This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json) Hash identifier: KIFAID1Z8LUSrbcMJC5j7VbiDxS4zkpO03RtlY31/pM= Subject key identifier: 6C:A7:0D:41:10:F2:4A:DD:19:BE:D8:C8:10:0E:DC:04:B1:8E:09:AE Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019AF1D1FC9198CE45C2828EE6FCC0D8A637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft Manifest number: 06D4 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=) 2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=) 3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: sIcIRtx+r/QLNLPvl1/8+tyMjHlrQD8gcosqfgQJZYQ=) 4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:91:98:ce:45:c2:82:8e:e6:fc:c0:d8:a6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=6ca70d4110f24add19bed8c8100edc04b18e09ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:a0:b6:35:14:83:06:6f:7b:7a:77:85:08: bd:4d:75:da:e3:04:cc:42:25:3a:a9:1c:be:a0:3e: d4:03:3b:f5:d5:1b:1f:83:fd:03:48:e2:6f:e9:28: 3b:14:36:eb:a4:6f:c2:68:c6:29:22:08:75:54:64: 71:7c:45:4c:4d:10:19:8c:5f:8a:96:f0:2c:0c:f3: c5:26:53:7f:ed:7c:ca:02:a1:51:13:9c:ed:66:6c: 64:bd:49:16:08:6e:2e:1d:71:ab:d4:eb:4e:5a:79: 36:09:df:d4:d8:1a:ef:bb:66:30:2c:50:e2:7d:a2: b9:cb:03:0a:2f:54:23:4e:d8:f0:ba:f3:fb:13:90: 39:2f:fd:6d:5d:19:d8:81:7c:dc:1d:10:6b:19:cd: e0:45:78:79:0e:0e:21:1d:6c:68:ea:bc:14:c6:eb: 59:49:af:3f:bc:79:4f:3c:28:68:9f:18:f5:08:50: f2:c9:d2:54:9d:8b:25:96:05:4a:c8:c1:ef:8a:9a: 36:ef:f3:b1:e9:ad:d8:b7:fa:9f:86:f3:04:b9:ca: 34:d2:a4:01:a2:a2:55:18:13:3a:b6:6a:cd:52:a5: d7:54:0f:38:b6:37:15:4b:e0:69:e5:92:00:30:b8: b4:da:88:84:c0:d9:f7:ed:37:a5:c0:49:a7:75:18: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:0D:41:10:F2:4A:DD:19:BE:D8:C8:10:0E:DC:04:B1:8E:09:AE X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:3f:b3:b5:bb:67:de:ca:42:5a:ec:21:eb:a4:f0:4b:37: f2:cb:08:52:e3:e1:30:e6:a9:e0:8d:8d:8a:9e:07:36:14:27: bc:cd:77:85:2a:85:4a:52:51:00:12:e6:0d:aa:05:95:13:3e: 4b:f3:be:21:c3:e2:7c:24:7d:64:bc:25:de:ac:2d:c6:6f:0d: 7a:e9:12:b0:ca:c9:71:f2:6e:87:91:0e:e2:6b:7a:b8:56:65: 4d:4e:63:b4:44:fb:3b:61:ec:af:f3:65:e2:93:eb:dd:79:8a: 9e:e2:e4:82:59:9e:d5:4c:2b:7f:f5:32:ca:40:d8:54:ee:a7: 77:bf:53:a4:66:a8:a4:57:90:e3:8b:97:04:08:84:17:ad:ca: 28:91:6e:3f:8e:8b:0f:e9:0c:f6:aa:1f:01:fb:ff:09:da:8f: fd:41:cb:dd:b5:cb:6e:fa:74:e5:4e:99:30:84:21:d6:eb:da: 8a:96:e1:a4:d6:a1:ae:99:8a:25:f8:e8:60:bb:ae:88:68:ca: 0c:21:01:e5:41:a6:b8:73:51:69:b3:2b:e0:4e:96:48:e4:5f: 2e:4b:e9:f5:9b:39:d3:d5:3b:8d:4a:14:6d:d2:47:28:ea:4c: 0f:5e:91:db:78:1b:a1:20:e3:e0:01:a7:b2:a6:1d:16:33:60: 08:8d:b3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fyRmM5FwoKO5vzA2KY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg2Y2E3MGQ0MTEwZjI0YWRkMTliZWQ4YzgxMDBlZGMwNGIxOGUwOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEmgtjUUgwZve3p3hQi9TXXa4wTM QiU6qRy+oD7UAzv11Rsfg/0DSOJv6Sg7FDbrpG/CaMYpIgh1VGRxfEVMTRAZjF+K lvAsDPPFJlN/7XzKAqFRE5ztZmxkvUkWCG4uHXGr1OtOWnk2Cd/U2Brvu2YwLFDi faK5ywMKL1QjTtjwuvP7E5A5L/1tXRnYgXzcHRBrGc3gRXh5Dg4hHWxo6rwUxutZ Sa8/vHlPPChonxj1CFDyydJUnYsllgVKyMHvipo27/Ox6a3Yt/qfhvMEuco00qQB oqJVGBM6tmrNUqXXVA84tjcVS+Bp5ZIAMLi02oiEwNn37TelwEmndRhsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGynDUEQ8krdGb7YyBAO3ASxjgmuMB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqg/s7W7 Z97KQlrsIeuk8Es38ssIUuPhMOap4I2Nip4HNhQnvM13hSqFSlJRABLmDaoFlRM+ S/O+IcPifCR9ZLwl3qwtxm8NeukSsMrJcfJuh5EO4mt6uFZlTU5jtET7O2Hsr/Nl 4pPr3XmKnuLkglme1Uwrf/UyykDYVO6nd79TpGaopFeQ44uXBAiEF63KKJFuP46L D+kM9qofAfv/CdqP/UHL3bXLbvp05U6ZMIQh1uvaipbhpNahrpmKJfjoYLuuiGjK DCEB5UGmuHNRabMr4E6WSORfLkvp9Zs509U7jUoUbdJHKOpMD16R23gboSDj4AGn sqYdFjNgCI2zjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:23 2025 by rpki-client