This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json) Hash identifier: kVkXYmbzJ5OigIxvMnZxSO1drq+Vm+IOqZkUyTd/1eE= Subject key identifier: 43:F7:D5:B7:CF:22:F6:C9:4B:D3:44:E3:C1:5C:34:8A:E6:31:53:18 Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Certificate serial: 019B416DDACAA9A9004B1B02C9EB42528319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft Manifest number: 0A6A Signing time: Sun 21 Dec 2025 15:01:17 +0000 Manifest this update: Sun 21 Dec 2025 15:01:17 +0000 Manifest next update: Mon 22 Dec 2025 15:01:17 +0000 Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=) 2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: Cbvb1W9v5XtNEbAFfnz0w9+TahMoEHsPTmia9dIXwOs=) 3: tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa (hash: 6ybtRyvqW2iRo23vB9EOMEnUyiFtXyklB8ljlHnEAdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:da:ca:a9:a9:00:4b:1b:02:c9:eb:42:52:83:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Validity Not Before: Dec 21 15:01:17 2025 GMT Not After : Dec 22 15:01:17 2025 GMT Subject: CN=43f7d5b7cf22f6c94bd344e3c15c348ae6315318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:ec:ca:a2:99:5c:72:b1:03:b6:4b:f1:a5: 74:90:3d:dd:1f:8c:96:45:2f:84:7a:5f:ff:4f:f3: 12:bf:92:6a:b6:7c:e4:11:9b:df:63:3b:ff:48:39: 9b:75:b4:d5:e3:0d:eb:71:23:d3:37:b1:2a:1f:70: 97:35:47:80:6e:fb:56:50:f9:0e:bd:b5:b6:70:fe: 26:a6:58:9c:5e:77:9c:68:58:19:00:85:64:a3:3d: 14:eb:48:9f:85:33:8b:f5:d8:1c:6d:b5:eb:99:1c: cf:ef:72:77:14:3b:9b:ad:45:f4:80:fb:77:73:e2: aa:91:66:86:0a:bc:43:76:c0:f9:37:c1:d4:34:4c: 4c:29:99:32:52:5c:51:6c:a3:5d:11:55:d6:e4:36: 86:7b:bd:af:e1:c0:0a:0e:62:08:ed:1e:e2:24:27: 0a:ee:1f:d0:0e:39:98:8c:f8:c2:9c:e7:59:14:4b: 7d:13:bd:f4:d8:c4:b2:33:ee:fa:00:67:c6:09:55: d8:11:5c:05:3e:a4:f1:da:16:73:a9:c5:df:09:cc: 45:08:26:d8:05:0f:e7:0e:52:f3:1e:26:59:d1:24: 47:8d:8a:9f:d8:83:87:d0:32:c8:bb:85:5e:7c:f9: cc:05:77:ff:b5:5a:b8:2b:c9:12:9d:0b:22:4e:ff: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:D5:B7:CF:22:F6:C9:4B:D3:44:E3:C1:5C:34:8A:E6:31:53:18 X509v3 Authority Key Identifier: keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a8:f2:47:10:2c:e0:76:5f:8f:53:12:ee:e3:31:1a:f2:bf: 08:1f:13:30:95:41:25:a0:04:73:1f:ac:f6:7b:10:43:5d:d2: 60:55:f5:79:d2:b1:0a:e2:11:ac:18:fb:9e:27:f7:58:1c:b3: 76:cb:c1:3c:ff:b5:eb:c9:4e:d1:95:b4:32:68:48:61:6d:dd: 82:34:50:f3:e8:8f:d1:42:58:3f:d1:d5:1b:9f:5a:1d:d6:91: 95:08:2c:18:24:63:50:1a:2d:85:b7:92:6a:53:7b:b0:0e:68: af:f3:78:e7:03:b5:ea:ce:9f:5c:8a:82:12:bb:4a:a3:77:d0: 85:d4:22:49:23:b9:32:d0:43:15:de:55:c9:95:06:56:e0:32: 22:bc:ff:11:bf:28:63:65:39:8e:be:96:97:0d:26:5f:a6:b9: 15:25:1c:58:52:41:60:c2:1f:01:ab:74:9f:af:c4:b2:11:c5: 3e:b8:db:d6:19:40:8d:1f:b3:36:64:4a:4b:7c:93:db:be:c3: 68:08:5f:6d:f1:cb:1f:de:f2:ae:e1:9c:42:12:4b:a7:56:af: 67:81:14:d5:18:e9:cd:1a:63:16:11:2a:ec:b8:fa:34:1a:c0: f6:8f:9e:16:f2:6d:3e:c1:7c:d4:e1:83:f7:f2:e5:6a:88:21: 36:77:60:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbdrKqakASxsCyetCUoMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDcwYmY4MGEwN2M5ZmZjYmVmMGNkODQ2NWI0NThkNjEz ZGNjODUwHhcNMjUxMjIxMTUwMTE3WhcNMjUxMjIyMTUwMTE3WjAzMTEwLwYDVQQD Eyg0M2Y3ZDViN2NmMjJmNmM5NGJkMzQ0ZTNjMTVjMzQ4YWU2MzE1MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRbsyqKZXHKxA7ZL8aV0kD3dH4yW RS+Eel//T/MSv5JqtnzkEZvfYzv/SDmbdbTV4w3rcSPTN7EqH3CXNUeAbvtWUPkO vbW2cP4mplicXnecaFgZAIVkoz0U60ifhTOL9dgcbbXrmRzP73J3FDubrUX0gPt3 c+KqkWaGCrxDdsD5N8HUNExMKZkyUlxRbKNdEVXW5DaGe72v4cAKDmII7R7iJCcK 7h/QDjmYjPjCnOdZFEt9E7302MSyM+76AGfGCVXYEVwFPqTx2hZzqcXfCcxFCCbY BQ/nDlLzHiZZ0SRHjYqf2IOH0DLIu4VefPnMBXf/tVq4K8kSnQsiTv/c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP31bfPIvbJS9NE48FcNIrmMVMYMB8GA1UdIwQY MBaAFJXXC/gKB8n/y+8M2EZbRY1hPcyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEt NjY3OGViODFiOGIwLzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEtNjY3OGViODFiOGIw LzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhajyRxAs 4HZfj1MS7uMxGvK/CB8TMJVBJaAEcx+s9nsQQ13SYFX1edKxCuIRrBj7nif3WByz dsvBPP+168lO0ZW0MmhIYW3dgjRQ8+iP0UJYP9HVG59aHdaRlQgsGCRjUBothbeS alN7sA5or/N45wO16s6fXIqCErtKo3fQhdQiSSO5MtBDFd5VyZUGVuAyIrz/Eb8o Y2U5jr6Wlw0mX6a5FSUcWFJBYMIfAat0n6/EshHFPrjb1hlAjR+zNmRKS3yT277D aAhfbfHLH97yruGcQhJLp1avZ4EU1RjpzRpjFhEq7Lj6NBrA9o+eFvJtPsF81OGD 9/LlaoghNndgmw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:33 2025 by rpki-client