This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json) Hash identifier: fUPwVUG+fD3rQ0uQWDHkmvfYoWT9EybygL/f3H3+Tc8= Subject key identifier: EC:69:6E:22:C8:26:FE:5C:BF:03:82:60:59:DB:57:6A:A0:0F:B6:28 Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Certificate serial: 019B58630C839BC5A3E259AEE1A0E9B02293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft Manifest number: 1676 Signing time: Fri 26 Dec 2025 02:00:44 +0000 Manifest this update: Fri 26 Dec 2025 02:00:44 +0000 Manifest next update: Sat 27 Dec 2025 02:00:44 +0000 Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=) 2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: +wcLxNvtTKNlo4TqfJB9G+M8w2ng5FB0Sd0WKJ1xSaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:0c:83:9b:c5:a3:e2:59:ae:e1:a0:e9:b0:22:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Validity Not Before: Dec 26 02:00:44 2025 GMT Not After : Dec 27 02:00:44 2025 GMT Subject: CN=ec696e22c826fe5cbf03826059db576aa00fb628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:90:c8:c3:40:5e:c6:2e:cc:eb:a3:23:e6: db:68:17:1f:37:50:1d:bf:54:30:e7:12:75:3b:9e: b9:43:67:57:58:45:9c:f1:d5:7d:7a:20:f8:25:aa: ee:c6:f1:4e:1b:e0:7b:c1:ad:5a:2b:6c:0e:f9:67: 15:5a:8d:2d:4e:07:f5:e1:41:b5:6d:a9:d1:10:7a: 3f:47:98:c2:b6:42:af:71:3b:39:fa:2a:a4:02:97: ad:7c:cc:11:77:53:3f:29:1b:e2:14:0c:5b:e1:d4: a8:24:9f:d7:9c:20:f2:9c:1d:09:87:12:c2:8e:9b: 17:05:e6:59:92:1b:f8:e9:0b:ce:fa:61:35:0e:20: e8:ef:21:d4:2d:dd:73:c6:8d:70:c9:2b:82:3a:87: f9:37:0f:13:04:ad:16:6f:9a:c8:84:fc:26:76:f2: 29:bd:6e:19:16:8b:c9:3a:bc:e9:3a:23:03:e6:67: 0e:03:71:6d:f6:49:d3:c2:29:95:e6:cc:00:68:43: d7:0b:cf:28:1a:6e:b7:58:a1:ac:7c:cb:50:11:41: d2:fa:7c:1f:bb:97:e2:d2:fd:b0:cd:ea:29:6f:9c: da:3e:35:26:0f:01:dd:ac:af:1a:49:e6:9e:2b:2e: 93:0d:9e:e3:6b:65:c5:7a:57:88:48:7a:3b:c4:85: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:6E:22:C8:26:FE:5C:BF:03:82:60:59:DB:57:6A:A0:0F:B6:28 X509v3 Authority Key Identifier: keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:a3:f7:6a:99:c0:ac:90:dd:97:0b:69:9e:7f:16:27:4d: 61:97:93:ff:2a:c1:b3:7c:be:41:a3:cb:bf:71:53:06:37:8e: 6d:cc:f9:d0:e0:29:5f:79:e7:d9:d2:aa:d4:74:b1:33:f8:48: 46:c1:1a:45:8e:e8:7d:97:09:eb:76:b6:f4:2b:f2:4b:81:d0: c7:a4:2a:d2:3c:13:c5:e5:59:02:07:41:9d:30:6c:d4:3d:b8: 1f:09:12:f8:e5:97:d7:9b:47:8b:bd:1f:2a:e1:a7:7b:7b:be: 1a:f3:de:1c:9c:27:50:c2:91:2d:67:0b:21:62:a4:47:27:55: 6b:84:0e:4d:18:e1:41:18:03:8a:7a:fe:af:a8:71:70:66:46: 69:8c:68:45:45:26:d9:7f:f1:44:d5:1c:b9:34:8b:52:70:e7: 5c:17:76:62:da:9d:a5:fe:3f:b3:50:8f:38:64:f9:20:7e:50: 42:c9:b0:27:d0:34:97:ac:b7:43:a6:1a:e7:ea:80:51:85:9b: f5:a4:41:67:70:44:78:77:f3:91:5a:76:4e:33:9f:15:2d:74: 84:15:61:c8:65:2c:3c:a1:e0:ab:18:0f:7f:5a:8b:16:62:eb: 2b:80:a2:a5:e5:3f:62:72:bc:73:8b:8b:15:cc:4f:90:58:be: 4b:90:40:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYYwyDm8Wj4lmu4aDpsCKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0 YmU0MmMwHhcNMjUxMjI2MDIwMDQ0WhcNMjUxMjI3MDIwMDQ0WjAzMTEwLwYDVQQD EyhlYzY5NmUyMmM4MjZmZTVjYmYwMzgyNjA1OWRiNTc2YWEwMGZiNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGGQyMNAXsYuzOujI+bbaBcfN1Ad v1Qw5xJ1O565Q2dXWEWc8dV9eiD4JaruxvFOG+B7wa1aK2wO+WcVWo0tTgf14UG1 banREHo/R5jCtkKvcTs5+iqkApetfMwRd1M/KRviFAxb4dSoJJ/XnCDynB0JhxLC jpsXBeZZkhv46QvO+mE1DiDo7yHULd1zxo1wySuCOof5Nw8TBK0Wb5rIhPwmdvIp vW4ZFovJOrzpOiMD5mcOA3Ft9knTwimV5swAaEPXC88oGm63WKGsfMtQEUHS+nwf u5fi0v2wzeopb5zaPjUmDwHdrK8aSeaeKy6TDZ7ja2XFeleISHo7xIVXRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxpbiLIJv5cvwOCYFnbV2qgD7YoMB8GA1UdIwQY MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSGj92qZ wKyQ3ZcLaZ5/FidNYZeT/yrBs3y+QaPLv3FTBjeObcz50OApX3nn2dKq1HSxM/hI RsEaRY7ofZcJ63a29CvyS4HQx6Qq0jwTxeVZAgdBnTBs1D24HwkS+OWX15tHi70f KuGne3u+GvPeHJwnUMKRLWcLIWKkRydVa4QOTRjhQRgDinr+r6hxcGZGaYxoRUUm 2X/xRNUcuTSLUnDnXBd2Ytqdpf4/s1CPOGT5IH5QQsmwJ9A0l6y3Q6Ya5+qAUYWb 9aRBZ3BEeHfzkVp2TjOfFS10hBVhyGUsPKHgqxgPf1qLFmLrK4CipeU/YnK8c4uL FcxPkFi+S5BA8w== -----END CERTIFICATE-----Generated at Fri Dec 26 03:26:31 2025 by rpki-client