This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json) Hash identifier: n7TvdK2x8BNtheZLRjVih3AsSpMvtbsJo7HzDAkiFCs= Subject key identifier: 94:AF:0F:AD:B9:80:04:13:61:14:41:62:12:7C:2B:E7:17:0C:71:3B Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f Certificate serial: 019B20D01716002E425FE1EBF468F97CA628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 07:01:06 +0000 Manifest this update: Mon 15 Dec 2025 07:01:06 +0000 Manifest next update: Tue 16 Dec 2025 07:01:06 +0000 Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: heCaJzq4xOZwmEOu8z7MrIKa9jsTKuohoeGHOKjswdE=) 2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=) 3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:17:16:00:2e:42:5f:e1:eb:f4:68:f9:7c:a6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f Validity Not Before: Dec 15 07:01:06 2025 GMT Not After : Dec 16 07:01:06 2025 GMT Subject: CN=94af0fadb980041361144162127c2be7170c713b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:9c:74:2f:6b:7c:2e:47:0b:7e:30:65:dc: 87:d7:b5:28:ee:98:9d:09:db:b0:1a:90:c5:de:a5: 69:30:f5:6f:12:08:4e:eb:19:25:1a:1e:e4:99:f2: 15:51:52:70:c0:93:c9:dd:ba:54:08:18:36:75:a2: 3f:02:8b:60:98:41:31:13:ad:0e:b9:b3:82:f1:c5: 3f:e5:8e:5b:45:6a:4e:16:fe:02:cc:7b:ac:3e:52: fa:32:3c:27:c2:a9:1d:81:90:64:8b:f4:ae:49:ab: 03:7f:d4:a0:e2:87:60:9e:15:cd:7a:3c:e5:21:3c: 2e:46:86:33:1f:d1:b9:e2:06:79:bb:74:9d:c9:09: d1:00:ac:50:db:9f:97:7e:41:99:03:bb:19:c5:d2: 15:06:4b:a4:e0:f6:b3:e4:df:e4:90:27:73:32:ba: 79:c6:7e:70:c0:20:58:0c:96:f3:5f:f7:5f:23:a5: b2:e8:5c:02:16:7d:3b:a1:96:ab:55:4b:a4:24:46: 26:28:12:54:95:4b:dc:0e:c5:c9:50:48:20:ac:2f: 0f:1a:32:29:ab:9e:03:2b:02:5f:81:62:c7:d4:31: 40:a3:89:6f:94:eb:4c:2b:83:48:91:12:30:43:3b: 84:19:ac:b3:d0:3a:68:16:3e:6c:15:04:a3:aa:4f: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:0F:AD:B9:80:04:13:61:14:41:62:12:7C:2B:E7:17:0C:71:3B X509v3 Authority Key Identifier: keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:a7:92:5b:0d:df:7b:ea:95:7f:41:d1:1c:2e:c4:74:1b: 97:01:5c:1e:72:7a:8e:23:64:28:a1:00:70:b9:87:2a:00:30: a1:df:b6:9a:ec:a5:f5:3c:bc:62:d3:da:18:4f:fc:25:9d:33: 4c:ba:79:86:a9:2d:fe:48:5f:96:f8:9a:c7:b4:22:74:1b:47: b6:8a:88:23:0c:b6:0c:31:50:37:5d:b3:27:6e:23:94:42:e4: 50:69:d3:41:3d:15:0c:54:8d:ec:ea:71:bf:02:7f:51:80:01: c1:5d:80:99:db:19:eb:58:e8:23:5e:31:e2:38:c1:7a:3b:27: a7:6f:ab:01:c0:96:9c:86:33:fb:98:3d:2d:58:9a:72:5f:52: d6:12:02:58:31:d4:ef:0b:cf:dc:87:cc:68:5c:b6:5b:59:26: 36:ce:c2:7d:c1:ad:fd:bb:45:dd:c3:4f:2e:9a:16:bd:ff:95: e0:78:6b:fe:da:98:6b:7f:d4:38:6d:7b:50:ea:a9:b0:c0:b3: 2b:36:8d:eb:c3:00:f6:bf:35:dc:1e:ec:c1:3f:3c:52:26:6f: 6f:85:e7:ec:bf:f5:c0:12:bf:c5:76:a7:af:bc:ef:1a:f6:70: c3:95:95:6b:d2:d7:5b:4a:b3:19:0c:c4:8d:c4:75:76:4f:bd: a6:8d:bd:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0BcWAC5CX+Hr9Gj5fKYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Nzc3NWNlODgwNDY5NTk5NmNlNzdjN2QzNjgxYjljMjQx YjM2MmYwHhcNMjUxMjE1MDcwMTA2WhcNMjUxMjE2MDcwMTA2WjAzMTEwLwYDVQQD Eyg5NGFmMGZhZGI5ODAwNDEzNjExNDQxNjIxMjdjMmJlNzE3MGM3MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOicdC9rfC5HC34wZdyH17Uo7pid CduwGpDF3qVpMPVvEghO6xklGh7kmfIVUVJwwJPJ3bpUCBg2daI/AotgmEExE60O ubOC8cU/5Y5bRWpOFv4CzHusPlL6MjwnwqkdgZBki/SuSasDf9Sg4odgnhXNejzl ITwuRoYzH9G54gZ5u3SdyQnRAKxQ25+XfkGZA7sZxdIVBkuk4Paz5N/kkCdzMrp5 xn5wwCBYDJbzX/dfI6Wy6FwCFn07oZarVUukJEYmKBJUlUvcDsXJUEggrC8PGjIp q54DKwJfgWLH1DFAo4lvlOtMK4NIkRIwQzuEGayz0DpoFj5sFQSjqk/CUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSvD625gAQTYRRBYhJ8K+cXDHE7MB8GA1UdIwQY MBaAFJd3dc6IBGlZls53x9NoG5wkGzYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTkt NjIzOTczM2M2MTg0LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iYzhlMTAtNDYxZS00Y2U0LThiZTktNjIzOTczM2M2MTg0 LzEvbDNkMXpvZ0VhVm1Xem5mSDAyZ2JuQ1FiTmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkACnklsN 33vqlX9B0RwuxHQblwFcHnJ6jiNkKKEAcLmHKgAwod+2muyl9Ty8YtPaGE/8JZ0z TLp5hqkt/khflviax7QidBtHtoqIIwy2DDFQN12zJ24jlELkUGnTQT0VDFSN7Opx vwJ/UYABwV2AmdsZ61joI14x4jjBejsnp2+rAcCWnIYz+5g9LViacl9S1hICWDHU 7wvP3IfMaFy2W1kmNs7CfcGt/btF3cNPLpoWvf+V4Hhr/tqYa3/UOG17UOqpsMCz KzaN68MA9r813B7swT88UiZvb4Xn7L/1wBK/xXanr7zvGvZww5WVa9LXW0qzGQzE jcR1dk+9po29FQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:37 2025 by rpki-client