This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json) Hash identifier: qUAjzwyf0MZtQajoULOhkzIIgINLYrR2FyWHMBr0GPk= Subject key identifier: B1:9D:53:FB:FD:8D:25:AB:AF:42:09:00:42:A2:F1:29:24:83:38:54 Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Certificate serial: 019B3FB633A6FFDA46C32F208A2BE64C37A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft Manifest number: 03DA Signing time: Sun 21 Dec 2025 07:01:03 +0000 Manifest this update: Sun 21 Dec 2025 07:01:03 +0000 Manifest next update: Mon 22 Dec 2025 07:01:03 +0000 Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: MLX6MymvUP2iWjFcfBovKb3QuDIZd4pZejgGOg0omjM=) 2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:33:a6:ff:da:46:c3:2f:20:8a:2b:e6:4c:37:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Validity Not Before: Dec 21 07:01:03 2025 GMT Not After : Dec 22 07:01:03 2025 GMT Subject: CN=b19d53fbfd8d25abaf42090042a2f12924833854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:95:39:83:dd:34:33:cb:e6:97:16:a5:41: 6b:b3:f5:1f:0b:96:04:2d:b9:54:28:db:a1:eb:27: b1:7b:4c:5a:95:3a:68:c2:5f:68:c0:8e:1e:06:48: 06:38:84:53:2f:56:e5:17:3e:c3:25:0b:91:b1:8c: 5a:d7:1c:36:ef:86:a0:85:a8:61:f7:fc:ac:e8:d2: 9e:7d:15:e3:1a:dd:90:47:0a:6e:e4:7e:57:cb:fd: 41:fe:3b:d0:4d:0f:87:1c:03:41:7e:97:bc:89:2a: 0a:a2:02:bc:ba:ef:63:56:e3:cd:8c:ed:e7:7f:70: 52:d6:97:c7:34:40:89:9f:5f:18:ae:5b:cd:df:f1: 95:48:f4:c3:37:77:90:d4:cf:f7:12:7d:b1:00:65: fe:59:c9:56:34:d2:24:7c:57:19:ef:07:41:10:2b: 59:fe:8e:ea:04:20:db:5c:78:57:e2:05:00:52:0c: 3b:ae:b0:21:0c:e2:a6:a4:b9:1d:57:9d:c3:43:bb: b7:fc:90:f7:54:63:d9:e4:59:81:51:04:23:9e:3d: cb:2e:dc:a5:da:7d:31:75:1e:d4:aa:02:bc:4a:55: 2e:d0:4c:22:8a:e3:47:28:97:47:8d:e5:ca:03:dd: a4:0a:97:f4:bf:d3:b4:62:b9:ca:dd:4e:10:16:35: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9D:53:FB:FD:8D:25:AB:AF:42:09:00:42:A2:F1:29:24:83:38:54 X509v3 Authority Key Identifier: keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:03:51:8d:07:9d:bd:da:80:ae:29:5e:a0:e3:c0:62:80:03: 5b:cd:7d:7b:fa:8e:f4:1f:b9:27:72:3b:0d:b2:73:1f:28:b7: 3d:6a:1e:9c:e5:74:49:3d:ef:cd:d8:85:9f:0b:86:c1:b6:d5: 45:49:a2:fc:14:03:19:c0:16:cf:1f:4e:cc:0a:27:df:db:eb: 91:8b:09:e9:26:2f:b4:73:2a:ad:41:08:b0:4c:c3:22:fb:ed: da:f6:bd:97:90:58:cd:17:d6:be:fc:99:9b:d9:4b:ce:96:aa: 06:f2:e2:3e:a4:a7:86:46:f3:1b:73:d2:8b:17:4e:91:e2:54: 88:c3:e4:be:9f:ec:7f:59:88:41:03:c7:e8:0d:a3:ec:d3:97: e7:1e:c6:1a:e6:f7:90:1a:67:df:17:32:c5:25:67:c9:b6:dd: c5:64:d5:5c:7a:0b:92:22:00:8b:f3:30:a1:14:5d:ae:a4:a4: 80:5a:3f:cc:98:63:c7:0f:e5:e7:ae:e4:66:30:45:b3:4a:62: 06:d8:ca:8d:0e:a8:8f:1d:d5:a0:c5:6f:b7:12:40:ba:22:ba: 3e:0c:d4:22:b2:aa:ed:e6:b1:87:bd:8b:67:03:05:10:ca:80: 56:4d:9e:bd:b9:03:39:bf:bc:8b:c0:1e:cd:f3:c4:31:49:87: a7:71:f0:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tjOm/9pGwy8giivmTDejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm NDYyYjgwHhcNMjUxMjIxMDcwMTAzWhcNMjUxMjIyMDcwMTAzWjAzMTEwLwYDVQQD EyhiMTlkNTNmYmZkOGQyNWFiYWY0MjA5MDA0MmEyZjEyOTI0ODMzODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4uVOYPdNDPL5pcWpUFrs/UfC5YE LblUKNuh6yexe0xalTpowl9owI4eBkgGOIRTL1blFz7DJQuRsYxa1xw274aghahh 9/ys6NKefRXjGt2QRwpu5H5Xy/1B/jvQTQ+HHANBfpe8iSoKogK8uu9jVuPNjO3n f3BS1pfHNECJn18YrlvN3/GVSPTDN3eQ1M/3En2xAGX+WclWNNIkfFcZ7wdBECtZ /o7qBCDbXHhX4gUAUgw7rrAhDOKmpLkdV53DQ7u3/JD3VGPZ5FmBUQQjnj3LLtyl 2n0xdR7UqgK8SlUu0EwiiuNHKJdHjeXKA92kCpf0v9O0YrnK3U4QFjVwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGdU/v9jSWrr0IJAEKi8SkkgzhUMB8GA1UdIwQY MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaANRjQed vdqArileoOPAYoADW819e/qO9B+5J3I7DbJzHyi3PWoenOV0ST3vzdiFnwuGwbbV RUmi/BQDGcAWzx9OzAon39vrkYsJ6SYvtHMqrUEIsEzDIvvt2va9l5BYzRfWvvyZ m9lLzpaqBvLiPqSnhkbzG3PSixdOkeJUiMPkvp/sf1mIQQPH6A2j7NOX5x7GGub3 kBpn3xcyxSVnybbdxWTVXHoLkiIAi/MwoRRdrqSkgFo/zJhjxw/l567kZjBFs0pi BtjKjQ6ojx3VoMVvtxJAuiK6PgzUIrKq7eaxh72LZwMFEMqAVk2evbkDOb+8i8Ae zfPEMUmHp3HwKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:03 2025 by rpki-client