This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json) Hash identifier: Aqn9+VPR9S5oRtKbyJpRnC0ezCkqGP5wmv3s2QX9tks= Subject key identifier: 24:53:62:A8:AE:6C:94:4A:09:7E:C5:59:82:D4:4A:63:0C:A4:BD:6D Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Certificate serial: 019B364517F0D0A4FFDC62B8B30945D3AF41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft Manifest number: 14D0 Signing time: Fri 19 Dec 2025 11:00:56 +0000 Manifest this update: Fri 19 Dec 2025 11:00:56 +0000 Manifest next update: Sat 20 Dec 2025 11:00:56 +0000 Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: Vl6xu5lgeXkidYBLyNx6i9lBVldeh0asUEPuo5LLh7Q=) 2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=) 3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:17:f0:d0:a4:ff:dc:62:b8:b3:09:45:d3:af:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Validity Not Before: Dec 19 11:00:56 2025 GMT Not After : Dec 20 11:00:56 2025 GMT Subject: CN=245362a8ae6c944a097ec55982d44a630ca4bd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:d1:20:33:e5:49:00:9d:65:cd:12:0c:83: 1a:3c:e8:26:9e:3e:4b:af:64:9a:49:51:b9:d6:49: 37:7a:b4:98:73:af:78:09:1a:e1:c9:c4:17:4c:f0: e2:e2:f2:57:f7:75:0a:9d:2f:46:d4:77:dc:eb:8e: 5e:d1:b8:36:a0:e6:00:71:44:e5:3f:43:69:66:a0: b3:0a:c1:17:f5:a2:11:4d:87:8e:36:30:a0:50:61: b7:db:ce:86:36:4e:f9:94:73:1b:11:f5:1e:29:7a: 99:94:46:9e:51:88:99:7f:2d:2e:f3:bc:39:2d:1e: 2b:e0:9a:cb:5c:1c:07:14:24:4e:18:98:82:93:d5: 29:c3:2f:36:b7:3c:db:8f:be:6d:3d:d3:4c:75:87: a5:58:33:ce:2d:50:b8:5f:49:a6:fc:17:2a:49:df: 26:3b:a2:3b:05:4a:88:31:55:5e:46:76:e9:a9:2e: f8:90:8a:bd:da:f4:d5:fc:6a:cb:0a:31:f9:b5:c7: f1:41:85:ed:43:cb:44:03:f1:3a:2b:c1:f6:d9:83: 97:f0:57:97:39:88:c0:1c:6c:7f:ce:b6:f5:70:19: 75:a9:7c:5f:92:61:68:20:86:c6:ec:45:9e:fe:f5: fc:5c:18:f8:bd:1a:8e:8f:64:92:be:c9:b6:bd:ae: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:62:A8:AE:6C:94:4A:09:7E:C5:59:82:D4:4A:63:0C:A4:BD:6D X509v3 Authority Key Identifier: keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:88:86:b4:57:b5:64:b0:b3:ca:13:9f:c3:72:ba:8d:bc:8c: fb:4a:4f:61:78:b6:bd:44:03:75:6b:7c:17:03:13:fa:9d:23: 81:32:7c:f5:64:d0:04:35:82:41:0e:43:1e:23:6e:74:5c:6c: fb:e9:ed:8f:13:32:dc:25:a7:a4:e5:da:bd:05:76:d4:82:a0: 6a:40:dd:c7:a6:27:fa:53:e8:a0:c8:fd:9f:9d:64:64:81:e0: 20:85:8e:73:45:2d:06:83:5b:6d:cb:43:33:d5:ad:7a:15:cc: b5:da:74:2c:a0:fe:1e:97:db:4c:dd:9f:68:e1:31:bc:99:93: 36:07:4d:49:a8:af:55:e8:4a:32:aa:00:8b:c6:e5:7c:9d:11: 74:f9:ef:ab:81:fc:ac:61:d2:aa:d0:20:f4:2d:6c:ee:5c:b3: bd:e6:b9:e9:95:e4:50:c4:7c:4a:8f:d8:27:61:21:e1:c2:e5: 1c:97:05:1e:b3:a7:3c:bf:c3:63:7a:42:90:06:e9:7b:27:4c: 84:a2:5a:81:bb:e0:05:71:ae:4d:b1:f2:88:4a:b1:49:82:6a: 27:e0:97:69:ba:63:e1:05:a8:6e:87:02:84:38:29:0e:e5:6e: bc:d9:a4:3e:17:51:a7:62:75:b0:55:e1:9a:7c:3a:d1:a4:2a: 6b:a4:84:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RRfw0KT/3GK4swlF069BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2 OTQyNTAwHhcNMjUxMjE5MTEwMDU2WhcNMjUxMjIwMTEwMDU2WjAzMTEwLwYDVQQD EygyNDUzNjJhOGFlNmM5NDRhMDk3ZWM1NTk4MmQ0NGE2MzBjYTRiZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunDRIDPlSQCdZc0SDIMaPOgmnj5L r2SaSVG51kk3erSYc694CRrhycQXTPDi4vJX93UKnS9G1Hfc645e0bg2oOYAcUTl P0NpZqCzCsEX9aIRTYeONjCgUGG3286GNk75lHMbEfUeKXqZlEaeUYiZfy0u87w5 LR4r4JrLXBwHFCROGJiCk9Upwy82tzzbj75tPdNMdYelWDPOLVC4X0mm/BcqSd8m O6I7BUqIMVVeRnbpqS74kIq92vTV/GrLCjH5tcfxQYXtQ8tEA/E6K8H22YOX8FeX OYjAHGx/zrb1cBl1qXxfkmFoIIbG7EWe/vX8XBj4vRqOj2SSvsm2va6FrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRTYqiubJRKCX7FWYLUSmMMpL1tMB8GA1UdIwQY MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoiGtFe1 ZLCzyhOfw3K6jbyM+0pPYXi2vUQDdWt8FwMT+p0jgTJ89WTQBDWCQQ5DHiNudFxs ++ntjxMy3CWnpOXavQV21IKgakDdx6Yn+lPooMj9n51kZIHgIIWOc0UtBoNbbctD M9WtehXMtdp0LKD+HpfbTN2faOExvJmTNgdNSaivVehKMqoAi8blfJ0RdPnvq4H8 rGHSqtAg9C1s7lyzvea56ZXkUMR8So/YJ2Eh4cLlHJcFHrOnPL/DY3pCkAbpeydM hKJagbvgBXGuTbHyiEqxSYJqJ+CXabpj4QWobocChDgpDuVuvNmkPhdRp2J1sFXh mnw60aQqa6SE+w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:42:35 2025 by rpki-client