This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json) Hash identifier: 8T/6w+mLuMtTrbnMPx4RWmLOaYVfeNUB1k6UHC943H4= Subject key identifier: 8C:01:8D:1D:82:EE:34:C5:55:3E:83:1A:4B:2F:F9:E8:D9:AB:52:19 Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e Certificate serial: 019B6D6AA5C5F58E4CD2575D2E8DEB7C3615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft Manifest number: 1275 Signing time: Tue 30 Dec 2025 04:01:04 +0000 Manifest this update: Tue 30 Dec 2025 04:01:04 +0000 Manifest next update: Wed 31 Dec 2025 04:01:04 +0000 Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=) 2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 1hJmwj3lmmCa0/hllZBfrOAbSD5aeZ6MvfuxyMxgwOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:a5:c5:f5:8e:4c:d2:57:5d:2e:8d:eb:7c:36:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e Validity Not Before: Dec 30 04:01:04 2025 GMT Not After : Dec 31 04:01:04 2025 GMT Subject: CN=8c018d1d82ee34c5553e831a4b2ff9e8d9ab5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:26:9c:62:d6:2c:29:6f:b8:c8:5e:7c:a9: 69:2d:e6:41:9b:a7:5a:13:15:a1:ae:1b:e3:74:62: 80:b0:00:6d:21:3b:27:8c:36:c4:79:a1:f9:cd:8b: 8d:2f:3e:8c:49:25:e9:c7:a0:ee:c6:6d:5a:86:c7: 0c:a1:63:7b:c0:92:80:89:86:40:23:d9:f8:f0:ba: 2f:02:f5:fc:a5:01:3a:42:18:c9:81:3a:4a:76:0f: 6b:3a:73:d7:f0:01:06:fe:52:8a:27:9c:d0:64:b2: 26:cc:73:ce:a0:60:46:6f:52:fb:49:20:51:f4:d6: 0f:15:bc:44:ed:35:da:cc:b4:ba:bb:13:e0:fd:c5: 6a:3b:9a:97:db:28:87:7b:5d:ed:61:cd:73:74:ad: d3:5d:c9:83:2e:91:5a:b6:51:64:41:91:4b:0a:6b: 97:3e:03:3e:dd:f7:8a:52:1b:77:04:66:90:96:fd: 4a:c8:8c:30:35:1c:7e:44:f3:d9:39:f9:e6:d6:d7: 5b:35:3c:02:5c:e4:e2:28:45:7e:cc:15:e6:ad:ef: d7:e5:2f:26:a5:f7:55:30:6b:9c:43:c4:9c:57:b7: 12:79:4a:8c:8c:0b:5c:4b:41:cc:a4:3b:29:48:e5: b7:cb:6d:d9:9f:cc:ec:41:85:e5:13:89:12:69:fc: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:01:8D:1D:82:EE:34:C5:55:3E:83:1A:4B:2F:F9:E8:D9:AB:52:19 X509v3 Authority Key Identifier: keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:43:ed:dc:5c:06:6d:e2:7f:f9:00:f0:2d:52:68:2f:fb:6a: ba:7e:2e:4a:f3:84:1e:73:de:7b:12:47:6e:41:d8:66:26:01: fe:48:8f:0f:e7:93:2b:4f:23:de:0e:d9:40:6c:9e:52:59:0a: 55:15:ce:f9:87:e5:90:82:73:4a:95:b0:6d:9a:a4:5e:9e:11: e4:6e:9c:41:1d:48:eb:1b:08:7a:e5:25:5c:04:f2:a5:bb:25: 33:f5:d1:8e:d8:8d:e0:6e:76:5a:1f:9f:9f:45:89:24:04:20: 55:c9:93:2f:32:1f:8b:dc:54:bf:ae:20:b1:08:5d:bd:94:76: 13:c2:ef:08:0b:43:53:e9:a9:6a:34:c4:c5:d4:1b:c5:0e:f6: 87:08:ab:88:57:50:a5:49:5b:a0:f8:a9:1c:27:22:03:dc:cc: 47:74:f4:e5:c2:97:c1:d0:ab:80:d3:08:60:8c:71:0a:f4:ed: 90:6f:dd:06:f7:c8:e0:ce:c9:df:ec:d6:d5:0d:db:9e:01:05: c5:e3:d7:35:56:4b:bf:b3:cd:94:4e:ca:8a:0c:99:ea:67:e0: 75:94:68:96:26:9a:41:0e:6f:dc:96:26:23:d7:e7:88:b1:c3: a2:f0:69:63:01:9e:94:7d:ab:8d:ac:d6:a4:12:fb:e8:71:f0: 62:fd:26:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaqXF9Y5M0lddLo3rfDYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh ODkwMmUwHhcNMjUxMjMwMDQwMTA0WhcNMjUxMjMxMDQwMTA0WjAzMTEwLwYDVQQD Eyg4YzAxOGQxZDgyZWUzNGM1NTUzZTgzMWE0YjJmZjllOGQ5YWI1MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMMmnGLWLClvuMhefKlpLeZBm6da ExWhrhvjdGKAsABtITsnjDbEeaH5zYuNLz6MSSXpx6Duxm1ahscMoWN7wJKAiYZA I9n48LovAvX8pQE6QhjJgTpKdg9rOnPX8AEG/lKKJ5zQZLImzHPOoGBGb1L7SSBR 9NYPFbxE7TXazLS6uxPg/cVqO5qX2yiHe13tYc1zdK3TXcmDLpFatlFkQZFLCmuX PgM+3feKUht3BGaQlv1KyIwwNRx+RPPZOfnm1tdbNTwCXOTiKEV+zBXmre/X5S8m pfdVMGucQ8ScV7cSeUqMjAtcS0HMpDspSOW3y23Zn8zsQYXlE4kSafzA1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwBjR2C7jTFVT6DGksv+ejZq1IZMB8GA1UdIwQY MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0Pt3FwG beJ/+QDwLVJoL/tqun4uSvOEHnPeexJHbkHYZiYB/kiPD+eTK08j3g7ZQGyeUlkK VRXO+YflkIJzSpWwbZqkXp4R5G6cQR1I6xsIeuUlXATypbslM/XRjtiN4G52Wh+f n0WJJAQgVcmTLzIfi9xUv64gsQhdvZR2E8LvCAtDU+mpajTExdQbxQ72hwiriFdQ pUlboPipHCciA9zMR3T05cKXwdCrgNMIYIxxCvTtkG/dBvfI4M7J3+zW1Q3bngEF xePXNVZLv7PNlE7KigyZ6mfgdZRoliaaQQ5v3JYmI9fniLHDovBpYwGelH2rjazW pBL76HHwYv0mNw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:21:01 2025 by rpki-client