This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json) Hash identifier: a+oPdSKrRpGA+x5jV2J2jfpkH/a7Kg/IY8L5O0dw+64= Subject key identifier: 80:14:25:A4:DD:DB:B2:22:A2:82:FB:77:23:BD:11:1F:68:A0:E7:21 Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Certificate serial: 019AF12E97391D159F303CCDDE1E92A9485C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft Manifest number: 0A40 Signing time: Sat 06 Dec 2025 01:02:33 +0000 Manifest this update: Sat 06 Dec 2025 01:02:33 +0000 Manifest next update: Sun 07 Dec 2025 01:02:33 +0000 Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=) 2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: RKXqJG3lrGgLYPH9yxVmj07wfEY/2wcRXGyI7K9o+q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:97:39:1d:15:9f:30:3c:cd:de:1e:92:a9:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Validity Not Before: Dec 6 01:02:33 2025 GMT Not After : Dec 7 01:02:33 2025 GMT Subject: CN=801425a4dddbb222a282fb7723bd111f68a0e721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:d3:f1:a9:bc:d4:a6:18:93:d3:bf:04:4a: 03:40:61:bd:74:88:87:34:5a:95:19:cc:60:74:60: f3:de:1c:d9:83:27:5f:10:cf:70:0d:37:64:24:7c: 94:d6:14:06:1a:7b:b8:9d:cd:cd:11:32:20:69:c3: 53:d6:c5:af:e8:9a:31:b0:2a:dc:22:4b:c5:03:d5: 4c:91:d6:dd:ed:41:7f:d1:70:9d:79:b3:95:98:d8: 1f:fc:aa:14:5e:98:fd:d1:b2:ab:05:95:41:41:28: 43:f3:60:c4:ea:ef:5b:3b:b5:12:21:f7:fa:4f:83: ad:f6:72:6a:08:c9:3f:27:0b:af:98:14:f0:37:2e: 01:44:81:42:26:d8:38:d5:c7:13:9d:4d:eb:93:8c: 33:27:0b:f8:b5:c4:6a:51:04:36:d0:59:fc:3c:e0: e9:79:8b:50:82:cd:b8:e1:ac:3e:61:b6:5f:77:ee: 94:7a:38:83:f8:9d:54:28:12:47:f7:11:92:2b:a3: 77:84:6d:3e:db:ef:2e:8c:48:37:84:25:2a:32:41: c4:15:5e:69:84:8e:70:cb:eb:d8:f9:fa:98:7a:7a: 0e:a6:4a:e5:ce:0b:a8:d7:54:89:24:a7:cb:e0:64: 1f:11:27:82:7d:41:1b:90:16:28:fc:08:ba:8a:9d: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:25:A4:DD:DB:B2:22:A2:82:FB:77:23:BD:11:1F:68:A0:E7:21 X509v3 Authority Key Identifier: keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a1:58:9c:a4:81:7f:73:b8:df:4e:d3:7c:15:94:04:f1:fa: fd:da:b6:2b:49:a9:70:30:b0:0a:5e:25:e7:3e:58:c3:2e:d5: 4d:a0:7a:9e:71:13:a1:63:5b:6a:a5:12:62:16:c0:80:d9:15: cf:6b:c3:9a:0b:5b:a5:c9:f0:93:e5:d3:67:31:a4:5c:ec:c6: f2:4b:4c:d8:c2:4f:40:6b:16:df:a6:b2:a7:bf:bb:5f:1f:67: 1a:30:bd:be:19:4f:9e:0f:dc:45:8f:d3:52:ac:2d:65:99:50: 11:6f:02:30:4d:2a:84:a2:e4:b1:ea:4b:9e:3e:e5:e3:77:d3: 09:22:f5:86:ae:90:63:5c:98:c6:f0:d4:5b:ac:fe:86:9f:d3: 6b:b7:9b:e9:b4:7b:98:75:3b:2f:44:c3:65:f2:31:7b:d9:aa: df:84:fb:f4:3f:60:e6:ff:ed:e5:2a:8a:83:8a:b3:87:de:d4: 18:f5:99:57:7d:66:0a:ce:e7:67:2f:06:6b:28:4a:5f:82:21: fd:64:53:77:5c:f0:24:18:a3:15:69:31:f0:6e:28:19:9a:9e: 9c:d7:5a:37:6f:0e:0e:78:b5:2c:92:35:4b:ee:cc:8b:53:3d: 46:f5:7b:00:12:03:f1:9a:3f:ec:27:c2:3a:d5:d5:47:9e:79: 0b:b5:89:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpc5HRWfMDzN3h6SqUhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDcwYmY4MGEwN2M5ZmZjYmVmMGNkODQ2NWI0NThkNjEz ZGNjODUwHhcNMjUxMjA2MDEwMjMzWhcNMjUxMjA3MDEwMjMzWjAzMTEwLwYDVQQD Eyg4MDE0MjVhNGRkZGJiMjIyYTI4MmZiNzcyM2JkMTExZjY4YTBlNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCnT8am81KYYk9O/BEoDQGG9dIiH NFqVGcxgdGDz3hzZgydfEM9wDTdkJHyU1hQGGnu4nc3NETIgacNT1sWv6JoxsCrc IkvFA9VMkdbd7UF/0XCdebOVmNgf/KoUXpj90bKrBZVBQShD82DE6u9bO7USIff6 T4Ot9nJqCMk/JwuvmBTwNy4BRIFCJtg41ccTnU3rk4wzJwv4tcRqUQQ20Fn8PODp eYtQgs244aw+YbZfd+6UejiD+J1UKBJH9xGSK6N3hG0+2+8ujEg3hCUqMkHEFV5p hI5wy+vY+fqYenoOpkrlzguo11SJJKfL4GQfESeCfUEbkBYo/Ai6ip0sDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAUJaTd27IiooL7dyO9ER9ooOchMB8GA1UdIwQY MBaAFJXXC/gKB8n/y+8M2EZbRY1hPcyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEt NjY3OGViODFiOGIwLzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEtNjY3OGViODFiOGIw LzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaFYnKSB f3O4307TfBWUBPH6/dq2K0mpcDCwCl4l5z5Ywy7VTaB6nnEToWNbaqUSYhbAgNkV z2vDmgtbpcnwk+XTZzGkXOzG8ktM2MJPQGsW36ayp7+7Xx9nGjC9vhlPng/cRY/T UqwtZZlQEW8CME0qhKLksepLnj7l43fTCSL1hq6QY1yYxvDUW6z+hp/Ta7eb6bR7 mHU7L0TDZfIxe9mq34T79D9g5v/t5SqKg4qzh97UGPWZV31mCs7nZy8GayhKX4Ih /WRTd1zwJBijFWkx8G4oGZqenNdaN28ODni1LJI1S+7Mi1M9RvV7ABID8Zo/7CfC OtXVR555C7WJpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:47 2025 by rpki-client