This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json) Hash identifier: f6Ze9oK+ovJ34scGFTkP9Le36hirdW6DyoPHrsFqGEs= Subject key identifier: 5D:F1:23:1A:3E:57:D2:0C:15:C1:9D:89:D6:56:81:1B:56:25:36:7E Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Certificate serial: 019B337B3A67ADE020B9A3E4860C93E4FF00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft Manifest number: 0986 Signing time: Thu 18 Dec 2025 22:01:12 +0000 Manifest this update: Thu 18 Dec 2025 22:01:12 +0000 Manifest next update: Fri 19 Dec 2025 22:01:12 +0000 Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=) 2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: 8Jm9CTWsIWIKtQsF8AQnd20tMjiECsKv9Yb1nFa9nck=) 3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:3a:67:ad:e0:20:b9:a3:e4:86:0c:93:e4:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e Validity Not Before: Dec 18 22:01:12 2025 GMT Not After : Dec 19 22:01:12 2025 GMT Subject: CN=5df1231a3e57d20c15c19d89d656811b5625367e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:e2:06:0b:78:f0:14:3b:08:9c:8c:c0:c2: f5:d7:56:78:80:42:bd:b5:61:01:5f:c6:76:5b:f4: 20:c7:19:be:c4:fe:0f:09:c2:23:ed:f0:f9:e8:38: 1a:88:1a:84:8b:71:07:4f:3c:db:90:06:cc:d2:a4: 15:14:af:34:81:f1:1f:60:56:d4:d9:f8:ae:18:3b: cb:76:a0:a4:7b:63:70:ef:2d:16:e8:1f:a3:0c:fd: 0b:50:1f:85:59:62:f0:e8:29:c3:1b:33:06:eb:07: 2f:f5:d7:96:75:9a:14:3f:5d:92:eb:99:c6:de:a9: 9f:8e:ca:c1:fe:fb:2d:88:75:af:57:99:6a:d3:29: fe:e6:08:c7:06:39:7a:d1:5d:bd:ad:55:36:37:17: ea:27:3b:ab:89:b1:c5:a4:39:21:77:90:a6:33:48: 53:7e:67:99:75:7c:8f:91:f9:10:ce:53:a3:67:ee: 65:e1:15:81:a3:58:4d:83:56:d9:7b:69:e4:d1:49: 51:ed:fb:dd:a5:8b:ff:5f:1c:51:42:7c:0a:9b:ed: f1:50:f3:fd:05:f6:55:ff:ff:ff:c5:62:a6:28:94: 7b:bd:b9:ad:1f:43:f4:65:c3:3c:73:28:22:9b:d2: 71:c6:a1:9e:0a:bf:57:be:e9:fc:82:45:b0:26:e2: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:23:1A:3E:57:D2:0C:15:C1:9D:89:D6:56:81:1B:56:25:36:7E X509v3 Authority Key Identifier: keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:53:66:ec:2a:e6:0a:4a:f9:82:93:bf:db:71:8f:3c:55:ab: 6d:e2:87:e7:58:50:73:9d:0c:7d:8b:dc:e1:05:0e:e7:48:a4: fe:6b:66:96:17:c9:82:ad:8c:6f:1b:23:20:76:4b:5a:19:06: ff:e3:9b:fe:56:cd:20:1b:2e:20:7b:46:ac:97:2a:44:0a:9b: f8:18:8c:af:82:48:fd:10:5e:31:56:cc:c1:30:f5:7b:bd:58: 8f:38:f5:80:94:b3:a1:a1:a2:26:75:6b:4f:05:bc:dc:b2:56: 44:02:e3:0a:a2:ee:8d:71:5c:05:39:71:93:b0:9b:3c:95:1a: be:35:7c:db:e0:f1:53:2e:4c:be:71:9e:14:74:68:0d:cf:b5: be:a8:d0:21:76:51:22:f8:43:96:92:86:e6:f2:6d:6b:82:9c: 90:aa:1d:18:7c:50:3b:bc:85:9f:29:2c:ae:a4:41:49:0a:93: 86:b2:3b:d5:1c:9e:25:cb:ad:7a:53:a7:95:43:8a:dd:19:1c: d3:7f:34:7c:77:b1:f1:49:da:b8:01:dc:ba:c9:85:8d:d6:9c: 2c:c9:7e:4d:da:d7:b1:26:87:76:f4:9e:34:67:c2:fd:59:9b: 91:2d:eb:d5:6d:13:e8:7f:3b:68:e8:f8:10:c9:d3:13:4f:f5: bf:46:27:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezpnreAguaPkhgyT5P8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1 YjJlMGUwHhcNMjUxMjE4MjIwMTEyWhcNMjUxMjE5MjIwMTEyWjAzMTEwLwYDVQQD Eyg1ZGYxMjMxYTNlNTdkMjBjMTVjMTlkODlkNjU2ODExYjU2MjUzNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriTiBgt48BQ7CJyMwML111Z4gEK9 tWEBX8Z2W/Qgxxm+xP4PCcIj7fD56DgaiBqEi3EHTzzbkAbM0qQVFK80gfEfYFbU 2fiuGDvLdqCke2Nw7y0W6B+jDP0LUB+FWWLw6CnDGzMG6wcv9deWdZoUP12S65nG 3qmfjsrB/vstiHWvV5lq0yn+5gjHBjl60V29rVU2NxfqJzuribHFpDkhd5CmM0hT fmeZdXyPkfkQzlOjZ+5l4RWBo1hNg1bZe2nk0UlR7fvdpYv/XxxRQnwKm+3xUPP9 BfZV////xWKmKJR7vbmtH0P0ZcM8cygim9JxxqGeCr9Xvun8gkWwJuLxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3xIxo+V9IMFcGdidZWgRtWJTZ+MB8GA1UdIwQY MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3 LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFNm7Crm Ckr5gpO/23GPPFWrbeKH51hQc50MfYvc4QUO50ik/mtmlhfJgq2MbxsjIHZLWhkG /+Ob/lbNIBsuIHtGrJcqRAqb+BiMr4JI/RBeMVbMwTD1e71Yjzj1gJSzoaGiJnVr TwW83LJWRALjCqLujXFcBTlxk7CbPJUavjV82+DxUy5MvnGeFHRoDc+1vqjQIXZR IvhDlpKG5vJta4KckKodGHxQO7yFnyksrqRBSQqThrI71RyeJcutelOnlUOK3Rkc 0380fHex8UnauAHcusmFjdacLMl+TdrXsSaHdvSeNGfC/VmbkS3r1W0T6H87aOj4 EMnTE0/1v0Ynqg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:14 2025 by rpki-client