This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json) Hash identifier: ssAgkEKEjZdFVHrMlOsPK7qG6J82PKNaWWC3kliV9bc= Subject key identifier: 70:A4:7D:E7:02:C0:D6:CE:97:B5:DE:71:1E:43:16:03:CC:D2:60:BE Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Certificate serial: 019B1CF3414FC74335EDD8C0DAF960718B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft Manifest number: 03C8 Signing time: Sun 14 Dec 2025 13:01:02 +0000 Manifest this update: Sun 14 Dec 2025 13:01:02 +0000 Manifest next update: Mon 15 Dec 2025 13:01:02 +0000 Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: AceFkKeIYMjxX/9aOM4LE0As1rdXbwaI0AF7xxmHmO4=) 2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:41:4f:c7:43:35:ed:d8:c0:da:f9:60:71:8b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8 Validity Not Before: Dec 14 13:01:02 2025 GMT Not After : Dec 15 13:01:02 2025 GMT Subject: CN=70a47de702c0d6ce97b5de711e431603ccd260be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:5c:80:6b:60:48:c5:8f:f1:af:bc:bc:6d: e2:3f:88:f2:2e:c9:d3:05:3d:4d:92:02:e1:e6:16: 93:cc:84:31:a4:89:25:dd:ad:40:a1:ad:f2:e0:a4: f8:e9:42:11:77:82:3e:47:5a:92:82:19:26:50:d5: 5c:d6:31:b1:3f:9c:41:a9:42:b4:8b:40:e7:f5:f0: 59:63:dd:75:52:50:5e:1e:bc:14:99:b2:ff:d6:e5: fc:23:22:a0:bb:c0:90:1a:4c:fe:65:1f:02:21:00: 67:93:bd:03:28:b0:82:ca:a5:6f:3a:d6:18:33:cf: ba:c2:f7:e5:4e:bc:0e:a1:a7:2f:3a:27:7c:76:dc: 0b:db:9b:c2:e8:cf:b6:91:98:ba:78:51:bd:c7:80: f7:3a:f2:7f:89:2f:d0:75:4a:2b:72:ee:9c:56:89: 8e:fb:3d:82:f8:79:d5:69:7d:01:af:4c:0e:e8:a7: 85:d1:64:27:52:ff:b1:40:9a:07:c1:68:6f:6d:bb: 1b:cd:17:83:c8:be:ad:12:0c:dc:75:f1:5d:9d:2b: 65:1a:cb:e9:c4:16:e5:76:69:3a:8c:22:0e:c7:45: 0e:2d:41:b9:b3:7a:14:55:8c:c3:55:bc:e6:9e:a6: 01:43:82:62:e6:10:9d:52:a9:ed:59:d5:c3:00:c3: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:7D:E7:02:C0:D6:CE:97:B5:DE:71:1E:43:16:03:CC:D2:60:BE X509v3 Authority Key Identifier: keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3a:78:82:a3:34:b1:9b:f6:eb:39:98:6a:77:cd:e2:16:f9: 79:40:3a:42:eb:ec:e0:31:fe:54:74:27:d4:48:ba:6c:98:80: c6:bd:14:1d:4b:de:bc:71:17:7f:dc:1e:df:ef:57:8a:61:6c: 8d:a5:57:23:e6:96:e9:80:05:b0:05:d9:25:91:75:41:e8:87: 86:83:c3:95:ed:da:6d:1d:92:5c:bc:bc:8d:53:bc:cc:52:11: ee:db:8c:e8:38:6e:c5:8b:5a:0a:b4:e4:4a:1d:a2:5b:39:3d: 6f:1f:3f:d5:6f:db:c5:2f:89:6c:7b:64:f4:3c:4d:29:ea:b6: 81:09:d5:ae:e2:18:94:3c:82:38:aa:ef:e2:7b:b6:0b:8c:f3: fb:9e:9d:86:1a:87:9a:17:b1:28:91:6c:d0:c1:7c:36:92:8a: f8:65:1e:d1:1c:4f:72:bf:3a:dc:70:a6:b7:c3:b4:4f:01:9f: 37:e8:3e:78:f3:7f:d6:4e:4a:00:2b:5f:9f:12:45:f2:9a:85: ad:db:66:56:b8:3d:4b:a3:8e:ed:4c:fc:a8:0c:d9:61:07:dc: fc:f6:ed:61:14:4a:f4:bb:6c:a4:21:09:28:1e:02:49:d0:b3: 5e:85:26:c3:da:81:41:b9:1c:92:a3:dd:72:97:29:2c:53:8f: 6b:5a:de:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc80FPx0M17djA2vlgcYsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm NDYyYjgwHhcNMjUxMjE0MTMwMTAyWhcNMjUxMjE1MTMwMTAyWjAzMTEwLwYDVQQD Eyg3MGE0N2RlNzAyYzBkNmNlOTdiNWRlNzExZTQzMTYwM2NjZDI2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU9cgGtgSMWP8a+8vG3iP4jyLsnT BT1NkgLh5haTzIQxpIkl3a1Aoa3y4KT46UIRd4I+R1qSghkmUNVc1jGxP5xBqUK0 i0Dn9fBZY911UlBeHrwUmbL/1uX8IyKgu8CQGkz+ZR8CIQBnk70DKLCCyqVvOtYY M8+6wvflTrwOoacvOid8dtwL25vC6M+2kZi6eFG9x4D3OvJ/iS/QdUorcu6cVomO +z2C+HnVaX0Br0wO6KeF0WQnUv+xQJoHwWhvbbsbzReDyL6tEgzcdfFdnStlGsvp xBbldmk6jCIOx0UOLUG5s3oUVYzDVbzmnqYBQ4Ji5hCdUqntWdXDAMMidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCkfecCwNbOl7XecR5DFgPM0mC+MB8GA1UdIwQY MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTp4gqM0 sZv26zmYanfN4hb5eUA6Quvs4DH+VHQn1Ei6bJiAxr0UHUvevHEXf9we3+9XimFs jaVXI+aW6YAFsAXZJZF1QeiHhoPDle3abR2SXLy8jVO8zFIR7tuM6DhuxYtaCrTk Sh2iWzk9bx8/1W/bxS+JbHtk9DxNKeq2gQnVruIYlDyCOKrv4nu2C4zz+56dhhqH mhexKJFs0MF8NpKK+GUe0RxPcr863HCmt8O0TwGfN+g+ePN/1k5KACtfnxJF8pqF rdtmVrg9S6OO7Uz8qAzZYQfc/PbtYRRK9LtspCEJKB4CSdCzXoUmw9qBQbkckqPd cpcpLFOPa1re2g== -----END CERTIFICATE-----Generated at Sun Dec 14 17:25:32 2025 by rpki-client