This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: BgZ7vmg5s70VYpKbkNVNAn855JjEZDObCt6qamBaGBY= Subject key identifier: 85:6F:B6:A6:9F:68:0D:8C:AD:F0:B6:7D:A8:C5:4F:5C:91:75:12:F0 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B593EC71DDA100118EDD75A0CC3A4D309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 17A7 Signing time: Fri 26 Dec 2025 06:00:44 +0000 Manifest this update: Fri 26 Dec 2025 06:00:44 +0000 Manifest next update: Sat 27 Dec 2025 06:00:44 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: SzpKhTo6tnBhpcikMK9o1GGHtas.roa (hash: RiA2Um2oFUlmkSaB0+uB5T0wiBpmXC9LVOdsy69y30U=) 3: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=) 4: ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa (hash: W9dlzbQukUw0SKncoOMnmQN5HPveQXtHqzANhp1lAbE=) 5: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: J0eHk5RleG8mPBjVOX4XJJvrfDkVv3ulX78OUJYyOa0=) 6: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=) 7: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 8: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c7:1d:da:10:01:18:ed:d7:5a:0c:c3:a4:d3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Dec 26 06:00:44 2025 GMT Not After : Dec 27 06:00:44 2025 GMT Subject: CN=856fb6a69f680d8cadf0b67da8c54f5c917512f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:68:9d:87:23:70:f0:65:be:db:df:0c:b1: e5:5c:95:c1:03:a2:af:90:1e:f4:59:a0:15:c6:90: 5d:26:bf:33:47:28:62:3f:b6:29:a4:64:42:c9:8b: 1c:92:52:72:4f:2d:bd:f0:b3:06:70:b3:40:d4:68: 61:9b:21:ba:6e:1f:1b:dd:9a:38:a8:da:2b:50:e2: b4:42:2e:55:af:6d:4a:8c:22:c3:51:9e:20:7e:37: 77:14:1a:e7:71:70:11:d2:dd:bf:57:3a:d8:3b:40: 5b:e6:59:5f:cc:b7:22:1d:3a:6e:0a:f2:83:85:23: 19:76:83:81:72:b8:79:08:dc:a8:60:b4:21:90:77: f1:e7:6c:e0:bd:a3:6d:82:3e:1e:cd:3a:83:6d:da: 84:22:77:cf:18:13:f2:be:38:ae:10:2f:5f:98:e9: e5:d5:7c:77:0b:6f:48:25:71:e6:ed:82:38:02:50: 8c:77:81:67:c5:2b:6b:96:56:d5:03:97:ae:99:91: 7d:37:8d:2a:97:89:bb:c7:05:ce:35:d0:df:f2:ba: a1:7a:d3:bd:f6:a4:b2:34:df:9b:39:84:c9:cd:c0: 42:05:c7:76:d9:98:26:35:f4:c9:0b:d0:d4:41:39: cd:fa:fc:2e:8a:0f:ed:fa:ed:5a:64:36:8e:af:e5: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:B6:A6:9F:68:0D:8C:AD:F0:B6:7D:A8:C5:4F:5C:91:75:12:F0 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:6d:fd:fc:ba:63:df:c2:69:f3:cb:e5:22:8b:94:6d:df: cc:81:17:cc:89:a1:44:80:ab:8b:94:7a:74:47:80:c3:ab:5f: 0f:ca:0e:15:98:80:dd:1f:d9:a1:2f:a7:3f:db:8d:f6:c4:60: 5f:e0:77:f7:58:e0:a4:c2:97:f6:37:0c:df:fc:a8:b6:29:8e: 16:4a:15:c5:5e:a1:c4:24:f8:c2:b1:0c:1e:ee:3e:77:46:96: c0:ac:fe:6b:22:ff:b0:ab:a8:0b:f3:2d:a4:a9:b0:a9:71:c9: 31:82:90:bc:11:54:be:2d:ba:41:8c:ad:94:6b:f8:7a:19:5c: 6b:60:f2:b3:ea:6f:ff:62:9b:70:51:53:6a:57:cb:ef:d6:85: df:09:fa:4b:22:8c:f7:6b:47:2e:e9:40:12:92:94:b3:ea:84: 09:d4:a1:06:5a:81:13:a4:19:76:e9:16:c1:57:d8:d0:d1:60: 08:f7:8f:f1:28:25:22:36:19:10:e3:48:38:2a:88:2b:4d:3c: 7c:0e:28:7f:2d:42:12:8f:a1:87:c0:78:c1:ec:ed:be:e5:79: 7f:19:1c:d2:0c:ea:71:dc:2a:6c:b0:27:16:a3:5e:af:57:af: 9b:06:b0:c3:b4:5e:0e:ad:5f:e6:07:e1:ff:35:8f:d5:d4:04: ed:23:41:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPscd2hABGO3XWgzDpNMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjUxMjI2MDYwMDQ0WhcNMjUxMjI3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg4NTZmYjZhNjlmNjgwZDhjYWRmMGI2N2RhOGM1NGY1YzkxNzUxMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhonYcjcPBlvtvfDLHlXJXBA6Kv kB70WaAVxpBdJr8zRyhiP7YppGRCyYscklJyTy298LMGcLNA1GhhmyG6bh8b3Zo4 qNorUOK0Qi5Vr21KjCLDUZ4gfjd3FBrncXAR0t2/VzrYO0Bb5llfzLciHTpuCvKD hSMZdoOBcrh5CNyoYLQhkHfx52zgvaNtgj4ezTqDbdqEInfPGBPyvjiuEC9fmOnl 1Xx3C29IJXHm7YI4AlCMd4FnxStrllbVA5eumZF9N40ql4m7xwXONdDf8rqhetO9 9qSyNN+bOYTJzcBCBcd22ZgmNfTJC9DUQTnN+vwuig/t+u1aZDaOr+WWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVvtqafaA2MrfC2fajFT1yRdRLwMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlht/fy6 Y9/CafPL5SKLlG3fzIEXzImhRICri5R6dEeAw6tfD8oOFZiA3R/ZoS+nP9uN9sRg X+B391jgpMKX9jcM3/yotimOFkoVxV6hxCT4wrEMHu4+d0aWwKz+ayL/sKuoC/Mt pKmwqXHJMYKQvBFUvi26QYytlGv4ehlca2Dys+pv/2KbcFFTalfL79aF3wn6SyKM 92tHLulAEpKUs+qECdShBlqBE6QZdukWwVfY0NFgCPeP8SglIjYZEONIOCqIK008 fA4ofy1CEo+hh8B4weztvuV5fxkc0gzqcdwqbLAnFqNer1evmwaww7ReDq1f5gfh /zWP1dQE7SNBKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 09:27:41 2025 by rpki-client