This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json) Hash identifier: ryAij1QtW5liG6SMQ9rTV/YvUaDtta22gMwIAeAWlFg= Subject key identifier: F8:57:34:A4:24:97:20:F4:17:FD:BF:55:1F:D6:31:AE:3E:4A:15:D7 Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905 Certificate serial: 019B0E5B82251D05C2B094E70E878A15E4D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 17:00:36 +0000 Manifest this update: Thu 11 Dec 2025 17:00:36 +0000 Manifest next update: Fri 12 Dec 2025 17:00:36 +0000 Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=) 2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: 4xz/O5bJAoBUwyIH2Y22/znbowUt8axt/FXidIarhdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:82:25:1d:05:c2:b0:94:e7:0e:87:8a:15:e4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905 Validity Not Before: Dec 11 17:00:36 2025 GMT Not After : Dec 12 17:00:36 2025 GMT Subject: CN=f85734a4249720f417fdbf551fd631ae3e4a15d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:2c:8f:bd:68:3f:49:25:ac:1d:51:96:21: 92:4e:50:a6:32:6c:6c:5d:d3:28:4f:24:37:92:c6: f1:d7:31:87:10:24:65:d2:9d:ae:60:1b:4f:3d:48: 30:82:7a:c3:fa:88:c9:40:d3:31:af:87:4c:11:fe: e2:eb:8a:c4:5e:bd:94:35:10:ca:63:69:00:92:68: 9e:ec:6d:7a:b5:78:a7:a2:5f:d1:c9:0a:6e:8b:c4: f3:c3:1f:ec:f1:91:bc:b0:4c:dc:a0:eb:78:c0:9b: 9b:06:58:2b:15:c4:2b:c8:00:2d:d1:db:f9:21:ad: c2:b0:c2:2d:2c:d9:c1:7a:46:e2:3a:be:fb:51:1a: a0:ab:29:90:b2:f4:b2:bb:60:bd:16:e2:d0:f0:5e: e2:50:a3:20:e8:e1:3a:e6:3d:1a:83:eb:ec:18:ac: b9:a9:a1:d6:b9:ea:db:df:28:0e:6a:dc:13:5a:58: 6c:13:f4:b1:94:f6:8a:a2:1d:60:af:3e:73:39:a1: d0:13:54:a1:db:36:56:79:f1:82:24:cc:18:f3:92: d3:7b:01:23:46:83:98:76:e6:66:75:17:59:ae:4a: 16:bd:a8:87:41:3b:aa:c2:a3:40:ab:35:8b:a5:2f: ca:8a:cd:0f:a0:81:3c:b9:e0:fa:8f:a1:65:6d:d1: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:34:A4:24:97:20:F4:17:FD:BF:55:1F:D6:31:AE:3E:4A:15:D7 X509v3 Authority Key Identifier: keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f7:e5:93:54:4b:26:df:11:9c:58:f0:c8:34:c9:9d:3f:9f: 9f:d9:eb:77:7f:4f:98:5b:69:fa:4d:9a:f4:c9:a1:2f:7f:0e: 87:bb:9c:93:a8:7f:c9:04:1c:78:cd:08:4c:f4:b9:0d:4c:16: d7:81:44:1a:b4:d7:70:ac:39:58:cf:8a:ff:52:0b:45:9a:75: dc:4e:60:89:d6:28:b5:4a:7d:5d:c3:ea:18:1d:f8:c2:10:d8: 63:28:2e:1b:a1:04:a1:bb:a8:e2:5b:f2:79:73:41:ee:6b:9e: 01:e0:00:8d:92:44:de:39:07:0b:2c:35:c7:60:fc:6e:c3:af: 0b:04:8f:a0:28:1a:1a:b6:f5:72:bc:86:ad:c4:e2:de:7f:8d: 3b:e1:85:0a:38:48:a0:91:18:0b:4e:70:c0:4b:fa:1e:6c:97: 4e:f2:26:a1:f2:ab:07:4b:6f:b7:57:87:61:f6:cf:4a:33:8a: b8:50:21:21:33:91:ee:b1:78:49:2e:11:4c:79:f2:75:42:2c: 72:06:b5:64:2b:65:e6:83:a5:19:ec:a4:d4:2c:b3:04:b3:ba: c8:4b:d3:c8:f3:b5:ba:09:d7:ab:e5:9c:7c:af:44:0f:90:ce: 09:28:2f:50:dc:2d:df:ba:d9:7a:63:9f:32:8a:7d:50:f0:ba: fa:ab:e4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4IlHQXCsJTnDoeKFeTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YWFmODkyYjg5OTFlOGMwMjc3OWNiMmRiODY0ZDMyMWVl YmU5MDUwHhcNMjUxMjExMTcwMDM2WhcNMjUxMjEyMTcwMDM2WjAzMTEwLwYDVQQD EyhmODU3MzRhNDI0OTcyMGY0MTdmZGJmNTUxZmQ2MzFhZTNlNGExNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+8sj71oP0klrB1RliGSTlCmMmxs XdMoTyQ3ksbx1zGHECRl0p2uYBtPPUgwgnrD+ojJQNMxr4dMEf7i64rEXr2UNRDK Y2kAkmie7G16tXinol/RyQpui8Tzwx/s8ZG8sEzcoOt4wJubBlgrFcQryAAt0dv5 Ia3CsMItLNnBekbiOr77URqgqymQsvSyu2C9FuLQ8F7iUKMg6OE65j0ag+vsGKy5 qaHWuerb3ygOatwTWlhsE/SxlPaKoh1grz5zOaHQE1Sh2zZWefGCJMwY85LTewEj RoOYduZmdRdZrkoWvaiHQTuqwqNAqzWLpS/Kis0PoIE8ueD6j6FlbdHWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhXNKQklyD0F/2/VR/WMa4+ShXXMB8GA1UdIwQY MBaAFJeq+JK4mR6MAnecstuGTTIe6+kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQt Y2E3NDY4NjdkYWM4LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80MWZlMWItMmYwZS00ZmFhLTlmZDQtY2E3NDY4NjdkYWM4 LzEvbDZyNGtyaVpIb3dDZDV5eTI0Wk5NaDdyNlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/flk1RL Jt8RnFjwyDTJnT+fn9nrd39PmFtp+k2a9MmhL38Oh7uck6h/yQQceM0ITPS5DUwW 14FEGrTXcKw5WM+K/1ILRZp13E5gidYotUp9XcPqGB34whDYYyguG6EEobuo4lvy eXNB7mueAeAAjZJE3jkHCyw1x2D8bsOvCwSPoCgaGrb1cryGrcTi3n+NO+GFCjhI oJEYC05wwEv6HmyXTvImofKrB0tvt1eHYfbPSjOKuFAhITOR7rF4SS4RTHnydUIs cga1ZCtl5oOlGeyk1CyzBLO6yEvTyPO1ugnXq+WcfK9ED5DOCSgvUNwt37rZemOf Mop9UPC6+qvkgw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:31 2025 by rpki-client