This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json) Hash identifier: GvrnGSgg/XPSkbeIhS62cUmyftvYh1+aY5BPkHJ44QU= Subject key identifier: 78:EF:77:A9:29:9F:6F:D5:77:9A:60:10:8A:3C:A0:F7:48:4E:75:68 Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31 Certificate serial: 019B3532A492C1D7850B4B658966D13B507B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft Manifest number: 0DA0 Signing time: Fri 19 Dec 2025 06:01:09 +0000 Manifest this update: Fri 19 Dec 2025 06:01:09 +0000 Manifest next update: Sat 20 Dec 2025 06:01:09 +0000 Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: 31v3Aotcqzp66NCnd+4wi3L/s16c2Es7NsL0kyYQbCw=) 2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:a4:92:c1:d7:85:0b:4b:65:89:66:d1:3b:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31 Validity Not Before: Dec 19 06:01:09 2025 GMT Not After : Dec 20 06:01:09 2025 GMT Subject: CN=78ef77a9299f6fd5779a60108a3ca0f7484e7568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:3d:35:ff:3c:e0:38:ae:6a:7d:57:46:56: 4e:21:82:08:60:e1:86:f1:32:c6:07:0b:6f:b3:c4: a9:7a:9f:d4:49:f7:8d:18:a6:50:3f:60:bb:31:4c: 87:6b:e7:70:da:7a:76:71:75:f6:95:26:1a:06:76: f6:c6:e5:3b:b9:e4:a6:87:0a:b0:4b:d9:3b:65:90: 1d:f4:46:a5:13:9e:6f:e8:0e:8d:bf:d8:c6:8a:ef: 99:b9:f4:59:bc:82:6a:cb:f1:6d:b7:32:20:31:89: ef:47:85:a2:23:08:5c:c8:9e:e6:43:e7:22:93:42: b4:03:53:c6:c7:b8:d9:c6:39:d8:00:01:73:5f:ad: d7:3f:5a:59:e6:f2:af:27:0d:4a:7c:a2:57:f6:6c: 81:c4:d6:ae:81:37:f7:d3:07:c0:c3:4f:f8:0b:a3: 48:84:4a:5f:74:f3:cb:37:e4:b5:68:26:c1:19:a8: 94:98:c2:20:7d:59:27:4c:35:5b:66:be:a7:9a:06: 89:33:fd:97:d6:16:02:40:20:85:30:9d:54:33:cf: 1e:a2:e7:ad:4f:2b:52:07:9c:0f:6f:ce:07:1f:86: 8b:3c:4d:ac:78:c1:6f:33:ab:1a:90:84:f4:c1:df: 7a:59:76:fa:e8:f6:a9:b8:85:3a:96:43:eb:2a:e1: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:77:A9:29:9F:6F:D5:77:9A:60:10:8A:3C:A0:F7:48:4E:75:68 X509v3 Authority Key Identifier: keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:34:fc:39:9d:df:be:c3:3b:95:36:eb:d0:12:d8:56:8d:5a: 29:26:fe:31:1b:4f:f1:a4:05:8b:1c:f8:17:7a:e2:3a:1e:38: a2:e8:97:48:40:58:55:97:40:9a:7a:00:74:d5:80:68:27:af: db:cf:e7:f9:5b:f0:f0:2d:81:e9:c7:0f:f4:ca:1f:b2:7e:be: 5a:32:45:ec:1d:6b:5b:a7:62:d4:67:35:1b:62:33:3c:11:47: 43:02:47:a4:c9:ad:7f:61:77:04:48:06:a8:50:b7:0b:a9:78: 07:7e:8d:14:3f:c0:25:c5:bc:59:bc:bc:a1:86:93:c3:0c:d8: fa:b3:d3:90:ba:40:7d:87:7e:27:e5:20:4a:7f:4a:08:18:f2: 5d:cb:80:26:7b:21:18:72:31:5d:13:19:6a:e5:86:62:b8:8d: 31:e5:61:d6:19:8e:99:ca:f9:f8:5d:2f:0f:64:b2:07:91:61: 72:f6:04:9c:05:37:3d:df:a3:b0:a6:d8:e6:24:78:7e:c9:1e: 78:eb:f2:7b:f1:1c:27:18:f0:92:ca:9c:b1:33:3c:c7:db:c2: 8c:94:b6:aa:7f:d8:ef:d1:c9:0b:9b:f8:e1:b4:ca:e7:25:71: 1d:60:76:f0:fb:4b:6c:25:91:00:92:d4:d6:fa:65:e4:73:e0: 16:b9:33:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MqSSwdeFC0tliWbRO1B7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYTc2MjZkNjAwZGFmNzU5Mzc2YTY1MDdlMWQ2ODQzODY5 OTJkMzEwHhcNMjUxMjE5MDYwMTA5WhcNMjUxMjIwMDYwMTA5WjAzMTEwLwYDVQQD Eyg3OGVmNzdhOTI5OWY2ZmQ1Nzc5YTYwMTA4YTNjYTBmNzQ4NGU3NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7c9Nf884Diuan1XRlZOIYIIYOGG 8TLGBwtvs8Spep/USfeNGKZQP2C7MUyHa+dw2np2cXX2lSYaBnb2xuU7ueSmhwqw S9k7ZZAd9EalE55v6A6Nv9jGiu+ZufRZvIJqy/FttzIgMYnvR4WiIwhcyJ7mQ+ci k0K0A1PGx7jZxjnYAAFzX63XP1pZ5vKvJw1KfKJX9myBxNaugTf30wfAw0/4C6NI hEpfdPPLN+S1aCbBGaiUmMIgfVknTDVbZr6nmgaJM/2X1hYCQCCFMJ1UM88eouet TytSB5wPb84HH4aLPE2seMFvM6sakIT0wd96WXb66PapuIU6lkPrKuFoXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjvd6kpn2/Vd5pgEIo8oPdITnVoMB8GA1UdIwQY MBaAFC6nYm1gDa91k3amUH4daEOGmS0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt NmU1NjIxMmNkZjVjLzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj LzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTT8OZ3f vsM7lTbr0BLYVo1aKSb+MRtP8aQFixz4F3riOh44ouiXSEBYVZdAmnoAdNWAaCev 28/n+Vvw8C2B6ccP9Mofsn6+WjJF7B1rW6di1Gc1G2IzPBFHQwJHpMmtf2F3BEgG qFC3C6l4B36NFD/AJcW8Wby8oYaTwwzY+rPTkLpAfYd+J+UgSn9KCBjyXcuAJnsh GHIxXRMZauWGYriNMeVh1hmOmcr5+F0vD2SyB5FhcvYEnAU3Pd+jsKbY5iR4fske eOvye/EcJxjwksqcsTM8x9vCjJS2qn/Y79HJC5v44bTK5yVxHWB28PtLbCWRAJLU 1vpl5HPgFrkzcA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:38 2025 by rpki-client