This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft File: LDAdTyasJ2x2gaz8_M2shjwcB_s.mft (raw, json) Hash identifier: kOmeQBbh4pGILQt6qYo7bEdoVTDmOpNKpP9kuv8cYdw= Subject key identifier: AA:73:CD:A2:CF:92:57:9D:A3:98:20:37:87:0A:C0:89:AF:D1:A8:D6 Authority key identifier: 2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB Certificate issuer: /CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb Certificate serial: 019AF1D237201139A964915DDD41BED5A52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft Manifest number: 77 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: LDAdTyasJ2x2gaz8_M2shjwcB_s.crl (hash: R9SCIXPcogzxzrQHYX9es5zcEQqAMiK4m97SDp0qXJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:20:11:39:a9:64:91:5d:dd:41:be:d5:a5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c301d4f26ac276c7681acfcfccdac863c1c07fb Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=aa73cda2cf92579da3982037870ac089afd1a8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:f4:30:da:b1:39:b0:a5:57:48:59:92:89: 31:04:cb:e2:99:d7:06:f4:b6:b1:9f:fc:66:f4:b0: ec:30:98:85:54:55:ce:11:cf:e7:66:1e:1f:84:22: be:0f:76:fb:15:16:fd:1f:a3:ee:16:39:cd:78:f2: 1a:5b:7d:52:d9:31:5e:f3:e9:8d:36:67:03:c3:4d: e5:e5:bf:db:92:ba:4c:80:68:1c:c8:a2:ee:fb:48: 58:bc:0d:c5:e6:23:10:51:b0:d1:bf:5b:9a:15:d7: c0:11:d7:41:a2:56:91:63:6e:8f:b8:07:7a:b4:5d: 56:53:f0:a7:5d:c2:43:8c:e0:b3:42:dc:66:aa:e2: 69:0a:de:d0:e0:17:2f:b8:23:45:9f:50:01:62:62: 32:74:0f:32:26:9e:e2:63:af:d7:ba:53:69:c3:83: ec:47:59:49:78:30:67:9d:91:c9:f4:64:7f:e9:a4: 41:89:27:6b:47:ec:73:f5:54:9d:e7:62:ee:11:d3: c8:e5:4a:27:72:08:59:70:ed:36:58:c4:ca:65:a2: d3:10:97:c1:ce:b0:ea:c2:e5:1a:12:f1:ab:da:d0: 35:d1:34:a7:20:dc:60:e5:f0:13:44:c2:83:c5:ba: 98:56:4a:7d:b1:ee:bd:87:c5:63:d1:68:aa:dc:2f: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:CD:A2:CF:92:57:9D:A3:98:20:37:87:0A:C0:89:AF:D1:A8:D6 X509v3 Authority Key Identifier: keyid:2C:30:1D:4F:26:AC:27:6C:76:81:AC:FC:FC:CD:AC:86:3C:1C:07:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDAdTyasJ2x2gaz8_M2shjwcB_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f87d88-4d7f-4898-a502-892d60bea225/1/LDAdTyasJ2x2gaz8_M2shjwcB_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cb:08:46:f7:95:c3:59:7d:52:46:98:e5:df:c2:9b:35:78: cf:4a:57:22:62:8d:74:8b:e9:55:e4:d2:42:00:77:8e:b2:9d: 48:bc:ff:b9:a4:b7:6e:0d:1a:36:47:57:a7:16:e2:16:59:60: ed:14:e0:2b:8d:dd:3f:f2:08:04:9a:18:d7:25:63:97:49:0a: fc:db:80:2f:72:31:29:73:60:0c:0e:01:85:93:61:3f:d0:e3: 38:70:83:65:a0:f7:2a:43:43:cc:9c:76:d4:f6:88:21:2b:1a: 4c:c0:9b:7e:1e:11:1c:cb:8b:aa:6a:db:d5:62:96:33:94:3c: a7:09:89:3a:7a:17:71:b6:7e:f6:bf:4e:8e:f4:33:b4:c2:db: fc:00:74:d5:59:85:9d:9a:c0:d6:56:5c:4c:e2:d6:d8:93:58: b5:72:89:1e:e2:d7:13:5e:ee:da:2b:1d:db:b9:b1:a7:5e:68: 30:0b:67:72:51:96:a3:1d:85:17:da:15:4c:06:4d:df:9f:65: 31:e6:cf:98:a4:79:40:b4:a7:b9:9c:77:a4:17:50:df:46:f7: c5:ef:c8:11:ae:d8:cb:5b:81:3d:5e:e9:eb:55:9a:53:91:92: da:6a:b9:8a:9f:29:f0:30:8e:e9:7e:94:b3:1d:85:56:85:94: 2c:db:e2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jcgETmpZJFd3UG+1aUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzAxZDRmMjZhYzI3NmM3NjgxYWNmY2ZjY2RhYzg2M2Mx YzA3ZmIwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EyhhYTczY2RhMmNmOTI1NzlkYTM5ODIwMzc4NzBhYzA4OWFmZDFhOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUv0MNqxObClV0hZkokxBMvimdcG 9Laxn/xm9LDsMJiFVFXOEc/nZh4fhCK+D3b7FRb9H6PuFjnNePIaW31S2TFe8+mN NmcDw03l5b/bkrpMgGgcyKLu+0hYvA3F5iMQUbDRv1uaFdfAEddBolaRY26PuAd6 tF1WU/CnXcJDjOCzQtxmquJpCt7Q4BcvuCNFn1ABYmIydA8yJp7iY6/XulNpw4Ps R1lJeDBnnZHJ9GR/6aRBiSdrR+xz9VSd52LuEdPI5UoncghZcO02WMTKZaLTEJfB zrDqwuUaEvGr2tA10TSnINxg5fATRMKDxbqYVkp9se69h8Vj0Wiq3C9+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpzzaLPkledo5ggN4cKwImv0ajWMB8GA1UdIwQY MBaAFCwwHU8mrCdsdoGs/PzNrIY8HAf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERBZFR5YXNKMngyZ2F6OF9NMnNoandjQl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mODdkODgtNGQ3Zi00ODk4LWE1MDIt ODkyZDYwYmVhMjI1LzEvTERBZFR5YXNKMngyZ2F6OF9NMnNoandjQl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mODdkODgtNGQ3Zi00ODk4LWE1MDItODkyZDYwYmVhMjI1 LzEvTERBZFR5YXNKMngyZ2F6OF9NMnNoandjQl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8sIRveV w1l9UkaY5d/CmzV4z0pXImKNdIvpVeTSQgB3jrKdSLz/uaS3bg0aNkdXpxbiFllg 7RTgK43dP/IIBJoY1yVjl0kK/NuAL3IxKXNgDA4BhZNhP9DjOHCDZaD3KkNDzJx2 1PaIISsaTMCbfh4RHMuLqmrb1WKWM5Q8pwmJOnoXcbZ+9r9OjvQztMLb/AB01VmF nZrA1lZcTOLW2JNYtXKJHuLXE17u2isd27mxp15oMAtnclGWox2FF9oVTAZN359l MebPmKR5QLSnuZx3pBdQ30b3xe/IEa7Yy1uBPV7p61WaU5GS2mq5ip8p8DCO6X6U sx2FVoWULNviHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:22 2025 by rpki-client