This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json) Hash identifier: eosL6PfGo65Jv4TsmiFgeWdrCMYS6h+JTzm2i+OJJGI= Subject key identifier: 42:4E:96:4C:4F:11:22:1E:DE:82:9E:D5:57:56:B9:A5:C0:4E:4E:C3 Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Certificate serial: 019AF2764B601064A49B898DC4FD11DBCA43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft Manifest number: 03B2 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: mLbwlf1a0U5GkE8uJ4K9BmEZbaEaY/T3eAvPlzFs4UQ=) 2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4b:60:10:64:a4:9b:89:8d:c4:fd:11:db:ca:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=424e964c4f11221ede829ed55756b9a5c04e4ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:87:29:b1:38:31:47:be:5d:25:4c:46:b9: 9b:73:e3:6c:ef:c9:e1:23:8b:a3:f1:cc:6b:65:7a: f5:f9:f8:12:03:64:3f:0a:9b:6a:29:21:92:2c:96: 04:dd:70:9b:06:ab:50:db:0b:7e:ad:d5:96:ab:77: c8:b1:8a:c0:f7:6b:47:b6:e9:9f:c5:64:94:01:50: fc:75:e4:dc:a7:01:5b:be:88:d2:3e:18:c9:5b:40: 4b:b3:e1:d2:93:a1:34:90:91:fd:8d:f6:29:d4:4a: 2c:ef:f5:12:05:5c:64:ff:ed:89:31:70:88:d1:39: 38:37:e5:f1:82:b1:f1:08:d9:8d:95:3f:3f:6e:70: 01:22:ff:23:52:e7:63:96:b9:0e:62:5f:84:ce:3a: c7:86:a4:52:52:72:3f:4d:02:bd:27:25:19:16:19: b4:29:b7:d3:ab:cd:f2:b0:89:55:65:a0:ae:fa:41: b4:d7:5c:9e:88:82:09:91:25:83:d1:5a:e1:95:90: 8d:7a:52:32:a2:7e:85:1c:d2:6f:e7:d1:91:71:ca: ba:6a:7d:e1:7f:60:55:fe:99:54:e9:f1:11:98:76: ce:52:41:ab:67:5f:ef:ec:9e:aa:ef:19:3a:89:76: 1d:56:e8:f0:90:c0:d0:63:9b:32:0a:93:87:87:fb: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:96:4C:4F:11:22:1E:DE:82:9E:D5:57:56:B9:A5:C0:4E:4E:C3 X509v3 Authority Key Identifier: keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7e:62:10:51:4a:6b:71:6b:d6:6d:5d:6f:f6:84:45:02:47: a4:f1:d3:77:09:98:b0:ca:30:fd:fe:ed:f0:7a:0b:82:50:2e: 39:5a:67:2e:bb:15:e1:df:ab:9e:84:09:b6:d3:a4:c7:a3:1e: 47:f9:98:b1:d8:99:7d:9f:31:97:09:9d:ad:cd:9f:66:98:df: 83:c8:d9:d0:09:b8:0b:1d:1e:ac:e1:29:d8:51:71:e9:bb:57: 6e:21:e8:ff:6c:3d:23:1b:79:29:5b:9e:99:74:90:9e:f9:dd: 95:94:2c:40:e9:46:10:3a:13:f4:49:90:21:78:af:af:ec:6d: 71:8a:92:9d:3c:e2:d9:48:ac:c2:c3:72:02:43:20:39:d6:a5: d8:1d:79:35:aa:95:85:d9:04:3f:a4:0a:b2:4d:b6:df:d2:d6: b1:00:f9:2a:17:c0:c6:aa:a5:15:8e:fa:a1:ce:c4:c6:d3:ae: f5:c6:42:ac:8e:92:c0:d6:93:7b:8b:50:3b:f5:f4:d7:f1:64: ea:e0:04:e4:c7:62:9b:78:81:76:1a:06:d8:91:85:80:22:16: 3e:2d:e6:b7:f0:a7:82:fd:d0:0f:c3:db:91:77:e4:33:3b:a7: e0:6d:43:60:42:dd:5f:5d:a6:26:ba:3b:c0:1d:4a:de:f4:67: fa:4d:81:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydktgEGSkm4mNxP0R28pDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm NDYyYjgwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD Eyg0MjRlOTY0YzRmMTEyMjFlZGU4MjllZDU1NzU2YjlhNWMwNGU0ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEWHKbE4MUe+XSVMRrmbc+Ns78nh I4uj8cxrZXr1+fgSA2Q/CptqKSGSLJYE3XCbBqtQ2wt+rdWWq3fIsYrA92tHtumf xWSUAVD8deTcpwFbvojSPhjJW0BLs+HSk6E0kJH9jfYp1Eos7/USBVxk/+2JMXCI 0Tk4N+XxgrHxCNmNlT8/bnABIv8jUudjlrkOYl+EzjrHhqRSUnI/TQK9JyUZFhm0 KbfTq83ysIlVZaCu+kG011yeiIIJkSWD0VrhlZCNelIyon6FHNJv59GRccq6an3h f2BV/plU6fERmHbOUkGrZ1/v7J6q7xk6iXYdVujwkMDQY5syCpOHh/sdfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJOlkxPESIe3oKe1VdWuaXATk7DMB8GA1UdIwQY MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH5iEFFK a3Fr1m1db/aERQJHpPHTdwmYsMow/f7t8HoLglAuOVpnLrsV4d+rnoQJttOkx6Me R/mYsdiZfZ8xlwmdrc2fZpjfg8jZ0Am4Cx0erOEp2FFx6btXbiHo/2w9Ixt5KVue mXSQnvndlZQsQOlGEDoT9EmQIXivr+xtcYqSnTzi2UiswsNyAkMgOdal2B15NaqV hdkEP6QKsk2239LWsQD5KhfAxqqlFY76oc7ExtOu9cZCrI6SwNaTe4tQO/X01/Fk 6uAE5Mdim3iBdhoG2JGFgCIWPi3mt/Cngv3QD8PbkXfkMzun4G1DYELdX12mJro7 wB1K3vRn+k2B5w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:29 2025 by rpki-client