This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json) Hash identifier: tQQu98TeYEmpNiX79WdbmKygTgcHkf4eEXzZkDPLWIc= Subject key identifier: 4A:EE:80:92:8A:20:C0:59:39:D5:B4:8B:36:4E:5E:FD:3A:DC:4F:F8 Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60 Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760 Certificate serial: 019AF49BBC95A949535C914153228C4AEA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:38 +0000 Manifest this update: Sat 06 Dec 2025 17:00:38 +0000 Manifest next update: Sun 07 Dec 2025 17:00:38 +0000 Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=) 2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: bMJmh3ErOcsQl+hlVS2z8N4NeLlixwvUfsR90+GHELw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:bc:95:a9:49:53:5c:91:41:53:22:8c:4a:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760 Validity Not Before: Dec 6 17:00:38 2025 GMT Not After : Dec 7 17:00:38 2025 GMT Subject: CN=4aee80928a20c05939d5b48b364e5efd3adc4ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:36:36:d7:e4:45:b3:d8:a8:60:53:66:68: 0b:fc:97:a1:4d:d1:21:00:cb:b1:46:e7:12:4f:d0: d0:36:2e:bb:2a:76:8e:81:60:3b:e8:4e:69:0b:37: e1:b7:29:eb:75:36:66:f2:91:31:ae:03:f7:f7:f5: a5:02:14:65:c5:80:09:93:23:92:e6:b8:fa:7f:33: c1:bd:c8:16:8e:c1:1e:5a:69:85:02:d5:3d:e1:47: fa:3e:a2:85:69:da:1c:50:a7:9e:b9:c0:f1:86:5a: 34:34:ea:60:6e:01:44:fb:de:10:0d:5f:fa:c6:5e: 2a:57:00:72:ee:25:c5:09:d7:27:04:68:e8:7e:c5: e3:a5:19:9d:47:8d:9f:00:b2:6a:af:40:fa:61:e8: 86:1c:ae:9b:78:66:98:95:5f:42:63:30:37:d6:c7: 6d:47:71:70:6f:f2:46:85:76:55:ee:9b:54:40:79: 46:d6:08:3b:b8:88:23:d1:5f:82:62:ea:e4:95:83: d4:40:9f:00:20:95:fc:6d:a6:ad:fa:7b:f3:64:fd: 85:42:e9:72:95:63:34:ad:cb:80:f2:73:93:70:4a: 3d:f5:ab:06:57:cd:4f:b1:91:93:d8:f4:69:c8:5e: 84:0c:30:8c:30:82:7a:6c:c8:eb:71:e3:ee:c1:d5: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EE:80:92:8A:20:C0:59:39:D5:B4:8B:36:4E:5E:FD:3A:DC:4F:F8 X509v3 Authority Key Identifier: keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:28:ad:8b:af:cf:0d:f6:ee:17:43:cf:e4:18:e4:54:5c:be: 6c:8c:f6:12:0f:c6:77:7c:b8:d2:d1:a1:ee:1c:33:5d:71:30: 89:14:a3:10:76:77:2b:bb:eb:30:0c:3d:42:fe:18:5d:e5:19: 57:8c:c6:b8:74:a6:54:13:e4:dc:17:97:4b:4b:d6:b2:6e:bd: 0d:29:95:eb:e3:2e:fb:8c:60:eb:46:27:65:55:14:56:17:9d: 72:d0:59:67:26:11:93:58:b1:a7:52:1e:69:10:e1:55:4e:72: 7e:b4:47:8d:a9:c9:17:07:45:ee:cc:fa:7d:f5:81:f9:22:6a: d9:f6:22:68:35:8b:b1:9a:16:62:ba:6e:44:eb:21:ed:08:52: 50:5b:d2:4d:f6:d3:67:23:30:3e:1e:98:1c:f5:49:39:6b:eb: 5a:2a:3e:9a:30:36:72:86:e3:46:b9:a4:c2:d6:0c:e2:0f:9e: ec:93:dc:54:55:76:82:68:90:26:4f:8b:59:ca:f5:04:e9:0c: f6:13:fd:65:1a:d9:cc:00:61:86:bb:a5:9f:8a:df:9c:74:a8: 28:96:91:af:1d:49:3d:26:e3:12:e5:cc:02:47:56:a1:a5:3e: dd:93:7d:d5:80:74:56:d5:39:50:51:0a:cc:21:96:7b:eb:62: 2c:28:a3:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7yVqUlTXJFBUyKMSuoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzdiNGJlYzk3ZDYwOGFiZTIzYmM1N2JhMzk4MjQ2Y2Nj NTc3NjAwHhcNMjUxMjA2MTcwMDM4WhcNMjUxMjA3MTcwMDM4WjAzMTEwLwYDVQQD Eyg0YWVlODA5MjhhMjBjMDU5MzlkNWI0OGIzNjRlNWVmZDNhZGM0ZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3g2NtfkRbPYqGBTZmgL/JehTdEh AMuxRucST9DQNi67KnaOgWA76E5pCzfhtynrdTZm8pExrgP39/WlAhRlxYAJkyOS 5rj6fzPBvcgWjsEeWmmFAtU94Uf6PqKFadocUKeeucDxhlo0NOpgbgFE+94QDV/6 xl4qVwBy7iXFCdcnBGjofsXjpRmdR42fALJqr0D6YeiGHK6beGaYlV9CYzA31sdt R3Fwb/JGhXZV7ptUQHlG1gg7uIgj0V+CYurklYPUQJ8AIJX8baat+nvzZP2FQuly lWM0rcuA8nOTcEo99asGV81PsZGT2PRpyF6EDDCMMIJ6bMjrcePuwdUx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErugJKKIMBZOdW0izZOXv063E/4MB8GA1UdIwQY MBaAFCw3tL7JfWCKviO8V7o5gkbMxXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgt MjEwNzY3YmQwYmEyLzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgtMjEwNzY3YmQwYmEy LzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSiti6/P DfbuF0PP5BjkVFy+bIz2Eg/Gd3y40tGh7hwzXXEwiRSjEHZ3K7vrMAw9Qv4YXeUZ V4zGuHSmVBPk3BeXS0vWsm69DSmV6+Mu+4xg60YnZVUUVhedctBZZyYRk1ixp1Ie aRDhVU5yfrRHjanJFwdF7sz6ffWB+SJq2fYiaDWLsZoWYrpuROsh7QhSUFvSTfbT ZyMwPh6YHPVJOWvrWio+mjA2cobjRrmkwtYM4g+e7JPcVFV2gmiQJk+LWcr1BOkM 9hP9ZRrZzABhhruln4rfnHSoKJaRrx1JPSbjEuXMAkdWoaU+3ZN91YB0VtU5UFEK zCGWe+tiLCijPw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:12 2025 by rpki-client