This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft File: LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json) Hash identifier: InoVKVmNfSVbIO0AowIukLaVNJh9vOl7Gu3N+Cv6tWI= Subject key identifier: 48:AE:F9:B3:91:70:D0:94:F9:CC:CD:11:3D:FE:16:32:7B:D1:D4:72 Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Certificate serial: 019B5A88C69398879F76512C95B277EE533F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft Manifest number: 1A Signing time: Fri 26 Dec 2025 12:01:11 +0000 Manifest this update: Fri 26 Dec 2025 12:01:11 +0000 Manifest next update: Sat 27 Dec 2025 12:01:11 +0000 Files and hashes: 1: 92BPR5lvI07-es0ROLWifKo-K6M.roa (hash: PAuzJ+7bFcImN1OH46J1IxknO+znhB9BZ6ZITi4tGkg=) 2: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: Gz7migBQWvmtlh4fYnpcBAv5npDLKkuCbOmZlaFzJQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c6:93:98:87:9f:76:51:2c:95:b2:77:ee:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Validity Not Before: Dec 26 12:01:11 2025 GMT Not After : Dec 27 12:01:11 2025 GMT Subject: CN=48aef9b39170d094f9cccd113dfe16327bd1d472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:a0:af:56:a5:33:c3:51:bb:92:33:b2:03: 0c:e7:4e:82:57:91:aa:19:24:9b:24:b1:24:fe:31: c3:f3:ee:6f:2c:49:3c:5d:30:c5:31:7b:7e:10:f7: d2:6e:5d:b0:01:46:cd:66:29:d9:3c:a4:f9:c8:30: 50:bf:fc:b7:a1:03:62:3f:e0:cd:9a:01:7d:c3:d4: c5:1c:32:cc:0b:d9:c8:8c:66:53:e6:2b:34:4c:b0: aa:bb:be:86:40:af:19:cc:50:07:87:25:37:90:d4: b1:c0:44:c8:4a:d7:b8:73:f7:82:75:8f:ae:5d:93: 49:df:b2:8c:86:49:58:7f:cb:96:79:69:d6:65:53: fd:f1:34:94:53:53:90:8c:e1:c5:e4:7a:49:45:b4: f9:93:f7:70:f0:ac:9d:e1:41:9b:70:cc:e2:71:f0: 7d:85:83:af:8f:41:0b:97:e3:76:b0:ee:8b:b6:14: 68:0a:cc:f8:f4:11:b0:90:58:8a:1a:9c:85:6c:3e: c0:6c:f7:38:4f:17:bb:20:f7:08:29:7f:39:a3:55: 77:fc:e4:68:6d:9b:67:81:b2:6e:65:da:9d:05:6e: 0a:a4:2b:0f:9c:79:59:90:42:dd:b4:a6:93:e6:d3: 5e:3e:ec:b5:e5:45:e3:db:72:d1:62:86:a6:22:66: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:F9:B3:91:70:D0:94:F9:CC:CD:11:3D:FE:16:32:7B:D1:D4:72 X509v3 Authority Key Identifier: keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:70:7a:d6:c7:1e:c1:cf:78:cc:d6:c3:d1:cb:b1:c4:77:81: 70:1b:27:8d:97:29:43:a9:46:63:7e:62:51:4c:f4:cf:ea:de: 50:0b:aa:b5:3c:10:cc:64:9e:a9:04:16:be:b4:9b:15:03:d1: 72:17:7f:5a:ba:84:84:71:a7:b5:7e:48:0b:3b:ee:9a:39:f8: 90:20:14:ad:b5:64:11:35:c9:15:6f:2b:0d:92:44:0e:d0:04: 07:7c:7a:ce:d2:22:79:b0:50:ea:ce:85:71:5b:44:03:1e:f8: d4:5a:40:a0:82:65:da:0b:70:38:00:e2:6b:32:7c:20:bf:b0: b5:fa:48:ad:f9:92:b9:60:ca:3a:28:a2:4f:73:a1:cc:99:32: d0:40:31:09:59:a3:31:89:91:d3:0c:3c:e7:fd:a5:7f:c7:fc: ff:32:66:d6:c0:39:a9:bf:d8:80:35:2a:75:82:73:f6:c1:aa: c1:72:e0:1d:00:11:7b:65:1f:64:e9:85:21:e7:95:f5:55:0e: 55:4a:0b:1f:0a:1a:be:f3:2d:34:09:a8:2a:d5:40:7c:93:fe: 9a:64:bd:66:88:3c:01:2f:df:3c:60:c8:63:96:f5:0c:87:76: 78:b1:b1:12:67:51:81:ac:cf:9c:9e:86:95:e0:ea:a8:c1:f7: 9b:d7:c0:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMaTmIefdlEslbJ37lM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx ZjVmNmUwHhcNMjUxMjI2MTIwMTExWhcNMjUxMjI3MTIwMTExWjAzMTEwLwYDVQQD Eyg0OGFlZjliMzkxNzBkMDk0ZjljY2NkMTEzZGZlMTYzMjdiZDFkNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp2gr1alM8NRu5IzsgMM506CV5Gq GSSbJLEk/jHD8+5vLEk8XTDFMXt+EPfSbl2wAUbNZinZPKT5yDBQv/y3oQNiP+DN mgF9w9TFHDLMC9nIjGZT5is0TLCqu76GQK8ZzFAHhyU3kNSxwETISte4c/eCdY+u XZNJ37KMhklYf8uWeWnWZVP98TSUU1OQjOHF5HpJRbT5k/dw8Kyd4UGbcMzicfB9 hYOvj0ELl+N2sO6LthRoCsz49BGwkFiKGpyFbD7AbPc4Txe7IPcIKX85o1V3/ORo bZtngbJuZdqdBW4KpCsPnHlZkELdtKaT5tNePuy15UXj23LRYoamImaWwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiu+bORcNCU+czNET3+FjJ70dRyMB8GA1UdIwQY MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt MGY3OTY0MzIxY2UxLzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnB61sce wc94zNbD0cuxxHeBcBsnjZcpQ6lGY35iUUz0z+reUAuqtTwQzGSeqQQWvrSbFQPR chd/WrqEhHGntX5ICzvumjn4kCAUrbVkETXJFW8rDZJEDtAEB3x6ztIiebBQ6s6F cVtEAx741FpAoIJl2gtwOADiazJ8IL+wtfpIrfmSuWDKOiiiT3OhzJky0EAxCVmj MYmR0ww85/2lf8f8/zJm1sA5qb/YgDUqdYJz9sGqwXLgHQARe2UfZOmFIeeV9VUO VUoLHwoavvMtNAmoKtVAfJP+mmS9Zog8AS/fPGDIY5b1DId2eLGxEmdRgazPnJ6G leDqqMH3m9fAlg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:34 2025 by rpki-client