This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json) Hash identifier: EgRZvkVxNJu53Bodp+D1yd3Di5OqOfOU80zxwCdF20Y= Subject key identifier: DF:12:4C:17:5A:17:A7:5B:2F:19:A9:9D:43:55:2F:2A:CD:44:0F:AB Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c Certificate serial: 019B59E3AA2CF195EB6B92DE2D6766259692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 09:00:50 +0000 Manifest this update: Fri 26 Dec 2025 09:00:50 +0000 Manifest next update: Sat 27 Dec 2025 09:00:50 +0000 Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=) 2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: Z2Mij6GjMe1NiLsfwh3acIA+1g7BZ/ERqpmIdSeC+88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:aa:2c:f1:95:eb:6b:92:de:2d:67:66:25:96:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c Validity Not Before: Dec 26 09:00:50 2025 GMT Not After : Dec 27 09:00:50 2025 GMT Subject: CN=df124c175a17a75b2f19a99d43552f2acd440fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:ba:ab:7a:58:01:21:55:c3:ee:c9:da:e3: 12:76:a3:9e:55:80:4b:1b:e3:8e:d5:07:53:99:a2: b5:e7:27:af:35:8f:20:42:6b:63:45:94:3d:95:be: d5:46:57:58:1f:88:80:a0:90:e1:f1:4b:43:78:d2: ed:24:f3:8b:21:10:ab:35:b5:0d:dd:dd:87:4e:5e: 22:70:dc:ae:8e:c9:24:59:b2:43:3f:bc:f2:97:f3: cf:5b:34:e1:6f:49:11:03:12:9e:16:53:0b:4f:d6: c5:13:f1:fd:64:74:13:0f:35:8d:a6:fd:6d:22:e8: 85:08:ac:e7:13:e9:a3:64:9f:de:e6:89:2b:cf:e5: cb:87:8c:47:98:65:68:6a:96:dd:f2:54:18:7c:dd: e6:08:16:20:58:63:d4:66:d2:9c:46:32:a9:3a:8c: 37:48:98:dc:66:03:1e:4f:94:97:74:15:41:05:87: 2e:59:42:b1:e7:3f:5c:35:24:c3:30:5d:5a:ee:d4: cc:0e:da:35:c8:0c:df:80:3e:6c:c7:83:0b:fc:8e: e4:b8:81:bf:db:cf:a2:57:e8:49:55:16:a6:a2:73: 35:c2:4f:94:c4:3b:82:26:e5:3e:b8:08:2f:9c:50: 73:cd:fc:3d:4d:a8:45:af:e1:95:c4:a9:d5:6d:05: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:4C:17:5A:17:A7:5B:2F:19:A9:9D:43:55:2F:2A:CD:44:0F:AB X509v3 Authority Key Identifier: keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:24:7b:dc:fc:65:ad:21:30:9b:17:75:0b:7b:ed:52:3e:c0: 68:fe:9e:0d:fc:db:60:b4:4e:f6:bf:b4:ea:79:63:ca:8c:c4: b7:73:25:db:f7:6a:66:a2:d9:3e:0f:60:78:57:6a:8b:44:58: fd:0c:90:38:54:60:00:89:97:37:6c:41:0d:5f:7b:a4:18:65: b1:77:53:79:bc:ae:86:dd:33:7d:42:17:86:f3:ed:71:10:0f: 5c:ff:fa:e6:35:dd:52:ac:bc:4b:03:85:91:c9:3c:9f:05:e5: 91:01:81:07:68:96:cb:1e:60:f3:af:db:76:7d:7e:44:f7:45: 74:3c:f9:85:82:36:56:bd:91:05:91:73:01:f1:a2:80:8d:71: 31:ff:60:43:8d:fb:b9:36:80:ac:96:44:42:dc:4f:6c:aa:a9: d1:27:24:bf:ab:9b:20:8a:3c:b1:ec:7b:a4:3f:cc:8a:3b:00: ef:08:c5:d6:a5:88:a8:f0:47:7a:5d:b4:67:0a:32:6f:28:fd: 32:57:bd:69:3f:84:ee:26:7a:e0:3e:44:3f:c3:14:44:a0:af: 49:d4:31:0b:62:e7:c3:f1:1e:02:33:b9:94:e7:6b:95:b9:77: d5:54:ab:02:d2:da:b4:c1:59:26:73:64:5b:7e:24:2f:fc:37: a8:ab:93:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46os8ZXra5LeLWdmJZaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODhhNTNmY2I5Njc3N2Y5OWUwMmRmODk0MGRkMDQwYjQ1 NGNkMWMwHhcNMjUxMjI2MDkwMDUwWhcNMjUxMjI3MDkwMDUwWjAzMTEwLwYDVQQD EyhkZjEyNGMxNzVhMTdhNzViMmYxOWE5OWQ0MzU1MmYyYWNkNDQwZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutW6q3pYASFVw+7J2uMSdqOeVYBL G+OO1QdTmaK15yevNY8gQmtjRZQ9lb7VRldYH4iAoJDh8UtDeNLtJPOLIRCrNbUN 3d2HTl4icNyujskkWbJDP7zyl/PPWzThb0kRAxKeFlMLT9bFE/H9ZHQTDzWNpv1t IuiFCKznE+mjZJ/e5okrz+XLh4xHmGVoapbd8lQYfN3mCBYgWGPUZtKcRjKpOow3 SJjcZgMeT5SXdBVBBYcuWUKx5z9cNSTDMF1a7tTMDto1yAzfgD5sx4ML/I7kuIG/ 28+iV+hJVRamonM1wk+UxDuCJuU+uAgvnFBzzfw9TahFr+GVxKnVbQU7hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8STBdaF6dbLxmpnUNVLyrNRA+rMB8GA1UdIwQY MBaAFC+IpT/Llnd/meAt+JQN0EC0VM0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2Mt YWNjNGFhYzc4ZDBkLzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2MtYWNjNGFhYzc4ZDBk LzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCR73Pxl rSEwmxd1C3vtUj7AaP6eDfzbYLRO9r+06nljyozEt3Ml2/dqZqLZPg9geFdqi0RY /QyQOFRgAImXN2xBDV97pBhlsXdTebyuht0zfUIXhvPtcRAPXP/65jXdUqy8SwOF kck8nwXlkQGBB2iWyx5g86/bdn1+RPdFdDz5hYI2Vr2RBZFzAfGigI1xMf9gQ437 uTaArJZEQtxPbKqp0Sckv6ubIIo8sex7pD/MijsA7wjF1qWIqPBHel20Zwoybyj9 Mle9aT+E7iZ64D5EP8MURKCvSdQxC2Lnw/EeAjO5lOdrlbl31VSrAtLatMFZJnNk W34kL/w3qKuTzA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:27 2025 by rpki-client