This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json) Hash identifier: XhVMa9DJZIWqqJEiQspG3wYlSn7UUX8mDLtRHjzmCKM= Subject key identifier: 67:F1:68:36:20:0E:AA:38:3A:A3:43:F4:1A:72:16:40:DF:15:16:F5 Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Certificate serial: 019AF5AE7789852E5D8009DB07070F917095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:00:42 +0000 Manifest this update: Sat 06 Dec 2025 22:00:42 +0000 Manifest next update: Sun 07 Dec 2025 22:00:42 +0000 Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: ih6LtU+6YEABt0wrEwa4z6XC+QhSNiI3D3vPO3BQBFU=) 2: U56329e4gM-IVTVVEt6zrVkDGjo.roa (hash: we1XyD3BJFEUnklb4jnEqKHGEO1FUWwSSjWf88RrLFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:77:89:85:2e:5d:80:09:db:07:07:0f:91:70:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548 Validity Not Before: Dec 6 22:00:42 2025 GMT Not After : Dec 7 22:00:42 2025 GMT Subject: CN=67f16836200eaa383aa343f41a721640df1516f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:4b:fc:a0:2b:b0:a1:01:7e:56:94:8e:76: fb:9e:3b:a8:cf:48:ab:32:b6:5f:ee:52:d9:3f:af: 90:87:4f:28:36:d1:f4:8e:90:20:92:d1:e3:f0:65: 22:4c:b4:08:87:d0:75:f5:e3:5b:24:21:90:4a:81: 66:fe:65:bc:07:59:2f:a2:30:af:eb:a6:e8:f3:22: 10:44:6c:b4:a1:ad:35:43:5a:b4:ba:fb:d4:06:a1: 0a:8f:d2:76:da:f0:4e:21:10:38:56:e0:6a:c0:77: fc:8c:b0:0c:f8:1d:dc:d6:71:76:cf:58:da:90:31: 75:1b:65:b4:2d:35:1a:2f:d8:38:a6:16:65:30:01: 3b:07:1c:89:ba:51:42:1d:ba:c0:3d:88:21:12:5a: 7b:e0:5a:05:12:9a:b8:02:ac:9a:a0:a8:8b:ec:4c: 22:29:ad:67:4d:e7:cb:08:42:49:ab:32:fb:ec:4d: dc:e4:f5:17:d7:26:16:32:c2:5e:6d:61:e6:dc:05: 4f:fd:19:00:bc:36:3f:21:ec:1c:34:6e:36:77:0e: fc:fc:ee:30:45:56:55:ba:ee:78:ce:7c:de:8c:2a: d4:49:9c:cc:90:2d:5f:93:23:d2:18:d5:93:8c:ce: 43:f8:94:56:19:c4:28:ef:c9:fc:26:09:43:f9:9f: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F1:68:36:20:0E:AA:38:3A:A3:43:F4:1A:72:16:40:DF:15:16:F5 X509v3 Authority Key Identifier: keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:80:de:76:38:cf:38:24:5e:d1:37:ee:c3:4f:bb:e3:4b:b5: 29:54:59:1b:8a:9f:75:f2:64:27:5a:2d:ab:ba:e7:8d:38:aa: 6b:4b:2e:5f:fb:2b:ed:28:d9:df:8f:01:62:9c:06:74:42:38: b9:21:a0:3e:d8:5b:89:fe:19:1d:9d:fc:54:cd:44:9a:7e:4d: ce:93:77:33:25:b5:56:af:b7:26:dd:21:c3:94:30:f9:3e:8e: 5b:9a:f8:f5:a0:f3:df:51:5f:b5:e2:8a:80:89:c9:79:0a:ca: 46:02:bb:6a:e4:d7:d9:29:a8:6f:a7:3d:4a:9e:a1:5f:99:e2: 88:62:2f:86:5e:17:25:31:7d:ee:94:f3:f7:88:7a:59:5c:39: ba:19:bc:1e:9d:9b:ef:72:3e:6c:4d:01:ad:f8:00:2b:8d:bd: 5b:5b:92:2c:ce:a2:42:b4:7c:eb:7e:6a:4c:38:bd:5d:7f:7b: b2:02:d5:14:1a:86:22:d7:ee:e5:3c:b4:6d:b0:47:ec:a1:d9: 0e:e9:dc:ed:d9:ce:63:e0:fa:e5:e2:14:a1:1c:61:b7:77:a2: 6b:bf:fa:6e:6c:8e:f8:1a:42:67:ec:5d:54:cb:f9:bc:86:7e: 37:27:06:78:dc:ec:a4:2f:aa:63:53:85:74:67:78:3a:a8:ba: 9c:5a:1b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rneJhS5dgAnbBwcPkXCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi YTU1NDgwHhcNMjUxMjA2MjIwMDQyWhcNMjUxMjA3MjIwMDQyWjAzMTEwLwYDVQQD Eyg2N2YxNjgzNjIwMGVhYTM4M2FhMzQzZjQxYTcyMTY0MGRmMTUxNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNJL/KArsKEBflaUjnb7njuoz0ir MrZf7lLZP6+Qh08oNtH0jpAgktHj8GUiTLQIh9B19eNbJCGQSoFm/mW8B1kvojCv 66bo8yIQRGy0oa01Q1q0uvvUBqEKj9J22vBOIRA4VuBqwHf8jLAM+B3c1nF2z1ja kDF1G2W0LTUaL9g4phZlMAE7BxyJulFCHbrAPYghElp74FoFEpq4AqyaoKiL7Ewi Ka1nTefLCEJJqzL77E3c5PUX1yYWMsJebWHm3AVP/RkAvDY/IewcNG42dw78/O4w RVZVuu54znzejCrUSZzMkC1fkyPSGNWTjM5D+JRWGcQo78n8JglD+Z/4DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfxaDYgDqo4OqND9BpyFkDfFRb1MB8GA1UdIwQY MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2 LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroDedjjP OCRe0Tfuw0+740u1KVRZG4qfdfJkJ1otq7rnjTiqa0suX/sr7SjZ348BYpwGdEI4 uSGgPthbif4ZHZ38VM1Emn5NzpN3MyW1Vq+3Jt0hw5Qw+T6OW5r49aDz31FfteKK gInJeQrKRgK7auTX2Smob6c9Sp6hX5niiGIvhl4XJTF97pTz94h6WVw5uhm8Hp2b 73I+bE0BrfgAK429W1uSLM6iQrR8635qTDi9XX97sgLVFBqGItfu5Ty0bbBH7KHZ Dunc7dnOY+D65eIUoRxht3eia7/6bmyO+BpCZ+xdVMv5vIZ+NycGeNzspC+qY1OF dGd4Oqi6nFobXA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:19 2025 by rpki-client