This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json) Hash identifier: P1bC72KfXiygA9qfWwTPahfUn6n596k57Fan3z8d7Kc= Subject key identifier: 89:D2:D6:2D:21:0C:F2:01:EF:4A:BE:55:ED:A7:DA:6F:E9:C5:82:0F Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e Certificate serial: 019B6BB33CA155562507CF2DFD0CC1DF48F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft Manifest number: 0EDA Signing time: Mon 29 Dec 2025 20:01:06 +0000 Manifest this update: Mon 29 Dec 2025 20:01:06 +0000 Manifest next update: Tue 30 Dec 2025 20:01:06 +0000 Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: vlD6KT58Bo2ctdVGUtSaNgTpyMiiXBG3hpw4v9st9U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:3c:a1:55:56:25:07:cf:2d:fd:0c:c1:df:48:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e Validity Not Before: Dec 29 20:01:06 2025 GMT Not After : Dec 30 20:01:06 2025 GMT Subject: CN=89d2d62d210cf201ef4abe55eda7da6fe9c5820f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:98:c7:d0:13:c9:b4:e0:b3:bc:4f:09:d1: 4a:0f:9b:31:90:91:1c:bb:8e:64:51:b7:93:ad:35: bd:0c:b6:37:f6:4b:8d:33:c6:ad:88:49:b1:e1:70: 55:d9:bc:47:b5:ae:ab:30:70:3e:93:fd:55:11:39: 44:18:f5:92:a8:28:ea:af:64:d6:50:0b:be:7c:a7: e1:02:c8:41:01:27:2a:1f:b2:af:28:f2:72:33:3a: 7b:5c:f7:c5:83:4b:db:b6:7f:c7:f3:41:d9:52:8a: be:d4:0f:88:a5:5e:ee:42:be:6d:56:d4:86:2b:ae: af:8b:e8:b4:5f:73:23:32:74:0c:f8:db:ab:a2:3d: 05:74:6f:15:38:88:ab:8d:5d:f6:80:cf:f5:f3:a6: c0:e2:85:78:a5:df:ef:ec:da:d3:84:81:f7:07:3c: b7:7b:20:af:6d:12:4f:31:16:a1:e6:c9:1e:69:03: 33:60:b5:fc:48:c6:b7:7b:ac:83:af:42:c5:bb:b1: f0:6c:7d:68:3e:c0:38:5c:ef:45:ae:d5:28:23:a7: 62:c4:f4:52:7c:df:af:de:87:f2:5f:ed:ce:40:ab: c4:64:52:41:fe:b3:83:79:e1:76:5b:80:6c:f4:87: f1:d4:e8:6a:23:e4:52:86:6f:a3:e7:2d:d8:7d:20: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:D6:2D:21:0C:F2:01:EF:4A:BE:55:ED:A7:DA:6F:E9:C5:82:0F X509v3 Authority Key Identifier: keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:19:2c:3a:de:ed:8b:44:ca:0d:59:04:3f:e7:8d:f3:3c:d5: c1:d8:f8:f2:b6:fd:bc:86:c1:fb:32:20:a6:b1:ef:af:c0:85: 60:cc:21:4a:73:e0:52:a6:03:89:c0:12:57:18:6b:65:62:7e: 9b:28:f6:50:88:ff:fa:fb:47:38:9a:ee:ff:a0:75:be:24:ab: 43:a0:7c:b4:b5:af:f7:12:0a:55:fc:84:4d:71:14:0c:88:52: fb:cb:88:0a:1a:ea:eb:60:59:b3:f5:1d:4a:ed:6b:04:ec:90: 2b:0e:56:45:50:7c:bc:17:44:79:6c:34:15:c9:33:dc:0c:64: 4f:7a:46:20:9e:3f:21:2b:5d:16:d8:9e:22:1b:e4:5a:16:22: a1:96:f6:f7:d7:90:a1:47:68:11:6f:17:2b:cc:a5:0a:03:6a: 43:53:bf:20:ef:7b:ab:08:22:6f:5d:69:e5:04:00:92:7c:e8: d8:02:6c:1d:ca:ac:d8:d8:4b:15:6a:dc:4d:48:ba:01:c2:cb: 31:e3:d9:fa:74:27:b8:d0:60:7b:cf:29:95:b4:1d:27:88:56: 0e:93:ea:5e:7d:30:f9:25:6a:19:9d:7e:e5:be:ef:5f:97:9f: ba:cf:6d:9b:44:c2:01:43:76:87:cf:ed:34:ba:e5:41:3b:67: d0:19:27:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrszyhVVYlB88t/QzB30jzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOGY5OWU4OGRhMDQ2ZGYzMTA0OWQ5N2RkOTEyYWU2NTBk NTZkNGUwHhcNMjUxMjI5MjAwMTA2WhcNMjUxMjMwMjAwMTA2WjAzMTEwLwYDVQQD Eyg4OWQyZDYyZDIxMGNmMjAxZWY0YWJlNTVlZGE3ZGE2ZmU5YzU4MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW6Yx9ATybTgs7xPCdFKD5sxkJEc u45kUbeTrTW9DLY39kuNM8atiEmx4XBV2bxHta6rMHA+k/1VETlEGPWSqCjqr2TW UAu+fKfhAshBAScqH7KvKPJyMzp7XPfFg0vbtn/H80HZUoq+1A+IpV7uQr5tVtSG K66vi+i0X3MjMnQM+Nuroj0FdG8VOIirjV32gM/186bA4oV4pd/v7NrThIH3Bzy3 eyCvbRJPMRah5skeaQMzYLX8SMa3e6yDr0LFu7HwbH1oPsA4XO9FrtUoI6dixPRS fN+v3ofyX+3OQKvEZFJB/rODeeF2W4Bs9Ifx1OhqI+RShm+j5y3YfSAtjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInS1i0hDPIB70q+Ve2n2m/pxYIPMB8GA1UdIwQY MBaAFC+PmeiNoEbfMQSdl92RKuZQ1W1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2Mzkt MTJkNTJmMWU1NGRiLzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80NDY3ZTgtOWI5NS00MDUwLWI2MzktMTJkNTJmMWU1NGRi LzEvTDQtWjZJMmdSdDh4QkoyWDNaRXE1bERWYlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBksOt7t i0TKDVkEP+eN8zzVwdj48rb9vIbB+zIgprHvr8CFYMwhSnPgUqYDicASVxhrZWJ+ myj2UIj/+vtHOJru/6B1viSrQ6B8tLWv9xIKVfyETXEUDIhS+8uIChrq62BZs/Ud Su1rBOyQKw5WRVB8vBdEeWw0Fckz3AxkT3pGIJ4/IStdFtieIhvkWhYioZb299eQ oUdoEW8XK8ylCgNqQ1O/IO97qwgib11p5QQAknzo2AJsHcqs2NhLFWrcTUi6AcLL MePZ+nQnuNBge88plbQdJ4hWDpPqXn0w+SVqGZ1+5b7vX5efus9tm0TCAUN2h8/t NLrlQTtn0BkneQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:48:29 2025 by rpki-client