This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json) Hash identifier: cs8eIJhbVnMT+eXjgZ3TlUiY4UAqEgxo4YhaC6b+PsA= Subject key identifier: 00:2A:71:77:EF:50:24:3D:2E:3F:B6:A4:D0:EB:77:5E:00:82:28:1F Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Certificate serial: 019B18A8E6AF5D1CE62451A01486A009E6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 17:01:20 +0000 Manifest this update: Sat 13 Dec 2025 17:01:20 +0000 Manifest next update: Sun 14 Dec 2025 17:01:20 +0000 Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: dwnCXEfkLRsSbDRFCEIip9MmSNduSlvsdorf7YVXDxA=) 2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:e6:af:5d:1c:e6:24:51:a0:14:86:a0:09:e6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90 Validity Not Before: Dec 13 17:01:20 2025 GMT Not After : Dec 14 17:01:20 2025 GMT Subject: CN=002a7177ef50243d2e3fb6a4d0eb775e0082281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:79:12:f5:f6:75:c9:b3:5d:86:b0:c0:13: 1a:fa:ed:59:db:ba:3a:15:07:85:c4:a4:ed:8c:b3: bd:0b:48:7c:b2:0f:ec:43:52:ce:7e:e4:b6:fe:4d: d0:32:cd:a3:2f:a3:20:7d:c4:20:ab:e2:7f:b1:26: 6b:44:b4:61:9a:57:34:a3:02:50:2d:5e:69:8b:41: 38:e4:6d:48:c3:7c:cf:92:ff:20:7c:05:94:3b:eb: 59:78:1b:d2:35:c5:c8:f6:6c:07:e0:61:c4:b5:13: 22:9c:a6:2e:2a:fc:0f:c3:e6:f2:bd:42:58:7b:ac: b3:4c:d9:d6:e7:12:4e:87:05:a0:b4:a7:bf:00:1e: ec:d4:23:15:bb:7b:d5:3f:e7:50:01:7e:76:47:37: c3:b6:35:d6:5f:2e:80:b9:7c:2e:36:48:09:0c:06: 37:df:a2:24:c7:3a:17:33:d4:d8:13:97:70:0e:cb: a2:82:a1:c2:30:2d:8a:b8:b6:09:e7:5a:e9:f3:83: 37:95:9e:e7:95:e6:47:ab:04:d0:c0:fe:9c:c8:03: 25:99:53:a8:2b:ce:6d:bd:d4:4c:da:95:ef:63:e1: 4d:52:1a:4f:94:e1:f4:08:cf:5e:0a:05:ee:6a:2e: 3d:0d:8c:c8:0c:eb:6f:fc:e1:b9:a0:94:c6:f5:f5: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2A:71:77:EF:50:24:3D:2E:3F:B6:A4:D0:EB:77:5E:00:82:28:1F X509v3 Authority Key Identifier: keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3a:4e:f2:4f:7e:56:37:fc:95:5f:10:2d:ea:50:bf:06:84: f9:c2:c8:15:8c:4f:88:3d:57:a1:95:b8:44:04:5f:28:c4:aa: eb:ef:7d:4b:6f:ae:fb:be:b6:f5:1d:40:2b:c0:07:a4:8a:88: 30:b3:c8:7c:ea:e9:2d:18:80:f6:da:df:00:cc:4e:ce:67:77: 2f:31:2b:28:f3:68:03:3a:d6:37:1d:12:8a:08:a9:11:ce:23: ce:70:6d:46:3b:59:a3:c6:4b:a6:96:c0:4d:41:8a:69:97:98: 8c:de:e7:39:b5:15:49:7c:32:f3:96:3d:3e:ff:3a:6c:35:d2: 54:f2:b0:19:50:3f:2c:32:89:df:c4:75:46:49:63:8b:6c:3b: 14:5c:a6:4f:d5:32:40:d6:e8:63:3d:7f:56:00:de:14:d4:4c: 85:4e:59:eb:bc:c2:9e:66:69:03:ca:a8:eb:db:81:30:4d:57: 97:7a:7d:25:0f:63:9b:65:96:7e:d6:c8:3d:35:76:cf:fa:4a: 8b:97:3d:bd:ee:4e:89:92:cc:a1:4b:75:e1:44:3e:c6:f1:fd: 35:a7:9b:6e:f5:83:a5:ae:18:c5:2b:c9:12:e4:7c:bd:02:8a: e5:d1:98:ab:30:fb:7f:f2:8d:61:34:01:c5:b6:16:bb:f9:c7: 90:a3:02:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqOavXRzmJFGgFIagCea3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0 ZDNjOTAwHhcNMjUxMjEzMTcwMTIwWhcNMjUxMjE0MTcwMTIwWjAzMTEwLwYDVQQD EygwMDJhNzE3N2VmNTAyNDNkMmUzZmI2YTRkMGViNzc1ZTAwODIyODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphV5EvX2dcmzXYawwBMa+u1Z27o6 FQeFxKTtjLO9C0h8sg/sQ1LOfuS2/k3QMs2jL6MgfcQgq+J/sSZrRLRhmlc0owJQ LV5pi0E45G1Iw3zPkv8gfAWUO+tZeBvSNcXI9mwH4GHEtRMinKYuKvwPw+byvUJY e6yzTNnW5xJOhwWgtKe/AB7s1CMVu3vVP+dQAX52RzfDtjXWXy6AuXwuNkgJDAY3 36IkxzoXM9TYE5dwDsuigqHCMC2KuLYJ51rp84M3lZ7nleZHqwTQwP6cyAMlmVOo K85tvdRM2pXvY+FNUhpPlOH0CM9eCgXuai49DYzIDOtv/OG5oJTG9fU/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAqcXfvUCQ9Lj+2pNDrd14AgigfMB8GA1UdIwQY MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozpO8k9+ Vjf8lV8QLepQvwaE+cLIFYxPiD1XoZW4RARfKMSq6+99S2+u+7629R1AK8AHpIqI MLPIfOrpLRiA9trfAMxOzmd3LzErKPNoAzrWNx0SigipEc4jznBtRjtZo8ZLppbA TUGKaZeYjN7nObUVSXwy85Y9Pv86bDXSVPKwGVA/LDKJ38R1Rklji2w7FFymT9Uy QNboYz1/VgDeFNRMhU5Z67zCnmZpA8qo69uBME1Xl3p9JQ9jm2WWftbIPTV2z/pK i5c9ve5OiZLMoUt14UQ+xvH9NaebbvWDpa4YxSvJEuR8vQKK5dGYqzD7f/KNYTQB xbYWu/nHkKMCxw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:43 2025 by rpki-client