This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json) Hash identifier: Z5vGPoTYithj1qGFE0m5mQOYOKsi7HYeTFrpkQR6W8Y= Subject key identifier: 85:1B:00:36:65:AD:E7:C7:EE:51:5E:C0:70:44:C0:39:D0:9E:0F:34 Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b Certificate serial: 019AF0F5DD37BEAD9DA425B4420AE1A19976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft Manifest number: 78 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: 3Gf9jSSmMTE38jC+jIf0Aedc7y1qt84awifUML5wGok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dd:37:be:ad:9d:a4:25:b4:42:0a:e1:a1:99:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=851b003665ade7c7ee515ec07044c039d09e0f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:3b:17:8d:ee:55:fa:c9:ed:76:77:d5:9f: 27:31:50:50:c4:e0:ff:24:08:17:ab:34:79:6a:63: a0:82:31:8b:8c:d4:8d:13:e3:01:60:16:e8:d6:0f: 5a:1a:93:5a:02:76:a7:a6:15:31:96:63:06:45:28: 92:60:0a:20:e5:a4:f3:98:47:d0:bc:d6:7f:cc:f1: b1:b0:f8:d6:b2:a5:c8:2c:db:a1:25:8f:5c:c1:93: c1:39:98:2e:5e:52:8e:4a:09:a9:ed:d0:84:72:4c: 4f:5e:69:6b:e0:b8:12:c6:9c:a8:bf:20:bd:a2:05: e0:43:77:e6:0f:00:4d:7f:cd:bb:f0:ab:ad:36:7a: 06:42:fa:9b:67:71:e1:0d:2a:5a:88:64:61:d8:2b: 7a:09:74:78:17:4b:60:f8:01:85:04:96:db:a4:18: c2:14:92:a4:fd:83:f6:d2:a4:48:69:8d:98:71:ee: 39:cc:2e:2a:da:96:e8:d6:5e:f8:19:82:9a:21:38: 15:db:d5:6e:64:3d:4a:e9:44:78:58:03:2f:7b:87: fe:2c:50:2c:62:91:c9:71:0a:b4:c1:13:24:a4:f2: 62:92:1b:b3:57:9d:72:3d:6b:84:51:b4:31:48:f9: 3a:5f:a5:7e:22:26:9a:05:09:22:c0:97:1b:d1:23: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1B:00:36:65:AD:E7:C7:EE:51:5E:C0:70:44:C0:39:D0:9E:0F:34 X509v3 Authority Key Identifier: keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ed:1b:1b:25:00:2c:94:a6:7c:08:6d:4f:7a:ec:e2:2d:c0: 55:5d:87:50:48:1c:e0:bd:54:5d:0f:2a:c2:9f:4a:13:1c:5d: 7a:2d:d5:58:6e:84:8f:b0:f8:19:0b:75:8b:ff:02:c7:db:e4: 4b:31:d3:76:1d:71:59:95:ba:b2:2f:fe:c5:85:12:2b:d6:7f: 90:a4:c3:44:ca:07:68:97:bb:7c:0b:52:29:a0:03:b6:d9:55: de:3e:5e:d8:68:c8:48:c9:0e:17:42:3c:c8:99:a9:09:6a:6b: cb:2a:ab:84:b8:b6:72:62:49:05:ca:4e:3f:94:67:27:5f:9a: ed:df:3a:f1:85:f2:01:5b:5d:ea:f9:ba:59:2a:8d:31:1d:6f: 87:13:c1:70:5f:28:0a:30:7d:e8:e5:26:d5:9a:f8:a6:d1:89: 65:49:c3:d4:ac:dd:78:0c:c4:da:32:f3:4c:5e:9e:aa:3c:2c: 57:71:d4:a5:ad:10:38:1e:4f:a3:87:72:c2:f2:36:df:04:84: a7:73:58:ab:b0:f4:35:11:8c:1e:1c:79:8a:dc:a3:88:f0:03: 08:f9:1c:70:2a:35:07:e3:c0:fb:65:43:f0:c4:11:30:09:34: e1:d1:73:3e:71:01:40:cd:b0:1c:6c:2d:b0:5f:ad:85:a7:dc: ea:5b:02:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d03vq2dpCW0QgrhoZl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi ODRlMGIwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg4NTFiMDAzNjY1YWRlN2M3ZWU1MTVlYzA3MDQ0YzAzOWQwOWUwZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4w7F43uVfrJ7XZ31Z8nMVBQxOD/ JAgXqzR5amOggjGLjNSNE+MBYBbo1g9aGpNaAnanphUxlmMGRSiSYAog5aTzmEfQ vNZ/zPGxsPjWsqXILNuhJY9cwZPBOZguXlKOSgmp7dCEckxPXmlr4LgSxpyovyC9 ogXgQ3fmDwBNf8278KutNnoGQvqbZ3HhDSpaiGRh2Ct6CXR4F0tg+AGFBJbbpBjC FJKk/YP20qRIaY2Yce45zC4q2pbo1l74GYKaITgV29VuZD1K6UR4WAMve4f+LFAs YpHJcQq0wRMkpPJikhuzV51yPWuEUbQxSPk6X6V+IiaaBQkiwJcb0SNwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUbADZlrefH7lFewHBEwDnQng80MB8GA1UdIwQY MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt ZmVmMjRjMzk1ZjkxLzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+0bGyUA LJSmfAhtT3rs4i3AVV2HUEgc4L1UXQ8qwp9KExxdei3VWG6Ej7D4GQt1i/8Cx9vk SzHTdh1xWZW6si/+xYUSK9Z/kKTDRMoHaJe7fAtSKaADttlV3j5e2GjISMkOF0I8 yJmpCWpryyqrhLi2cmJJBcpOP5RnJ1+a7d868YXyAVtd6vm6WSqNMR1vhxPBcF8o CjB96OUm1Zr4ptGJZUnD1KzdeAzE2jLzTF6eqjwsV3HUpa0QOB5Po4dywvI23wSE p3NYq7D0NRGMHhx5ityjiPADCPkccCo1B+PA+2VD8MQRMAk04dFzPnEBQM2wHGwt sF+thafc6lsC4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:57 2025 by rpki-client