This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json) Hash identifier: jY3m8p4cRYHoL5x0YXlxYz2ITPpieLFeeFNXlf2ndgs= Subject key identifier: 7D:2B:23:E0:52:E3:FC:3E:51:B5:D4:39:73:AC:C3:70:A8:85:9D:42 Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019B2D0B72FE657F061DB2D2AF662CEFE3B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft Manifest number: 1767 Signing time: Wed 17 Dec 2025 16:01:23 +0000 Manifest this update: Wed 17 Dec 2025 16:01:23 +0000 Manifest next update: Thu 18 Dec 2025 16:01:23 +0000 Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=) 2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=) 3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: wkujOiIJRh3EgkxHEh95zi9DkKx4WGSVmritlvs4iXw=) 4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:72:fe:65:7f:06:1d:b2:d2:af:66:2c:ef:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Dec 17 16:01:23 2025 GMT Not After : Dec 18 16:01:23 2025 GMT Subject: CN=7d2b23e052e3fc3e51b5d43973acc370a8859d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:30:cf:12:14:94:ac:14:f3:84:04:32:e1: 5c:0c:6a:6c:6b:c4:fb:88:a5:83:96:82:66:3f:9d: 20:57:6c:89:1c:22:dd:c1:86:83:72:4c:91:97:d4: 3d:0d:74:28:67:b1:a3:c8:99:82:e0:c1:87:40:bb: 2d:37:5e:f3:a1:d5:af:3c:27:2e:64:60:ef:ce:f0: 7b:be:3b:67:36:5d:10:d1:86:b3:c7:b8:7b:20:d2: 0f:5a:f0:38:c8:e5:3a:06:43:ed:e5:28:b0:b1:3a: 53:96:33:df:80:b9:79:47:b9:6b:e5:d6:81:0a:ef: bb:69:0f:10:06:50:09:f6:9b:ab:59:b6:3f:f6:cc: 31:79:d3:d5:79:dd:cd:11:e6:b9:61:89:4d:87:58: 09:b1:57:c0:fa:dd:af:f8:d2:e1:c7:82:c9:1f:f4: 1e:f0:65:53:1d:87:1f:98:72:73:a7:25:bf:c2:32: 78:ed:fe:24:51:c2:08:59:19:a3:1c:26:25:ba:64: f1:05:79:3a:e8:f5:1b:5b:2d:f9:5b:b6:12:78:ea: f9:99:d0:b8:75:ae:62:6f:f6:13:b6:fe:66:c1:35: 89:da:bb:94:a2:4e:1b:aa:6b:40:fd:fb:d0:d0:31: 4b:69:2f:a1:c8:f5:76:33:9e:a5:a3:d4:6d:ca:25: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2B:23:E0:52:E3:FC:3E:51:B5:D4:39:73:AC:C3:70:A8:85:9D:42 X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:69:9c:15:c1:cf:07:99:bb:e8:e2:d9:c0:03:80:fb:b6:d5: 98:7c:80:c1:03:59:09:08:71:6a:e9:a2:4b:80:0e:20:be:4a: 3e:11:b2:34:92:f3:02:56:44:1f:0c:b6:25:84:92:d6:ee:43: 83:70:eb:f8:b5:44:69:63:40:11:0b:90:4c:b4:11:29:6a:b9: 2f:dc:91:cf:00:f8:1d:2a:fd:37:bd:82:83:01:4c:f7:c8:7d: 7f:8f:71:41:6b:d5:87:49:03:02:a9:c8:1b:c5:df:c9:c6:8a: 7b:d6:d5:c6:32:50:d2:e0:f1:49:c1:fc:56:4d:dd:27:e7:47: 92:23:40:66:79:90:bf:ef:e4:24:cc:28:64:56:40:29:58:aa: 06:a5:29:1c:6f:ab:d6:81:68:10:90:9c:50:e1:f9:50:02:05: 4f:c2:e4:57:3f:57:4e:23:2d:fe:ef:42:14:00:ac:01:dd:73: aa:e1:6b:f2:db:a3:af:59:b8:fc:08:e2:52:d0:a0:59:bb:d0: 5c:bf:35:ae:6f:24:97:f7:ad:eb:0b:92:fa:74:e5:05:d3:a3: cd:f8:fd:a6:ca:f7:70:a8:3b:ee:82:67:f7:d8:44:bd:f3:61: 4f:e1:93:e2:dd:5e:5c:10:af:94:12:94:e7:b8:fd:b7:19:18: bb:11:8b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC3L+ZX8GHbLSr2Ys7+OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjUxMjE3MTYwMTIzWhcNMjUxMjE4MTYwMTIzWjAzMTEwLwYDVQQD Eyg3ZDJiMjNlMDUyZTNmYzNlNTFiNWQ0Mzk3M2FjYzM3MGE4ODU5ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRowzxIUlKwU84QEMuFcDGpsa8T7 iKWDloJmP50gV2yJHCLdwYaDckyRl9Q9DXQoZ7GjyJmC4MGHQLstN17zodWvPCcu ZGDvzvB7vjtnNl0Q0Yazx7h7INIPWvA4yOU6BkPt5SiwsTpTljPfgLl5R7lr5daB Cu+7aQ8QBlAJ9purWbY/9swxedPVed3NEea5YYlNh1gJsVfA+t2v+NLhx4LJH/Qe 8GVTHYcfmHJzpyW/wjJ47f4kUcIIWRmjHCYlumTxBXk66PUbWy35W7YSeOr5mdC4 da5ib/YTtv5mwTWJ2ruUok4bqmtA/fvQ0DFLaS+hyPV2M56lo9RtyiWjiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0rI+BS4/w+UbXUOXOsw3CohZ1CMB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWmcFcHP B5m76OLZwAOA+7bVmHyAwQNZCQhxaumiS4AOIL5KPhGyNJLzAlZEHwy2JYSS1u5D g3Dr+LVEaWNAEQuQTLQRKWq5L9yRzwD4HSr9N72CgwFM98h9f49xQWvVh0kDAqnI G8XfycaKe9bVxjJQ0uDxScH8Vk3dJ+dHkiNAZnmQv+/kJMwoZFZAKViqBqUpHG+r 1oFoEJCcUOH5UAIFT8LkVz9XTiMt/u9CFACsAd1zquFr8tujr1m4/AjiUtCgWbvQ XL81rm8kl/et6wuS+nTlBdOjzfj9psr3cKg77oJn99hEvfNhT+GT4t1eXBCvlBKU 57j9txkYuxGLRg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:35:47 2025 by rpki-client