This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json) Hash identifier: 2Rtk0YJajAbXdjEmieyadmUl9NMCCe/Jfr5kZtAr2GU= Subject key identifier: 78:A4:D9:03:6F:CD:D5:31:44:E4:A6:76:24:BC:35:99:AC:53:6F:B5 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B4F97234C1791A1A8F322E3942A129D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft Manifest number: 17A2 Signing time: Wed 24 Dec 2025 09:01:03 +0000 Manifest this update: Wed 24 Dec 2025 09:01:03 +0000 Manifest next update: Thu 25 Dec 2025 09:01:03 +0000 Files and hashes: 1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=) 2: SzpKhTo6tnBhpcikMK9o1GGHtas.roa (hash: RiA2Um2oFUlmkSaB0+uB5T0wiBpmXC9LVOdsy69y30U=) 3: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=) 4: ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa (hash: W9dlzbQukUw0SKncoOMnmQN5HPveQXtHqzANhp1lAbE=) 5: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: pQlHIG0zI7yN8N2IhTNp4qvcFCUzBArUN4yNmLMFhEw=) 6: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=) 7: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=) 8: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:23:4c:17:91:a1:a8:f3:22:e3:94:2a:12:9d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Dec 24 09:01:03 2025 GMT Not After : Dec 25 09:01:03 2025 GMT Subject: CN=78a4d9036fcdd53144e4a67624bc3599ac536fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:22:d1:2f:fd:4d:5d:2a:3a:79:cb:6e:9f: 3b:e5:12:1e:ed:17:f0:7a:b5:42:57:08:29:41:c6: 89:fd:26:72:54:65:1a:d6:ee:24:52:99:89:06:eb: 7f:3a:f9:59:d0:3c:f1:43:b3:39:47:12:26:7f:9d: 9a:0b:3c:58:94:4f:5c:07:3d:47:7e:fb:32:c8:05: ad:d3:e0:1d:14:d9:76:c1:dd:5c:9d:f4:20:41:d9: 26:f2:66:21:e2:ec:27:70:5d:a1:88:7a:4d:30:75: b3:9b:fb:5b:8a:46:ef:71:03:da:fc:7e:d1:98:38: c3:93:19:32:15:c5:64:66:e3:8f:7a:94:f1:bf:ea: db:bf:6d:b8:e4:b9:5a:f0:7e:ac:fe:d4:36:e7:f5: 62:40:4c:77:c9:c0:c1:ba:a8:b4:03:5b:71:4b:ad: 10:c6:bd:af:2b:83:0c:a4:ac:25:e0:a4:2d:55:b5: 90:5b:c3:42:8b:16:02:3c:d4:4d:59:0c:48:33:72: 8e:25:9e:54:6d:2b:0e:09:17:79:54:b0:e9:c3:55: cc:c4:6e:30:c9:3a:84:e0:fe:66:fc:5a:db:6b:a3: 14:4a:1d:78:8c:26:6d:f4:22:01:36:d9:41:fd:89: 77:6b:99:ee:b2:bf:a9:2c:8a:66:38:09:c8:10:f5: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A4:D9:03:6F:CD:D5:31:44:E4:A6:76:24:BC:35:99:AC:53:6F:B5 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9f:d1:c8:58:4f:74:e5:f0:c2:a6:1a:94:bf:53:e8:a8:04: 5a:80:fb:0a:3b:6b:0e:7e:4c:de:f7:b1:3f:f8:35:e2:f4:d9: f9:83:ba:18:8f:a1:cc:80:e6:3c:76:be:03:f3:17:23:34:c3: b1:4e:34:12:ab:35:fa:bb:31:94:db:d2:63:e1:9c:a1:08:39: 0d:b5:32:2b:63:2a:35:81:f0:13:63:c0:25:b5:49:bb:31:1a: 0b:21:a5:50:dc:57:7e:d7:47:67:18:40:ad:5f:e1:b4:e2:96: b3:6e:40:0e:30:10:13:6b:1f:ec:56:b5:17:a0:59:36:d3:05: 76:e9:a9:bb:7d:34:39:95:b9:5a:da:f4:56:10:18:d6:69:6a: 4d:46:68:ad:78:4b:fc:90:57:66:a7:1d:91:80:f3:31:68:55: f3:8d:7c:61:82:29:9d:13:c7:7c:05:2d:a5:d5:00:9e:77:96: 96:c5:a1:3c:0a:e7:1b:46:e0:ab:7c:42:86:53:b4:28:5b:d8: ed:35:5b:0a:5b:4b:75:89:e7:7e:f0:ff:d6:63:da:60:64:0c: 4b:d4:42:e3:6f:f3:85:3a:4c:c4:26:26:85:d8:20:ce:12:54: af:79:22:17:bc:22:c2:f6:3b:d2:0c:76:e2:66:60:d7:fb:44: df:c5:73:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlyNMF5GhqPMi45QqEp2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjUxMjI0MDkwMTAzWhcNMjUxMjI1MDkwMTAzWjAzMTEwLwYDVQQD Eyg3OGE0ZDkwMzZmY2RkNTMxNDRlNGE2NzYyNGJjMzU5OWFjNTM2ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oi0S/9TV0qOnnLbp875RIe7Rfw erVCVwgpQcaJ/SZyVGUa1u4kUpmJBut/OvlZ0DzxQ7M5RxImf52aCzxYlE9cBz1H fvsyyAWt0+AdFNl2wd1cnfQgQdkm8mYh4uwncF2hiHpNMHWzm/tbikbvcQPa/H7R mDjDkxkyFcVkZuOPepTxv+rbv2245Lla8H6s/tQ25/ViQEx3ycDBuqi0A1txS60Q xr2vK4MMpKwl4KQtVbWQW8NCixYCPNRNWQxIM3KOJZ5UbSsOCRd5VLDpw1XMxG4w yTqE4P5m/Frba6MUSh14jCZt9CIBNtlB/Yl3a5nusr+pLIpmOAnIEPXbcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHik2QNvzdUxROSmdiS8NZmsU2+1MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5/RyFhP dOXwwqYalL9T6KgEWoD7CjtrDn5M3vexP/g14vTZ+YO6GI+hzIDmPHa+A/MXIzTD sU40Eqs1+rsxlNvSY+GcoQg5DbUyK2MqNYHwE2PAJbVJuzEaCyGlUNxXftdHZxhA rV/htOKWs25ADjAQE2sf7Fa1F6BZNtMFdumpu300OZW5Wtr0VhAY1mlqTUZorXhL /JBXZqcdkYDzMWhV8418YYIpnRPHfAUtpdUAnneWlsWhPArnG0bgq3xChlO0KFvY 7TVbCltLdYnnfvD/1mPaYGQMS9RC42/zhTpMxCYmhdggzhJUr3kiF7wiwvY70gx2 4mZg1/tE38VzsA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:40:33 2025 by rpki-client