This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft File: LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json) Hash identifier: zL+TEYoCrtz7RZ0ry0WO4VWdzrPpCnoooDaEi1t7bgY= Subject key identifier: EC:DC:79:94:81:36:55:DF:4D:E1:3C:31:F7:0D:03:7F:37:EB:73:C0 Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Certificate serial: 019B337B46AD89F3BBF7206353BF6160A778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 22:01:15 +0000 Manifest this update: Thu 18 Dec 2025 22:01:15 +0000 Manifest next update: Fri 19 Dec 2025 22:01:15 +0000 Files and hashes: 1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=) 2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: b9UsKQvOp70ZGvMwWWLYcMpgYrnizmc8AFOwwchNYlU=) 3: ZOc4yScbQ2pOrLNTSn7WIc7mrdg.roa (hash: a4V9Qq7aPmpRS+o4fuJXmCiOvZod1MlSuqcU6KwqGoY=) 4: e29yd0Z-TUCyBNtSl-PtOkd_vBo.roa (hash: nzWZvT8LarPWL1y41WRrbr0ybd5qlEde4pStDNf4QWM=) 5: muXl3inz6jffhdO2S6S_pqbjk0E.roa (hash: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=) 6: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:46:ad:89:f3:bb:f7:20:63:53:bf:61:60:a7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1 Validity Not Before: Dec 18 22:01:15 2025 GMT Not After : Dec 19 22:01:15 2025 GMT Subject: CN=ecdc7994813655df4de13c31f70d037f37eb73c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:2b:48:e6:71:b6:02:11:c9:17:eb:3d:5c: e1:c4:de:4d:77:b5:e8:9a:0d:b4:9b:25:8b:fc:ce: 8b:57:e0:4c:30:64:ce:12:6c:5d:c9:12:cd:82:01: 01:a3:c3:52:1b:9e:38:64:43:9c:de:e2:2f:e0:43: 11:44:32:ee:0c:5f:78:8e:b8:62:40:72:78:d0:95: 49:91:ac:dc:90:c0:aa:46:39:a5:a7:e9:85:0d:22: 22:7e:84:c4:4c:5c:8d:41:42:c7:4b:3c:23:ba:7d: 76:d9:1d:f4:03:8b:8a:ee:5d:2f:55:2b:47:17:0d: 7b:20:4d:04:9c:7a:fe:70:70:04:c6:ff:2b:1b:f5: 95:77:ce:0e:50:7b:03:b3:4d:cc:ef:3c:5d:32:a7: c2:22:e6:4e:a4:10:c9:99:ff:07:a6:e2:4e:94:d7: da:b0:c3:82:42:0b:c6:5c:78:aa:56:34:9a:bb:12: 63:98:e7:b7:32:56:93:01:36:ed:71:38:97:af:01: a1:db:cd:c9:4b:81:6e:99:25:9a:e6:46:ba:af:11: 71:aa:a8:dd:71:97:b9:da:8c:c9:07:8a:d1:cc:4c: 21:ff:a2:32:03:04:2f:62:c1:87:51:8f:99:14:0e: 81:86:e1:29:16:58:c6:b6:c8:bb:d9:cd:c6:aa:14: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:79:94:81:36:55:DF:4D:E1:3C:31:F7:0D:03:7F:37:EB:73:C0 X509v3 Authority Key Identifier: keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a3:f5:be:4e:c8:06:f0:9c:a1:dd:9a:dc:48:9f:d9:47:7d: ef:94:5e:f2:36:be:93:dc:79:0f:ff:d7:50:94:d1:5e:6a:e1: d6:d9:71:eb:03:c8:f2:15:4a:63:92:22:df:c6:e3:b8:b8:61: 62:c0:4e:06:a3:c4:ac:59:51:a6:ad:04:d0:c9:e6:28:b7:c2: a3:cc:3e:69:1b:9e:b3:cf:96:9c:e2:52:fc:ba:8a:c9:0c:db: 82:2d:e3:e6:a1:d5:92:2b:ba:45:39:48:6e:af:ea:95:81:80: 2d:ad:25:58:8c:1d:73:bd:68:5b:e3:14:d8:64:66:d7:4c:5f: a1:c4:72:eb:1b:b2:1a:81:02:fd:1a:2e:55:dd:3a:39:74:e5: 0f:e7:67:a7:50:7d:3c:e5:c4:75:63:42:9b:d6:38:98:3f:54: df:9c:43:5b:3a:d9:fb:aa:3e:bc:f6:6d:ad:b7:ff:bc:0b:21: 0e:8e:f0:a6:58:92:ef:8d:9d:4a:2e:db:ba:ec:c5:2b:6f:a8: 95:84:8e:48:1a:9b:5c:ad:4d:ab:93:38:25:de:52:75:24:19: a3:b9:b8:03:cc:01:f5:c4:82:4f:f6:72:d3:41:7e:10:3b:24: 85:77:e3:bf:fc:8c:48:08:fe:33:fb:14:0e:bd:67:8c:52:8d: a9:15:82:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0atifO79yBjU79hYKd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4 N2UxZTEwHhcNMjUxMjE4MjIwMTE1WhcNMjUxMjE5MjIwMTE1WjAzMTEwLwYDVQQD EyhlY2RjNzk5NDgxMzY1NWRmNGRlMTNjMzFmNzBkMDM3ZjM3ZWI3M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyMrSOZxtgIRyRfrPVzhxN5Nd7Xo mg20myWL/M6LV+BMMGTOEmxdyRLNggEBo8NSG544ZEOc3uIv4EMRRDLuDF94jrhi QHJ40JVJkazckMCqRjmlp+mFDSIifoTETFyNQULHSzwjun122R30A4uK7l0vVStH Fw17IE0EnHr+cHAExv8rG/WVd84OUHsDs03M7zxdMqfCIuZOpBDJmf8HpuJOlNfa sMOCQgvGXHiqVjSauxJjmOe3MlaTATbtcTiXrwGh283JS4FumSWa5ka6rxFxqqjd cZe52ozJB4rRzEwh/6IyAwQvYsGHUY+ZFA6BhuEpFljGtsi72c3GqhSy1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzceZSBNlXfTeE8MfcNA38363PAMB8GA1UdIwQY MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt ZmZjY2EzZTFmMTdmLzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6P1vk7I BvCcod2a3Eif2Ud975Re8ja+k9x5D//XUJTRXmrh1tlx6wPI8hVKY5Ii38bjuLhh YsBOBqPErFlRpq0E0MnmKLfCo8w+aRues8+WnOJS/LqKyQzbgi3j5qHVkiu6RTlI bq/qlYGALa0lWIwdc71oW+MU2GRm10xfocRy6xuyGoEC/RouVd06OXTlD+dnp1B9 POXEdWNCm9Y4mD9U35xDWzrZ+6o+vPZtrbf/vAshDo7wpliS742dSi7buuzFK2+o lYSOSBqbXK1Nq5M4Jd5SdSQZo7m4A8wB9cSCT/Zy00F+EDskhXfjv/yMSAj+M/sU Dr1njFKNqRWCuA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:27 2025 by rpki-client