:1a: da:c3:c8:a2:ed:4d:3e:1f:90:8f:dd:6c:53:7d:92: 67:69:b8:91:97:73:c4:be:3f:16:12:e3:87:e2:68: 43:a2:83:16:4f:5f:74:81:c2:b6:e2:ea:52:f4:de: 09:ed:c9:88:7e:c7:78:20:ca:0b:ad:0e:d1:be:31: e8:bd:ea:54:79:ff:54:d2:9c:8b:63:1b:08:79:98: 2e:cf:0b:da:f0:44:6a:9b:12:61:c7:3f:db:7d:94: 68:8a:d9:1f:b8:db:4c:4a:b9:86:62:7a:d2:c5:4b: 59:b4:ae:3b:8f:45:8f:d1:5e:78:b0:3b:09:d7:2f: 0a:42:f5:9e:d6:fb:9c:09:e0:ad:ca:44:de:a4:c7: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:00:08:BD:2E:F0:20:2F:88:C2:52:39:37:D6:35:DE:9C:EA:44 X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8d:5b:5c:ae:52:9f:44:0a:3d:2f:d3:d6:5d:11:ea:f2:e3: 32:e1:fb:8c:e6:4b:eb:1e:3e:4e:b5:3b:24:18:34:d0:d1:c2: 33:d0:d2:f6:74:8e:7c:61:66:b3:2d:9a:0e:fc:7e:5c:af:64: 1b:e4:a0:a0:fd:88:bb:b5:90:4e:77:a2:3d:7b:1b:7a:f4:eb: 97:7f:70:cb:14:da:43:9b:aa:62:aa:1a:5d:bd:44:72:24:83: 1b:62:ae:95:f5:10:49:d8:f0:a0:ca:6a:a1:ee:4f:84:20:7b: 58:8d:11:b2:af:f6:75:73:e5:41:88:43:c9:ff:ff:09:39:56: 84:86:c8:4e:6b:18:ca:7a:1d:e8:78:a9:30:41:62:4a:40:b3: 59:f6:f4:9e:a2:82:bc:40:c6:ae:1b:ce:39:11:4e:36:55:56: 0e:34:30:59:0e:99:de:bf:77:16:04:f4:ea:88:5b:e8:a5:cb: 16:ff:df:33:17:d9:f7:a4:f5:12:be:e3:9a:b7:b6:86:1f:33: 9f:aa:d3:ff:94:b5:6a:9c:87:6b:43:fd:20:51:53:2a:ff:d5: 7a:19:d0:59:ff:e3:1a:55:c0:63:15:e9:5a:b0:39:5f:e3:6f: 68:ca:31:7a:a7:25:7f:71:3c:0e:01:5d:e3:be:c1:70:b0:e1: 0d:1f:94:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuFzfzyAL7iMdr1nWAn2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjUxMjEyMDQwMTE2WhcNMjUxMjEzMDQwMTE2WjAzMTEwLwYDVQQD EyhhMzhkMDAwOGJkMmVmMDIwMmY4OGMyNTIzOTM3ZDYzNWRlOWNlYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xWh5cLI/I2A8hqhEOi4uIjSDRoj Zz6erEEZTYxy1ZDhnekwl9EOqNkrWaq532vftQ1JB28B4OdTBlRv1VeZxbIagrrh oW1rx6oZgJEBUS4Q62ulPPLaQV0l75DtnDWVXCk+vuEO4ZuGfc7GWuXup5IYd1wU 9xraw8ii7U0+H5CP3WxTfZJnabiRl3PEvj8WEuOH4mhDooMWT190gcK24upS9N4J 7cmIfsd4IMoLrQ7RvjHovepUef9U0pyLYxsIeZguzwva8ERqmxJhxz/bfZRoitkf uNtMSrmGYnrSxUtZtK47j0WP0V54sDsJ1y8KQvWe1vucCeCtykTepMcP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKONAAi9LvAgL4jCUjk31jXenOpEMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY1bXK5S n0QKPS/T1l0R6vLjMuH7jOZL6x4+TrU7JBg00NHCM9DS9nSOfGFmsy2aDvx+XK9k G+SgoP2Iu7WQTneiPXsbevTrl39wyxTaQ5uqYqoaXb1EciSDG2KulfUQSdjwoMpq oe5PhCB7WI0Rsq/2dXPlQYhDyf//CTlWhIbITmsYynod6HipMEFiSkCzWfb0nqKC vEDGrhvOORFONlVWDjQwWQ6Z3r93FgT06ohb6KXLFv/fMxfZ96T1Er7jmre2hh8z n6rT/5S1apyHa0P9IFFTKv/VehnQWf/jGlXAYxXpWrA5X+NvaMoxeqclf3E8DgFd 477BcLDhDR+U5A== -----END CERTIFICATE-----Generated at Fri Dec 12 09:47:44 2025 by rpki-client