This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json) Hash identifier: YRoZVK+/FyrMnzTgEkIVMZ3ek1RIJNUluuHgvHZxruU= Subject key identifier: E1:66:E8:4B:F6:83:F5:2E:CE:24:BA:47:44:8E:23:59:A5:3C:60:AD Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Certificate serial: 019B0DB6E5AFABC0DBDF5D00356DE873F068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft Manifest number: 14BB Signing time: Thu 11 Dec 2025 14:00:48 +0000 Manifest this update: Thu 11 Dec 2025 14:00:48 +0000 Manifest next update: Fri 12 Dec 2025 14:00:48 +0000 Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: j6R0YqxvkDdKgSuJARU+Ssg92Abe5d020DFAWrS9yz0=) 2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=) 3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e5:af:ab:c0:db:df:5d:00:35:6d:e8:73:f0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Validity Not Before: Dec 11 14:00:48 2025 GMT Not After : Dec 12 14:00:48 2025 GMT Subject: CN=e166e84bf683f52ece24ba47448e2359a53c60ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:e2:31:b3:e3:99:1f:d8:91:8a:76:ca:c9: a1:9b:df:ed:df:bc:fb:83:ea:74:2a:31:be:ef:da: 5e:af:00:e6:94:a1:73:28:2f:e1:a8:00:09:75:a8: c2:e5:b4:ea:cb:f4:49:4e:93:7c:cc:02:86:89:f1: ab:18:2f:a0:ce:1c:1a:01:09:5c:88:c2:06:16:68: 96:c7:f2:9a:75:cf:51:ec:9e:be:87:68:92:5a:d6: d9:01:18:e9:df:b0:6b:1d:62:f6:e7:97:ae:f0:69: c6:35:89:10:c5:18:89:25:52:ee:0c:35:8b:4f:15: 87:49:f1:5e:4d:3d:75:38:72:a2:fa:29:1d:59:ec: 9d:00:98:a4:20:8e:f4:ec:72:bf:04:4c:59:72:b7: f6:be:13:82:8f:f4:0b:08:11:6f:84:27:b9:af:fe: 17:da:43:7b:38:f2:59:75:22:a1:30:9d:ad:cc:35: 1f:f8:06:1a:21:ac:97:07:a1:df:1e:37:53:5d:57: c7:01:d7:df:ef:3e:f7:44:6e:1a:22:92:27:e9:e1: f1:61:c7:ef:d0:62:4e:d4:ec:02:a3:95:d4:18:1a: 60:e9:3f:c2:5c:83:1d:02:c1:d7:0c:91:29:ad:a7: 92:99:5b:af:fa:0c:a2:24:f2:35:d8:6c:69:dd:54: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:66:E8:4B:F6:83:F5:2E:CE:24:BA:47:44:8E:23:59:A5:3C:60:AD X509v3 Authority Key Identifier: keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:53:92:d7:7c:89:cf:ed:51:0f:bb:8e:da:cd:00:e9:92: d1:b3:84:66:73:33:5a:8c:10:1f:bd:2a:db:ba:28:ce:52:d2: ac:e9:08:21:82:2d:32:6c:56:7f:8e:ac:24:5a:ef:30:52:2c: 2f:9d:43:23:6f:08:9a:d8:1b:bc:4b:4e:19:1a:88:89:e9:25: 50:bb:74:34:54:49:a1:a9:59:3c:19:0e:1e:22:f2:90:e7:0f: 6d:e3:f9:e4:37:55:de:4c:73:d6:72:9f:a9:00:a7:48:a8:70: 17:4d:e1:50:45:d5:6d:44:f7:dc:12:08:b7:a3:be:c7:ff:52: 26:dc:c4:a2:27:3c:12:80:17:3c:bb:10:2c:7e:eb:ff:35:e1: 77:4b:a5:8d:94:51:bc:fb:5a:d6:bd:3a:96:3a:44:e7:5e:8e: 48:0c:3d:e5:9a:7e:70:b0:2b:20:ff:52:e3:20:e3:21:1e:3c: 3c:ea:20:de:ed:7e:37:16:35:c2:82:79:26:de:55:62:61:c7: 93:a1:54:eb:a3:fe:d7:96:08:bb:6e:ae:50:e4:01:c3:8e:f9: 24:bf:88:8d:6c:4c:ea:2f:dd:6c:f5:92:ff:6f:c8:05:64:2e: 7a:f2:86:94:ed:df:2d:9e:01:db:1e:b6:e3:f2:45:fa:33:ee: 0c:57:9e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtuWvq8Db310ANW3oc/BoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2 OTQyNTAwHhcNMjUxMjExMTQwMDQ4WhcNMjUxMjEyMTQwMDQ4WjAzMTEwLwYDVQQD EyhlMTY2ZTg0YmY2ODNmNTJlY2UyNGJhNDc0NDhlMjM1OWE1M2M2MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4/iMbPjmR/YkYp2ysmhm9/t37z7 g+p0KjG+79perwDmlKFzKC/hqAAJdajC5bTqy/RJTpN8zAKGifGrGC+gzhwaAQlc iMIGFmiWx/Kadc9R7J6+h2iSWtbZARjp37BrHWL255eu8GnGNYkQxRiJJVLuDDWL TxWHSfFeTT11OHKi+ikdWeydAJikII707HK/BExZcrf2vhOCj/QLCBFvhCe5r/4X 2kN7OPJZdSKhMJ2tzDUf+AYaIayXB6HfHjdTXVfHAdff7z73RG4aIpIn6eHxYcfv 0GJO1OwCo5XUGBpg6T/CXIMdAsHXDJEpraeSmVuv+gyiJPI12Gxp3VSUeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFm6Ev2g/UuziS6R0SOI1mlPGCtMB8GA1UdIwQY MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt YmYyODg3NWFiMjYxLzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzJTktd8 ic/tUQ+7jtrNAOmS0bOEZnMzWowQH70q27oozlLSrOkIIYItMmxWf46sJFrvMFIs L51DI28ImtgbvEtOGRqIieklULt0NFRJoalZPBkOHiLykOcPbeP55DdV3kxz1nKf qQCnSKhwF03hUEXVbUT33BIIt6O+x/9SJtzEoic8EoAXPLsQLH7r/zXhd0uljZRR vPta1r06ljpE516OSAw95Zp+cLArIP9S4yDjIR48POog3u1+NxY1woJ5Jt5VYmHH k6FU66P+15YIu26uUOQBw475JL+IjWxM6i/dbPWS/2/IBWQuevKGlO3fLZ4B2x62 4/JF+jPuDFee3w== -----END CERTIFICATE-----Generated at Thu Dec 11 19:21:24 2025 by rpki-client