This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json) Hash identifier: o8fVCRJHJddYAf9C7XhdNbUUyh8LEj+uQJtIL0wyzVs= Subject key identifier: 2F:EE:4D:A4:C3:CF:5E:19:56:C8:69:4B:D6:E2:27:8A:A2:A9:C3:A9 Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Certificate serial: 019B5A88B6ECA08497FAD30D454E1881B4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft Manifest number: 08AF Signing time: Fri 26 Dec 2025 12:01:07 +0000 Manifest this update: Fri 26 Dec 2025 12:01:07 +0000 Manifest next update: Sat 27 Dec 2025 12:01:07 +0000 Files and hashes: 1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: ioBjqZsYxL1DPZmxVlGhBcg2Rj87PeLqNoQb4Yoq9Ok=) 2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b6:ec:a0:84:97:fa:d3:0d:45:4e:18:81:b4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d Validity Not Before: Dec 26 12:01:07 2025 GMT Not After : Dec 27 12:01:07 2025 GMT Subject: CN=2fee4da4c3cf5e1956c8694bd6e2278aa2a9c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:61:a0:f5:35:d6:13:96:3c:4f:f7:1a:61: 28:59:29:fa:f8:fa:78:b4:2c:03:17:8d:b5:32:d9: da:b4:6e:05:43:77:fe:82:cb:0e:26:36:fc:7b:11: 42:de:36:ac:f3:94:3c:38:c1:9a:66:f3:f1:95:37: 3a:84:55:7f:58:eb:44:77:cd:f1:4a:55:df:5f:03: f9:c8:2b:35:2e:33:93:bb:7a:b6:3f:19:96:ab:42: 5c:a3:7f:f4:cb:f5:8a:a9:0d:74:d9:eb:96:06:b0: 56:c2:13:1a:59:f7:04:0c:91:9e:77:0d:23:7e:b6: 27:9e:15:09:9d:75:43:3a:8f:42:cb:d7:17:6f:88: b8:05:9f:45:ad:94:35:d0:36:47:72:99:fd:c0:cb: ed:1a:66:0a:d6:cc:41:ea:12:b0:d2:cb:32:70:49: 0e:d6:a2:06:bd:ae:1b:ff:ba:e0:39:be:d1:6c:73: 3e:56:55:d5:7e:ea:1f:81:d5:8e:d5:6b:7a:99:d7: 1c:84:90:ab:43:39:d7:a8:8f:7a:64:28:9e:bb:cf: 43:b3:1c:76:36:51:ee:75:aa:9a:ab:d4:6c:d5:2f: a6:2a:87:19:6b:3c:5d:8b:e6:11:b0:3f:bb:cc:7d: 50:87:ba:f1:7a:aa:8a:50:ef:e7:d1:e9:2f:09:32: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:4D:A4:C3:CF:5E:19:56:C8:69:4B:D6:E2:27:8A:A2:A9:C3:A9 X509v3 Authority Key Identifier: keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:98:ab:e5:60:7a:75:6e:a4:95:29:03:bd:9f:70:c2:5b:c3: c3:54:f8:1d:bf:83:0f:8d:13:44:a4:81:eb:64:70:cd:09:59: b0:09:2e:51:76:f2:9d:73:05:22:d2:15:c9:47:67:ad:09:fa: a3:fe:e6:2d:85:35:94:7f:e3:77:92:18:fc:03:f5:56:fb:e9: d4:da:3a:30:60:ef:89:7c:c2:c7:5c:77:3a:b8:c7:d6:0a:c8: 02:42:d4:b4:07:aa:bb:1b:8c:b6:b7:13:3a:32:53:8d:24:cd: 62:c4:3e:a9:25:f6:f2:7d:88:26:88:37:aa:7e:cc:75:3b:df: 31:5c:0b:e3:0e:70:a9:1e:bb:a0:73:ff:a8:9e:31:84:93:ee: 50:4f:b0:04:09:2f:a0:68:78:8e:f0:8d:fa:20:fe:0f:11:78: a9:f6:6a:6b:cc:fd:34:74:e8:f6:6a:89:79:00:2b:2d:32:c0: 9e:0a:e3:9f:28:bf:a6:d2:b6:5f:2b:a4:c3:f6:96:5f:fa:9e: cf:b9:17:2f:2c:92:ae:5e:f2:95:70:ea:c3:19:f4:d8:32:18: 89:62:fa:cf:01:ba:ff:20:ac:f5:29:50:ea:70:e0:08:5a:25: 5a:9f:da:74:c9:b2:81:8b:41:04:2d:d6:7b:0a:f6:5e:ff:10: 8b:90:07:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLbsoISX+tMNRU4YgbT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGZkY2E3M2NkNjRkNzVlNjU2ZGQwYTNhNDQyN2VkNjE5 ODJhM2QwHhcNMjUxMjI2MTIwMTA3WhcNMjUxMjI3MTIwMTA3WjAzMTEwLwYDVQQD EygyZmVlNGRhNGMzY2Y1ZTE5NTZjODY5NGJkNmUyMjc4YWEyYTljM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdhoPU11hOWPE/3GmEoWSn6+Pp4 tCwDF421MtnatG4FQ3f+gssOJjb8exFC3jas85Q8OMGaZvPxlTc6hFV/WOtEd83x SlXfXwP5yCs1LjOTu3q2PxmWq0Jco3/0y/WKqQ102euWBrBWwhMaWfcEDJGedw0j frYnnhUJnXVDOo9Cy9cXb4i4BZ9FrZQ10DZHcpn9wMvtGmYK1sxB6hKw0ssycEkO 1qIGva4b/7rgOb7RbHM+VlXVfuofgdWO1Wt6mdcchJCrQznXqI96ZCieu89Dsxx2 NlHudaqaq9Rs1S+mKocZazxdi+YRsD+7zH1Qh7rxeqqKUO/n0ekvCTKy1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/uTaTDz14ZVshpS9biJ4qiqcOpMB8GA1UdIwQY MBaAFC3f3Kc81k115lbdCjpEJ+1hmCo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEt MDhmMTdjNDEwNzY1LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kNDFjNGEtOWJlZi00NzM3LTk1YTEtMDhmMTdjNDEwNzY1 LzEvTGRfY3B6eldUWFhtVnQwS09rUW43V0dZS2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZir5WB6 dW6klSkDvZ9wwlvDw1T4Hb+DD40TRKSB62RwzQlZsAkuUXbynXMFItIVyUdnrQn6 o/7mLYU1lH/jd5IY/AP1Vvvp1No6MGDviXzCx1x3OrjH1grIAkLUtAequxuMtrcT OjJTjSTNYsQ+qSX28n2IJog3qn7MdTvfMVwL4w5wqR67oHP/qJ4xhJPuUE+wBAkv oGh4jvCN+iD+DxF4qfZqa8z9NHTo9mqJeQArLTLAngrjnyi/ptK2Xyukw/aWX/qe z7kXLyySrl7ylXDqwxn02DIYiWL6zwG6/yCs9SlQ6nDgCFolWp/adMmygYtBBC3W ewr2Xv8Qi5AHcw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:22 2025 by rpki-client