This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json) Hash identifier: UjL9kI4rn0oUUp6shOY9gFDnDmx2BTEs06wmtZVrhls= Subject key identifier: 36:16:BE:80:27:2D:95:5D:90:60:67:0B:45:62:00:E6:FE:BC:B2:96 Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Certificate serial: 019B69572FDE517C7F4EB4A24CDC67AEFC49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 09:01:20 +0000 Manifest this update: Mon 29 Dec 2025 09:01:20 +0000 Manifest next update: Tue 30 Dec 2025 09:01:20 +0000 Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=) 2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: C7nX3MnD4cIldCoQ4RRfx86vyT3fXMoe8AoK2uHeUE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:2f:de:51:7c:7f:4e:b4:a2:4c:dc:67:ae:fc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Validity Not Before: Dec 29 09:01:20 2025 GMT Not After : Dec 30 09:01:20 2025 GMT Subject: CN=3616be80272d955d9060670b456200e6febcb296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:38:8d:c3:13:96:21:fc:2b:da:64:8f:c4: f8:36:6c:00:45:41:9d:65:49:da:42:4a:98:f4:3d: 6b:f3:8b:c6:f3:3f:b2:47:e8:36:ec:af:37:bd:86: 11:b4:dc:06:45:39:9b:56:26:18:f8:89:66:bc:f1: 7f:99:a5:c0:b2:fd:17:76:58:66:94:ef:cc:3f:dd: 0a:0a:11:22:02:01:75:35:00:55:78:dd:13:25:85: 74:28:fc:4e:5f:40:49:4c:3c:f0:bb:36:09:57:e3: f7:1b:a6:cc:c2:f3:38:8e:6e:78:4f:2c:b0:c4:48: 62:a8:a3:ea:35:8f:e2:20:39:a4:45:08:c2:b7:99: 76:5e:46:4c:71:b1:de:b4:7c:9f:6f:93:cd:b8:0e: 56:53:59:f2:5a:be:f7:fa:9d:78:e7:1d:65:81:55: 1e:6b:51:e7:b5:2c:e7:63:d6:b0:44:3e:35:92:be: e1:25:58:75:86:ae:3f:0f:cf:1f:aa:5b:b5:c5:a9: 76:26:6a:bc:fd:3f:3a:2a:55:b0:41:fe:43:3d:55: 98:a7:00:ee:8e:9e:f5:2b:52:e4:19:bc:02:d6:40: 6e:61:28:5a:f1:81:a4:ec:42:41:06:2e:57:4f:dd: 63:d6:eb:2c:aa:3a:8c:1d:1b:0d:fc:ca:48:cc:e2: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:BE:80:27:2D:95:5D:90:60:67:0B:45:62:00:E6:FE:BC:B2:96 X509v3 Authority Key Identifier: keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ee:44:ae:43:76:fc:16:e3:de:69:de:07:22:5c:4f:18:02: 5b:68:33:59:72:04:d4:3c:15:ef:14:93:03:0c:4b:3a:94:5c: 79:f1:67:64:62:88:c1:4c:d9:e3:78:6f:25:55:e9:c1:9a:4a: 97:0f:8a:2c:49:4f:a7:bc:b4:98:09:d2:22:24:3e:bc:9f:d4: 3b:60:ef:20:db:56:5b:8b:f8:fb:b9:6e:4e:e4:96:df:e8:09: 2b:0a:ce:7f:a7:5a:13:f8:0c:bc:8a:ba:01:41:78:fb:70:26: b1:c9:f9:5e:ab:c0:44:3d:06:7a:c0:72:71:0b:1c:ad:06:36: cb:5a:25:e7:66:6b:20:28:8d:d9:a8:a3:e0:cf:8d:5e:7c:10: 23:f5:5d:64:3d:ba:83:9a:74:f1:ca:67:b3:fb:98:dc:bf:39: eb:ff:20:9d:8c:99:ec:79:c9:61:cd:f9:42:fd:7d:47:fc:2b: 9b:58:2e:e3:12:31:67:45:aa:c7:af:ec:02:7d:de:9c:75:16: dd:7e:43:59:4e:e4:c0:fa:21:4b:84:62:4e:52:27:09:f2:3e: 45:59:a0:63:81:39:50:fc:14:9b:15:c8:eb:77:f4:e6:0b:8d: 34:13:ce:9e:0d:c7:70:7c:43:05:cc:00:8a:6a:6a:14:2d:94: f5:12:3a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVy/eUXx/TrSiTNxnrvxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm NTczOWIwHhcNMjUxMjI5MDkwMTIwWhcNMjUxMjMwMDkwMTIwWjAzMTEwLwYDVQQD EygzNjE2YmU4MDI3MmQ5NTVkOTA2MDY3MGI0NTYyMDBlNmZlYmNiMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT44jcMTliH8K9pkj8T4NmwARUGd ZUnaQkqY9D1r84vG8z+yR+g27K83vYYRtNwGRTmbViYY+IlmvPF/maXAsv0Xdlhm lO/MP90KChEiAgF1NQBVeN0TJYV0KPxOX0BJTDzwuzYJV+P3G6bMwvM4jm54Tyyw xEhiqKPqNY/iIDmkRQjCt5l2XkZMcbHetHyfb5PNuA5WU1nyWr73+p145x1lgVUe a1HntSznY9awRD41kr7hJVh1hq4/D88fqlu1xal2Jmq8/T86KlWwQf5DPVWYpwDu jp71K1LkGbwC1kBuYSha8YGk7EJBBi5XT91j1ussqjqMHRsN/MpIzOIhIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYWvoAnLZVdkGBnC0ViAOb+vLKWMB8GA1UdIwQY MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt MTBkMTczNGQ3YjgzLzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADO5ErkN2 /Bbj3mneByJcTxgCW2gzWXIE1DwV7xSTAwxLOpRcefFnZGKIwUzZ43hvJVXpwZpK lw+KLElPp7y0mAnSIiQ+vJ/UO2DvINtWW4v4+7luTuSW3+gJKwrOf6daE/gMvIq6 AUF4+3Amscn5XqvARD0GesBycQscrQY2y1ol52ZrICiN2aij4M+NXnwQI/VdZD26 g5p08cpns/uY3L856/8gnYyZ7HnJYc35Qv19R/wrm1gu4xIxZ0Wqx6/sAn3enHUW 3X5DWU7kwPohS4RiTlInCfI+RVmgY4E5UPwUmxXI63f05guNNBPOng3HcHxDBcwA impqFC2U9RI6Fw== -----END CERTIFICATE-----Generated at Mon Dec 29 17:42:45 2025 by rpki-client