This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json) Hash identifier: TO2nOfCFTYgcFlYt28gXkkg2JTfZS73XFfSwfSGRLW4= Subject key identifier: 32:57:26:6F:71:D5:F7:22:78:0C:FA:62:22:AF:F1:74:86:0F:6B:AF Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Certificate serial: 019AF65384CF975FB49C31C5A2E5C6FAE2FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft Manifest number: 118A Signing time: Sun 07 Dec 2025 01:00:59 +0000 Manifest this update: Sun 07 Dec 2025 01:00:59 +0000 Manifest next update: Mon 08 Dec 2025 01:00:59 +0000 Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=) 2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: chIWwEH/zbIgCLMnS/NKjSK3g7livIzcsLy7zxnRdpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:84:cf:97:5f:b4:9c:31:c5:a2:e5:c6:fa:e2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a Validity Not Before: Dec 7 01:00:59 2025 GMT Not After : Dec 8 01:00:59 2025 GMT Subject: CN=3257266f71d5f722780cfa6222aff174860f6baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:8c:b6:36:1b:a3:0a:c7:53:3e:ce:47:8b: af:40:49:9f:17:74:87:7e:cf:4d:63:18:7b:65:9d: b0:58:91:ee:c7:7e:fa:0a:a4:4b:15:c0:2a:ad:9c: e8:e9:22:18:62:36:03:40:c5:22:47:b0:1b:83:71: 8a:f7:78:a0:18:ee:6b:e1:be:3d:11:2f:68:98:34: 6d:e9:09:9f:dd:36:75:4e:fc:0e:80:e3:63:e5:ce: 35:1d:b8:ac:7e:69:75:62:13:fd:6d:ac:3f:0a:eb: 27:57:67:2e:49:9f:90:0c:d6:13:2c:bc:98:41:f9: 90:33:e8:0d:3b:2f:de:81:83:39:03:37:2c:12:9d: 3f:cc:2d:86:ee:89:c1:09:7f:33:18:fb:bd:69:39: 77:a7:8b:55:4e:45:18:d0:7c:43:ef:32:65:27:5d: dd:be:a5:2c:da:10:69:98:e4:5a:ac:00:11:71:f3: cb:9b:28:a0:2b:60:bc:90:e6:f8:56:6b:44:c2:ac: 88:06:84:c7:f4:91:cf:0e:11:f1:3e:a5:b8:1a:bd: be:00:98:7c:4b:ac:f1:2e:88:fb:84:67:fc:7c:93: e7:6d:02:b1:8a:b6:40:42:64:dd:e9:ad:1a:89:6e: bd:bd:ab:24:d4:cf:5e:ed:9e:cd:6b:8b:3e:17:97: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:26:6F:71:D5:F7:22:78:0C:FA:62:22:AF:F1:74:86:0F:6B:AF X509v3 Authority Key Identifier: keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:99:9a:aa:e8:a6:27:c6:4a:26:02:7b:90:ea:c5:f3:33: 76:ea:2b:38:81:92:5b:15:96:97:6a:5f:fb:29:3f:cd:10:7e: 08:48:03:44:de:b3:1d:cc:33:da:b5:49:29:ad:5e:6a:c7:b8: 0e:1c:a0:6d:6f:46:9a:a6:73:69:79:1c:4e:6e:7f:eb:43:41: 31:1e:99:16:c0:f4:0f:7e:11:6d:06:81:cb:12:e9:89:f2:54: e1:4f:2d:e7:cf:0d:81:f7:db:60:32:40:70:20:40:d2:58:c8: d9:41:9f:e3:44:7e:5c:0b:11:76:20:44:70:54:b5:7d:e0:3e: 4e:b0:b2:20:3d:da:85:78:a4:18:a3:8f:fd:95:d2:87:59:e1: b0:23:49:e0:df:8a:82:3f:04:92:fb:d9:1e:e1:60:df:9e:5d: c5:31:c5:0a:cf:df:c1:d4:db:e1:02:eb:07:46:23:48:43:8c: 21:25:e2:85:8e:9d:8e:45:7e:00:5c:1e:9d:f1:2e:54:ce:e0: 59:15:e5:9a:6a:28:9f:ce:0e:a9:0e:7f:7a:7f:19:98:17:f2: b3:82:b7:fe:d9:56:53:15:91:d0:3d:e7:1d:d3:49:6b:ec:e4: 27:e8:bf:11:c1:02:76:4f:45:8c:1c:38:8f:e1:57:31:c7:18: 45:56:10:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4TPl1+0nDHFouXG+uL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh OWYxOWEwHhcNMjUxMjA3MDEwMDU5WhcNMjUxMjA4MDEwMDU5WjAzMTEwLwYDVQQD EygzMjU3MjY2ZjcxZDVmNzIyNzgwY2ZhNjIyMmFmZjE3NDg2MGY2YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r+MtjYbowrHUz7OR4uvQEmfF3SH fs9NYxh7ZZ2wWJHux376CqRLFcAqrZzo6SIYYjYDQMUiR7Abg3GK93igGO5r4b49 ES9omDRt6Qmf3TZ1TvwOgONj5c41Hbisfml1YhP9baw/CusnV2cuSZ+QDNYTLLyY QfmQM+gNOy/egYM5AzcsEp0/zC2G7onBCX8zGPu9aTl3p4tVTkUY0HxD7zJlJ13d vqUs2hBpmORarAARcfPLmyigK2C8kOb4VmtEwqyIBoTH9JHPDhHxPqW4Gr2+AJh8 S6zxLoj7hGf8fJPnbQKxirZAQmTd6a0aiW69vask1M9e7Z7Na4s+F5foKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJXJm9x1fcieAz6YiKv8XSGD2uvMB8GA1UdIwQY MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPiZmqro pifGSiYCe5DqxfMzduorOIGSWxWWl2pf+yk/zRB+CEgDRN6zHcwz2rVJKa1ease4 DhygbW9GmqZzaXkcTm5/60NBMR6ZFsD0D34RbQaByxLpifJU4U8t588NgffbYDJA cCBA0ljI2UGf40R+XAsRdiBEcFS1feA+TrCyID3ahXikGKOP/ZXSh1nhsCNJ4N+K gj8EkvvZHuFg355dxTHFCs/fwdTb4QLrB0YjSEOMISXihY6djkV+AFwenfEuVM7g WRXlmmoon84OqQ5/en8ZmBfys4K3/tlWUxWR0D3nHdNJa+zkJ+i/EcECdk9FjBw4 j+FXMccYRVYQgA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:00 2025 by rpki-client