This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json) Hash identifier: 9ZBuDAE8em4aQwH94IpmpVUeyZXbRxl15i8ekzNSNlU= Subject key identifier: 00:EE:43:51:49:F2:9B:AD:D2:C9:A5:92:8E:82:39:7C:0D:89:7B:E1 Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019B19168FCD1DEA413BD969126B3B126863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft Manifest number: 1778 Signing time: Sat 13 Dec 2025 19:01:07 +0000 Manifest this update: Sat 13 Dec 2025 19:01:07 +0000 Manifest next update: Sun 14 Dec 2025 19:01:07 +0000 Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: KohHRiiV9Xv5yEF4SkknlTjfdTKyzhM9ZZhKrdMJa/w=) 2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=) 3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:8f:cd:1d:ea:41:3b:d9:69:12:6b:3b:12:68:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Dec 13 19:01:07 2025 GMT Not After : Dec 14 19:01:07 2025 GMT Subject: CN=00ee435149f29badd2c9a5928e82397c0d897be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:be:3f:0e:1b:30:da:a5:53:6c:b3:28:d2: 07:46:8f:57:25:9d:fa:84:b7:8a:db:81:be:29:03: 8a:d6:17:94:14:b5:8e:e7:f3:71:76:cd:8c:6c:90: 8d:c7:bb:ab:94:7a:dd:85:83:f6:e9:92:cb:c7:62: 29:12:6f:3b:0b:a4:fa:d5:db:20:64:3d:ca:cd:d3: 34:2a:de:3d:0a:89:c3:a2:db:f6:b7:23:8a:93:8a: 33:56:30:46:12:ae:68:0c:48:65:6f:12:5f:33:b3: 8c:31:4b:39:ea:f1:51:40:83:c0:dd:e2:12:02:54: bc:6a:80:9f:fb:0d:9f:50:e6:c0:36:ee:ad:83:17: e7:bb:1b:f5:06:e6:e5:f3:7d:5c:7a:0a:3c:12:0e: d5:4a:7b:b8:bd:bf:b6:c0:7a:8c:8f:47:55:9d:b7: 87:dc:af:f2:4d:04:56:89:37:94:4c:fe:dd:38:dc: aa:ac:be:3c:15:79:55:d1:02:ff:fb:4d:17:57:1b: cc:29:7e:a1:17:dd:17:3d:30:54:88:18:fa:97:e2: 8e:be:90:ff:88:e2:f0:d6:9d:e8:3a:e1:fb:65:e0: 3e:d0:76:bf:81:20:0b:3c:02:05:02:b4:02:97:e6: 15:1f:85:08:9a:12:d3:3d:f3:b6:6d:78:a1:c8:e1: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:43:51:49:F2:9B:AD:D2:C9:A5:92:8E:82:39:7C:0D:89:7B:E1 X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:b9:93:97:68:be:8c:34:a7:76:ee:ee:36:86:b4:cf:ba: 3e:8a:92:f8:28:61:ec:17:f1:11:30:09:0a:ff:37:ee:6a:f1: c1:d9:52:f6:a6:43:32:08:29:48:3c:41:4f:54:3c:8c:a9:10: 1a:74:7b:e1:d6:58:d1:38:3f:5f:c3:3e:49:d5:b9:7c:74:04: 81:33:4e:b1:81:bc:b5:da:d4:ba:75:a4:1c:b4:2e:e8:0e:c8: 62:f7:7f:de:66:4c:6b:44:47:15:71:7f:97:ef:4f:55:91:8b: ab:55:89:4a:ae:77:37:04:60:db:de:c9:37:b6:f9:00:f9:17: 9e:50:31:59:57:33:ef:b5:56:4f:5f:33:6f:fe:ed:90:95:93: f0:3d:26:c9:2c:25:fc:dc:41:59:6b:21:6e:cb:1e:7e:74:9f: 59:0a:d0:f2:41:96:0f:20:77:f5:08:3d:18:51:3e:18:2c:b4: 89:51:af:8d:55:fa:65:c4:10:9e:d5:68:be:51:75:00:04:5c: 35:c6:20:29:37:c0:c5:cb:fe:cd:46:4d:6f:8f:4a:2d:4b:4b: 38:55:de:86:0d:9c:16:06:97:49:62:bd:c6:94:d1:8e:24:cd: 5c:01:b9:3b:0a:f6:3b:d3:02:30:a1:3d:dc:38:d8:86:73:7c: 48:67:8a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFo/NHepBO9lpEms7EmhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjUxMjEzMTkwMTA3WhcNMjUxMjE0MTkwMTA3WjAzMTEwLwYDVQQD EygwMGVlNDM1MTQ5ZjI5YmFkZDJjOWE1OTI4ZTgyMzk3YzBkODk3YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8++Pw4bMNqlU2yzKNIHRo9XJZ36 hLeK24G+KQOK1heUFLWO5/Nxds2MbJCNx7urlHrdhYP26ZLLx2IpEm87C6T61dsg ZD3KzdM0Kt49ConDotv2tyOKk4ozVjBGEq5oDEhlbxJfM7OMMUs56vFRQIPA3eIS AlS8aoCf+w2fUObANu6tgxfnuxv1Bubl831cego8Eg7VSnu4vb+2wHqMj0dVnbeH 3K/yTQRWiTeUTP7dONyqrL48FXlV0QL/+00XVxvMKX6hF90XPTBUiBj6l+KOvpD/ iOLw1p3oOuH7ZeA+0Ha/gSALPAIFArQCl+YVH4UImhLTPfO2bXihyOEMCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADuQ1FJ8put0smlko6COXwNiXvhMB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhO5k5do vow0p3bu7jaGtM+6PoqS+Chh7BfxETAJCv837mrxwdlS9qZDMggpSDxBT1Q8jKkQ GnR74dZY0Tg/X8M+SdW5fHQEgTNOsYG8tdrUunWkHLQu6A7IYvd/3mZMa0RHFXF/ l+9PVZGLq1WJSq53NwRg297JN7b5APkXnlAxWVcz77VWT18zb/7tkJWT8D0mySwl /NxBWWshbssefnSfWQrQ8kGWDyB39Qg9GFE+GCy0iVGvjVX6ZcQQntVovlF1AARc NcYgKTfAxcv+zUZNb49KLUtLOFXehg2cFgaXSWK9xpTRjiTNXAG5Owr2O9MCMKE9 3DjYhnN8SGeKOw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:46:11 2025 by rpki-client