This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json) Hash identifier: oM5KTX7+asMslSMzmbSB51CXKlsJQntrmFXtLVOhQq0= Subject key identifier: D8:7C:CF:73:F9:BB:13:09:85:E2:61:2D:CD:E9:EB:65:80:17:E0:96 Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf Certificate serial: 019AF509CAE10B3DE9EB740B5BECA46E4FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft Manifest number: 0624 Signing time: Sat 06 Dec 2025 19:00:50 +0000 Manifest this update: Sat 06 Dec 2025 19:00:50 +0000 Manifest next update: Sun 07 Dec 2025 19:00:50 +0000 Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: l7/bqe8nUnnvi+aStZIrs4SVLjVRcfYrio+FL8sD6yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ca:e1:0b:3d:e9:eb:74:0b:5b:ec:a4:6e:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf Validity Not Before: Dec 6 19:00:50 2025 GMT Not After : Dec 7 19:00:50 2025 GMT Subject: CN=d87ccf73f9bb130985e2612dcde9eb658017e096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:de:ec:a3:9f:e6:34:f7:10:23:05:76:aa: 99:37:7d:04:3b:b7:5e:22:c4:12:ef:64:7e:e8:c3: 0e:fc:5e:ca:d9:5f:18:e5:07:8b:62:43:4d:88:de: 47:c3:cf:d1:43:0a:9d:0e:b1:2a:22:62:a5:54:27: 96:3b:76:8d:ca:b7:e5:0c:f4:bc:e8:d6:87:67:fa: c0:00:c0:62:41:d9:77:e6:d1:12:7d:8a:69:94:7b: c7:fb:4d:c5:6c:7d:6b:72:1b:ea:05:b5:b4:ff:15: 37:e3:1b:61:79:ea:3c:ee:d4:8e:72:c7:32:07:d5: c0:4a:01:7d:21:c1:f5:00:95:c2:fd:80:70:69:6a: 0f:af:67:ac:ee:c4:e5:c8:46:ba:bc:23:31:ad:5b: ae:8b:c6:a2:ae:2e:b3:dc:a8:7c:13:5c:34:5d:86: 7f:e8:6d:7c:da:d4:fc:16:9e:b7:bc:1b:24:35:a5: 81:fe:3b:74:55:53:17:23:51:45:e6:d5:f3:93:04: b5:8a:c2:4f:ef:fb:59:bb:16:74:10:a6:7e:1a:26: 9d:45:7c:2b:3f:0e:8b:c5:c6:ad:61:d7:5f:fc:ca: 73:fc:73:e3:cb:92:27:85:f7:2f:0f:ad:dc:e3:95: ac:2c:72:da:c9:44:f3:5a:16:a6:b6:9d:e8:ff:78: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:CF:73:F9:BB:13:09:85:E2:61:2D:CD:E9:EB:65:80:17:E0:96 X509v3 Authority Key Identifier: keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fa:8d:ad:15:30:ca:b0:22:d9:54:38:e1:1d:f2:76:f5:0b: 79:8d:87:42:fe:80:54:da:ee:fd:78:be:25:ff:04:b3:fc:89: 3f:07:48:12:f5:6b:af:27:de:74:9a:b2:b7:e3:8e:89:1d:d5: de:8f:92:b3:eb:f0:9b:cb:78:db:2c:2f:d5:0c:97:73:63:cb: 41:20:1b:af:98:50:15:0a:6b:10:b6:35:0e:50:f3:e0:50:c5: 4a:35:99:05:d9:9c:51:eb:e5:4d:67:6a:31:74:89:87:ef:73: 9a:dd:95:0d:68:4e:27:08:5d:1b:4a:da:87:44:22:e3:a0:3a: 71:f1:14:54:fa:a5:57:d2:f4:50:ac:f9:50:56:b8:bb:54:e1: d5:0e:1c:f8:fe:d3:5b:6d:34:40:00:88:ff:15:20:33:bf:99: 28:d0:d9:55:d6:46:ce:66:56:09:4c:fb:93:ab:7b:63:82:df: 4b:26:17:6b:4a:f1:c5:47:45:ef:96:fb:a7:12:94:85:66:d8: 57:ff:2a:97:a2:89:6b:c5:8f:b8:ff:85:e0:37:73:53:a4:48: 8e:9b:d9:73:43:c6:64:d4:18:e2:d6:31:10:8c:db:cf:25:3d: 1c:1c:39:19:79:03:bb:40:b5:b2:64:41:eb:1d:50:f2:b9:63: b0:13:6c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcrhCz3p63QLW+ykbk/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDgwMDhkZTNjZmY2MmQyZmFjYTEwZDk5ZmYyMGMzZTg3 OGRjZGYwHhcNMjUxMjA2MTkwMDUwWhcNMjUxMjA3MTkwMDUwWjAzMTEwLwYDVQQD EyhkODdjY2Y3M2Y5YmIxMzA5ODVlMjYxMmRjZGU5ZWI2NTgwMTdlMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyze7KOf5jT3ECMFdqqZN30EO7de IsQS72R+6MMO/F7K2V8Y5QeLYkNNiN5Hw8/RQwqdDrEqImKlVCeWO3aNyrflDPS8 6NaHZ/rAAMBiQdl35tESfYpplHvH+03FbH1rchvqBbW0/xU34xtheeo87tSOcscy B9XASgF9IcH1AJXC/YBwaWoPr2es7sTlyEa6vCMxrVuui8airi6z3Kh8E1w0XYZ/ 6G182tT8Fp63vBskNaWB/jt0VVMXI1FF5tXzkwS1isJP7/tZuxZ0EKZ+GiadRXwr Pw6LxcatYddf/Mpz/HPjy5InhfcvD63c45WsLHLayUTzWhamtp3o/3jTSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNh8z3P5uxMJheJhLc3p62WAF+CWMB8GA1UdIwQY MBaAFC3YAI3jz/YtL6yhDZn/IMPoeNzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMt OTUxZTVhZmFlOWU3LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMtOTUxZTVhZmFlOWU3 LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/qNrRUw yrAi2VQ44R3ydvULeY2HQv6AVNru/Xi+Jf8Es/yJPwdIEvVrryfedJqyt+OOiR3V 3o+Ss+vwm8t42ywv1QyXc2PLQSAbr5hQFQprELY1DlDz4FDFSjWZBdmcUevlTWdq MXSJh+9zmt2VDWhOJwhdG0rah0Qi46A6cfEUVPqlV9L0UKz5UFa4u1Th1Q4c+P7T W200QACI/xUgM7+ZKNDZVdZGzmZWCUz7k6t7Y4LfSyYXa0rxxUdF75b7pxKUhWbY V/8ql6KJa8WPuP+F4DdzU6RIjpvZc0PGZNQY4tYxEIzbzyU9HBw5GXkDu0C1smRB 6x1Q8rljsBNsjg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:36 2025 by rpki-client