This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json) Hash identifier: JMsGFellpBWgUGOKVcY3goy0FdelfxapaQfvpdEWCy0= Subject key identifier: C4:C8:FE:1E:33:5C:6C:81:D5:33:ED:6B:EF:25:CD:BE:96:1B:97:68 Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Certificate serial: 019AF7D3FE99342838837A406D13202180F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft Manifest number: 1644 Signing time: Sun 07 Dec 2025 08:00:56 +0000 Manifest this update: Sun 07 Dec 2025 08:00:56 +0000 Manifest next update: Mon 08 Dec 2025 08:00:56 +0000 Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=) 2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: ShQnfxGDBa6Z1IzQNn9t01YjwhEaYMe6C2mjF/kuQik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d3:fe:99:34:28:38:83:7a:40:6d:13:20:21:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Validity Not Before: Dec 7 08:00:56 2025 GMT Not After : Dec 8 08:00:56 2025 GMT Subject: CN=c4c8fe1e335c6c81d533ed6bef25cdbe961b9768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:73:03:5d:df:30:9f:65:68:22:50:41:df: 1b:44:fd:d0:b0:e2:9a:8e:a6:c5:e5:65:24:6a:26: bd:7c:9d:25:de:59:2e:fa:ca:7d:c8:e2:75:6b:0d: 61:c5:c8:fd:d1:29:bd:3b:d7:fb:96:08:31:f0:07: 6d:02:6a:6c:a7:64:14:bb:4f:45:f2:92:60:db:8d: 4b:25:1f:a1:f2:98:f5:ac:ec:68:e6:df:8e:65:e1: 5a:0d:ba:c2:cf:30:1f:80:c7:15:f9:db:02:83:0c: 4c:d2:e2:b5:b1:e6:78:c8:2d:77:24:59:62:42:bb: ff:d2:fc:72:f0:14:16:19:18:b3:de:63:15:91:14: f6:8b:d3:da:5f:a2:0c:43:b1:fa:d2:a5:47:7d:10: d1:a2:67:47:2d:49:f0:d6:ab:7d:75:d6:5f:2f:37: 82:c0:e0:76:46:f6:74:a0:0a:c3:ea:0b:c0:eb:fc: 97:05:36:0a:bd:9f:f6:4c:60:01:7b:9f:48:37:cc: ff:01:15:11:e2:c9:e3:16:f7:99:20:19:46:84:ae: a3:94:c7:f9:8f:b6:e6:ff:8d:6b:96:66:9c:c5:2c: 3e:a8:d7:d6:66:40:e1:fc:25:94:25:da:ba:9d:ba: 7b:8c:7f:1c:9b:c2:51:56:5f:f8:9c:87:a7:11:c2: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:FE:1E:33:5C:6C:81:D5:33:ED:6B:EF:25:CD:BE:96:1B:97:68 X509v3 Authority Key Identifier: keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:86:8b:0c:e2:ae:7a:ad:a1:68:08:7d:94:c1:20:65:be:35: ac:80:0e:21:1e:70:cc:3e:89:4c:91:4f:28:5f:c2:fe:01:46: f2:73:fa:55:61:ff:4e:02:c6:36:0b:08:03:5f:9b:05:05:77: 38:84:fe:f6:1d:61:51:ad:25:83:90:37:09:aa:6b:31:f3:de: 65:af:9f:ef:69:4b:5a:ce:27:c4:a7:7f:5f:86:60:de:85:72: 76:5c:23:0c:9e:97:ca:17:a9:b1:d0:42:ea:7b:46:74:32:31: df:84:17:36:5a:37:ba:89:ba:4b:ea:2e:21:a4:cf:71:ab:c8: b4:f5:79:c2:e6:31:33:8e:47:4d:b1:74:ab:99:fa:94:55:54: 50:c7:ba:2e:81:64:3e:28:f9:0b:60:51:49:09:13:db:26:4e: 32:b6:a3:99:86:1c:1c:7f:85:3d:b3:8f:4b:bf:32:b2:95:8e: b6:c4:51:6a:ca:00:c9:1e:73:d2:c3:0d:9a:15:f0:09:a7:4d: 00:b8:53:9c:0c:e4:cc:df:7e:63:5f:0a:6f:64:6c:03:ed:e3: 7a:a6:3b:54:48:16:82:a7:cf:29:23:56:b2:01:8a:53:0f:43: c9:d8:35:41:8b:50:4f:73:79:6f:26:59:a3:39:65:36:86:a1: cc:73:30:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr30/6ZNCg4g3pAbRMgIYDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0 YmU0MmMwHhcNMjUxMjA3MDgwMDU2WhcNMjUxMjA4MDgwMDU2WjAzMTEwLwYDVQQD EyhjNGM4ZmUxZTMzNWM2YzgxZDUzM2VkNmJlZjI1Y2RiZTk2MWI5NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4NzA13fMJ9laCJQQd8bRP3QsOKa jqbF5WUkaia9fJ0l3lku+sp9yOJ1aw1hxcj90Sm9O9f7lggx8AdtAmpsp2QUu09F 8pJg241LJR+h8pj1rOxo5t+OZeFaDbrCzzAfgMcV+dsCgwxM0uK1seZ4yC13JFli Qrv/0vxy8BQWGRiz3mMVkRT2i9PaX6IMQ7H60qVHfRDRomdHLUnw1qt9ddZfLzeC wOB2RvZ0oArD6gvA6/yXBTYKvZ/2TGABe59IN8z/ARUR4snjFveZIBlGhK6jlMf5 j7bm/41rlmacxSw+qNfWZkDh/CWUJdq6nbp7jH8cm8JRVl/4nIenEcKMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTI/h4zXGyB1TPta+8lzb6WG5doMB8GA1UdIwQY MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYaLDOKu eq2haAh9lMEgZb41rIAOIR5wzD6JTJFPKF/C/gFG8nP6VWH/TgLGNgsIA1+bBQV3 OIT+9h1hUa0lg5A3CaprMfPeZa+f72lLWs4nxKd/X4Zg3oVydlwjDJ6XyhepsdBC 6ntGdDIx34QXNlo3uom6S+ouIaTPcavItPV5wuYxM45HTbF0q5n6lFVUUMe6LoFk Pij5C2BRSQkT2yZOMrajmYYcHH+FPbOPS78yspWOtsRRasoAyR5z0sMNmhXwCadN ALhTnAzkzN9+Y18Kb2RsA+3jeqY7VEgWgqfPKSNWsgGKUw9Dydg1QYtQT3N5byZZ ozllNoahzHMwRA== -----END CERTIFICATE-----Generated at Sun Dec 7 18:28:59 2025 by rpki-client