This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft File: LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json) Hash identifier: +nihIBWqBabIgakSGYkM7hnnQmvJIEJPfmGBnt7l4Ew= Subject key identifier: A9:44:38:D2:96:F9:68:EB:28:48:86:10:D3:98:77:1C:C5:67:A3:80 Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E Certificate issuer: /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Certificate serial: 019B3BA23EB491577766E2902513EBC9BED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft Manifest number: 0A Signing time: Sat 20 Dec 2025 12:00:47 +0000 Manifest this update: Sat 20 Dec 2025 12:00:47 +0000 Manifest next update: Sun 21 Dec 2025 12:00:47 +0000 Files and hashes: 1: 92BPR5lvI07-es0ROLWifKo-K6M.roa (hash: PAuzJ+7bFcImN1OH46J1IxknO+znhB9BZ6ZITi4tGkg=) 2: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: gbsmbStMNJKVNe+kNZyzb/D1OH99ZEUXOcuhQMD4rpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3e:b4:91:57:77:66:e2:90:25:13:eb:c9:be:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e Validity Not Before: Dec 20 12:00:47 2025 GMT Not After : Dec 21 12:00:47 2025 GMT Subject: CN=a94438d296f968eb28488610d398771cc567a380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:a8:01:05:0c:8e:8f:e3:4a:57:d9:c0:13: 08:f4:b3:f3:80:d8:27:bf:85:67:a1:18:7f:03:35: b1:16:99:81:c3:e5:0d:fe:e8:47:6e:bf:2c:dc:d7: 66:b5:44:6e:09:e6:57:3c:ec:69:a1:9a:2f:0d:97: d9:d6:05:22:a3:ff:60:55:08:2c:08:7c:73:dc:c9: 5b:08:fc:95:5c:3d:a0:d6:12:74:c4:1f:34:a5:41: 6d:e0:82:e9:e1:86:64:f4:ac:08:5b:e9:7c:71:f5: c4:67:02:d3:b4:82:2f:fd:a5:31:05:df:d5:10:ab: e9:8d:c5:1c:f0:6f:d0:da:9e:3c:d0:24:0f:8b:fb: c9:c4:09:0a:27:bd:7f:82:bb:e8:cb:ab:f5:c8:1a: a8:0c:0a:fc:d2:0c:fe:4e:41:fb:2f:59:2d:7a:21: 22:54:51:74:bb:03:8d:56:0d:90:76:cd:58:d9:b3: f7:1e:cf:f7:fb:88:90:2c:69:e0:6e:79:bd:02:46: d6:0a:a3:40:10:dc:7f:75:4e:77:d0:48:23:38:8a: f3:6f:ec:8f:a6:39:0a:f3:5a:a2:66:d2:23:13:de: 23:e8:d0:f0:1b:cf:5a:8c:ed:bf:70:34:b7:50:b6: 65:a1:3f:f9:a1:86:aa:6d:82:20:75:c7:4d:a1:fe: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:38:D2:96:F9:68:EB:28:48:86:10:D3:98:77:1C:C5:67:A3:80 X509v3 Authority Key Identifier: keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ba:95:b9:2d:33:b3:ae:bf:de:87:35:86:60:5f:1b:10:e3: 25:d3:47:ed:e5:97:10:fc:e8:8d:da:81:61:ec:2e:53:e0:4b: a0:a5:46:07:44:c2:6b:ba:6d:e7:dc:8e:07:13:69:15:a2:86: 66:a3:16:49:7d:5d:78:75:64:d7:a4:17:6a:60:dd:02:f1:e8: ba:3b:6b:93:28:20:0b:d4:3b:42:06:7a:27:3c:82:88:40:aa: 74:4a:bf:ac:b5:a0:ed:ee:39:67:b1:71:d9:3e:b6:bf:d1:c6: f0:a1:55:20:3d:71:39:15:5f:07:cf:55:dd:b8:ad:62:27:a7: aa:04:aa:63:0d:f8:ae:2b:3c:2a:08:ce:f8:60:0c:aa:b9:62: 08:6a:a4:61:b5:d2:86:2b:98:09:50:11:b5:2f:72:fe:d2:4f: cd:c7:79:3b:4c:aa:8f:4a:9d:2c:82:1c:a6:d2:36:c9:94:e9: 7a:a3:be:02:62:2f:70:ed:84:d6:25:7b:f9:53:2d:4d:95:70: 95:53:65:8a:ff:56:f0:3f:2f:4d:56:a3:d2:5e:9e:14:58:f7: 79:21:2f:b3:19:8c:d1:ce:6d:a7:66:b6:32:9a:a4:f9:1c:02: 77:76:00:0d:ec:ad:e3:17:cf:c5:fa:c2:a8:3a:b4:d0:26:d4: 7a:42:67:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oj60kVd3ZuKQJRPryb7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx ZjVmNmUwHhcNMjUxMjIwMTIwMDQ3WhcNMjUxMjIxMTIwMDQ3WjAzMTEwLwYDVQQD EyhhOTQ0MzhkMjk2Zjk2OGViMjg0ODg2MTBkMzk4NzcxY2M1NjdhMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl2oAQUMjo/jSlfZwBMI9LPzgNgn v4VnoRh/AzWxFpmBw+UN/uhHbr8s3NdmtURuCeZXPOxpoZovDZfZ1gUio/9gVQgs CHxz3MlbCPyVXD2g1hJ0xB80pUFt4ILp4YZk9KwIW+l8cfXEZwLTtIIv/aUxBd/V EKvpjcUc8G/Q2p480CQPi/vJxAkKJ71/grvoy6v1yBqoDAr80gz+TkH7L1kteiEi VFF0uwONVg2Qds1Y2bP3Hs/3+4iQLGngbnm9AkbWCqNAENx/dU530EgjOIrzb+yP pjkK81qiZtIjE94j6NDwG89ajO2/cDS3ULZloT/5oYaqbYIgdcdNof498wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlEONKW+WjrKEiGENOYdxzFZ6OAMB8GA1UdIwQY MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt MGY3OTY0MzIxY2UxLzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbqVuS0z s66/3oc1hmBfGxDjJdNH7eWXEPzojdqBYewuU+BLoKVGB0TCa7pt59yOBxNpFaKG ZqMWSX1deHVk16QXamDdAvHoujtrkyggC9Q7QgZ6JzyCiECqdEq/rLWg7e45Z7Fx 2T62v9HG8KFVID1xORVfB89V3bitYienqgSqYw34ris8KgjO+GAMqrliCGqkYbXS hiuYCVARtS9y/tJPzcd5O0yqj0qdLIIcptI2yZTpeqO+AmIvcO2E1iV7+VMtTZVw lVNliv9W8D8vTVaj0l6eFFj3eSEvsxmM0c5tp2a2Mpqk+RwCd3YADeyt4xfPxfrC qDq00CbUekJnIA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:09 2025 by rpki-client