This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json) Hash identifier: gtqaDUyL1s3JPQ2DMzUwVZithocQCUfgmRfR1C+N3z8= Subject key identifier: 72:0D:AF:06:4E:2F:AB:B8:6C:48:D5:15:3D:5E:20:4B:33:BC:F2:4D Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Certificate serial: 019B3FB65BB09CC95870BD2ED68E51A826FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft Manifest number: 11B0 Signing time: Sun 21 Dec 2025 07:01:14 +0000 Manifest this update: Sun 21 Dec 2025 07:01:14 +0000 Manifest next update: Mon 22 Dec 2025 07:01:14 +0000 Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=) 2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: 0BV5ITF7DAh4ZQrETDrKiYSJyDYzPB0EERpTK3IsrRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:5b:b0:9c:c9:58:70:bd:2e:d6:8e:51:a8:26:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Validity Not Before: Dec 21 07:01:14 2025 GMT Not After : Dec 22 07:01:14 2025 GMT Subject: CN=720daf064e2fabb86c48d5153d5e204b33bcf24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:d3:ef:1a:e3:c5:01:a6:6b:97:0c:a4:bc: ce:ec:19:73:4d:0e:92:a2:11:b3:e1:ef:8a:7c:26: 0c:e5:6c:16:74:31:38:45:6b:7e:bf:f4:a9:51:81: d4:2b:6f:53:ff:5b:78:5d:53:b2:2b:55:35:55:8f: ff:03:b1:5b:08:a0:4f:44:eb:04:d1:ba:d2:7a:e5: 58:2e:70:4b:55:9f:ab:f8:65:d1:d9:15:84:e4:9c: 57:37:a1:bd:5c:35:3f:70:d6:24:6c:82:34:6c:73: b3:40:3e:89:78:9e:84:74:a3:5d:c6:91:f3:61:2d: 87:92:f7:d1:54:af:c2:d2:29:5b:71:97:29:ca:c7: c4:de:41:b2:b5:02:da:d5:0a:10:b2:2b:c3:ac:60: 0b:63:2a:ab:67:d5:78:7a:a1:6d:62:d4:7a:e1:69: 04:07:b4:cb:f3:b7:56:75:30:0f:d7:fd:a5:f3:d7: 28:7a:5b:8d:ef:ac:75:1c:9c:eb:47:00:14:f0:1e: 78:0f:65:e5:68:b5:a3:6d:67:c4:1b:6a:6f:cf:a7: f9:5c:f9:3e:7d:66:07:32:83:2d:cc:af:3f:88:f8: 67:9f:26:de:c0:7e:2d:7f:c0:15:05:d3:80:be:fc: c6:e9:2b:ec:84:68:ed:f1:51:46:dd:d4:ef:2b:1c: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0D:AF:06:4E:2F:AB:B8:6C:48:D5:15:3D:5E:20:4B:33:BC:F2:4D X509v3 Authority Key Identifier: keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7f:e2:26:b4:1c:60:a1:5d:3f:a4:6c:31:9a:37:32:67:e2: 9f:74:9c:25:cd:d7:27:86:c0:c0:f8:bb:bd:88:dd:42:53:2a: 7b:d7:26:89:07:af:17:13:2c:db:5c:00:35:dd:58:0e:91:a5: fc:99:20:5c:f7:92:70:90:05:71:b0:e9:95:7d:35:f6:23:13: 4e:ba:b7:dd:60:85:2d:db:69:31:11:e4:57:9a:a0:b0:f7:6c: 67:bc:19:0a:23:98:97:e0:71:5a:3a:73:43:db:47:da:78:10: e7:e1:a6:f5:62:4e:55:bc:42:16:48:55:25:7c:d8:1d:ec:65: 4a:71:92:df:65:5b:41:56:e7:38:75:46:88:8a:d1:cb:01:f6: c5:bc:18:9d:ce:3e:b9:ec:cc:71:02:44:31:d7:07:a6:19:b9: 62:51:2d:d8:78:f1:da:c1:ec:b6:10:43:42:5c:5c:ea:34:56: 62:62:c5:bd:7a:fe:68:88:ce:41:18:98:cc:ff:de:45:33:f4: b0:78:15:1d:d5:cf:c5:8a:e4:12:e9:12:8f:ff:74:9f:45:32: 7c:2c:13:75:38:d3:9b:fd:01:7e:a0:48:f4:e3:e7:a8:8c:c9: ca:99:bf:b9:da:28:06:bb:54:74:37:a6:99:f4:12:ba:91:de: b8:76:61:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tluwnMlYcL0u1o5RqCb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh OWYxOWEwHhcNMjUxMjIxMDcwMTE0WhcNMjUxMjIyMDcwMTE0WjAzMTEwLwYDVQQD Eyg3MjBkYWYwNjRlMmZhYmI4NmM0OGQ1MTUzZDVlMjA0YjMzYmNmMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8orT7xrjxQGma5cMpLzO7BlzTQ6S ohGz4e+KfCYM5WwWdDE4RWt+v/SpUYHUK29T/1t4XVOyK1U1VY//A7FbCKBPROsE 0brSeuVYLnBLVZ+r+GXR2RWE5JxXN6G9XDU/cNYkbII0bHOzQD6JeJ6EdKNdxpHz YS2HkvfRVK/C0ilbcZcpysfE3kGytQLa1QoQsivDrGALYyqrZ9V4eqFtYtR64WkE B7TL87dWdTAP1/2l89coeluN76x1HJzrRwAU8B54D2XlaLWjbWfEG2pvz6f5XPk+ fWYHMoMtzK8/iPhnnybewH4tf8AVBdOAvvzG6SvshGjt8VFG3dTvKxxydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHINrwZOL6u4bEjVFT1eIEszvPJNMB8GA1UdIwQY MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3/iJrQc YKFdP6RsMZo3Mmfin3ScJc3XJ4bAwPi7vYjdQlMqe9cmiQevFxMs21wANd1YDpGl /JkgXPeScJAFcbDplX019iMTTrq33WCFLdtpMRHkV5qgsPdsZ7wZCiOYl+BxWjpz Q9tH2ngQ5+Gm9WJOVbxCFkhVJXzYHexlSnGS32VbQVbnOHVGiIrRywH2xbwYnc4+ uezMcQJEMdcHphm5YlEt2Hjx2sHsthBDQlxc6jRWYmLFvXr+aIjOQRiYzP/eRTP0 sHgVHdXPxYrkEukSj/90n0UyfCwTdTjTm/0BfqBI9OPnqIzJypm/udooBrtUdDem mfQSupHeuHZhoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:40 2025 by rpki-client