This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json) Hash identifier: MaGVf473oPKYOECPfld1qUq9EyAH7vLL/YfoB9yKbv4= Subject key identifier: 7F:82:C9:62:CC:62:2D:07:D8:C5:8A:56:CB:28:E5:70:E7:6E:28:B8 Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17 Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617 Certificate serial: 019B3BA201B34FD7263D4612A66F5B8449A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft Manifest number: 17A1 Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: vrPNpP3Ft88oMNny6nUg26dXWUt9nQJTeVxNKJ+TPoI=) 2: TnThCaTGOpbeBVl_q2qvHfPHRKI.roa (hash: vZGjqFlLceGbm9fhvfK4HD2wMVIEyqf+3QaEkJyXI1A=) 3: d05CCn1yXzDA7C5w-MDsl0f09t0.roa (hash: /ywHtJ1DRJX7SRlt6FF1N/xceKf+HW07BTHeEnVvvf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:01:b3:4f:d7:26:3d:46:12:a6:6f:5b:84:49:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617 Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=7f82c962cc622d07d8c58a56cb28e570e76e28b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:5c:48:a1:63:db:41:ad:cd:9c:f0:c9:87: b7:f9:c2:e1:3b:be:ac:fd:7a:5f:54:fd:38:f1:6a: b0:2e:f6:df:9c:0c:e5:71:d0:25:7f:fb:8d:84:6d: 0e:08:6d:ec:0d:1a:fd:3d:0f:53:d3:e2:0b:8a:31: a5:20:1e:81:4a:cf:a6:80:4e:a8:47:77:a8:3d:a7: 8a:a4:ae:38:f2:cd:80:1a:bf:f1:47:be:9c:13:73: a1:62:23:0b:c8:6e:70:a5:00:0e:31:e7:47:13:6c: bd:06:ab:c9:be:07:53:cd:48:75:73:1c:9a:a5:f4: df:d0:87:fb:44:07:bf:6b:d8:38:2d:1a:bc:c2:24: 29:dc:cb:f4:8e:0a:11:a0:d6:6a:e1:ed:b9:fe:ac: c1:ef:4c:fc:5c:e4:ba:3e:b3:79:29:73:fa:79:f0: 7c:c4:f2:1f:ae:09:ae:31:b4:ef:52:29:0d:a8:ca: 5b:2a:7a:18:84:16:ff:0e:9a:59:73:95:b6:45:7b: 8c:ca:e5:7c:d1:96:27:fd:ef:79:d9:7d:98:a5:06: b9:6f:31:a2:c5:f7:cb:76:05:33:1f:81:71:90:91: 7d:9d:73:7b:0d:da:bf:c5:04:c1:14:7c:d3:d8:b4: 54:b9:85:01:cd:6a:e6:97:4f:77:20:78:0c:0e:7f: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:C9:62:CC:62:2D:07:D8:C5:8A:56:CB:28:E5:70:E7:6E:28:B8 X509v3 Authority Key Identifier: keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4f:21:46:3b:01:a9:ed:71:7a:18:1b:30:55:90:31:61:8a: 8d:22:a5:f0:67:b4:66:fd:e2:a2:f1:c8:db:ac:4b:bd:8d:cf: aa:02:62:18:17:39:74:16:76:d4:fc:0c:af:35:7d:b3:3d:18: 52:c0:42:f8:6d:5c:2c:7e:5b:6f:b8:c4:48:62:fb:cf:22:fe: d2:13:6f:84:7e:fa:c3:51:cb:8a:60:3c:24:61:01:dc:db:b2: 2a:16:34:ad:6e:5b:bf:1e:f8:b6:0c:6d:1f:19:17:2d:58:c8: 4e:50:97:ce:77:44:b1:4a:45:cc:ee:af:16:a0:bc:be:f1:49: f8:69:e5:cf:de:32:f0:81:3b:3f:c6:ab:99:a6:a6:9f:1f:62: f2:a3:4d:60:e7:0b:35:d2:bb:c5:09:43:0b:fd:71:8c:ed:c3: 98:e9:0e:71:92:3c:a2:a9:9e:e4:c1:b0:e7:ae:95:6a:54:41: 28:0b:b1:36:86:10:9e:83:72:a7:38:25:45:62:1a:48:b1:da: ef:94:73:5c:23:74:7f:a1:d6:ac:c3:d3:62:f5:ef:33:17:b2: dc:06:61:18:fb:e7:c3:2b:b0:8f:20:6d:37:4d:15:cf:13:25: db:ba:26:14:bf:8d:5e:25:15:2a:f5:af:07:95:64:71:02:b0: 2d:44:b2:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogGzT9cmPUYSpm9bhEmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz OWM2MTcwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD Eyg3ZjgyYzk2MmNjNjIyZDA3ZDhjNThhNTZjYjI4ZTU3MGU3NmUyOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IpcSKFj20GtzZzwyYe3+cLhO76s /XpfVP048WqwLvbfnAzlcdAlf/uNhG0OCG3sDRr9PQ9T0+ILijGlIB6BSs+mgE6o R3eoPaeKpK448s2AGr/xR76cE3OhYiMLyG5wpQAOMedHE2y9BqvJvgdTzUh1cxya pfTf0If7RAe/a9g4LRq8wiQp3Mv0jgoRoNZq4e25/qzB70z8XOS6PrN5KXP6efB8 xPIfrgmuMbTvUikNqMpbKnoYhBb/DppZc5W2RXuMyuV80ZYn/e952X2YpQa5bzGi xffLdgUzH4FxkJF9nXN7Ddq/xQTBFHzT2LRUuYUBzWrml093IHgMDn9kHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+CyWLMYi0H2MWKVsso5XDnbii4MB8GA1UdIwQY MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu08hRjsB qe1xehgbMFWQMWGKjSKl8Ge0Zv3iovHI26xLvY3PqgJiGBc5dBZ21PwMrzV9sz0Y UsBC+G1cLH5bb7jESGL7zyL+0hNvhH76w1HLimA8JGEB3NuyKhY0rW5bvx74tgxt HxkXLVjITlCXzndEsUpFzO6vFqC8vvFJ+Gnlz94y8IE7P8armaamnx9i8qNNYOcL NdK7xQlDC/1xjO3DmOkOcZI8oqme5MGw566ValRBKAuxNoYQnoNypzglRWIaSLHa 75RzXCN0f6HWrMPTYvXvMxey3AZhGPvnwyuwjyBtN00VzxMl27omFL+NXiUVKvWv B5VkcQKwLUSy+A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:59 2025 by rpki-client