This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json) Hash identifier: rZFKAnsV/AJjHuDj0NwHnrxx3oulE33EfuvotoZeIIA= Subject key identifier: AC:CC:65:DF:83:6C:EC:3D:35:80:40:18:0B:B4:D9:0A:4F:D8:BF:61 Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Certificate serial: 019B34FBB69480208DF3C950A0A1CF16F39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft Manifest number: 0737 Signing time: Fri 19 Dec 2025 05:01:09 +0000 Manifest this update: Fri 19 Dec 2025 05:01:09 +0000 Manifest next update: Sat 20 Dec 2025 05:01:09 +0000 Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=) 2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: XHowTV4e/Yqe/YzRbMyoCVl2mc+fRG3MPr5VuXbhbr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:b6:94:80:20:8d:f3:c9:50:a0:a1:cf:16:f3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c Validity Not Before: Dec 19 05:01:09 2025 GMT Not After : Dec 20 05:01:09 2025 GMT Subject: CN=accc65df836cec3d358040180bb4d90a4fd8bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:37:57:d9:97:1b:70:d1:4b:90:0e:de:53: 8a:43:85:68:83:f6:47:09:43:a7:36:e6:ef:23:40: ec:cf:20:5b:0a:5a:55:27:17:bf:d4:bc:26:8b:b7: 9e:b5:f8:4c:2f:6d:77:dc:63:8f:f0:11:df:20:5c: 4f:ad:63:11:9e:6f:a8:b6:17:e1:b2:64:a1:36:c1: fe:d7:24:2b:a8:25:f3:0e:23:d3:60:81:c4:81:e4: 18:6c:e2:da:a4:8f:80:5b:5d:e4:f1:4e:c8:e3:32: c7:fe:25:f7:c0:97:e3:66:fd:17:65:eb:73:5d:f0: 0a:73:39:29:86:04:91:e5:5b:aa:3b:8e:72:5d:2d: 65:d0:87:3d:78:5f:f4:2d:38:ff:1e:9f:09:1e:7a: 5c:59:2b:00:b2:5b:04:27:4c:87:05:a1:e8:2d:a6: 04:af:a0:5e:2a:4a:dc:7a:55:06:f4:3e:42:00:6c: 29:8f:7a:5c:5c:8e:e1:e4:90:dc:70:aa:c4:73:55: 43:1c:1b:ad:77:87:75:82:e7:48:0b:25:f5:b4:b4: 51:ce:25:a2:76:59:e4:92:07:e8:45:10:e4:2a:f9: ad:aa:4f:f1:7f:8a:be:d0:e2:64:8a:8f:fe:39:2e: 80:2f:fb:58:8c:35:66:5d:60:70:bb:e8:04:53:06: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:65:DF:83:6C:EC:3D:35:80:40:18:0B:B4:D9:0A:4F:D8:BF:61 X509v3 Authority Key Identifier: keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:96:e8:d2:69:23:cf:f1:53:62:9f:62:92:db:42:c4:4b:3f: 7c:3a:f7:45:8d:e8:64:a7:53:da:8c:e0:fb:2c:a1:af:c3:dd: c4:c9:db:61:2b:76:4e:74:c8:96:41:01:c7:ed:cb:ef:45:dc: dd:e2:e9:62:b3:6e:1d:ef:0c:cb:3a:f9:cf:26:47:eb:27:68: 01:63:e5:16:a9:09:3e:d4:67:78:3c:7c:11:c6:35:e5:bb:e7: 24:a2:7d:55:1e:2d:bc:12:76:8e:55:4b:0d:db:e5:9f:33:25: ac:e9:0a:91:74:cd:e6:34:97:c6:ed:b8:e6:3d:a0:39:98:95: f1:e4:67:98:a8:28:79:e5:b9:24:42:0b:32:58:3e:75:75:de: d6:c7:2e:f1:b3:f2:55:0d:22:1d:44:8e:30:47:ed:c0:34:e1: 5e:bd:3c:27:9e:a1:01:f3:fa:50:84:a4:e7:ec:d5:ed:32:95: 61:dc:47:5a:1c:29:0a:8f:d7:99:f0:c7:c9:bd:99:d9:29:6a: bd:49:7b:5a:45:11:52:05:93:f2:ce:4b:96:85:a8:58:fe:ff: 17:bc:71:68:8a:98:f6:59:91:34:fc:e5:b2:c5:41:d5:2c:27: a7:fa:5c:e7:63:7f:3f:98:40:a7:ee:34:71:6e:03:81:82:ca: 2a:90:a3:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+7aUgCCN88lQoKHPFvOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh NDA4OGMwHhcNMjUxMjE5MDUwMTA5WhcNMjUxMjIwMDUwMTA5WjAzMTEwLwYDVQQD EyhhY2NjNjVkZjgzNmNlYzNkMzU4MDQwMTgwYmI0ZDkwYTRmZDhiZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+03V9mXG3DRS5AO3lOKQ4Vog/ZH CUOnNubvI0DszyBbClpVJxe/1Lwmi7eetfhML2133GOP8BHfIFxPrWMRnm+othfh smShNsH+1yQrqCXzDiPTYIHEgeQYbOLapI+AW13k8U7I4zLH/iX3wJfjZv0XZetz XfAKczkphgSR5VuqO45yXS1l0Ic9eF/0LTj/Hp8JHnpcWSsAslsEJ0yHBaHoLaYE r6BeKkrcelUG9D5CAGwpj3pcXI7h5JDccKrEc1VDHButd4d1gudICyX1tLRRziWi dlnkkgfoRRDkKvmtqk/xf4q+0OJkio/+OS6AL/tYjDVmXWBwu+gEUwZnuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzMZd+DbOw9NYBAGAu02QpP2L9hMB8GA1UdIwQY MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt Yzg4NmZiNmIzYmNkLzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZbo0mkj z/FTYp9ikttCxEs/fDr3RY3oZKdT2ozg+yyhr8PdxMnbYSt2TnTIlkEBx+3L70Xc 3eLpYrNuHe8Myzr5zyZH6ydoAWPlFqkJPtRneDx8EcY15bvnJKJ9VR4tvBJ2jlVL DdvlnzMlrOkKkXTN5jSXxu245j2gOZiV8eRnmKgoeeW5JEILMlg+dXXe1scu8bPy VQ0iHUSOMEftwDThXr08J56hAfP6UISk5+zV7TKVYdxHWhwpCo/XmfDHyb2Z2Slq vUl7WkURUgWT8s5LloWoWP7/F7xxaIqY9lmRNPzlssVB1Swnp/pc52N/P5hAp+40 cW4DgYLKKpCjKw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:49:08 2025 by rpki-client