This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json) Hash identifier: CCUfLGInXCzQZaI9Pz9nCxiI0q7f2PU57kJAua92uDg= Subject key identifier: 38:3A:84:37:CE:54:07:08:C5:04:36:79:D0:8F:38:C0:4D:7E:FC:BB Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Certificate serial: 019B3AFD5F5F6FC6A04AF9621332EE317E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft Manifest number: 0489 Signing time: Sat 20 Dec 2025 09:00:42 +0000 Manifest this update: Sat 20 Dec 2025 09:00:42 +0000 Manifest next update: Sun 21 Dec 2025 09:00:42 +0000 Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=) 2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=) 3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: NPdTGVS6KmRDT7R2ic04kt6B7VUZXYuibQuEDWvIPgU=) 4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=) 5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:5f:5f:6f:c6:a0:4a:f9:62:13:32:ee:31:7e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Validity Not Before: Dec 20 09:00:42 2025 GMT Not After : Dec 21 09:00:42 2025 GMT Subject: CN=383a8437ce540708c5043679d08f38c04d7efcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:12:4f:08:a0:15:b6:ef:b2:98:9e:9d:6b: 69:eb:9c:e2:c1:f7:42:cf:f1:79:2f:36:dc:3f:da: 59:81:bd:b2:2e:34:d8:aa:6f:b2:1a:93:9b:a2:cc: 51:c7:f4:cf:27:56:de:75:bd:36:0b:7b:ea:e5:f9: 9e:6f:6f:8b:2c:07:19:32:db:b2:b7:3a:2a:e1:3b: 5f:11:17:36:e0:b8:4c:c6:65:26:16:05:a6:4d:72: e0:9d:a4:cd:75:03:0a:50:3b:17:0d:67:99:a5:8a: cf:e6:cd:ef:b4:2a:01:2c:e0:c7:1e:cb:f7:c9:d1: f2:78:d0:58:2c:ef:7f:c3:41:86:8c:83:8a:77:7d: 76:1f:3a:d2:38:2c:ca:de:77:aa:cd:91:f2:34:46: 59:24:c9:64:fd:65:9a:80:c3:e9:da:0c:ce:e8:ea: e1:41:05:7c:3b:94:04:7b:06:cb:6f:8e:a9:bf:74: 59:23:b1:3c:f0:16:02:2a:b9:70:c9:7d:13:42:12: 51:17:36:e0:aa:7f:26:29:1b:82:b5:73:d3:cd:78: 88:69:07:d8:ec:31:61:ab:dc:17:44:0f:c1:8f:e9: 4f:51:13:9c:22:79:ec:94:e5:33:97:ac:82:7d:c4: 6b:f2:54:14:26:2d:14:26:b8:66:57:02:b0:3d:7a: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:84:37:CE:54:07:08:C5:04:36:79:D0:8F:38:C0:4D:7E:FC:BB X509v3 Authority Key Identifier: keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b1:1f:ee:76:4e:18:76:dc:36:3d:8f:b1:29:fd:1b:02:e0: 3c:70:a3:0a:72:b6:5a:1d:d9:07:74:ab:0c:90:f0:0a:96:06: 41:bb:64:e9:7b:1c:ae:05:f5:6c:17:d5:12:77:4d:78:58:9d: e1:70:52:ee:da:81:d4:c7:82:9d:3f:0e:b8:f0:d5:00:f4:3b: 07:d8:50:f6:c0:ac:29:16:81:66:56:85:5b:f1:25:0d:10:e4: 38:03:10:e4:95:30:7b:cf:d6:89:32:59:50:7a:21:23:a2:33: 31:bb:4f:59:19:5f:69:a6:9c:b2:71:0b:16:fb:a3:87:82:44: 97:19:d6:47:34:8b:c2:8c:bd:50:57:b5:91:bd:77:a5:67:38: 76:1e:fc:b9:37:0b:7c:85:f1:85:cb:b7:93:50:be:21:ca:e5: 6e:d6:1f:e2:5e:72:e2:c5:75:5b:ac:36:e3:a0:fe:d6:8e:78: 10:6d:ef:67:12:9d:22:fd:fe:2e:c2:50:48:0f:d9:48:5f:91: 84:41:08:4b:cf:f4:b1:b9:bf:e1:7f:8b:c4:3d:96:27:80:4e: 3b:ca:41:8e:29:ce:b5:29:78:df:0e:2e:93:b1:bd:3d:6e:da: 1f:32:fb:bd:ea:86:2a:b9:2d:33:9e:3b:e7:d5:bb:db:c8:32: 53:ac:d1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/V9fb8agSvliEzLuMX6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey MTVlYWEwHhcNMjUxMjIwMDkwMDQyWhcNMjUxMjIxMDkwMDQyWjAzMTEwLwYDVQQD EygzODNhODQzN2NlNTQwNzA4YzUwNDM2NzlkMDhmMzhjMDRkN2VmY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza4STwigFbbvspienWtp65ziwfdC z/F5LzbcP9pZgb2yLjTYqm+yGpObosxRx/TPJ1bedb02C3vq5fmeb2+LLAcZMtuy tzoq4TtfERc24LhMxmUmFgWmTXLgnaTNdQMKUDsXDWeZpYrP5s3vtCoBLODHHsv3 ydHyeNBYLO9/w0GGjIOKd312HzrSOCzK3neqzZHyNEZZJMlk/WWagMPp2gzO6Orh QQV8O5QEewbLb46pv3RZI7E88BYCKrlwyX0TQhJRFzbgqn8mKRuCtXPTzXiIaQfY 7DFhq9wXRA/Bj+lPUROcInnslOUzl6yCfcRr8lQUJi0UJrhmVwKwPXoowwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg6hDfOVAcIxQQ2edCPOMBNfvy7MB8GA1UdIwQY MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt OGNlNDE3OTIzMmM4LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4 LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLEf7nZO GHbcNj2PsSn9GwLgPHCjCnK2Wh3ZB3SrDJDwCpYGQbtk6XscrgX1bBfVEndNeFid 4XBS7tqB1MeCnT8OuPDVAPQ7B9hQ9sCsKRaBZlaFW/ElDRDkOAMQ5JUwe8/WiTJZ UHohI6IzMbtPWRlfaaacsnELFvujh4JElxnWRzSLwoy9UFe1kb13pWc4dh78uTcL fIXxhcu3k1C+IcrlbtYf4l5y4sV1W6w246D+1o54EG3vZxKdIv3+LsJQSA/ZSF+R hEEIS8/0sbm/4X+LxD2WJ4BOO8pBjinOtSl43w4uk7G9PW7aHzL7veqGKrktM547 59W728gyU6zRLA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:22:53 2025 by rpki-client