This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json) Hash identifier: E20tbRh4RncCuwjnxubFBVL35QclEd7HBm8mYE8kDdw= Subject key identifier: 9B:96:1D:5D:E8:94:77:2F:40:55:5C:1E:7E:51:C9:A1:E6:D1:50:A0 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B39B3E85ED68CFA1FCAFCB3C0C28AE9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:00:50 +0000 Manifest this update: Sat 20 Dec 2025 03:00:50 +0000 Manifest next update: Sun 21 Dec 2025 03:00:50 +0000 Files and hashes: 1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=) 2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=) 3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=) 4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=) 5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: uu2gNK9hkchFiJZg7ADkiJPuFm/Rv6/HuWGGXWPOoZY=) 6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e8:5e:d6:8c:fa:1f:ca:fc:b3:c0:c2:8a:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Dec 20 03:00:50 2025 GMT Not After : Dec 21 03:00:50 2025 GMT Subject: CN=9b961d5de894772f40555c1e7e51c9a1e6d150a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:fa:b1:af:d1:a4:60:8f:13:92:3d:93:4d: 20:d9:4c:bd:39:be:93:13:5b:c0:29:d4:1c:bb:97: 66:8c:c7:98:55:7c:53:4e:ac:24:77:e4:80:28:79: c8:8d:ec:c9:48:5e:14:80:34:d7:56:c2:d7:b2:dd: 94:67:47:5b:9e:ad:b5:ab:24:2e:5f:58:e3:7c:ea: 4c:f9:73:7a:41:aa:35:d9:77:2b:d0:93:7e:6c:2f: 95:01:a0:76:29:d0:e6:95:3b:df:c5:c2:7d:14:1f: 81:6d:64:7e:d3:9f:21:8f:7d:0d:75:26:09:42:23: db:6f:b8:76:19:5e:7a:66:93:0a:34:6c:6f:bd:9d: 61:cc:d5:c3:d2:2e:85:c6:83:1b:c3:fe:94:a2:1a: 8d:f1:f7:dc:fa:f0:24:ed:5e:29:9b:ad:37:ed:b7: 5c:41:7a:6e:ba:7c:d1:28:7d:23:ba:b0:ed:b9:96: b9:bf:aa:a0:7c:79:8f:26:7c:00:d8:35:3f:a3:36: b8:58:96:1c:ac:d1:d6:71:01:15:60:f7:97:a9:a6: fa:b9:8f:3f:8f:dc:9c:f2:ed:7e:f8:c8:be:1e:75: 35:38:46:41:4e:06:8a:0d:1a:e2:07:3a:f6:6d:43: f3:70:63:af:74:50:0f:69:7e:9e:3d:77:d1:91:f5: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:96:1D:5D:E8:94:77:2F:40:55:5C:1E:7E:51:C9:A1:E6:D1:50:A0 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:71:1b:23:8b:93:ef:c4:aa:f3:7b:57:cb:59:c1:9a:6f:87: ff:42:9c:b9:ff:e9:e6:54:ca:51:84:48:0d:34:df:0e:be:c9: 53:a7:7b:ea:ef:6f:38:94:5c:6d:43:d3:60:1a:2b:b3:08:45: e5:0b:64:bc:e8:b7:f0:40:eb:30:a5:60:d3:2b:45:fd:f2:bc: 33:30:d9:0a:99:11:fa:08:e0:93:3c:4c:0e:b6:99:a2:d1:f7: c0:2c:1b:31:f7:7e:74:74:cd:87:d6:49:b7:b4:be:b2:02:df: 3f:53:c2:e7:33:9c:62:53:3a:f9:97:82:da:83:4a:97:e2:da: 1a:de:11:06:83:ed:4e:a2:8f:e0:30:28:89:25:8f:76:66:14: c0:39:9f:de:54:7e:5b:df:2c:7b:13:a1:98:07:11:7d:c9:63: a1:09:6f:59:07:ac:1a:c8:b7:39:ac:b7:1c:2d:68:4b:12:c1: 2f:26:36:04:d5:47:51:21:2a:fe:f7:d1:e3:56:46:57:12:3b: 05:17:6e:96:3a:b9:7c:52:62:98:19:e1:78:2f:9d:97:ae:e0: b9:4c:00:a4:d3:bd:33:02:88:39:af:85:2a:9e:d9:3d:d0:31: ec:e9:63:c2:31:01:fb:15:10:75:e7:1f:57:5a:29:82:a7:a9: f4:97:3b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+he1oz6H8r8s8DCiunOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjUxMjIwMDMwMDUwWhcNMjUxMjIxMDMwMDUwWjAzMTEwLwYDVQQD Eyg5Yjk2MWQ1ZGU4OTQ3NzJmNDA1NTVjMWU3ZTUxYzlhMWU2ZDE1MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv/6sa/RpGCPE5I9k00g2Uy9Ob6T E1vAKdQcu5dmjMeYVXxTTqwkd+SAKHnIjezJSF4UgDTXVsLXst2UZ0dbnq21qyQu X1jjfOpM+XN6Qao12Xcr0JN+bC+VAaB2KdDmlTvfxcJ9FB+BbWR+058hj30NdSYJ QiPbb7h2GV56ZpMKNGxvvZ1hzNXD0i6FxoMbw/6UohqN8ffc+vAk7V4pm6037bdc QXpuunzRKH0jurDtuZa5v6qgfHmPJnwA2DU/oza4WJYcrNHWcQEVYPeXqab6uY8/ j9yc8u1++Mi+HnU1OEZBTgaKDRriBzr2bUPzcGOvdFAPaX6ePXfRkfXVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuWHV3olHcvQFVcHn5RyaHm0VCgMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3EbI4uT 78Sq83tXy1nBmm+H/0Kcuf/p5lTKUYRIDTTfDr7JU6d76u9vOJRcbUPTYBorswhF 5QtkvOi38EDrMKVg0ytF/fK8MzDZCpkR+gjgkzxMDraZotH3wCwbMfd+dHTNh9ZJ t7S+sgLfP1PC5zOcYlM6+ZeC2oNKl+LaGt4RBoPtTqKP4DAoiSWPdmYUwDmf3lR+ W98sexOhmAcRfcljoQlvWQesGsi3Oay3HC1oSxLBLyY2BNVHUSEq/vfR41ZGVxI7 BRduljq5fFJimBnheC+dl67guUwApNO9MwKIOa+FKp7ZPdAx7OljwjEB+xUQdecf V1opgqep9Jc7tw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:06 2025 by rpki-client