This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json) Hash identifier: 5G6BbBPAj2ccWvDq6U8scrQgjCbFJfM4V1bYvVlYiBE= Subject key identifier: 0B:13:D9:B3:8D:47:15:54:12:D5:40:10:A8:D9:34:0B:7C:12:55:60 Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e Certificate serial: 019B3D2339EDF7F7F06417FA06E773C17EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft Manifest number: 125C Signing time: Sat 20 Dec 2025 19:01:17 +0000 Manifest this update: Sat 20 Dec 2025 19:01:17 +0000 Manifest next update: Sun 21 Dec 2025 19:01:17 +0000 Files and hashes: 1: 5xtV36wWP_bS1NEiRKe92fTVa2Y.roa (hash: mi2HnN7cH74bvu1lEwLndA7z41JqUc9pgJEQ25fZQMk=) 2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: Xe9trpWIBIU9UttHIwkQWUraRfwZDziQzFvZHvDK4L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:39:ed:f7:f7:f0:64:17:fa:06:e7:73:c1:7e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e Validity Not Before: Dec 20 19:01:17 2025 GMT Not After : Dec 21 19:01:17 2025 GMT Subject: CN=0b13d9b38d47155412d54010a8d9340b7c125560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:16:5d:e6:c1:11:ef:fe:10:7e:33:e2:05: 20:b5:92:85:71:fd:d1:05:00:6d:ab:cf:89:00:83: de:6c:4c:7c:9d:9d:88:c3:19:d6:c1:fb:39:fe:2f: 56:b8:4b:1a:36:d6:5d:9f:8b:2e:4d:4e:52:50:8f: b9:36:6f:a6:6e:79:33:c2:bb:10:4a:07:16:3b:7c: a8:2d:af:74:a9:ac:7d:4f:4d:0d:c2:33:61:93:92: 33:07:d2:be:b9:8a:8e:64:a3:4c:ee:44:6e:ea:98: 4c:d8:3e:ac:ac:7f:57:87:a0:97:86:29:70:f7:6b: 3b:26:77:5f:79:fa:6a:ad:b2:9a:c0:b5:67:16:7b: 30:7a:18:66:8f:12:7f:25:a8:fe:fd:12:66:47:ba: 9b:c3:1a:7b:2d:67:55:a2:cc:7c:54:f0:60:16:a3: cb:dd:f8:a7:56:0c:31:02:15:e1:91:d5:db:36:c1: b4:fd:42:38:db:88:ce:79:03:41:a6:87:9b:1f:53: 03:c8:68:82:df:a1:97:cf:e6:99:68:0c:99:f4:a4: cc:6b:19:f6:a4:a7:79:d0:a4:36:35:e0:15:21:4c: 5d:fd:59:6b:8f:c4:72:7f:a2:54:0e:2d:f6:79:8f: c9:ea:50:7f:69:7a:a3:bb:b0:31:e9:e8:d9:58:45: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:D9:B3:8D:47:15:54:12:D5:40:10:A8:D9:34:0B:7C:12:55:60 X509v3 Authority Key Identifier: keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0f:c2:b8:b8:6b:64:21:28:58:e7:9c:a8:d7:6a:50:e1:e9: a5:83:7f:61:d9:3a:9b:a4:f9:19:b3:2b:ea:e7:ee:64:36:f6: b5:f9:c2:d9:ca:e6:63:df:5f:f8:e1:52:c1:6f:58:86:a6:41: f6:07:ed:83:31:62:b3:49:bd:b2:d4:80:21:0e:f9:2d:1d:61: 20:35:a8:f5:b4:91:f3:d7:49:68:14:37:82:90:19:e2:d0:d3: 9a:80:4b:f8:28:db:d5:68:bf:7b:87:7d:ae:b3:65:0c:de:40: 35:ce:e4:e6:16:a2:61:f8:ac:e1:c9:bb:14:e2:64:dd:ae:61: 41:25:80:bf:9c:92:fb:68:8b:df:87:85:2b:cb:ad:91:ba:2a: c1:0d:67:17:62:55:39:c7:ad:70:da:dc:46:3c:ef:55:6b:af: 7f:aa:40:55:36:ae:75:2a:df:05:02:47:1d:99:bf:ff:1d:8b: 3a:ef:40:13:12:2f:95:46:9f:24:42:49:42:0d:b0:88:c1:fd: 74:66:92:e3:e1:36:e4:05:48:e8:24:5f:55:3f:63:0c:c0:95: 5f:4e:f2:ef:46:0d:a3:ff:9a:96:21:30:40:f3:a7:14:fc:29: 62:4d:66:dd:ac:90:17:b5:5b:c5:40:5c:1c:1c:01:5e:84:0f: ba:20:45:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iznt9/fwZBf6BudzwX6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNDBmY2Q1Mzk4N2IyMDlmOGFmMzljYTEyMTFmMjcwNjBh ODkwMmUwHhcNMjUxMjIwMTkwMTE3WhcNMjUxMjIxMTkwMTE3WjAzMTEwLwYDVQQD EygwYjEzZDliMzhkNDcxNTU0MTJkNTQwMTBhOGQ5MzQwYjdjMTI1NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tIWXebBEe/+EH4z4gUgtZKFcf3R BQBtq8+JAIPebEx8nZ2IwxnWwfs5/i9WuEsaNtZdn4suTU5SUI+5Nm+mbnkzwrsQ SgcWO3yoLa90qax9T00NwjNhk5IzB9K+uYqOZKNM7kRu6phM2D6srH9Xh6CXhilw 92s7JndfefpqrbKawLVnFnswehhmjxJ/Jaj+/RJmR7qbwxp7LWdVosx8VPBgFqPL 3finVgwxAhXhkdXbNsG0/UI424jOeQNBpoebH1MDyGiC36GXz+aZaAyZ9KTMaxn2 pKd50KQ2NeAVIUxd/Vlrj8Ryf6JUDi32eY/J6lB/aXqju7Ax6ejZWEVZ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsT2bONRxVUEtVAEKjZNAt8ElVgMB8GA1UdIwQY MBaAFCxA/NU5h7IJ+K85yhIR8nBgqJAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2Mt ZTFlODA3ZWNkNGRmLzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MDlmYzktNjhlZi00MTFlLWExY2MtZTFlODA3ZWNkNGRm LzEvTEVEODFUbUhzZ240cnpuS0VoSHljR0Nva0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA/CuLhr ZCEoWOecqNdqUOHppYN/Ydk6m6T5GbMr6ufuZDb2tfnC2crmY99f+OFSwW9YhqZB 9gftgzFis0m9stSAIQ75LR1hIDWo9bSR89dJaBQ3gpAZ4tDTmoBL+Cjb1Wi/e4d9 rrNlDN5ANc7k5haiYfis4cm7FOJk3a5hQSWAv5yS+2iL34eFK8utkboqwQ1nF2JV OcetcNrcRjzvVWuvf6pAVTaudSrfBQJHHZm//x2LOu9AExIvlUafJEJJQg2wiMH9 dGaS4+E25AVI6CRfVT9jDMCVX07y70YNo/+aliEwQPOnFPwpYk1m3ayQF7VbxUBc HBwBXoQPuiBFng== -----END CERTIFICATE-----Generated at Sat Dec 20 22:36:09 2025 by rpki-client