This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft File: L4IFe98YT8Q6GjsF492Z_-KgvmA.mft (raw, json) Hash identifier: SDQg/J1KWxMswgM1rkqsnBJsPE8a11Lt6QtIRMX3BAE= Subject key identifier: EE:1A:53:F5:2B:9B:7D:BF:46:A2:51:83:A1:44:97:E6:AC:6B:30:07 Authority key identifier: 2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60 Certificate issuer: /CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60 Certificate serial: 019B59E3BFCE80A0D8E424AB5BD64C64B324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft Manifest number: 011F Signing time: Fri 26 Dec 2025 09:00:56 +0000 Manifest this update: Fri 26 Dec 2025 09:00:56 +0000 Manifest next update: Sat 27 Dec 2025 09:00:56 +0000 Files and hashes: 1: JgS-n-wNqWZrJNFBUoK-xA0PR9k.roa (hash: /mEkB78+oSmFupgf2hrBJR3V+vJktDDVV7xA/T40FWQ=) 2: L4IFe98YT8Q6GjsF492Z_-KgvmA.crl (hash: PSq5HlFUM14ifrDdq8ohUKxUh9zmny0ZAyhf+DtZMR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:bf:ce:80:a0:d8:e4:24:ab:5b:d6:4c:64:b3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60 Validity Not Before: Dec 26 09:00:56 2025 GMT Not After : Dec 27 09:00:56 2025 GMT Subject: CN=ee1a53f52b9b7dbf46a25183a14497e6ac6b3007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:2d:cd:70:cb:e3:33:cc:56:f1:7b:6f:94: 69:83:3b:cc:6e:6f:bc:e6:62:8d:70:57:b1:f9:39: 8b:24:31:f4:d5:d8:59:93:e9:66:04:ef:bd:b1:ae: f8:0d:77:10:26:e4:4d:f0:87:05:f9:e8:50:f0:dc: 9f:08:3a:12:4b:22:48:85:14:87:21:a6:9a:4c:0e: 3e:7d:3d:b7:12:25:78:a7:ca:ec:37:ba:c6:b9:89: 49:96:9f:17:b0:15:93:01:60:fc:8f:76:49:ee:69: a6:ae:49:c7:28:41:6f:ec:57:bb:f4:66:85:07:6a: fa:ba:fb:0c:df:6a:f9:40:a6:96:39:42:2f:0d:62: 5d:31:42:7b:bc:5f:af:33:0a:91:93:1a:a2:1b:e5: 8e:b3:67:5d:e0:b4:fd:d6:2b:c3:95:63:7c:70:d0: 6e:f0:e6:ea:fa:2d:56:ba:6b:83:6a:c9:54:64:1f: de:a5:ee:07:e0:48:32:8b:b9:3d:f4:a2:a6:54:aa: d2:0c:5a:90:f2:07:55:72:fb:29:90:03:75:75:ad: 26:b3:ed:fc:db:90:05:45:50:52:61:b1:d9:b4:a2: f4:29:31:fa:ce:b3:1f:41:dd:17:25:f4:97:d4:22: a5:13:eb:8e:de:7b:de:9d:e4:20:55:35:d5:68:39: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:53:F5:2B:9B:7D:BF:46:A2:51:83:A1:44:97:E6:AC:6B:30:07 X509v3 Authority Key Identifier: keyid:2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1b:87:d9:0b:4a:9e:d2:90:41:06:8d:f2:1b:8c:24:bf:1b: f7:68:24:19:8b:26:c5:f4:33:6d:8e:d3:8a:d3:ef:2d:3e:74: 5e:25:5b:1c:c4:27:36:6d:26:66:0a:7b:aa:e6:65:2f:11:92: 97:1b:b5:4a:8e:eb:8b:1d:b8:78:fd:5c:0a:22:54:14:97:c8: a9:9a:be:04:4d:e4:58:2d:99:c9:b4:48:0a:94:aa:74:47:37: aa:3f:16:96:d1:f3:1a:16:52:ac:e3:77:21:02:0c:d8:00:7a: 8d:18:ad:3c:40:fe:cc:ea:62:ab:bd:d6:c8:44:71:93:bb:86: 89:b8:78:4e:34:33:9f:5f:16:b2:63:9a:9d:de:50:2e:ed:6e: e2:2f:35:c4:ff:e6:e6:d4:98:e8:92:5a:44:61:ad:39:4c:2b: ff:4e:3e:b2:fb:df:64:e5:88:aa:a2:8c:35:6e:0f:7c:b8:5a: e1:9f:4a:5e:c4:f8:54:b0:ee:51:ba:51:18:f5:c8:75:7b:86: ab:6d:91:4d:32:11:08:3d:ef:9c:ea:dc:26:36:3a:21:fa:76: e0:d0:c1:c0:09:39:d0:89:ff:fe:1b:91:06:e7:ca:c3:95:e4: 8c:73:96:f0:6c:3f:9b:7d:52:97:3c:10:71:7c:d0:93:76:58: a9:89:71:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47/OgKDY5CSrW9ZMZLMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODIwNTdiZGYxODRmYzQzYTFhM2IwNWUzZGQ5OWZmZTJh MGJlNjAwHhcNMjUxMjI2MDkwMDU2WhcNMjUxMjI3MDkwMDU2WjAzMTEwLwYDVQQD EyhlZTFhNTNmNTJiOWI3ZGJmNDZhMjUxODNhMTQ0OTdlNmFjNmIzMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcktzXDL4zPMVvF7b5RpgzvMbm+8 5mKNcFex+TmLJDH01dhZk+lmBO+9sa74DXcQJuRN8IcF+ehQ8NyfCDoSSyJIhRSH IaaaTA4+fT23EiV4p8rsN7rGuYlJlp8XsBWTAWD8j3ZJ7mmmrknHKEFv7Fe79GaF B2r6uvsM32r5QKaWOUIvDWJdMUJ7vF+vMwqRkxqiG+WOs2dd4LT91ivDlWN8cNBu 8Obq+i1WumuDaslUZB/epe4H4Egyi7k99KKmVKrSDFqQ8gdVcvspkAN1da0ms+38 25AFRVBSYbHZtKL0KTH6zrMfQd0XJfSX1CKlE+uO3nveneQgVTXVaDnMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4aU/Urm32/RqJRg6FEl+asazAHMB8GA1UdIwQY MBaAFC+CBXvfGE/EOho7BePdmf/ioL5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83MWM1OTAtMjQ2ZC00YWFiLTlkZGUt ODYzMDRmNWZlNTJhLzEvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83MWM1OTAtMjQ2ZC00YWFiLTlkZGUtODYzMDRmNWZlNTJh LzEvTDRJRmU5OFlUOFE2R2pzRjQ5MlpfLUtndm1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhuH2QtK ntKQQQaN8huMJL8b92gkGYsmxfQzbY7TitPvLT50XiVbHMQnNm0mZgp7quZlLxGS lxu1So7rix24eP1cCiJUFJfIqZq+BE3kWC2ZybRICpSqdEc3qj8WltHzGhZSrON3 IQIM2AB6jRitPED+zOpiq73WyERxk7uGibh4TjQzn18WsmOand5QLu1u4i81xP/m 5tSY6JJaRGGtOUwr/04+svvfZOWIqqKMNW4PfLha4Z9KXsT4VLDuUbpRGPXIdXuG q22RTTIRCD3vnOrcJjY6Ifp24NDBwAk50In//huRBufKw5XkjHOW8Gw/m31SlzwQ cXzQk3ZYqYlxvw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:50 2025 by rpki-client