This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json) Hash identifier: G9g18Gc34sAO32JE+9iK/sGOIx/EdDlv1gyV2R4QRzo= Subject key identifier: 4A:52:B5:3B:44:24:F4:AA:A8:27:92:7D:85:E8:73:4C:60:F7:F5:7A Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019B27E4BE08548B936E25CBB6DFFA9B8FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft Manifest number: 06F0 Signing time: Tue 16 Dec 2025 16:01:00 +0000 Manifest this update: Tue 16 Dec 2025 16:01:00 +0000 Manifest next update: Wed 17 Dec 2025 16:01:00 +0000 Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=) 2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=) 3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: IlhTF9McGsfLsHsXOewv6UBzfr9hiyyBsRaDbu714ZQ=) 4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:be:08:54:8b:93:6e:25:cb:b6:df:fa:9b:8f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Dec 16 16:01:00 2025 GMT Not After : Dec 17 16:01:00 2025 GMT Subject: CN=4a52b53b4424f4aaa827927d85e8734c60f7f57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:eb:90:83:17:e9:18:d9:62:22:33:c9:29: 99:96:b4:0b:07:f5:86:f6:ca:6e:e3:a9:f8:8d:21: 6a:e5:17:5e:96:3d:03:2e:3b:fb:cb:42:f1:96:71: ad:6b:5f:0d:db:40:98:ac:bc:8e:23:57:68:d6:dc: 79:91:f9:81:c0:aa:8c:5f:9e:cb:39:ce:5d:87:2a: 0a:38:05:57:53:e8:8f:80:3f:5f:16:0a:56:e3:d8: a5:e3:12:cd:36:88:0c:c6:45:27:8e:0a:0e:16:6d: 19:6c:32:d1:28:6f:c0:9c:23:10:48:a8:58:53:3d: b8:99:a2:81:2f:86:d1:ac:0b:da:28:3f:29:7a:dc: 57:ce:16:c7:5a:cf:cc:67:8a:db:97:75:0e:0b:36: 6c:32:c2:70:b0:50:33:67:f2:eb:5f:a9:90:5f:31: ca:15:68:69:a5:da:3e:cd:bd:a4:d8:c7:a3:2a:b6: 7a:f8:fd:ad:f4:17:54:42:8c:2b:f2:d3:a5:09:b7: c9:f7:e3:7a:3f:fa:ff:92:d0:e8:fa:45:de:51:7e: b0:03:d6:3b:2c:2d:a2:41:f3:7f:fc:d9:8a:66:02: eb:c7:70:27:f7:ee:b4:66:c9:9c:db:7c:47:86:c3: 02:d5:d8:f4:ff:c8:1f:01:49:88:1f:cf:4b:7b:fe: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:B5:3B:44:24:F4:AA:A8:27:92:7D:85:E8:73:4C:60:F7:F5:7A X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0a:a2:cd:b1:1b:66:73:a6:4a:24:9f:32:1e:ac:02:67:a0: 54:38:e2:1d:50:90:ef:6f:fa:35:dc:b3:07:46:23:79:8d:f4: 36:d5:e7:2f:12:45:5a:e0:b2:b9:dd:2f:e6:35:9b:f9:80:37: ff:2f:90:73:21:d1:b5:c6:b8:14:60:ce:cd:57:84:0a:d1:5d: a9:f1:4b:f5:44:ce:06:07:89:64:d9:2b:2c:ea:16:aa:8b:c4: 9a:33:58:07:43:c5:d4:e0:49:66:24:d2:34:0d:19:2b:49:35: ea:a9:bd:69:d4:07:7e:20:37:28:db:7d:7d:07:e4:2e:e6:54: 6e:c7:b7:73:5a:64:7f:b0:fd:2e:1b:f9:0d:b3:f7:41:ed:06: aa:cc:bd:24:b4:ae:eb:f2:01:bc:a7:df:5c:c0:c7:c1:22:64: 0c:1b:be:0f:c2:2b:79:11:87:87:cd:5e:ff:d1:65:25:ee:fe: d2:15:1b:4b:0e:f0:70:37:a9:fe:39:9c:36:74:eb:fd:55:b9: 9e:bd:6d:da:4f:5f:38:3d:b3:7a:6c:5a:1c:b4:96:37:b0:c9: 6c:dc:16:45:7d:6d:63:fc:05:35:7e:93:4d:d7:0c:78:b8:86: 19:61:b8:10:b0:ac:f9:02:62:41:8b:98:d7:3a:0a:77:67:e4: 35:5f:7b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5L4IVIuTbiXLtt/6m4/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjUxMjE2MTYwMTAwWhcNMjUxMjE3MTYwMTAwWjAzMTEwLwYDVQQD Eyg0YTUyYjUzYjQ0MjRmNGFhYTgyNzkyN2Q4NWU4NzM0YzYwZjdmNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PLrkIMX6RjZYiIzySmZlrQLB/WG 9spu46n4jSFq5Rdelj0DLjv7y0LxlnGta18N20CYrLyOI1do1tx5kfmBwKqMX57L Oc5dhyoKOAVXU+iPgD9fFgpW49il4xLNNogMxkUnjgoOFm0ZbDLRKG/AnCMQSKhY Uz24maKBL4bRrAvaKD8petxXzhbHWs/MZ4rbl3UOCzZsMsJwsFAzZ/LrX6mQXzHK FWhppdo+zb2k2MejKrZ6+P2t9BdUQowr8tOlCbfJ9+N6P/r/ktDo+kXeUX6wA9Y7 LC2iQfN//NmKZgLrx3An9+60Zsmc23xHhsMC1dj0/8gfAUmIH89Le/4JtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpStTtEJPSqqCeSfYXoc0xg9/V6MB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgqizbEb ZnOmSiSfMh6sAmegVDjiHVCQ72/6NdyzB0YjeY30NtXnLxJFWuCyud0v5jWb+YA3 /y+QcyHRtca4FGDOzVeECtFdqfFL9UTOBgeJZNkrLOoWqovEmjNYB0PF1OBJZiTS NA0ZK0k16qm9adQHfiA3KNt9fQfkLuZUbse3c1pkf7D9Lhv5DbP3Qe0Gqsy9JLSu 6/IBvKffXMDHwSJkDBu+D8IreRGHh81e/9FlJe7+0hUbSw7wcDep/jmcNnTr/VW5 nr1t2k9fOD2zemxaHLSWN7DJbNwWRX1tY/wFNX6TTdcMeLiGGWG4ELCs+QJiQYuY 1zoKd2fkNV97aw== -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:26 2025 by rpki-client