This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json) Hash identifier: mHRe7aT1ls6s6Iy2/hMgUF5GIRJH57sw2XmYdqmBazw= Subject key identifier: B9:94:0B:C0:7A:BB:D8:67:9A:50:E8:55:59:35:11:37:73:3F:AC:B0 Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c Certificate serial: 019AF19B75532F9C8E5DA4A9B2E4ABF0A8EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=) 2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: rLHT1yUzGrAZgpj6vpPPLhMv23LIOH+y0Q0p+GSmlGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:75:53:2f:9c:8e:5d:a4:a9:b2:e4:ab:f0:a8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=b9940bc07abbd8679a50e85559351137733facb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:75:69:54:6d:ef:4d:3b:6b:e1:37:29:b4: b9:91:7d:62:6d:19:e1:82:38:dc:91:83:8d:47:f3: f3:87:db:d0:a9:70:f6:da:bd:79:fb:7f:e4:e0:bb: 00:aa:1e:26:e2:8e:93:29:4e:61:65:e0:be:61:31: a0:01:22:8a:cc:3c:50:d3:43:78:6c:b7:a6:bd:c9: 59:96:79:2b:2b:44:ac:5c:e8:7e:5a:87:72:76:cd: ef:ca:68:6c:23:22:23:91:7e:34:8d:a1:12:33:c4: 9d:4e:38:33:b0:f9:e9:d8:4d:55:87:5e:06:e9:f7: df:c6:76:41:47:32:e6:9a:ec:e9:d3:94:ca:54:71: 92:74:36:f2:d4:89:70:64:56:4b:e4:f2:27:4f:b6: e8:82:f4:12:8d:30:77:ed:cf:f9:ba:c2:d7:10:be: 76:18:44:89:00:cb:d8:48:2d:e4:e7:7e:82:b1:f5: 6d:4c:83:a3:43:34:29:da:b8:da:c8:b5:5e:37:43: b5:68:81:1b:a2:cc:2b:4d:73:94:00:fc:20:9e:92: ed:9c:9b:fc:77:57:f3:86:7d:c8:18:f2:b4:48:39: 2e:92:95:d3:de:d7:a9:ce:f7:66:ec:84:f1:a6:cf: 9b:df:cc:46:8b:a7:df:20:4c:4a:c0:5a:c6:1b:92: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:0B:C0:7A:BB:D8:67:9A:50:E8:55:59:35:11:37:73:3F:AC:B0 X509v3 Authority Key Identifier: keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1a:a5:9b:3c:1d:cc:7f:c0:9b:dd:0a:b2:88:2b:4a:9f:ed: 0b:4b:99:c5:5a:4a:ba:27:d0:2f:3c:e7:30:ae:7d:e3:3b:1e: 19:55:f9:b4:30:4e:72:02:3e:37:fe:13:71:c5:12:65:e7:89: 0f:f5:0c:66:e2:8d:09:e6:fc:92:62:c1:d8:30:c0:c9:4b:00: d2:7e:ae:0a:ae:f9:77:07:0f:bd:c6:22:b3:d0:63:2a:54:63: 27:e5:b3:2a:53:0f:a2:60:4d:b3:45:33:f4:2f:8f:b3:39:da: 62:b0:1a:96:b1:31:e2:e4:50:ca:65:1a:a2:de:b6:8f:ba:a6: 11:79:28:a8:59:32:81:a8:95:42:20:32:b0:ac:d2:a7:bd:50: 3f:1b:77:62:7d:83:d5:53:9e:2c:5b:d6:0d:9c:39:be:e7:58: d6:7f:5d:89:c2:c0:2c:94:cd:f3:ca:97:e4:1c:14:b7:af:55: f6:b4:2e:36:b2:7f:ee:e3:86:84:0f:32:6d:77:28:f6:e1:88: e1:34:1f:67:38:e2:96:7b:57:ee:e2:bb:c2:68:3a:77:f1:3a: 78:94:50:2f:23:fd:be:b7:29:35:a0:79:cc:51:7c:8c:28:b0: 6e:61:05:3a:05:8a:48:72:5d:ac:4c:0b:f3:5b:2d:97:45:82: 08:60:3e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3VTL5yOXaSpsuSr8KjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODhhNTNmY2I5Njc3N2Y5OWUwMmRmODk0MGRkMDQwYjQ1 NGNkMWMwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EyhiOTk0MGJjMDdhYmJkODY3OWE1MGU4NTU1OTM1MTEzNzczM2ZhY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSt1aVRt7007a+E3KbS5kX1ibRnh gjjckYONR/Pzh9vQqXD22r15+3/k4LsAqh4m4o6TKU5hZeC+YTGgASKKzDxQ00N4 bLemvclZlnkrK0SsXOh+Wodyds3vymhsIyIjkX40jaESM8SdTjgzsPnp2E1Vh14G 6fffxnZBRzLmmuzp05TKVHGSdDby1IlwZFZL5PInT7bogvQSjTB37c/5usLXEL52 GESJAMvYSC3k536CsfVtTIOjQzQp2rjayLVeN0O1aIEboswrTXOUAPwgnpLtnJv8 d1fzhn3IGPK0SDkukpXT3tepzvdm7ITxps+b38xGi6ffIExKwFrGG5KoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmUC8B6u9hnmlDoVVk1ETdzP6ywMB8GA1UdIwQY MBaAFC+IpT/Llnd/meAt+JQN0EC0VM0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2Mt YWNjNGFhYzc4ZDBkLzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2MtYWNjNGFhYzc4ZDBk LzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhqlmzwd zH/Am90KsogrSp/tC0uZxVpKuifQLzznMK594zseGVX5tDBOcgI+N/4TccUSZeeJ D/UMZuKNCeb8kmLB2DDAyUsA0n6uCq75dwcPvcYis9BjKlRjJ+WzKlMPomBNs0Uz 9C+PsznaYrAalrEx4uRQymUaot62j7qmEXkoqFkygaiVQiAysKzSp71QPxt3Yn2D 1VOeLFvWDZw5vudY1n9dicLALJTN88qX5BwUt69V9rQuNrJ/7uOGhA8ybXco9uGI 4TQfZzjilntX7uK7wmg6d/E6eJRQLyP9vrcpNaB5zFF8jCiwbmEFOgWKSHJdrEwL 81stl0WCCGA+LA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:48 2025 by rpki-client