This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json) Hash identifier: MRuviaKRYk5C9qoWvIRyVng1h8bBElNuAFj4QTGwNFc= Subject key identifier: 60:57:30:E8:C1:00:20:E4:E0:67:59:2E:5C:8C:CA:97:26:A1:8F:01 Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019B3946757E28A01CB8C80A4C9A58F16AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft Manifest number: 06F9 Signing time: Sat 20 Dec 2025 01:01:17 +0000 Manifest this update: Sat 20 Dec 2025 01:01:17 +0000 Manifest next update: Sun 21 Dec 2025 01:01:17 +0000 Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=) 2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=) 3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: n9hIi9aZLknnMN9UM4xeAd3vQW/YDGzFmH0I3lQc9bU=) 4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:75:7e:28:a0:1c:b8:c8:0a:4c:9a:58:f1:6a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Dec 20 01:01:17 2025 GMT Not After : Dec 21 01:01:17 2025 GMT Subject: CN=605730e8c10020e4e067592e5c8cca9726a18f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:4e:9b:45:90:bb:37:ba:9b:fc:56:6d:94: fe:96:93:7e:c8:64:0b:9d:1a:fa:73:cd:df:d1:76: 8b:12:48:83:45:04:8c:37:34:7f:9c:8b:71:d5:b4: 99:71:43:45:33:05:a0:a5:93:3f:c0:57:9c:cc:56: ad:d1:51:3b:64:64:8d:c6:c4:20:ac:9e:93:0f:16: 19:4d:4e:47:7e:b6:a8:b2:77:74:10:54:2b:f4:3c: f5:d5:d9:9f:49:41:af:3f:03:b6:07:ad:52:f4:62: e3:11:0f:e5:a5:a0:44:9f:92:ee:41:f1:07:3e:77: 3a:84:5f:96:e1:d6:d0:ed:43:40:c9:18:c3:66:ff: 69:31:ad:df:a7:e1:1f:96:8f:a1:a6:1e:7c:64:50: 8c:72:18:5b:72:f9:f8:a7:96:ed:ef:4d:69:9f:16: bb:b8:e3:65:2c:26:79:1c:9a:f9:68:ef:3f:41:cc: e0:e0:eb:1d:02:58:4a:63:35:7a:08:d9:84:fc:f6: f9:2a:b5:23:ed:88:f8:d5:67:be:a8:fc:9f:90:39: e3:a3:29:27:42:bb:23:c4:ed:11:0f:5c:a3:ae:e7: 96:14:cb:22:e1:98:ce:c3:82:f3:d1:85:cc:2b:b9: 3c:08:81:7c:70:0c:96:01:d6:84:df:0a:48:0e:b9: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:57:30:E8:C1:00:20:E4:E0:67:59:2E:5C:8C:CA:97:26:A1:8F:01 X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:d5:43:65:f3:fa:fc:25:5a:8e:6b:64:2c:f3:cd:91:96: 46:f9:c2:2f:91:4d:a0:db:18:09:2a:fa:26:b4:0e:0e:4d:b1: 51:36:de:fc:d5:d2:b1:8c:3e:f8:a3:0a:ce:5d:bc:f6:80:44: 23:9f:8c:bd:46:82:20:0b:61:4b:cb:1e:68:26:98:77:ef:e9: 42:14:5b:71:42:35:56:58:b0:f0:f4:46:e4:be:40:5b:0d:90: 12:6e:8e:21:0e:e4:a7:7f:13:63:d9:34:69:2c:99:91:87:61: fb:71:a1:28:33:85:b4:ee:13:28:0f:05:44:91:e1:c6:4b:ab: d7:24:6b:d9:ba:d8:58:32:a9:03:fa:98:5a:a5:63:e0:1e:55: a2:29:14:7a:24:58:7f:c0:b4:4d:73:27:78:e3:95:fa:76:3c: e3:a9:9c:78:10:de:bf:0b:be:03:68:27:eb:c2:72:f7:e2:d9: 9e:c1:e9:9d:3b:ad:81:13:d4:bd:3a:24:30:f2:16:f5:06:ba: 04:5f:0a:46:56:e6:6d:dd:66:c4:24:9d:d9:34:dc:db:3a:a3: cd:d5:1b:f2:11:18:51:e3:fb:b0:f0:dc:b6:c0:92:8b:10:fd: e7:42:e0:ed:74:4e:55:b9:78:fe:b6:e4:80:66:9d:e8:3d:10: 8e:f5:66:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnV+KKAcuMgKTJpY8WrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjUxMjIwMDEwMTE3WhcNMjUxMjIxMDEwMTE3WjAzMTEwLwYDVQQD Eyg2MDU3MzBlOGMxMDAyMGU0ZTA2NzU5MmU1YzhjY2E5NzI2YTE4ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tlOm0WQuze6m/xWbZT+lpN+yGQL nRr6c83f0XaLEkiDRQSMNzR/nItx1bSZcUNFMwWgpZM/wFeczFat0VE7ZGSNxsQg rJ6TDxYZTU5Hfraosnd0EFQr9Dz11dmfSUGvPwO2B61S9GLjEQ/lpaBEn5LuQfEH Pnc6hF+W4dbQ7UNAyRjDZv9pMa3fp+Eflo+hph58ZFCMchhbcvn4p5bt701pnxa7 uONlLCZ5HJr5aO8/Qczg4OsdAlhKYzV6CNmE/Pb5KrUj7Yj41We+qPyfkDnjoykn QrsjxO0RD1yjrueWFMsi4ZjOw4Lz0YXMK7k8CIF8cAyWAdaE3wpIDrnnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBXMOjBACDk4GdZLlyMypcmoY8BMB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJPVQ2Xz +vwlWo5rZCzzzZGWRvnCL5FNoNsYCSr6JrQODk2xUTbe/NXSsYw++KMKzl289oBE I5+MvUaCIAthS8seaCaYd+/pQhRbcUI1Vliw8PRG5L5AWw2QEm6OIQ7kp38TY9k0 aSyZkYdh+3GhKDOFtO4TKA8FRJHhxkur1yRr2brYWDKpA/qYWqVj4B5VoikUeiRY f8C0TXMneOOV+nY846mceBDevwu+A2gn68Jy9+LZnsHpnTutgRPUvTokMPIW9Qa6 BF8KRlbmbd1mxCSd2TTc2zqjzdUb8hEYUeP7sPDctsCSixD950Lg7XROVbl4/rbk gGad6D0QjvVmXg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:13 2025 by rpki-client