This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json) Hash identifier: 1KB11e9wwPjafSSGgigFhouPXPYA3H0pj87HnME40ng= Subject key identifier: 7F:97:AD:D1:88:B1:7B:C0:BD:C3:71:E0:70:4C:C1:F2:77:E0:CA:11 Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Certificate serial: 019AF20980AC16595C63D1646940118638C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: /AipfLUoKFXBVpFum/kBiwtqSG81FZP65t4KJ4023+c=) 2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:80:ac:16:59:5c:63:d1:64:69:40:11:86:38:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=7f97add188b17bc0bdc371e0704cc1f277e0ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:15:fe:58:99:a2:4e:5a:b4:94:7f:2e:ac: c5:0a:4a:89:9b:b0:fd:c2:85:5f:77:42:16:c5:f0: 35:bf:8d:99:1c:a0:e0:7d:d9:c0:ba:7c:71:40:ad: a3:7c:75:e1:c1:77:7f:c2:9f:6c:10:e9:7b:36:db: 0b:38:bb:4a:94:8f:c8:c2:3e:a5:89:f9:e8:4d:a7: 94:67:78:08:94:b0:ca:a5:22:75:29:b7:5d:af:cc: 66:ce:80:eb:ef:1f:dd:56:9b:65:73:42:f6:9a:0c: 2d:b2:ed:a8:2f:58:60:56:96:7d:1d:f1:21:1a:8d: bd:7a:ed:1a:9a:df:2c:61:86:7b:a3:0a:b5:8e:c2: 00:33:81:be:8c:05:ee:21:dd:25:a5:7c:af:53:05: f8:e6:ea:00:f6:6e:16:f8:48:e1:7c:c4:90:43:76: 0b:ff:f5:ba:f7:08:75:09:98:a4:71:85:00:32:c8: 4b:bc:06:57:5c:9a:7a:f7:2d:c3:0a:21:a8:c4:31: dd:ee:80:cb:df:e2:b3:90:e6:48:73:6d:a2:5e:ff: 4a:16:d9:6d:e9:34:66:43:2c:66:11:d2:8a:6b:2d: 2b:64:1c:ba:0a:6a:1d:cb:2a:35:c0:46:bc:45:b4: ef:87:3e:13:34:33:e6:1b:76:1e:bf:ae:be:58:75: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:97:AD:D1:88:B1:7B:C0:BD:C3:71:E0:70:4C:C1:F2:77:E0:CA:11 X509v3 Authority Key Identifier: keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:49:55:f1:19:4b:c3:eb:13:52:7d:bb:42:00:0d:a3:b7:cf: c3:a0:1b:08:68:c6:85:eb:9e:46:3e:2c:0b:28:e0:6b:a9:87: 27:cf:55:4e:5b:63:3a:f9:d8:2c:40:de:bc:17:9c:4f:e6:36: a2:85:f5:3b:b0:07:0e:3c:dc:9f:39:33:30:d7:f9:b4:73:57: 11:51:24:40:d3:2e:3c:39:72:8c:9a:e4:51:44:37:26:08:e2: 8d:c1:01:62:35:7f:03:fc:1d:2e:cd:ff:e8:ec:3e:af:3e:c1: fb:ef:00:8f:53:58:33:ad:90:1a:23:c2:4e:d9:ae:c4:92:90: fb:c5:a4:25:a8:d6:39:af:23:e5:b9:5f:76:66:23:42:e0:41: da:8f:c2:b9:26:ce:87:bb:78:6b:e4:12:ee:51:fb:9a:34:40: ca:91:8f:f3:f8:e8:83:64:d7:cd:e6:4c:54:7b:71:f8:97:c1: ba:75:0b:49:af:1f:49:58:bb:d2:52:46:cb:09:04:39:43:3b: df:18:9d:19:90:c7:27:09:f4:48:35:6a:e9:b5:cc:41:3d:37: 46:b3:f6:ac:7e:19:12:d9:51:a8:bc:c0:7f:99:1e:88:56:6a: 07:5e:62:54:72:f1:29:97:d4:c8:a4:a7:67:a8:0c:6e:0e:bc: 98:31:59:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYCsFllcY9FkaUARhjjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0 ZDNjOTAwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD Eyg3Zjk3YWRkMTg4YjE3YmMwYmRjMzcxZTA3MDRjYzFmMjc3ZTBjYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgAV/liZok5atJR/LqzFCkqJm7D9 woVfd0IWxfA1v42ZHKDgfdnAunxxQK2jfHXhwXd/wp9sEOl7NtsLOLtKlI/Iwj6l ifnoTaeUZ3gIlLDKpSJ1Kbddr8xmzoDr7x/dVptlc0L2mgwtsu2oL1hgVpZ9HfEh Go29eu0amt8sYYZ7owq1jsIAM4G+jAXuId0lpXyvUwX45uoA9m4W+EjhfMSQQ3YL //W69wh1CZikcYUAMshLvAZXXJp69y3DCiGoxDHd7oDL3+KzkOZIc22iXv9KFtlt 6TRmQyxmEdKKay0rZBy6Cmodyyo1wEa8RbTvhz4TNDPmG3Yev66+WHV1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+XrdGIsXvAvcNx4HBMwfJ34MoRMB8GA1UdIwQY MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0lV8RlL w+sTUn27QgANo7fPw6AbCGjGheueRj4sCyjga6mHJ89VTltjOvnYLEDevBecT+Y2 ooX1O7AHDjzcnzkzMNf5tHNXEVEkQNMuPDlyjJrkUUQ3JgjijcEBYjV/A/wdLs3/ 6Ow+rz7B++8Aj1NYM62QGiPCTtmuxJKQ+8WkJajWOa8j5blfdmYjQuBB2o/CuSbO h7t4a+QS7lH7mjRAypGP8/jog2TXzeZMVHtx+JfBunULSa8fSVi70lJGywkEOUM7 3xidGZDHJwn0SDVq6bXMQT03RrP2rH4ZEtlRqLzAf5keiFZqB15iVHLxKZfUyKSn Z6gMbg68mDFZ/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:31 2025 by rpki-client