This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json) Hash identifier: K7JH5O18TLufe8UG/ININ0VGZZW9CF7GvKC3sBxQ34w= Subject key identifier: CF:36:4B:4F:4E:19:25:D2:B9:86:62:A9:99:B0:26:BC:4E:88:F0:16 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B3BA24D06599CCCD41F6029FA892D4955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 12:00:50 +0000 Manifest this update: Sat 20 Dec 2025 12:00:50 +0000 Manifest next update: Sun 21 Dec 2025 12:00:50 +0000 Files and hashes: 1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=) 2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=) 3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=) 4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=) 5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: PG35MClJtnuc1zRNZvOeeyyHNTIvoRtVEwAaalBoqLc=) 6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:4d:06:59:9c:cc:d4:1f:60:29:fa:89:2d:49:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Dec 20 12:00:50 2025 GMT Not After : Dec 21 12:00:50 2025 GMT Subject: CN=cf364b4f4e1925d2b98662a999b026bc4e88f016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:fe:fb:6b:4e:6c:45:28:70:83:78:a1:4e: 8e:52:87:db:b5:6a:9d:a5:b1:e9:17:2d:9e:16:15: 19:2a:01:b6:4b:05:34:c4:3c:f6:77:d0:db:60:46: 66:c8:41:34:76:35:81:55:a0:02:16:29:66:8b:6b: b4:92:61:4e:ae:64:6f:97:cc:01:7a:da:dd:54:ec: 12:d9:fb:14:dc:22:a4:9a:a2:9e:32:1b:81:b1:2a: 79:80:9c:78:ac:c6:b7:70:ca:0a:c4:06:5d:99:32: 28:a0:a1:ce:e0:70:5e:b1:61:c2:7a:c2:f9:a4:d8: b9:bf:7e:29:56:d4:83:35:f0:40:28:19:ba:76:05: b4:b9:1d:01:d0:8f:ab:a0:c5:8b:62:00:99:d1:09: 97:d6:10:ee:2c:43:e1:ef:82:b7:36:4f:0a:10:c6: 84:b8:7e:7b:c3:5f:6c:e3:0e:3c:5a:5e:12:4a:ca: 95:ac:9b:d2:48:66:32:a9:6b:04:21:db:64:79:00: c5:38:80:ac:dc:3b:d2:09:63:df:82:fa:e1:9c:fc: b3:52:4e:51:e4:c7:74:1b:66:88:42:fd:7b:54:8e: a1:ef:39:0f:ad:75:4d:36:62:87:d5:ce:58:56:7a: 38:e6:9e:41:61:11:ec:47:d2:71:e6:13:70:d5:e6: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:36:4B:4F:4E:19:25:D2:B9:86:62:A9:99:B0:26:BC:4E:88:F0:16 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ae:50:29:d6:f8:43:fb:ba:26:ba:db:50:c7:b3:04:50:db: 5e:da:44:cd:f0:b7:02:3d:62:bd:89:a8:87:42:0d:32:b3:05: 3e:f7:0e:eb:53:42:ea:0a:2f:17:eb:cd:bb:63:72:38:1a:64: 47:1e:64:0f:04:74:f3:da:26:52:30:3c:c3:b1:a0:55:8c:98: f0:f0:ea:64:b5:e8:56:50:d8:b3:39:24:61:d9:50:0e:29:5e: fd:aa:0c:c2:90:8d:f2:c8:76:07:de:84:10:08:54:c2:45:0b: f2:d7:be:c8:ab:0d:bb:7f:4a:d2:99:22:5d:36:5c:c0:13:d8: 76:53:ee:97:ec:58:d1:bc:42:a1:ca:39:11:f3:1c:08:d0:ba: ee:87:23:df:6f:9f:fe:58:5c:b7:b0:bb:cc:7f:56:3a:7a:3b: 07:04:5c:c8:99:c4:06:1e:3b:61:db:87:5f:dc:de:36:9d:65: b4:94:13:e1:4f:c1:91:fa:e8:9a:64:5c:a6:f9:ae:fb:e6:49: 65:35:f4:6c:9d:c8:ce:61:94:a6:a2:f3:e0:db:35:37:2f:d2: 32:36:d4:12:b1:7f:71:b5:f4:23:f8:c8:ee:73:2d:66:48:8e: 78:3a:89:01:87:73:ad:56:40:7a:a8:c2:8c:62:71:f9:23:de: ee:70:a5:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ok0GWZzM1B9gKfqJLUlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjUxMjIwMTIwMDUwWhcNMjUxMjIxMTIwMDUwWjAzMTEwLwYDVQQD EyhjZjM2NGI0ZjRlMTkyNWQyYjk4NjYyYTk5OWIwMjZiYzRlODhmMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMf++2tObEUocIN4oU6OUofbtWqd pbHpFy2eFhUZKgG2SwU0xDz2d9DbYEZmyEE0djWBVaACFilmi2u0kmFOrmRvl8wB etrdVOwS2fsU3CKkmqKeMhuBsSp5gJx4rMa3cMoKxAZdmTIooKHO4HBesWHCesL5 pNi5v34pVtSDNfBAKBm6dgW0uR0B0I+roMWLYgCZ0QmX1hDuLEPh74K3Nk8KEMaE uH57w19s4w48Wl4SSsqVrJvSSGYyqWsEIdtkeQDFOICs3DvSCWPfgvrhnPyzUk5R 5Md0G2aIQv17VI6h7zkPrXVNNmKH1c5YVno45p5BYRHsR9Jx5hNw1eZVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM82S09OGSXSuYZiqZmwJrxOiPAWMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXa5QKdb4 Q/u6JrrbUMezBFDbXtpEzfC3Aj1ivYmoh0INMrMFPvcO61NC6govF+vNu2NyOBpk Rx5kDwR089omUjA8w7GgVYyY8PDqZLXoVlDYszkkYdlQDile/aoMwpCN8sh2B96E EAhUwkUL8te+yKsNu39K0pkiXTZcwBPYdlPul+xY0bxCoco5EfMcCNC67ocj32+f /lhct7C7zH9WOno7BwRcyJnEBh47YduHX9zeNp1ltJQT4U/BkfrommRcpvmu++ZJ ZTX0bJ3IzmGUpqLz4Ns1Ny/SMjbUErF/cbX0I/jI7nMtZkiOeDqJAYdzrVZAeqjC jGJx+SPe7nClPw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:29 2025 by rpki-client