This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json) Hash identifier: gYujTn4IwvyDUrqZi+aGpB0gzgqP37Csu5l6naOhOEU= Subject key identifier: BF:D5:59:42:6E:32:AF:F7:89:B8:C4:5F:7B:F4:FA:18:CF:5B:69:49 Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Certificate serial: 019AF23FFC9B512E83233F25754AEFE45D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft Manifest number: 0879 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: VNams8PxMY8BbN0vlt2r6p0HEGWwzu6g553yKAGvoaA=) 2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fc:9b:51:2e:83:23:3f:25:75:4a:ef:e4:5d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=bfd559426e32aff789b8c45f7bf4fa18cf5b6949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:db:83:b1:70:6d:eb:14:be:1e:60:c9:df: 31:94:0b:80:88:c9:73:6c:c7:35:39:6d:f2:0c:f9: 5d:58:bd:fb:f9:8b:67:f6:12:94:35:3e:f2:2d:56: 9c:88:f6:82:c1:7b:af:b2:38:ca:1d:3b:d1:43:4d: 77:25:69:00:57:41:50:f8:04:ee:b6:7d:dd:5f:91: 31:9a:66:df:60:a5:49:28:5f:ea:e6:bd:ba:34:c9: 76:fd:d4:af:99:f7:df:5d:46:51:e3:18:90:b5:04: 52:ac:e4:df:8e:95:6a:24:eb:a4:53:04:1a:e2:9c: fe:c2:ba:87:64:cc:90:d3:ba:d5:8a:4d:6d:03:f9: 04:90:d8:8e:c3:9e:0b:07:91:5e:f6:bb:ff:3b:1a: 2f:17:eb:28:ea:53:9e:ec:ea:2b:d1:89:76:92:22: 7a:1c:ed:54:2a:c2:d3:7d:25:82:1f:a6:33:54:99: 22:29:ae:db:5d:d2:07:e7:31:04:f8:d1:2d:50:fe: 90:e7:98:07:76:27:4b:47:48:bd:6b:5a:ab:f8:96: df:e4:48:a2:14:14:8c:3c:25:29:a4:c6:9b:a4:5f: 99:32:97:5e:8f:1e:8a:bc:1e:e6:0d:fa:38:45:74: 25:05:71:a1:82:b9:33:60:13:44:80:ac:a8:4b:3a: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:59:42:6E:32:AF:F7:89:B8:C4:5F:7B:F4:FA:18:CF:5B:69:49 X509v3 Authority Key Identifier: keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:37:76:c3:32:da:14:60:7a:d4:2e:7b:22:a7:04:d1:80:b4: 20:69:52:82:4a:b5:ef:c7:c7:d8:66:91:ee:4c:c5:56:6f:93: 40:c1:d4:a0:14:a3:ca:9f:bc:b8:c2:69:40:e7:16:d6:d1:28: 1f:93:3f:3e:50:14:4d:31:3e:e2:15:b9:be:5f:e2:a1:0b:c4: 50:b3:5e:0a:5f:2c:12:d7:04:b9:f4:ca:d1:b1:f7:13:93:07: 5a:b2:12:a9:14:1f:10:58:ca:04:2b:0c:20:07:a4:78:76:85: 79:7e:18:bc:5a:42:16:65:c0:b4:86:9c:2e:c6:a0:9e:0e:15: 33:4c:b9:b9:8f:71:7f:a8:0e:d4:da:6d:83:88:31:80:b6:0f: e8:43:fb:75:01:ac:92:f7:7d:f5:da:6a:bc:08:22:5d:d9:3b: 98:b1:90:be:a0:4b:2a:da:d0:b2:a9:d3:f1:f1:07:47:7c:9a: cc:bc:85:91:d3:d7:ea:a7:14:58:2f:1b:e2:90:2c:50:fa:6e: 25:08:8e:7e:27:c3:7d:d4:e0:84:c7:cd:a5:87:52:b4:48:11: f5:6a:64:ba:e8:ec:00:71:ff:98:10:d5:d0:0b:c4:31:91:1d: 55:fb:46:76:2a:c6:9f:f2:7e:7c:a2:2e:52:51:1e:9e:57:9a: 5d:ba:9d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/ybUS6DIz8ldUrv5F0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5 ODJhM2QwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EyhiZmQ1NTk0MjZlMzJhZmY3ODliOGM0NWY3YmY0ZmExOGNmNWI2OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVLbg7FwbesUvh5gyd8xlAuAiMlz bMc1OW3yDPldWL37+Ytn9hKUNT7yLVaciPaCwXuvsjjKHTvRQ013JWkAV0FQ+ATu tn3dX5ExmmbfYKVJKF/q5r26NMl2/dSvmfffXUZR4xiQtQRSrOTfjpVqJOukUwQa 4pz+wrqHZMyQ07rVik1tA/kEkNiOw54LB5Fe9rv/OxovF+so6lOe7Oor0Yl2kiJ6 HO1UKsLTfSWCH6YzVJkiKa7bXdIH5zEE+NEtUP6Q55gHdidLR0i9a1qr+Jbf5Eii FBSMPCUppMabpF+ZMpdejx6KvB7mDfo4RXQlBXGhgrkzYBNEgKyoSzqgRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/VWUJuMq/3ibjEX3v0+hjPW2lJMB8GA1UdIwQY MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt MDhmMTdjNDEwNzY1LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1 LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjd2wzLa FGB61C57IqcE0YC0IGlSgkq178fH2GaR7kzFVm+TQMHUoBSjyp+8uMJpQOcW1tEo H5M/PlAUTTE+4hW5vl/ioQvEULNeCl8sEtcEufTK0bH3E5MHWrISqRQfEFjKBCsM IAekeHaFeX4YvFpCFmXAtIacLsagng4VM0y5uY9xf6gO1Nptg4gxgLYP6EP7dQGs kvd99dpqvAgiXdk7mLGQvqBLKtrQsqnT8fEHR3yazLyFkdPX6qcUWC8b4pAsUPpu JQiOfifDfdTghMfNpYdStEgR9WpkuujsAHH/mBDV0AvEMZEdVftGdirGn/J+fKIu UlEenleaXbqdGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:34 2025 by rpki-client