This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json) Hash identifier: Wm9284wDGf9se6SLj7DmsjX2bbNuvppuzc6ekbHE5H0= Subject key identifier: D8:F5:14:DC:60:C6:0C:48:8B:36:EB:7C:41:78:E3:9A:8B:6E:98:16 Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Certificate serial: 019B07EC2BF5A01051FB7E8ADBC0C4C8AA23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft Manifest number: 06BA Signing time: Wed 10 Dec 2025 11:01:16 +0000 Manifest this update: Wed 10 Dec 2025 11:01:16 +0000 Manifest next update: Thu 11 Dec 2025 11:01:16 +0000 Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=) 2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=) 3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: lkxBMOv5I1BU0axOvLqbWZs7O401Xh0W+8VqfQEgNIs=) 4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:2b:f5:a0:10:51:fb:7e:8a:db:c0:c4:c8:aa:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3 Validity Not Before: Dec 10 11:01:16 2025 GMT Not After : Dec 11 11:01:16 2025 GMT Subject: CN=d8f514dc60c60c488b36eb7c4178e39a8b6e9816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:92:69:d9:84:7c:d7:e2:2d:76:08:4b:0d: 7e:99:0a:07:40:19:df:75:38:4b:f0:ec:ff:2a:28: f2:07:a3:5c:18:fb:9c:83:62:af:d4:0d:89:85:d2: 20:ac:a4:a6:1d:96:75:29:e8:95:a5:56:d7:46:b0: a5:d1:b2:bf:56:85:70:c8:15:9d:89:84:e9:2f:8d: 93:92:44:3e:21:02:42:6c:b2:39:1d:2a:58:7f:3d: c1:ac:82:01:f1:15:b2:85:0d:8d:60:96:59:7b:a3: 2c:64:1e:68:e0:bd:39:47:46:7f:f9:1b:16:50:1e: ca:a0:ce:2e:05:72:67:72:32:1f:92:cf:c9:ae:0d: 35:14:d0:42:e6:f0:b5:e3:a6:c1:39:3b:5e:48:50: cc:29:10:54:1b:bf:28:a6:9b:2a:73:ed:23:6e:b3: 05:5f:b1:f4:dc:ee:a9:7d:6f:d5:23:f0:0a:f0:46: ab:57:fe:1c:b7:30:e4:35:dc:55:f7:6c:0e:67:d8: 0b:6c:32:f8:a8:54:3e:8b:01:df:d1:36:9b:fd:a3: fc:b2:c2:cc:da:02:dc:57:9c:e4:0d:98:24:7b:91: c7:99:04:46:4f:8e:31:c8:5e:ed:6a:31:25:f8:3d: f8:5a:c8:7f:9c:55:f1:48:96:d9:02:68:07:64:cc: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F5:14:DC:60:C6:0C:48:8B:36:EB:7C:41:78:E3:9A:8B:6E:98:16 X509v3 Authority Key Identifier: keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:90:9c:c7:ba:a4:0b:2f:d3:c5:3a:15:1a:2f:57:bf:0b:2c: e2:7b:7e:2c:70:da:ba:1d:ac:1a:61:ac:09:68:b5:84:4f:77: 5b:c7:35:41:e1:83:53:ae:3b:f5:04:23:8f:6a:55:1c:20:05: a5:ad:a6:53:b0:d3:d0:7e:f3:89:9e:ac:b3:e1:53:39:5a:be: cd:f8:3a:e6:0e:05:b9:d3:0b:7f:26:29:af:fa:f3:bb:08:81: 1b:38:fe:d4:be:4c:5c:1b:3e:8e:8c:57:5c:dc:8a:9d:63:52: a7:5f:77:ac:06:0d:37:db:0f:8b:76:b7:35:87:70:df:8f:b7: 9d:75:0a:b8:07:42:01:f5:9a:d0:32:37:07:0d:d7:63:b2:5c: e9:ac:15:d3:de:b5:06:a3:58:c1:d1:1c:81:b2:ec:b6:eb:4e: 59:3c:6e:d2:68:ec:1c:8c:cf:02:48:b0:a2:69:1e:8b:ba:df: 83:f8:6a:7f:86:f6:c8:b7:a4:ba:13:fe:1f:ce:b8:e3:b7:9e: 33:10:a0:d5:70:4c:24:cd:c4:fa:bb:60:18:6c:0e:9c:a0:f8: f7:6a:4f:79:4f:ba:33:fd:d7:0a:89:ec:3e:7c:21:81:99:f0: 6b:c1:d7:fd:1f:5c:08:f7:ed:8c:6d:54:d3:ff:b1:2f:6b:fe: 9c:d0:b5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7Cv1oBBR+36K28DEyKojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NTMwY2FiM2JhZTViNTI5ZmFiZWI5OTc5YmQ2ODVmN2Iy YmRhYjMwHhcNMjUxMjEwMTEwMTE2WhcNMjUxMjExMTEwMTE2WjAzMTEwLwYDVQQD EyhkOGY1MTRkYzYwYzYwYzQ4OGIzNmViN2M0MTc4ZTM5YThiNmU5ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunCSadmEfNfiLXYISw1+mQoHQBnf dThL8Oz/KijyB6NcGPucg2Kv1A2JhdIgrKSmHZZ1KeiVpVbXRrCl0bK/VoVwyBWd iYTpL42TkkQ+IQJCbLI5HSpYfz3BrIIB8RWyhQ2NYJZZe6MsZB5o4L05R0Z/+RsW UB7KoM4uBXJncjIfks/Jrg01FNBC5vC146bBOTteSFDMKRBUG78oppsqc+0jbrMF X7H03O6pfW/VI/AK8EarV/4ctzDkNdxV92wOZ9gLbDL4qFQ+iwHf0Tab/aP8ssLM 2gLcV5zkDZgke5HHmQRGT44xyF7tajEl+D34Wsh/nFXxSJbZAmgHZMxi5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj1FNxgxgxIizbrfEF445qLbpgWMB8GA1UdIwQY MBaAFJdTDKs7rltSn6vrmXm9aF97K9qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYt OWNmYTJjN2Q4MTZlLzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82MjUyZjktNjc4Ny00MDZhLWI5MWYtOWNmYTJjN2Q4MTZl LzEvbDFNTXF6dXVXMUtmcS11WmViMW9YM3NyMnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5Ccx7qk Cy/TxToVGi9Xvwss4nt+LHDauh2sGmGsCWi1hE93W8c1QeGDU6479QQjj2pVHCAF pa2mU7DT0H7ziZ6ss+FTOVq+zfg65g4FudMLfyYpr/rzuwiBGzj+1L5MXBs+joxX XNyKnWNSp193rAYNN9sPi3a3NYdw34+3nXUKuAdCAfWa0DI3Bw3XY7Jc6awV0961 BqNYwdEcgbLstutOWTxu0mjsHIzPAkiwomkei7rfg/hqf4b2yLekuhP+H86447ee MxCg1XBMJM3E+rtgGGwOnKD492pPeU+6M/3XConsPnwhgZnwa8HX/R9cCPftjG1U 0/+xL2v+nNC1gw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:52:34 2025 by rpki-client