This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json) Hash identifier: bVKql/8MwnRlpNqIlqdkeFjw95fcDnbpOvijkJQAZaY= Subject key identifier: FF:79:B6:80:30:C9:1D:C8:12:CB:DF:02:35:C6:45:63:96:CC:FB:E7 Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Certificate serial: 019B5ABF53117E10C396E119903A07324876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft Manifest number: 0671 Signing time: Fri 26 Dec 2025 13:00:46 +0000 Manifest this update: Fri 26 Dec 2025 13:00:46 +0000 Manifest next update: Sat 27 Dec 2025 13:00:46 +0000 Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=) 2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=) 3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: sGF3KqOeymGCF9G3fEqImEYJ1tju/k/vwzZcRlMb77I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:53:11:7e:10:c3:96:e1:19:90:3a:07:32:48:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Validity Not Before: Dec 26 13:00:46 2025 GMT Not After : Dec 27 13:00:46 2025 GMT Subject: CN=ff79b68030c91dc812cbdf0235c6456396ccfbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:36:cd:c2:e4:c9:39:bc:40:9e:86:29:ae:f5: 5a:2e:e2:43:c9:dc:73:5a:15:2c:0a:a7:21:95:55: ce:c7:dc:2a:d5:e4:9e:78:4f:5f:de:8e:e4:a1:6d: 16:c7:b6:9e:a0:a5:7b:5d:6a:32:ec:31:52:05:2e: 84:e9:4b:90:9e:40:b1:63:b6:bc:62:14:1e:06:f6: 35:b7:28:7e:2d:72:21:0d:47:a7:1a:f6:37:5a:cd: 08:19:a1:a0:95:9b:4c:ed:22:20:44:a2:85:ce:a2: a9:10:d3:66:1a:ea:4a:75:3a:92:6f:a6:61:86:79: d4:d0:0b:61:d8:54:0a:19:6e:0a:9a:5a:e4:4d:00: 65:4a:be:81:f4:c3:46:38:09:91:1d:38:b0:59:3b: e1:51:59:b9:bf:2d:a6:46:57:15:f4:e1:1e:79:dd: 07:5b:48:8a:5a:b0:93:6b:47:c7:65:67:03:92:93: 80:49:05:b8:94:bc:df:51:67:59:f3:c3:ab:cc:79: 36:be:c3:0e:b6:72:af:b1:f8:e2:b0:bc:35:48:50: 6a:98:a0:52:f6:b8:10:38:d7:84:57:b5:17:93:66: 95:bc:a4:6e:b3:34:e4:36:85:90:b0:6c:10:f4:fd: 13:96:19:d4:31:c2:29:fb:d0:3e:a0:66:1f:ae:57: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:B6:80:30:C9:1D:C8:12:CB:DF:02:35:C6:45:63:96:CC:FB:E7 X509v3 Authority Key Identifier: keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:59:20:9c:29:3f:1a:bd:2b:ad:7e:60:fa:4c:2a:1a:ab:49: 7d:69:96:50:b2:0b:21:01:36:5c:7c:4b:3a:b6:1d:08:5f:62: b2:b7:6a:68:ea:50:ef:18:e7:04:f0:88:65:e5:6f:14:92:bb: 8a:57:16:f9:9a:19:6d:fa:55:ec:8b:d8:bf:6a:93:4a:b4:f9: 64:aa:50:e1:6c:b3:24:ea:3b:cf:4b:24:cc:9e:fc:45:6b:40: 45:34:f4:38:ea:91:a0:8a:6f:a8:62:ae:85:e4:10:71:4d:79: 5c:00:b7:40:47:e4:1a:f1:81:e9:c6:67:b2:16:13:d7:56:b4: 87:19:7a:80:52:ab:c7:84:0d:76:1a:1d:42:3f:21:70:83:b3: 5e:8e:5d:c4:ea:67:14:f1:93:da:93:ba:cb:f8:fc:b9:09:48: 7e:15:b8:c9:94:b9:ab:81:2d:4b:80:9e:32:7e:b2:79:b0:69: d7:e8:8e:8a:39:53:8a:82:52:23:9c:9f:11:d6:b0:0d:6c:23: 13:3b:9e:fb:a6:91:da:51:da:f7:1b:3b:c8:c7:88:ab:80:6d: cb:81:1a:a0:3e:13:b1:2e:df:dc:82:08:1e:71:80:85:49:50: 93:f9:3f:33:3d:99:63:3c:2b:2b:90:67:e7:16:e3:fb:dd:96: 1c:ac:de:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav1MRfhDDluEZkDoHMkh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2 YzI0MGMwHhcNMjUxMjI2MTMwMDQ2WhcNMjUxMjI3MTMwMDQ2WjAzMTEwLwYDVQQD EyhmZjc5YjY4MDMwYzkxZGM4MTJjYmRmMDIzNWM2NDU2Mzk2Y2NmYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zbNwuTJObxAnoYprvVaLuJDydxz WhUsCqchlVXOx9wq1eSeeE9f3o7koW0Wx7aeoKV7XWoy7DFSBS6E6UuQnkCxY7a8 YhQeBvY1tyh+LXIhDUenGvY3Ws0IGaGglZtM7SIgRKKFzqKpENNmGupKdTqSb6Zh hnnU0Ath2FQKGW4KmlrkTQBlSr6B9MNGOAmRHTiwWTvhUVm5vy2mRlcV9OEeed0H W0iKWrCTa0fHZWcDkpOASQW4lLzfUWdZ88OrzHk2vsMOtnKvsfjisLw1SFBqmKBS 9rgQONeEV7UXk2aVvKRuszTkNoWQsGwQ9P0TlhnUMcIp+9A+oGYfrlfxiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP95toAwyR3IEsvfAjXGRWOWzPvnMB8GA1UdIwQY MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0 LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlkgnCk/ Gr0rrX5g+kwqGqtJfWmWULILIQE2XHxLOrYdCF9isrdqaOpQ7xjnBPCIZeVvFJK7 ilcW+ZoZbfpV7IvYv2qTSrT5ZKpQ4WyzJOo7z0skzJ78RWtARTT0OOqRoIpvqGKu heQQcU15XAC3QEfkGvGB6cZnshYT11a0hxl6gFKrx4QNdhodQj8hcIOzXo5dxOpn FPGT2pO6y/j8uQlIfhW4yZS5q4EtS4CeMn6yebBp1+iOijlTioJSI5yfEdawDWwj Ezue+6aR2lHa9xs7yMeIq4Bty4EaoD4TsS7f3IIIHnGAhUlQk/k/Mz2ZYzwrK5Bn 5xbj+92WHKzeLg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:24 2025 by rpki-client