This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json) Hash identifier: SDC2pH0H32UjX1bybx7txz4B3g2setdJ7cVGX4Um0Oc= Subject key identifier: DD:99:79:24:50:74:F1:CE:B8:7C:4A:77:E1:EB:EA:3F:54:71:A2:68 Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e Certificate serial: 019B31FA45C25005D33F54E359EA82C338FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft Manifest number: 14CD Signing time: Thu 18 Dec 2025 15:00:43 +0000 Manifest this update: Thu 18 Dec 2025 15:00:43 +0000 Manifest next update: Fri 19 Dec 2025 15:00:43 +0000 Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: ryEr3x3Oe7fVfqRsrvDmLgeqaCA0/4JUhdqeZNXhzqU=) 2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:45:c2:50:05:d3:3f:54:e3:59:ea:82:c3:38:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e Validity Not Before: Dec 18 15:00:43 2025 GMT Not After : Dec 19 15:00:43 2025 GMT Subject: CN=dd9979245074f1ceb87c4a77e1ebea3f5471a268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:31:8a:00:95:fb:12:c1:14:68:52:cd:3a: 10:68:c7:ba:58:f9:60:3e:0b:f9:88:2c:34:99:53: 3a:c2:26:51:94:2b:52:0b:8b:52:09:a2:28:51:8d: 13:34:5c:c3:ed:89:c2:ee:48:87:06:8f:d1:bb:2d: b9:f8:07:b7:86:61:4b:de:19:75:49:11:7b:9c:68: 70:85:00:53:58:f8:70:04:cf:dd:00:2c:4f:75:6d: 44:4a:c3:7b:03:84:ea:ec:eb:e7:ef:8b:fd:de:39: 96:a0:99:bb:f2:f6:17:e6:ba:ee:be:15:78:61:b3: 65:4c:03:08:0c:8f:3c:9d:7d:83:bb:6c:ca:70:d7: ec:d0:64:36:1e:e7:6f:b1:8d:0c:22:72:a4:c8:00: f8:05:9c:fa:d4:23:e9:38:f9:31:66:11:34:6b:28: 1e:87:31:f9:0f:02:7f:9c:e7:dc:2c:39:d7:a3:d5: ee:99:9d:df:85:ae:6f:19:f4:07:58:01:26:23:de: ad:d5:f5:7c:87:94:0f:fa:a7:83:e7:5e:87:05:eb: d3:b4:ee:37:ad:f4:b9:33:90:21:07:e5:a7:f5:c7: 8a:13:fe:38:4a:f1:61:77:24:f5:e2:aa:0b:22:0f: 89:f8:60:5c:e1:7b:83:99:ab:97:1e:fa:c8:5a:df: 01:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:99:79:24:50:74:F1:CE:B8:7C:4A:77:E1:EB:EA:3F:54:71:A2:68 X509v3 Authority Key Identifier: keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:da:2b:72:8c:e9:b9:2d:8a:15:3e:ad:11:86:53:8f:2c:a1: 93:31:12:30:b2:b8:89:e3:ba:73:c5:c9:02:22:fc:43:c4:ad: b6:d8:bf:5e:67:74:b6:54:14:8f:81:6a:79:4a:5d:2b:66:5c: d9:5a:74:58:49:12:b7:71:6c:66:be:b3:f5:5f:83:06:0f:0e: 13:7b:06:ab:b8:0b:70:ca:a5:c2:ee:86:9b:d2:6d:9c:1a:03: b4:23:8e:46:49:96:f7:72:e0:5c:38:41:27:08:22:a7:8d:f8: f8:9b:64:72:d8:d1:c4:47:37:46:1a:21:c5:a6:da:83:ee:76: 5b:8c:4b:f0:16:44:3d:a2:fd:02:62:67:6e:8f:45:f8:c5:ac: cd:e5:ce:73:a5:59:a5:61:e7:58:25:ba:8a:b3:c6:ab:bb:fd: f3:bf:88:00:f4:22:4b:dc:48:e5:03:12:e1:8a:02:02:fb:b5: 75:49:8d:20:2f:2d:ff:ee:a3:c4:57:5b:2f:7d:2f:85:c4:34: 46:c0:1d:c2:ba:95:44:d0:ab:5c:14:ab:52:ac:21:73:c1:b0: b8:74:26:58:09:f0:a6:2f:bd:8b:9f:e2:68:a1:e5:76:cc:3d: 59:65:01:18:7d:a8:a7:e5:a9:7c:af:8b:d4:e5:07:d5:d7:16: a8:23:18:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+kXCUAXTP1TjWeqCwzj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGM1NzgzNzI1ZDU5NTAxOTYyYWEyY2I1YjU5MGM0MmI1 N2RmNWUwHhcNMjUxMjE4MTUwMDQzWhcNMjUxMjE5MTUwMDQzWjAzMTEwLwYDVQQD EyhkZDk5NzkyNDUwNzRmMWNlYjg3YzRhNzdlMWViZWEzZjU0NzFhMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxExigCV+xLBFGhSzToQaMe6WPlg Pgv5iCw0mVM6wiZRlCtSC4tSCaIoUY0TNFzD7YnC7kiHBo/Ruy25+Ae3hmFL3hl1 SRF7nGhwhQBTWPhwBM/dACxPdW1ESsN7A4Tq7Ovn74v93jmWoJm78vYX5rruvhV4 YbNlTAMIDI88nX2Du2zKcNfs0GQ2HudvsY0MInKkyAD4BZz61CPpOPkxZhE0ayge hzH5DwJ/nOfcLDnXo9XumZ3fha5vGfQHWAEmI96t1fV8h5QP+qeD516HBevTtO43 rfS5M5AhB+Wn9ceKE/44SvFhdyT14qoLIg+J+GBc4XuDmauXHvrIWt8BKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2ZeSRQdPHOuHxKd+Hr6j9UcaJoMB8GA1UdIwQY MBaAFC7cV4NyXVlQGWKqLLW1kMQrV99eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2Yt ZWRkYWMwYzdhMWYyLzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2YtZWRkYWMwYzdhMWYy LzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtorcozp uS2KFT6tEYZTjyyhkzESMLK4ieO6c8XJAiL8Q8Sttti/Xmd0tlQUj4FqeUpdK2Zc 2Vp0WEkSt3FsZr6z9V+DBg8OE3sGq7gLcMqlwu6Gm9JtnBoDtCOORkmW93LgXDhB Jwgip434+JtkctjRxEc3Rhohxabag+52W4xL8BZEPaL9AmJnbo9F+MWszeXOc6VZ pWHnWCW6irPGq7v987+IAPQiS9xI5QMS4YoCAvu1dUmNIC8t/+6jxFdbL30vhcQ0 RsAdwrqVRNCrXBSrUqwhc8GwuHQmWAnwpi+9i5/iaKHldsw9WWUBGH2op+WpfK+L 1OUH1dcWqCMYVg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:39 2025 by rpki-client