This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json) Hash identifier: WNnBZyZVja+iDuY5KTzW++VSPrvm23W6e68OUhDoxeg= Subject key identifier: 49:BE:0E:99:71:12:D5:8D:43:F8:73:4A:C9:00:5C:E1:44:42:F9:44 Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Certificate serial: 019B3F480FDDA12DF1CD84CA6CB5198156CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 05:00:45 +0000 Manifest this update: Sun 21 Dec 2025 05:00:45 +0000 Manifest next update: Mon 22 Dec 2025 05:00:45 +0000 Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: Jbpaey8o2tWN/g4cQWP3/iCkw8IXz+XPZGGUneH0vBQ=) 2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:0f:dd:a1:2d:f1:cd:84:ca:6c:b5:19:81:56:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Validity Not Before: Dec 21 05:00:45 2025 GMT Not After : Dec 22 05:00:45 2025 GMT Subject: CN=49be0e997112d58d43f8734ac9005ce14442f944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:46:46:7a:a2:99:2c:00:2e:ca:ad:55:7f: 1d:2b:9d:e3:c2:83:c8:fb:dc:aa:96:73:25:f4:a2: 7f:08:c4:58:e7:60:8a:88:a7:96:01:3a:39:3d:f0: f0:11:3e:73:90:83:35:5d:ad:ff:07:de:36:8f:40: e1:13:0d:4d:32:96:16:16:4a:e0:8e:71:5a:fc:bc: ce:8f:b1:b7:f6:99:68:68:1c:9d:ce:a1:7f:0b:d6: 22:3e:dd:d2:8e:09:6e:0d:43:fc:12:1d:2d:15:3c: 7c:f1:62:35:91:03:2b:01:67:a3:ef:43:8d:ff:82: ff:d5:45:ab:68:e6:25:61:97:d2:2e:74:1e:d2:77: 21:66:ae:6a:6e:79:03:c4:d3:75:4b:12:53:57:15: d3:19:02:9d:52:2c:d3:68:ff:0f:da:56:cf:ce:c6: 76:61:e8:1b:ba:76:90:ae:bf:41:ae:14:a3:78:58: d1:00:45:4b:c9:f3:c6:40:75:eb:6f:39:81:de:79: 07:7c:99:0c:9e:f9:9e:d7:b7:92:cc:e9:e1:72:0f: be:eb:d1:2f:46:b1:3f:79:65:50:09:39:9d:94:e0: 0d:a2:ed:e7:07:43:43:24:dd:b8:87:65:65:a9:ce: 69:e7:22:18:ec:89:4d:b1:d3:1b:ba:c0:9e:a0:91: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:0E:99:71:12:D5:8D:43:F8:73:4A:C9:00:5C:E1:44:42:F9:44 X509v3 Authority Key Identifier: keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:20:75:3c:02:b8:bc:ba:80:ea:07:15:16:03:9b:67:c1: a4:6d:de:ed:11:1b:43:53:fc:62:55:c7:d8:9e:45:b1:70:28: a6:f4:bf:2c:ca:93:5c:61:5b:67:70:90:03:b5:c8:9e:75:00: 7b:80:49:eb:20:f2:c8:97:b1:c7:bb:60:61:a5:e9:3e:27:94: f0:7b:1f:cd:26:82:c7:29:19:18:69:97:e4:33:3e:05:8d:90: 05:61:0e:aa:1c:f5:4e:e5:c8:bd:6f:cc:cb:86:a8:98:3a:e2: d1:5a:18:d8:1c:54:5c:4f:0a:92:c6:a4:8e:a7:a3:99:31:58: b4:a1:0a:d9:39:1e:e9:66:35:13:b7:3e:7e:37:d4:80:2f:f9: 71:98:c5:0c:44:00:20:17:d8:93:23:d6:c0:36:bc:6b:62:a9: f9:d2:7b:4b:12:9b:15:64:13:11:98:d4:ac:26:e3:26:89:e5: 4e:8e:77:16:17:6b:f9:37:8a:dc:0c:00:5d:b2:99:f6:8c:06: 1c:1a:17:88:00:c2:6c:6c:05:1c:e6:0f:87:c5:ae:ce:05:52: bd:4b:90:da:ee:0a:6b:3c:aa:76:18:23:7a:f3:15:e2:b6:38: 70:cb:b8:e9:fe:8b:93:ba:2b:40:c9:75:47:23:18:03:66:3a: 28:3a:1f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SA/doS3xzYTKbLUZgVbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0 ZDNjOTAwHhcNMjUxMjIxMDUwMDQ1WhcNMjUxMjIyMDUwMDQ1WjAzMTEwLwYDVQQD Eyg0OWJlMGU5OTcxMTJkNThkNDNmODczNGFjOTAwNWNlMTQ0NDJmOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yVGRnqimSwALsqtVX8dK53jwoPI +9yqlnMl9KJ/CMRY52CKiKeWATo5PfDwET5zkIM1Xa3/B942j0DhEw1NMpYWFkrg jnFa/LzOj7G39ploaBydzqF/C9YiPt3SjgluDUP8Eh0tFTx88WI1kQMrAWej70ON /4L/1UWraOYlYZfSLnQe0nchZq5qbnkDxNN1SxJTVxXTGQKdUizTaP8P2lbPzsZ2 YegbunaQrr9BrhSjeFjRAEVLyfPGQHXrbzmB3nkHfJkMnvme17eSzOnhcg++69Ev RrE/eWVQCTmdlOANou3nB0NDJN24h2Vlqc5p5yIY7IlNsdMbusCeoJE4pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm+DplxEtWNQ/hzSskAXOFEQvlEMB8GA1UdIwQY MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEAgdTwC uLy6gOoHFRYDm2fBpG3e7REbQ1P8YlXH2J5FsXAopvS/LMqTXGFbZ3CQA7XInnUA e4BJ6yDyyJexx7tgYaXpPieU8HsfzSaCxykZGGmX5DM+BY2QBWEOqhz1TuXIvW/M y4aomDri0VoY2BxUXE8KksakjqejmTFYtKEK2Tke6WY1E7c+fjfUgC/5cZjFDEQA IBfYkyPWwDa8a2Kp+dJ7SxKbFWQTEZjUrCbjJonlTo53Fhdr+TeK3AwAXbKZ9owG HBoXiADCbGwFHOYPh8WuzgVSvUuQ2u4KazyqdhgjevMV4rY4cMu46f6Lk7orQMl1 RyMYA2Y6KDofjw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:09:03 2025 by rpki-client