This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json) Hash identifier: dLjU4vwPIuF8yJ9hja1A9RKQlekV122LB74zoThVN5E= Subject key identifier: 98:10:10:5D:D6:AB:30:BE:7A:A8:EB:D4:A6:55:61:25:88:6C:4F:EE Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Certificate serial: 019B3DC78A003F1E45760C72E38344026E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft Manifest number: 0662 Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=) 2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=) 3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: vCykvKjT8LOt+6p3+olGfY3BqawTEXgu1zS8bKoGNdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8a:00:3f:1e:45:76:0c:72:e3:83:44:02:6e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=9810105dd6ab30be7aa8ebd4a6556125886c4fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:d0:ae:61:df:d1:43:af:0a:e3:b6:a1:0e: d4:85:36:e8:5c:88:c8:58:b4:ca:a3:5c:0d:d0:a8: 26:8a:b2:84:51:97:06:65:bc:93:65:a2:74:9d:5d: c9:d7:12:48:40:d4:5f:f7:93:f7:e1:92:b7:8b:04: 95:aa:f8:fd:a4:36:9e:3c:7f:9c:33:84:4b:7b:3f: c9:59:ff:e5:3f:79:9a:ba:77:b5:d9:07:54:00:5d: 08:65:7c:60:15:78:9c:c2:cb:02:ab:11:37:08:20: b3:cd:35:61:ee:79:2a:78:00:20:90:c1:c6:ab:82: 44:0c:c1:13:6c:89:39:03:a2:1e:24:64:ed:c9:1a: c5:cc:30:ed:dd:06:16:39:6c:9f:7f:2d:cd:6d:bd: 1e:b1:3a:1b:8a:0d:45:db:69:e6:92:df:84:f8:ac: b4:fc:5f:d7:70:0d:75:81:6a:19:13:66:be:9c:de: ce:b9:91:13:76:e7:4b:34:cf:02:1a:47:14:02:4a: fd:61:1e:bf:a4:5f:40:c9:81:1c:c4:58:10:c5:d2: a1:0a:40:04:ba:e6:ab:13:8e:e6:5e:4d:cb:d7:56: ed:21:86:08:6e:b7:7a:f2:12:5d:61:9c:2d:cc:35: e8:3c:3b:ab:80:36:7a:34:ae:97:e6:e8:3b:9c:5d: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:10:10:5D:D6:AB:30:BE:7A:A8:EB:D4:A6:55:61:25:88:6C:4F:EE X509v3 Authority Key Identifier: keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:68:dd:ac:a6:e2:24:c4:f7:3e:ce:c4:d1:cc:8f:97:ec: 8a:b0:20:69:69:6d:85:d8:4f:e8:76:b5:8b:94:fb:eb:c3:c1: 73:20:f2:1e:80:ae:3d:f3:7f:9a:71:fe:4f:4c:ee:64:53:b5: 32:d8:26:69:5d:c3:29:d3:ad:7b:8e:cc:ba:33:21:86:11:15: be:cf:8e:f9:d5:e6:dc:d8:83:08:b2:9b:5a:d8:b0:fc:a6:74: a1:43:e0:71:be:36:70:20:f3:4c:7f:65:f4:f4:51:ba:c4:5b: 3e:04:fb:f4:c9:6b:84:1a:cf:a6:27:a7:59:67:72:eb:81:53: 64:92:15:54:cc:07:2b:0b:ba:ea:b4:ee:1f:47:d0:42:39:53: f6:98:b0:c7:a7:7e:b4:ba:bf:f0:af:cf:f6:d9:8c:ba:11:f5: d2:a9:c4:89:8c:a3:4e:7d:4d:c9:4f:7d:ed:53:91:32:ff:f7: db:45:e1:bb:b4:38:07:ee:25:a1:9b:46:d5:45:d2:d8:8e:f2: 9d:30:77:ac:f3:d2:ef:77:fc:bd:e2:8e:8f:0a:87:13:0d:6f: 19:94:cb:6b:11:f2:61:74:c8:a4:13:21:5b:4b:62:3b:77:d5: eb:7d:03:2a:bc:36:29:32:2d:ff:94:be:72:6c:45:b4:a9:ec: bd:0b:c1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4oAPx5Fdgxy44NEAm5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2 YzI0MGMwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD Eyg5ODEwMTA1ZGQ2YWIzMGJlN2FhOGViZDRhNjU1NjEyNTg4NmM0ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroPQrmHf0UOvCuO2oQ7UhTboXIjI WLTKo1wN0KgmirKEUZcGZbyTZaJ0nV3J1xJIQNRf95P34ZK3iwSVqvj9pDaePH+c M4RLez/JWf/lP3maune12QdUAF0IZXxgFXicwssCqxE3CCCzzTVh7nkqeAAgkMHG q4JEDMETbIk5A6IeJGTtyRrFzDDt3QYWOWyffy3Nbb0esTobig1F22nmkt+E+Ky0 /F/XcA11gWoZE2a+nN7OuZETdudLNM8CGkcUAkr9YR6/pF9AyYEcxFgQxdKhCkAE uuarE47mXk3L11btIYYIbrd68hJdYZwtzDXoPDurgDZ6NK6X5ug7nF23BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgQEF3WqzC+eqjr1KZVYSWIbE/uMB8GA1UdIwQY MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0 LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7Jo3aym 4iTE9z7OxNHMj5fsirAgaWlthdhP6Ha1i5T768PBcyDyHoCuPfN/mnH+T0zuZFO1 MtgmaV3DKdOte47MujMhhhEVvs+O+dXm3NiDCLKbWtiw/KZ0oUPgcb42cCDzTH9l 9PRRusRbPgT79MlrhBrPpienWWdy64FTZJIVVMwHKwu66rTuH0fQQjlT9piwx6d+ tLq/8K/P9tmMuhH10qnEiYyjTn1NyU997VORMv/320Xhu7Q4B+4loZtG1UXS2I7y nTB3rPPS73f8veKOjwqHEw1vGZTLaxHyYXTIpBMhW0tiO3fV630DKrw2KTIt/5S+ cmxFtKnsvQvBEA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:02 2025 by rpki-client