This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json) Hash identifier: 5s7yWg6/TF/HXfTte8gHSA87xGGS/fjHN/0EKyGTc4A= Subject key identifier: 55:C2:49:A2:6F:7F:7A:C9:E4:82:14:F9:6B:2E:AE:47:9B:D1:28:1F Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2 Certificate serial: 019B115CDB5689E2089F2498F4443EA54209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft Manifest number: 17B0 Signing time: Fri 12 Dec 2025 07:00:56 +0000 Manifest this update: Fri 12 Dec 2025 07:00:56 +0000 Manifest next update: Sat 13 Dec 2025 07:00:56 +0000 Files and hashes: 1: BrO3qC9sElz84kZt0TlGLTPrFfo.roa (hash: Xac1gSwp3PaG99+Svk2b1wiRsCto7zOmCczTzvRnd5o=) 2: HV6okiZ_Mm9pgAnQyp-neXvD9Ys.roa (hash: Z8kbWAqPsQVcPrsGh46E3DnYGpnTYUasQHe7qcWJi5s=) 3: KChU0Ss7IUSMmcrbp9hvvsOcKSI.roa (hash: tqUwPcZIIPi8c5hbtPgv87qi30gm6VRMDquHIJzvPTE=) 4: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: YMqm+EeUEtcp/1r7GVQkZcWONPM+AGhoWe/tQx3pkBk=) 5: mb8LY7nbnDJCruGLljcH6XmZLok.roa (hash: HXr3dJ/DTsUePOKMb4j7QqYwB0wBIRDSnQ0yqP6D61g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:db:56:89:e2:08:9f:24:98:f4:44:3e:a5:42:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2 Validity Not Before: Dec 12 07:00:56 2025 GMT Not After : Dec 13 07:00:56 2025 GMT Subject: CN=55c249a26f7f7ac9e48214f96b2eae479bd1281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:42:f0:41:79:42:b6:19:80:3a:39:44:a9: 96:d5:ea:ef:80:3c:db:06:ac:ab:28:dd:99:6a:30: e7:74:c2:97:04:4f:9a:c3:b4:b7:a9:27:53:46:e3: 7b:0d:72:d9:31:f9:62:69:5d:ad:52:77:e2:d7:be: df:81:18:ed:69:53:0b:1b:fb:a8:bc:4a:6c:ee:ab: 9d:ac:66:22:88:e3:01:7e:a9:b2:2a:68:a2:b3:3f: c6:20:6c:67:92:0c:c2:30:c3:4e:33:4b:52:45:36: cf:dc:26:6c:8b:b4:d6:c9:9c:c7:f6:20:59:7e:dd: 80:30:3c:a5:a5:e8:9e:94:63:f7:c2:eb:16:15:75: 35:ce:13:06:ab:ef:31:31:74:31:d8:80:43:05:0d: 29:a3:08:94:6b:93:c0:c8:af:9e:67:88:45:3a:d9: fb:34:ea:67:d6:29:50:09:f7:33:ef:9e:94:07:52: 53:15:73:44:24:41:cf:b1:bd:01:72:1d:44:17:b5: 97:54:1c:9f:0e:33:3d:0a:31:f8:65:44:1d:4e:b4: 93:2f:86:4a:2d:12:a2:be:9d:f4:d6:94:d8:f0:5c: 19:19:8e:2e:cb:57:4a:5c:41:d9:f3:e3:92:c3:66: 52:32:85:cf:51:19:e8:f5:56:42:22:b2:a8:40:2f: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C2:49:A2:6F:7F:7A:C9:E4:82:14:F9:6B:2E:AE:47:9B:D1:28:1F X509v3 Authority Key Identifier: keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f0:d4:fd:e8:78:06:e9:8b:92:88:60:f5:e9:e7:4c:5f:98: 93:ff:db:3e:83:44:80:25:42:e8:ec:0c:26:ae:00:78:49:f7: 9f:20:57:eb:49:e4:43:1b:5c:4e:25:15:c8:53:77:d0:96:e4: 06:72:98:da:fe:8f:23:4c:fc:95:87:6d:2b:a1:7a:bc:12:43: ac:70:7b:1c:cc:f0:2d:a1:43:8a:b7:e9:a8:51:60:1c:97:5a: 41:0b:44:61:ed:f0:89:8f:a0:da:14:2c:c3:90:32:3b:b1:05: 82:05:38:bd:96:93:76:6f:f4:c3:05:b0:1d:7d:cf:4f:38:88: 3a:7a:32:ea:70:66:e4:1a:55:d4:8d:75:29:e5:a5:f2:da:c6: a2:5d:ae:a1:a2:2c:a1:2b:7b:67:46:9d:40:15:92:41:cf:19: 18:85:9f:32:fa:fc:b8:15:ee:8e:1c:11:91:8a:82:be:5f:55: ce:3f:3f:01:c5:c8:97:35:af:e1:02:8e:de:ee:16:bd:9f:8f: 57:78:a2:3e:64:49:31:1d:88:5a:f5:1c:ab:40:91:f4:55:b1: b3:99:18:37:4b:10:04:5a:b0:7c:29:ef:13:fd:0a:b6:2f:c6: d3:1c:a3:9f:b5:10:1c:2c:ee:04:82:96:2b:7d:f5:2c:da:42: c0:3f:03:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXNtWieIInySY9EQ+pUIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi NzQ5YzIwHhcNMjUxMjEyMDcwMDU2WhcNMjUxMjEzMDcwMDU2WjAzMTEwLwYDVQQD Eyg1NWMyNDlhMjZmN2Y3YWM5ZTQ4MjE0Zjk2YjJlYWU0NzliZDEyODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy69C8EF5QrYZgDo5RKmW1ervgDzb BqyrKN2ZajDndMKXBE+aw7S3qSdTRuN7DXLZMfliaV2tUnfi177fgRjtaVMLG/uo vEps7qudrGYiiOMBfqmyKmiisz/GIGxnkgzCMMNOM0tSRTbP3CZsi7TWyZzH9iBZ ft2AMDylpeielGP3wusWFXU1zhMGq+8xMXQx2IBDBQ0powiUa5PAyK+eZ4hFOtn7 NOpn1ilQCfcz756UB1JTFXNEJEHPsb0Bch1EF7WXVByfDjM9CjH4ZUQdTrSTL4ZK LRKivp301pTY8FwZGY4uy1dKXEHZ8+OSw2ZSMoXPURno9VZCIrKoQC+URQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXCSaJvf3rJ5IIU+Wsurkeb0SgfMB8GA1UdIwQY MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/DU/eh4 BumLkohg9ennTF+Yk//bPoNEgCVC6OwMJq4AeEn3nyBX60nkQxtcTiUVyFN30Jbk BnKY2v6PI0z8lYdtK6F6vBJDrHB7HMzwLaFDirfpqFFgHJdaQQtEYe3wiY+g2hQs w5AyO7EFggU4vZaTdm/0wwWwHX3PTziIOnoy6nBm5BpV1I11KeWl8trGol2uoaIs oSt7Z0adQBWSQc8ZGIWfMvr8uBXujhwRkYqCvl9Vzj8/AcXIlzWv4QKO3u4WvZ+P V3iiPmRJMR2IWvUcq0CR9FWxs5kYN0sQBFqwfCnvE/0Kti/G0xyjn7UQHCzuBIKW K331LNpCwD8DjA== -----END CERTIFICATE-----Generated at Fri Dec 12 11:51:38 2025 by rpki-client