This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft File: LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json) Hash identifier: LKuP5iIpiaXA0RZ9Dk5z5dfkm87zAI8db6A5spSWly8= Subject key identifier: A7:D0:D8:78:59:FD:53:35:FE:3A:86:29:B8:0D:5F:A8:A4:73:4F:01 Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A Certificate issuer: /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a Certificate serial: 019B19BC80B4924E9D34FD6E0CBACD6C4DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft Manifest number: 12B7 Signing time: Sat 13 Dec 2025 22:02:22 +0000 Manifest this update: Sat 13 Dec 2025 22:02:22 +0000 Manifest next update: Sun 14 Dec 2025 22:02:22 +0000 Files and hashes: 1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: DV76j1iUSYrN4betdV+3Zfa/5hI8Y2UuG+HORlT5K4U=) 2: Rb7F4D-VQenGCJGFIQ0pL_-8SdI.roa (hash: KCwYXkc96nmO8iiK2Z3c2R72L9yE00WdCTlXlazDdHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:80:b4:92:4e:9d:34:fd:6e:0c:ba:cd:6c:4d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a Validity Not Before: Dec 13 22:02:22 2025 GMT Not After : Dec 14 22:02:22 2025 GMT Subject: CN=a7d0d87859fd5335fe3a8629b80d5fa8a4734f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:5b:5e:61:89:82:05:b5:ea:73:55:e6:f0: 6e:2a:92:59:e6:a1:a7:72:94:1e:b3:b1:53:e4:ae: 48:1b:fd:62:ad:86:81:b1:f7:5c:f6:fc:99:99:21: 9e:61:f0:0c:94:54:c0:79:e9:1f:ed:02:52:c2:22: b1:8f:8f:d2:92:18:1a:47:48:18:cd:69:80:5e:80: 2b:b1:a4:23:e4:ea:ad:c3:1e:6c:e1:3e:63:b9:67: 91:0e:9e:6b:63:53:21:b7:8d:f6:7f:6c:e3:b6:a6: 85:74:ef:34:dd:d2:27:a8:7e:f3:e5:1b:53:2b:27: de:07:3d:40:ec:33:c0:23:f9:15:db:71:f0:f0:25: e6:79:a3:95:67:10:5e:27:2c:e9:a0:32:7a:93:1f: 42:df:3d:4f:81:d1:22:26:94:24:5a:67:fe:82:e9: 5f:95:68:ab:25:8a:ce:e2:77:ce:3f:eb:7f:fd:53: 3a:9c:9e:a8:c6:87:b6:93:eb:37:66:e9:26:f1:b0: b1:f3:f2:81:0a:1d:81:90:52:b6:cc:3d:c0:38:9d: f9:e7:a0:60:9f:57:89:4c:a7:7d:a8:3e:7a:6f:e2: 20:f1:a4:9b:fc:48:17:35:85:28:95:b1:76:a9:b1: 8b:18:e5:24:a1:87:cd:88:9e:42:db:e4:a9:07:70: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D0:D8:78:59:FD:53:35:FE:3A:86:29:B8:0D:5F:A8:A4:73:4F:01 X509v3 Authority Key Identifier: keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:19:72:f3:f4:9b:f4:ff:6b:e1:77:c0:93:e5:87:0b:b3: a9:11:71:34:a7:81:ec:4d:95:03:dd:27:a2:9c:a9:b2:b5:f6: 92:fa:6f:83:e4:9c:ed:38:d1:09:1b:d6:eb:11:92:43:02:02: 3c:4a:b8:e0:8c:26:72:40:70:c5:1d:f3:f3:97:a9:51:75:b1: 80:c4:07:d1:9a:10:5b:87:14:fb:41:aa:48:89:15:eb:4d:04: 03:1c:02:c8:b4:78:1c:62:79:36:0c:ec:8e:35:a1:82:f2:ab: ba:19:fb:9e:50:30:2d:7c:bd:33:f8:3a:65:70:5e:b1:b1:22: 48:26:ba:df:2d:dd:68:81:99:f9:02:ff:ab:7d:8c:e9:99:0f: e7:db:5f:47:f7:66:51:d8:13:ea:31:58:36:53:cc:15:a6:bf: e4:91:dd:a4:0f:88:39:3f:48:84:db:ee:bb:69:a7:af:66:f0: 64:40:e0:79:a9:cc:b3:b8:f0:73:af:8a:be:ce:af:f2:a9:35: a3:3d:42:ec:b3:3c:23:03:16:23:cb:e8:f0:32:90:56:05:b8: 22:89:38:f9:0c:aa:ac:7b:d2:0c:9b:0b:39:bb:5f:7d:ec:50: da:38:ad:64:51:a6:c0:06:b3:7e:3e:16:28:02:1d:83:f8:61: 63:ba:eb:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvIC0kk6dNP1uDLrNbE3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTc0Mjk2ZmNlOGQyMGJlZmExODc5OWRhZTZlYzc4MzFk NjFjNWEwHhcNMjUxMjEzMjIwMjIyWhcNMjUxMjE0MjIwMjIyWjAzMTEwLwYDVQQD EyhhN2QwZDg3ODU5ZmQ1MzM1ZmUzYTg2MjliODBkNWZhOGE0NzM0ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBNbXmGJggW16nNV5vBuKpJZ5qGn cpQes7FT5K5IG/1irYaBsfdc9vyZmSGeYfAMlFTAeekf7QJSwiKxj4/SkhgaR0gY zWmAXoArsaQj5Oqtwx5s4T5juWeRDp5rY1Mht432f2zjtqaFdO803dInqH7z5RtT KyfeBz1A7DPAI/kV23Hw8CXmeaOVZxBeJyzpoDJ6kx9C3z1PgdEiJpQkWmf+gulf lWirJYrO4nfOP+t//VM6nJ6oxoe2k+s3Zukm8bCx8/KBCh2BkFK2zD3AOJ3556Bg n1eJTKd9qD56b+Ig8aSb/EgXNYUolbF2qbGLGOUkoYfNiJ5C2+SpB3DYJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfQ2HhZ/VM1/jqGKbgNX6ikc08BMB8GA1UdIwQY MBaAFC7nQpb86NIL76GHmdrm7Hgx1hxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVkQ2x2em8wZ3Z2b1llWjJ1YnNlREhXSEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNzNiM2ItNWI1Yy00YTc3LThiODAt ZDJiNjk3YWVmYTAyLzEvTHVkQ2x2em8wZ3Z2b1llWjJ1YnNlREhXSEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jNzNiM2ItNWI1Yy00YTc3LThiODAtZDJiNjk3YWVmYTAy LzEvTHVkQ2x2em8wZ3Z2b1llWjJ1YnNlREhXSEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBoZcvP0 m/T/a+F3wJPlhwuzqRFxNKeB7E2VA90nopypsrX2kvpvg+Sc7TjRCRvW6xGSQwIC PEq44IwmckBwxR3z85epUXWxgMQH0ZoQW4cU+0GqSIkV600EAxwCyLR4HGJ5Ngzs jjWhgvKruhn7nlAwLXy9M/g6ZXBesbEiSCa63y3daIGZ+QL/q32M6ZkP59tfR/dm UdgT6jFYNlPMFaa/5JHdpA+IOT9IhNvuu2mnr2bwZEDgeanMs7jwc6+Kvs6v8qk1 oz1C7LM8IwMWI8vo8DKQVgW4Iok4+QyqrHvSDJsLObtffexQ2jitZFGmwAazfj4W KAIdg/hhY7rrmQ== -----END CERTIFICATE-----Generated at Sun Dec 14 05:12:49 2025 by rpki-client