This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft File: LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json) Hash identifier: SG3uNzoeZLpWr2GGPx8NnSu5EgG+nJfv3Qc1ALwPmyc= Subject key identifier: 3F:5C:72:79:D0:14:8E:78:6B:D9:16:EB:68:9F:53:AF:85:92:73:0E Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019AF1D1FB8FCF2A651B08C563B70CAD1524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=) 2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: PNo9VXV6ve+q58r/wsJlPxD8U9+ytmsgXSslnxeY/N8=) 3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=) 4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=) 5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=) 6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:8f:cf:2a:65:1b:08:c5:63:b7:0c:ad:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=3f5c7279d0148e786bd916eb689f53af8592730e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:8e:70:e2:d3:36:06:0a:df:cd:da:5f:ab: 31:b5:f7:f2:c9:01:6f:67:48:18:3b:5e:3e:a8:cb: 88:8e:76:05:5a:d2:7a:d3:4d:14:1a:fe:b8:d2:2f: a3:76:68:3f:d2:9e:0a:d2:0a:96:43:ed:b0:55:ab: 41:4c:2a:57:58:0d:c6:8b:19:f6:9f:d0:bd:4e:cd: 59:81:76:f1:c1:f0:c8:f6:2e:e2:d7:49:4e:0f:ea: 52:23:e0:3d:13:1e:48:96:70:84:ec:49:5d:a5:e4: 22:aa:cf:4a:98:d8:87:06:e0:99:58:dc:e5:f5:32: 70:95:9a:50:06:56:13:b0:92:52:9b:3f:57:f4:02: d5:4b:d2:78:cb:a5:2a:16:dd:66:22:cc:a1:56:86: 2c:ff:db:47:fa:3e:29:fd:68:ca:ea:a3:81:b6:42: 18:62:3a:03:1f:42:ed:ea:22:20:a1:f8:61:f1:ca: 68:80:1d:fd:3a:6a:0b:10:fd:bc:77:6b:a9:45:ec: 2c:39:93:e2:61:24:2f:97:40:f0:f0:8f:fd:fb:26: 8c:23:54:a4:d4:e2:c5:b5:08:63:43:98:83:da:ad: 6f:f3:c8:00:85:f8:df:9f:37:b4:48:84:a1:53:b8: dd:a4:12:b6:30:b5:06:a1:25:d4:d0:4e:03:69:c5: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5C:72:79:D0:14:8E:78:6B:D9:16:EB:68:9F:53:AF:85:92:73:0E X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:d4:4b:c4:d9:b1:e6:07:4e:21:17:56:48:9f:1f:4f:b8: 78:a7:96:49:54:78:a4:f4:37:24:d6:61:30:43:1b:ed:37:08: 1a:39:6a:9c:79:10:b3:52:cc:01:0b:52:25:5f:15:04:a9:be: e6:a8:9a:f8:bf:fb:ee:e4:83:39:7b:bc:e5:51:0a:52:27:2c: 74:80:82:c6:26:5e:fd:0b:78:da:f3:0c:53:4c:0f:5f:9b:98: 7b:7f:13:6a:27:98:ab:e0:ed:1d:09:db:18:00:08:af:09:30: 57:88:ba:ee:85:c3:8e:83:ab:7e:eb:4d:a3:58:6b:da:f5:81: 86:36:4a:65:7c:d7:af:48:82:98:b1:01:6f:cf:10:bc:6f:54: f3:4d:8a:ed:e9:de:af:3c:1d:c3:50:f5:2c:c5:b0:2f:0e:80: ba:13:7d:40:16:28:21:a8:c5:2f:9c:fe:eb:51:34:ac:a1:c5: a3:9f:a0:4e:bc:c0:5e:0c:b2:7b:d9:f4:e7:47:db:f4:0e:74: c1:1e:1b:76:47:24:26:63:c7:db:a9:4a:c1:e7:5a:c4:fc:70: 6c:f1:c6:36:02:6f:39:56:ce:b5:36:2c:9e:dc:59:f4:d7:74: cd:23:49:34:0b:df:f0:c3:e3:4c:3e:05:98:c5:08:8d:7f:a7: 1e:de:12:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fuPzyplGwjFY7cMrRUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EygzZjVjNzI3OWQwMTQ4ZTc4NmJkOTE2ZWI2ODlmNTNhZjg1OTI3MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhqOcOLTNgYK383aX6sxtffyyQFv Z0gYO14+qMuIjnYFWtJ6000UGv640i+jdmg/0p4K0gqWQ+2wVatBTCpXWA3Gixn2 n9C9Ts1ZgXbxwfDI9i7i10lOD+pSI+A9Ex5IlnCE7EldpeQiqs9KmNiHBuCZWNzl 9TJwlZpQBlYTsJJSmz9X9ALVS9J4y6UqFt1mIsyhVoYs/9tH+j4p/WjK6qOBtkIY YjoDH0Lt6iIgofhh8cpogB39OmoLEP28d2upRewsOZPiYSQvl0Dw8I/9+yaMI1Sk 1OLFtQhjQ5iD2q1v88gAhfjfnze0SIShU7jdpBK2MLUGoSXU0E4DacVGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9ccnnQFI54a9kW62ifU6+FknMOMB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTbUS8TZ seYHTiEXVkifH0+4eKeWSVR4pPQ3JNZhMEMb7TcIGjlqnHkQs1LMAQtSJV8VBKm+ 5qia+L/77uSDOXu85VEKUicsdICCxiZe/Qt42vMMU0wPX5uYe38TaieYq+DtHQnb GAAIrwkwV4i67oXDjoOrfutNo1hr2vWBhjZKZXzXr0iCmLEBb88QvG9U802K7ene rzwdw1D1LMWwLw6AuhN9QBYoIajFL5z+61E0rKHFo5+gTrzAXgyye9n050fb9A50 wR4bdkckJmPH26lKwedaxPxwbPHGNgJvOVbOtTYsntxZ9Nd0zSNJNAvf8MPjTD4F mMUIjX+nHt4SDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:59 2025 by rpki-client