This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json) Hash identifier: LnTQb7TjDZwh5n0dLWWMApnDIjzZFVC3TiAcAHQ+cuY= Subject key identifier: 3C:10:3A:BA:3F:6A:43:30:DE:20:9C:57:0B:22:4F:74:16:63:4E:93 Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Certificate serial: 019AF3F795D62531B0F77BF9A5859CB23A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: hfUGoqGE/wBeOXKEhwunz0tCVo2Mhpt8+EcQnL+Fe6Q=) 2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:95:d6:25:31:b0:f7:7b:f9:a5:85:9c:b2:3a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=3c103aba3f6a4330de209c570b224f7416634e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:8d:bc:40:42:b1:5b:f3:bf:dd:18:0a:63: 79:7b:e9:22:21:5d:83:f5:46:70:bb:3f:0f:6d:36: 38:02:15:2e:7f:4e:56:6b:07:21:cc:b0:d1:0d:a5: 02:b9:b0:92:b1:2d:a4:45:2e:ee:4f:06:bd:96:35: c7:0a:85:af:f3:88:af:f7:69:d0:71:84:ab:d1:88: 46:c0:34:6c:78:95:b9:05:05:be:a2:12:b1:c8:2c: 51:11:61:1f:b0:6a:07:1f:28:2d:5e:d0:a0:ef:1f: ed:3b:32:06:fc:36:07:a3:14:57:ab:3c:09:e4:57: cc:80:93:4f:61:0f:0c:95:91:00:44:ed:c5:d9:c6: dc:4d:44:03:e1:76:3e:52:9d:e1:84:7b:be:88:46: 0e:d3:3c:49:e9:97:95:ed:b9:7b:ef:d6:b9:d5:fc: 40:87:cf:ee:77:ce:e9:34:bf:f3:b8:fe:17:70:7e: 7f:3f:b4:75:9b:98:f4:e8:6f:d2:c2:cf:11:d5:fb: 75:73:e5:7e:1b:78:6b:2e:18:ab:1f:2e:13:4f:93: b0:68:6e:2c:d6:f1:3d:89:48:30:c7:73:ae:2b:e2: a9:da:33:6b:2a:d7:c5:9b:c5:16:30:7d:96:e8:5b: 73:35:4a:42:21:e6:1d:a8:2c:a1:9d:af:8c:56:16: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:10:3A:BA:3F:6A:43:30:DE:20:9C:57:0B:22:4F:74:16:63:4E:93 X509v3 Authority Key Identifier: keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:10:29:48:c6:8b:20:de:87:6d:14:d2:52:d4:08:c1:dc:ac: ce:1a:ce:c2:80:2c:8f:11:31:ca:be:42:43:58:5f:bb:89:73: 41:fd:37:00:e6:af:9d:9e:d2:ec:14:a0:63:09:d2:04:e5:d1: 4c:33:93:57:b7:92:06:84:32:50:5e:e0:cc:89:84:97:a4:74: bc:5f:40:a3:5c:1a:61:ea:ee:3c:c9:e4:d3:ef:72:40:84:a5: 12:84:d4:ba:4c:88:27:3d:8f:b4:e9:c3:f9:91:80:24:1b:f4: 7e:6f:22:db:0a:ca:6e:a5:08:1c:72:4f:89:76:e5:13:41:21: 50:ca:37:03:b8:69:53:80:99:57:a7:c5:f3:9d:ea:cb:0d:fa: 02:65:69:c5:45:73:c5:31:c0:ab:ae:b5:81:3a:48:19:04:b8: 61:dd:3f:0f:04:88:ca:2b:98:35:f6:2c:11:f3:1d:5f:00:22: 6f:77:80:a3:3c:b9:4c:2d:6e:42:27:67:23:ba:9f:94:96:e0: 7d:86:ac:22:21:4b:99:f1:8e:19:a7:db:f0:e6:16:02:9d:5b: 33:0e:3e:b9:00:41:4d:36:75:40:97:96:36:5c:5c:98:17:e2: 5a:eb:63:68:94:76:83:a8:69:8f:e5:85:18:90:07:38:5c:3e: 8d:b5:dd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95XWJTGw93v5pYWcsjphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh ZGVjMDQwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EygzYzEwM2FiYTNmNmE0MzMwZGUyMDljNTcwYjIyNGY3NDE2NjM0ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukaNvEBCsVvzv90YCmN5e+kiIV2D 9UZwuz8PbTY4AhUuf05WawchzLDRDaUCubCSsS2kRS7uTwa9ljXHCoWv84iv92nQ cYSr0YhGwDRseJW5BQW+ohKxyCxREWEfsGoHHygtXtCg7x/tOzIG/DYHoxRXqzwJ 5FfMgJNPYQ8MlZEARO3F2cbcTUQD4XY+Up3hhHu+iEYO0zxJ6ZeV7bl779a51fxA h8/ud87pNL/zuP4XcH5/P7R1m5j06G/Sws8R1ft1c+V+G3hrLhirHy4TT5OwaG4s 1vE9iUgwx3OuK+Kp2jNrKtfFm8UWMH2W6FtzNUpCIeYdqCyhna+MVhatxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwQOro/akMw3iCcVwsiT3QWY06TMB8GA1UdIwQY MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxApSMaL IN6HbRTSUtQIwdyszhrOwoAsjxExyr5CQ1hfu4lzQf03AOavnZ7S7BSgYwnSBOXR TDOTV7eSBoQyUF7gzImEl6R0vF9Ao1waYeruPMnk0+9yQISlEoTUukyIJz2PtOnD +ZGAJBv0fm8i2wrKbqUIHHJPiXblE0EhUMo3A7hpU4CZV6fF853qyw36AmVpxUVz xTHAq661gTpIGQS4Yd0/DwSIyiuYNfYsEfMdXwAib3eAozy5TC1uQidnI7qflJbg fYasIiFLmfGOGafb8OYWAp1bMw4+uQBBTTZ1QJeWNlxcmBfiWutjaJR2g6hpj+WF GJAHOFw+jbXdPw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:29 2025 by rpki-client