This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json) Hash identifier: hk8VHPPfMcORrdLvmJEyyrTlzT8oIIwZSbgRzYp1CmY= Subject key identifier: 9A:70:AF:1A:38:52:75:1D:1B:9D:20:45:F0:C0:D4:D7:10:E1:56:C0 Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Certificate serial: 019B42EE5EAC5ABA87D085E60FC45CBFDE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:16 +0000 Manifest this update: Sun 21 Dec 2025 22:01:16 +0000 Manifest next update: Mon 22 Dec 2025 22:01:16 +0000 Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: lGJaiviUM47R/FcqQ45hVmCWjM7sLQWr4DMRI/KygEA=) 2: U56329e4gM-IVTVVEt6zrVkDGjo.roa (hash: we1XyD3BJFEUnklb4jnEqKHGEO1FUWwSSjWf88RrLFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:5e:ac:5a:ba:87:d0:85:e6:0f:c4:5c:bf:de:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Validity Not Before: Dec 21 22:01:16 2025 GMT Not After : Dec 22 22:01:16 2025 GMT Subject: CN=9a70af1a3852751d1b9d2045f0c0d4d710e156c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:60:dc:9b:9f:46:e6:8c:d9:d7:35:bc:eb: af:36:e7:77:b2:9f:8e:8c:44:9e:cc:7a:af:41:84: 6c:50:49:c7:e0:86:45:42:c5:1b:6c:9e:89:7d:19: 4c:70:7c:6f:8f:92:fb:e3:c0:5b:31:b2:78:ba:d5: ed:52:dc:bc:c0:df:95:b2:e4:3b:f4:ea:27:69:1e: 5e:21:df:70:94:9e:10:1d:e5:12:55:17:7d:89:34: 94:d3:6a:c9:d3:5f:47:bd:6f:bc:a9:34:4a:ab:4a: 3c:d6:59:4a:4c:1f:1e:c2:c7:5e:f0:5e:72:8e:ab: d9:62:1f:c6:60:b1:ed:13:bc:8a:9d:be:ea:d8:f8: 38:2e:d0:79:6e:57:24:e2:2b:88:b3:96:1f:ed:b1: 30:2c:ea:d7:41:2e:bf:c0:12:63:9b:b4:c0:98:08: 32:77:88:04:84:b8:b7:14:63:03:03:91:c6:27:34: 29:c0:d9:bc:f5:bf:16:1d:e6:f4:a6:2b:4a:75:c5: e5:79:0b:11:b6:09:2d:d5:28:f3:90:5f:ed:43:71: 00:ef:55:89:d4:dc:02:88:1c:91:a0:04:e9:95:ac: 36:cd:f9:35:a3:ef:3a:50:d7:2b:7d:a2:87:bc:4a: 42:fa:24:52:3f:a5:c3:f7:89:0c:ba:3e:31:c2:63: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:AF:1A:38:52:75:1D:1B:9D:20:45:F0:C0:D4:D7:10:E1:56:C0 X509v3 Authority Key Identifier: keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f4:b7:c7:3d:bf:14:c3:7d:e4:c8:4d:d6:9f:80:40:be:c8: 47:94:0e:f5:e9:d6:b0:91:cb:88:39:2a:e4:32:4d:6d:f5:8b: ad:87:e8:a0:ca:a6:dd:9a:f3:ea:fb:d8:6d:0f:ef:5d:46:e1: 84:53:2b:f0:83:76:75:b1:7a:da:38:5c:53:55:32:19:00:7a: 2f:55:eb:1a:1a:95:0a:cd:75:d5:ef:9f:38:e3:3f:9d:b3:ae: 81:f4:fe:d0:c5:be:33:29:a5:de:d0:3a:d0:c2:93:79:f9:82: 71:6a:ce:6b:4e:0c:51:5f:b8:89:a8:2b:fe:fa:f7:ec:26:d7: c5:e7:bd:c9:db:06:67:db:5e:78:6a:61:16:4a:3f:e1:0e:ea: de:b0:80:af:fa:78:52:eb:4c:05:73:25:a1:ee:6d:5c:58:64: 40:82:c9:9e:0e:61:22:3d:6e:73:3e:f0:77:b3:6b:b0:c0:8d: d6:e3:a1:12:0c:a2:99:af:83:b6:a8:82:b4:4f:5d:92:f8:6b: 8c:e7:77:cb:4c:c0:62:b8:49:9f:89:c4:3d:1c:a9:9e:b4:7f: f2:c3:67:56:a2:12:47:7d:63:ce:32:11:71:85:a9:5f:59:af: bc:02:3b:4d:6a:aa:8a:37:48:e9:f8:01:92:da:c4:3e:d1:22: 89:ad:4f:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7l6sWrqH0IXmD8Rcv96WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi YTU1NDgwHhcNMjUxMjIxMjIwMTE2WhcNMjUxMjIyMjIwMTE2WjAzMTEwLwYDVQQD Eyg5YTcwYWYxYTM4NTI3NTFkMWI5ZDIwNDVmMGMwZDRkNzEwZTE1NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhg3JufRuaM2dc1vOuvNud3sp+O jESezHqvQYRsUEnH4IZFQsUbbJ6JfRlMcHxvj5L748BbMbJ4utXtUty8wN+VsuQ7 9OonaR5eId9wlJ4QHeUSVRd9iTSU02rJ019HvW+8qTRKq0o81llKTB8ewsde8F5y jqvZYh/GYLHtE7yKnb7q2Pg4LtB5blck4iuIs5Yf7bEwLOrXQS6/wBJjm7TAmAgy d4gEhLi3FGMDA5HGJzQpwNm89b8WHeb0pitKdcXleQsRtgkt1SjzkF/tQ3EA71WJ 1NwCiByRoATplaw2zfk1o+86UNcrfaKHvEpC+iRSP6XD94kMuj4xwmP5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpwrxo4UnUdG50gRfDA1NcQ4VbAMB8GA1UdIwQY MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2 LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/S3xz2/ FMN95MhN1p+AQL7IR5QO9enWsJHLiDkq5DJNbfWLrYfooMqm3Zrz6vvYbQ/vXUbh hFMr8IN2dbF62jhcU1UyGQB6L1XrGhqVCs111e+fOOM/nbOugfT+0MW+Myml3tA6 0MKTefmCcWrOa04MUV+4iagr/vr37CbXxee9ydsGZ9teeGphFko/4Q7q3rCAr/p4 UutMBXMloe5tXFhkQILJng5hIj1ucz7wd7NrsMCN1uOhEgyima+DtqiCtE9dkvhr jOd3y0zAYrhJn4nEPRypnrR/8sNnVqISR31jzjIRcYWpX1mvvAI7TWqqijdI6fgB ktrEPtEiia1Piw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:59:08 2025 by rpki-client