This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json) Hash identifier: JBlYNaE4n9bD3fOV3Pude69IZRaJ+u/3pt/4Gethpik= Subject key identifier: F2:3E:6A:B9:4C:2C:8E:CF:7F:4E:86:CF:6B:46:D9:4C:D7:66:9A:79 Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Certificate serial: 019AF38914CF26C94126F8C72C3565228681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft Manifest number: 0464 Signing time: Sat 06 Dec 2025 12:00:38 +0000 Manifest this update: Sat 06 Dec 2025 12:00:38 +0000 Manifest next update: Sun 07 Dec 2025 12:00:38 +0000 Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=) 2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=) 3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: YCPe+F+TFymxA2vUCpJGGJdKut/XSd2rdFPq6JrHCNQ=) 4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=) 5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:14:cf:26:c9:41:26:f8:c7:2c:35:65:22:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Validity Not Before: Dec 6 12:00:38 2025 GMT Not After : Dec 7 12:00:38 2025 GMT Subject: CN=f23e6ab94c2c8ecf7f4e86cf6b46d94cd7669a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:42:7b:52:54:9f:8a:75:85:4b:aa:99:e5: a6:89:91:23:4c:6c:f2:3b:9d:1f:ca:6c:e8:40:0d: 6b:ea:a2:0f:2b:25:b0:d3:dd:65:f0:0a:77:90:5c: e5:08:b7:1c:dd:cd:61:45:c3:72:a0:15:11:77:82: b3:ea:f5:2a:dc:ec:c7:1e:7e:02:8a:48:85:19:dc: 3e:15:7c:66:a6:a4:b7:87:40:00:0b:6e:57:7b:e5: 5e:ab:17:7b:a7:e9:01:d1:75:3e:ea:35:90:0a:0c: 16:67:54:74:98:3a:40:00:c2:4c:00:89:2e:31:64: ca:10:44:68:5d:7f:52:87:54:88:77:53:c9:02:74: 10:5f:50:2c:1c:4d:c6:07:e5:9e:32:fb:65:d9:41: 5a:3a:db:bd:0b:39:fe:84:a4:0d:3c:e6:64:71:d2: 5e:82:d5:60:c0:12:3d:6c:69:3a:d9:11:93:d4:59: 88:6f:9d:fc:78:80:ef:f2:b6:db:f7:a3:18:96:15: 7f:cd:2a:51:1a:c6:81:70:ef:b1:63:77:d0:10:1e: b4:3b:6d:56:3a:4c:fd:cf:53:9f:e5:8f:d2:4e:9c: 2a:dd:7c:75:43:ff:3a:7f:dc:8d:6d:bf:2c:8d:1b: 24:34:de:2d:b4:8e:9c:03:f2:51:5c:d0:ba:06:aa: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:6A:B9:4C:2C:8E:CF:7F:4E:86:CF:6B:46:D9:4C:D7:66:9A:79 X509v3 Authority Key Identifier: keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:81:9f:2f:7a:40:3b:d2:6b:9f:f9:fb:29:71:85:cb:1a:e6: 64:59:c0:93:00:ab:c4:0c:a8:d6:cf:94:39:d9:64:ad:86:ce: 75:ed:47:7c:6a:b7:92:7e:f1:bf:65:5e:06:28:13:76:dd:46: 57:b7:81:ab:71:87:8b:23:aa:a3:b6:25:e6:bd:b4:14:bd:ac: 1f:75:fb:b5:d5:8d:4c:9b:dd:74:e8:59:64:fa:5c:90:ec:8b: 62:96:6f:3f:ad:0d:5d:7a:c9:c8:cd:f0:20:03:bf:7b:f7:02: 09:01:dd:76:1b:d2:13:09:b6:a0:7c:17:53:58:f7:86:98:fb: ed:79:d7:10:22:9c:dc:ec:52:9f:da:f8:bf:65:1a:fd:fe:6d: 16:1a:d9:48:e1:d7:38:7e:10:a1:b2:cc:2b:84:8d:a2:e8:b8: eb:79:79:da:4f:a6:35:2f:26:1b:3f:85:16:a8:81:e6:de:17: 10:f3:5b:80:65:b7:35:43:04:76:01:e4:79:6d:70:e9:3a:69: 0f:8a:89:87:37:22:87:f7:a7:90:3d:c9:0d:98:6a:9b:32:80: 50:88:f6:e5:5f:19:57:cd:1b:90:29:6d:5f:66:4c:72:ca:9a: 49:97:a2:2c:bf:16:d2:d0:98:e6:e8:cf:2f:e3:73:1a:16:82: 2b:a7:72:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRTPJslBJvjHLDVlIoaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey MTVlYWEwHhcNMjUxMjA2MTIwMDM4WhcNMjUxMjA3MTIwMDM4WjAzMTEwLwYDVQQD EyhmMjNlNmFiOTRjMmM4ZWNmN2Y0ZTg2Y2Y2YjQ2ZDk0Y2Q3NjY5YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvglCe1JUn4p1hUuqmeWmiZEjTGzy O50fymzoQA1r6qIPKyWw091l8Ap3kFzlCLcc3c1hRcNyoBURd4Kz6vUq3OzHHn4C ikiFGdw+FXxmpqS3h0AAC25Xe+Veqxd7p+kB0XU+6jWQCgwWZ1R0mDpAAMJMAIku MWTKEERoXX9Sh1SId1PJAnQQX1AsHE3GB+WeMvtl2UFaOtu9Czn+hKQNPOZkcdJe gtVgwBI9bGk62RGT1FmIb538eIDv8rbb96MYlhV/zSpRGsaBcO+xY3fQEB60O21W Okz9z1Of5Y/STpwq3Xx1Q/86f9yNbb8sjRskNN4ttI6cA/JRXNC6BqqXEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI+arlMLI7Pf06Gz2tG2UzXZpp5MB8GA1UdIwQY MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt OGNlNDE3OTIzMmM4LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4 LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIGfL3pA O9Jrn/n7KXGFyxrmZFnAkwCrxAyo1s+UOdlkrYbOde1HfGq3kn7xv2VeBigTdt1G V7eBq3GHiyOqo7Yl5r20FL2sH3X7tdWNTJvddOhZZPpckOyLYpZvP60NXXrJyM3w IAO/e/cCCQHddhvSEwm2oHwXU1j3hpj77XnXECKc3OxSn9r4v2Ua/f5tFhrZSOHX OH4QobLMK4SNoui463l52k+mNS8mGz+FFqiB5t4XEPNbgGW3NUMEdgHkeW1w6Tpp D4qJhzcih/enkD3JDZhqmzKAUIj25V8ZV80bkCltX2ZMcsqaSZeiLL8W0tCY5ujP L+NzGhaCK6dySw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:11 2025 by rpki-client