This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json) Hash identifier: 55WKVWxJZ7BzKBxL6Y8j36N9Pm4uuEj0axEzBPeIwFc= Subject key identifier: 12:50:45:F6:B3:A9:DD:22:F1:45:69:A2:89:8B:88:E6:9D:6E:B9:DB Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e Certificate serial: 019AF208BFF1D82FA17E744494D82C05E2A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: rCYO38u4R4CuiECPR9hmccNIQhHvz0oTeAm9G6lUpWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:f1:d8:2f:a1:7e:74:44:94:d8:2c:05:e2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=125045f6b3a9dd22f14569a2898b88e69d6eb9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:6b:b8:69:00:1f:9c:b3:fd:01:9c:fe:38: 66:7f:e5:2f:01:31:74:19:f4:b6:11:f3:fd:a9:3a: 52:fa:87:d6:c0:81:b6:90:1f:5f:e6:43:b1:7c:f4: d3:94:79:c4:d8:03:4a:73:e1:39:09:e7:bb:5e:03: 20:48:a9:d8:be:f2:21:05:ea:e1:52:dd:2e:ff:b5: 62:46:97:3d:01:a3:51:2e:f7:25:85:f9:23:2f:54: c2:6e:c0:3e:9e:94:c4:91:ad:5a:d0:ee:cf:7d:94: b8:02:ec:50:be:ee:ef:50:fc:ca:7d:fd:ef:de:0b: eb:e8:b6:b5:ea:b9:0f:24:6e:f3:81:45:4e:9e:8f: e5:29:fa:a0:ea:1a:46:1e:ba:bf:c8:ba:c2:44:3a: e8:d7:47:6c:95:d1:47:ea:0d:76:7e:97:b8:a0:25: 20:38:ee:d5:77:42:57:22:af:56:bb:cb:8c:bf:cc: c5:4e:e4:4b:f2:c0:02:08:eb:fe:02:87:a7:d6:97: 2b:08:03:2b:2a:d1:43:6f:2b:0a:41:4a:ef:54:cc: 8f:4c:e3:56:a5:ee:28:1f:f3:fb:82:14:8a:73:20: d4:73:13:77:78:0b:f8:b0:ce:fe:e1:b3:56:89:8e: 4d:a5:40:3e:7a:b7:27:76:a8:36:b3:35:19:46:b3: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:45:F6:B3:A9:DD:22:F1:45:69:A2:89:8B:88:E6:9D:6E:B9:DB X509v3 Authority Key Identifier: keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2b:70:29:cc:ff:41:bb:ec:a2:c0:30:40:8c:83:d4:f1:16: 43:dd:9e:6c:1f:7c:30:c7:87:d2:40:d8:fe:da:2f:b0:42:45: 8b:e4:2f:90:f5:51:a5:8a:34:e7:d2:4c:6d:40:85:81:23:3d: c7:62:95:01:76:19:88:30:17:cf:88:62:5d:c4:63:e6:e9:1b: c0:07:67:8b:5c:25:07:a8:75:83:3e:5d:83:fc:e3:73:d4:0f: b3:da:43:d8:75:d6:15:33:1d:55:3e:99:4a:91:a0:83:48:5b: 6e:81:94:39:b1:3d:76:71:91:f3:54:65:5a:03:51:72:2c:36: da:ce:2c:0f:e9:d0:1c:3e:ee:df:36:89:11:3c:e2:7f:0e:b4: 90:04:22:40:33:19:63:1b:6c:59:8b:75:83:37:8a:bc:2d:4d: 3a:93:53:54:83:fb:6b:09:48:b9:82:9c:14:59:ab:f6:16:4a: 88:48:b3:e3:bb:f1:dd:51:1a:a1:a1:34:8c:ce:94:20:2f:73: 6f:6d:4b:a0:31:4f:c5:f0:a1:af:f1:3e:1e:dd:e9:e1:bb:d4: f5:01:d9:dd:e2:c6:40:a1:f5:d4:12:64:10:39:0d:cc:b6:b5: cc:05:e2:da:0e:38:9a:ac:54:72:11:48:38:bb:79:e4:b3:10: f2:17:f3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL/x2C+hfnRElNgsBeKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk NTZkNGUwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygxMjUwNDVmNmIzYTlkZDIyZjE0NTY5YTI4OThiODhlNjlkNmViOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQpruGkAH5yz/QGc/jhmf+UvATF0 GfS2EfP9qTpS+ofWwIG2kB9f5kOxfPTTlHnE2ANKc+E5Cee7XgMgSKnYvvIhBerh Ut0u/7ViRpc9AaNRLvclhfkjL1TCbsA+npTEka1a0O7PfZS4AuxQvu7vUPzKff3v 3gvr6La16rkPJG7zgUVOno/lKfqg6hpGHrq/yLrCRDro10dsldFH6g12fpe4oCUg OO7Vd0JXIq9Wu8uMv8zFTuRL8sACCOv+Aoen1pcrCAMrKtFDbysKQUrvVMyPTONW pe4oH/P7ghSKcyDUcxN3eAv4sM7+4bNWiY5NpUA+ercndqg2szUZRrOJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJQRfazqd0i8UVpoomLiOadbrnbMB8GA1UdIwQY MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqitwKcz/ QbvsosAwQIyD1PEWQ92ebB98MMeH0kDY/tovsEJFi+QvkPVRpYo059JMbUCFgSM9 x2KVAXYZiDAXz4hiXcRj5ukbwAdni1wlB6h1gz5dg/zjc9QPs9pD2HXWFTMdVT6Z SpGgg0hbboGUObE9dnGR81RlWgNRciw22s4sD+nQHD7u3zaJETzifw60kAQiQDMZ YxtsWYt1gzeKvC1NOpNTVIP7awlIuYKcFFmr9hZKiEiz47vx3VEaoaE0jM6UIC9z b21LoDFPxfChr/E+Ht3p4bvU9QHZ3eLGQKH11BJkEDkNzLa1zAXi2g44mqxUchFI OLt55LMQ8hfzyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:35 2025 by rpki-client