This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json) Hash identifier: HyhoDgoYECcpdFWLnc1COTP56z6vX2/TGmEW6oKg55g= Subject key identifier: 71:9F:54:C4:01:0F:3C:1A:CB:DE:CE:95:6B:3D:B3:52:01:6C:A6:FD Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Certificate serial: 019B6BB2823029B988FBDE1D6D9347EAE056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft Manifest number: 1733 Signing time: Mon 29 Dec 2025 20:00:19 +0000 Manifest this update: Mon 29 Dec 2025 20:00:19 +0000 Manifest next update: Tue 30 Dec 2025 20:00:19 +0000 Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: uL7fKO3RwK6EG2t+H3/x7sm0uU8iLIa1Q8yGxFWIsDA=) 2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:82:30:29:b9:88:fb:de:1d:6d:93:47:ea:e0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Validity Not Before: Dec 29 20:00:19 2025 GMT Not After : Dec 30 20:00:19 2025 GMT Subject: CN=719f54c4010f3c1acbdece956b3db352016ca6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:e4:1d:02:a8:8a:36:a0:5c:a7:1c:1e:6c: 83:1c:78:fd:95:ad:be:c4:1c:b5:28:ff:a5:7e:b3: 99:38:1a:ad:7e:83:92:e8:7c:21:ef:aa:d3:a6:62: 58:5f:66:d6:7b:08:f6:f5:49:50:89:17:bc:12:1d: 36:c3:d7:8c:02:9f:11:68:d6:f6:f6:e1:8a:e4:6d: 39:4a:58:06:0e:d9:fb:40:75:72:3e:16:69:c0:f2: 94:b3:7d:ac:bf:65:bc:04:21:fa:87:ab:e9:14:25: d3:50:6c:fb:af:0a:b4:d1:bf:c6:0d:80:5f:0c:9d: ef:96:ec:0e:37:7d:b6:d0:bd:f4:3c:bb:c3:68:4e: c8:21:bc:e4:58:19:44:4f:63:d0:9a:af:1e:30:8a: 21:bc:08:5d:34:51:fa:3a:43:96:50:04:89:56:02: 0c:a9:6c:0d:c8:18:d2:d2:c2:96:9a:d5:e3:7f:20: 8b:f1:fc:23:ba:74:40:81:be:57:f4:7a:fc:8f:21: 1d:45:b7:0d:4c:7d:4a:9d:c5:b6:91:5a:dc:f6:a7: cd:22:14:a2:52:56:cb:e3:98:62:6e:c7:0f:4b:ae: 1b:8b:cf:8c:45:84:cb:ab:4b:87:77:9f:69:7e:4d: a5:2c:8e:a3:5c:6b:69:6c:7a:ca:20:d4:8b:e0:75: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9F:54:C4:01:0F:3C:1A:CB:DE:CE:95:6B:3D:B3:52:01:6C:A6:FD X509v3 Authority Key Identifier: keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:7c:88:7a:10:67:7a:1d:3e:0a:e6:62:89:4e:12:90:dd:24: ba:a5:8a:c2:de:ad:b8:99:2c:5b:6d:6b:92:90:39:1a:cd:70: 9f:2a:74:08:d0:72:4d:10:ba:e8:9f:c3:fa:d8:23:06:8e:f0: 4c:9b:52:90:fc:43:9c:f6:3a:eb:02:76:f0:50:01:40:00:9a: c9:12:bf:f4:40:0b:ba:ea:15:31:40:eb:41:bc:43:96:17:40: de:17:36:8f:41:6c:de:f0:51:23:f3:92:ca:84:7c:45:67:21: a1:ee:5b:12:e1:e0:01:40:eb:f8:86:ab:00:7a:6f:2e:ad:57: 2a:db:18:45:29:56:a2:12:61:30:77:c6:55:ce:d7:60:ed:ba: d4:e6:04:d1:0f:36:00:da:24:3d:38:83:0d:9b:67:2a:37:1f: 44:b4:a2:9a:cc:ba:da:89:18:a7:3a:8a:95:e5:a3:b3:1c:e1: 2e:b7:d1:aa:ab:99:9c:8f:b0:f9:bb:4b:63:d0:d2:87:93:04: 70:5e:77:cc:94:8d:20:73:0e:58:76:38:a3:c9:2c:4f:84:53: a8:9a:4b:48:a3:e0:af:cc:8a:95:cb:a9:41:48:f5:c1:ae:29: f9:df:91:ed:de:33:e8:b9:5b:b8:84:24:a4:b7:f6:23:1d:bc: cf:24:d4:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsoIwKbmI+94dbZNH6uBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh ZGVjMDQwHhcNMjUxMjI5MjAwMDE5WhcNMjUxMjMwMjAwMDE5WjAzMTEwLwYDVQQD Eyg3MTlmNTRjNDAxMGYzYzFhY2JkZWNlOTU2YjNkYjM1MjAxNmNhNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKLkHQKoijagXKccHmyDHHj9la2+ xBy1KP+lfrOZOBqtfoOS6Hwh76rTpmJYX2bWewj29UlQiRe8Eh02w9eMAp8RaNb2 9uGK5G05SlgGDtn7QHVyPhZpwPKUs32sv2W8BCH6h6vpFCXTUGz7rwq00b/GDYBf DJ3vluwON3220L30PLvDaE7IIbzkWBlET2PQmq8eMIohvAhdNFH6OkOWUASJVgIM qWwNyBjS0sKWmtXjfyCL8fwjunRAgb5X9Hr8jyEdRbcNTH1KncW2kVrc9qfNIhSi UlbL45hibscPS64bi8+MRYTLq0uHd59pfk2lLI6jXGtpbHrKINSL4HUPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGfVMQBDzway97OlWs9s1IBbKb9MB8GA1UdIwQY MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA53yIehBn eh0+CuZiiU4SkN0kuqWKwt6tuJksW21rkpA5Gs1wnyp0CNByTRC66J/D+tgjBo7w TJtSkPxDnPY66wJ28FABQACayRK/9EALuuoVMUDrQbxDlhdA3hc2j0Fs3vBRI/OS yoR8RWchoe5bEuHgAUDr+IarAHpvLq1XKtsYRSlWohJhMHfGVc7XYO261OYE0Q82 ANokPTiDDZtnKjcfRLSimsy62okYpzqKleWjsxzhLrfRqquZnI+w+btLY9DSh5ME cF53zJSNIHMOWHY4o8ksT4RTqJpLSKPgr8yKlcupQUj1wa4p+d+R7d4z6LlbuIQk pLf2Ix28zyTUGg== -----END CERTIFICATE-----Generated at Tue Dec 30 04:33:50 2025 by rpki-client