This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json) Hash identifier: S4euJyFZiyJqso/PoaFar6eCtZ6UDkqu+g/EKa/4PnU= Subject key identifier: CE:87:B8:E9:81:2B:D0:37:2F:59:A9:18:E4:3E:3A:92:CD:14:F2:30 Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Certificate serial: 019B3720D29F2BAF97B6F133E4369286A2BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 15:00:56 +0000 Manifest this update: Fri 19 Dec 2025 15:00:56 +0000 Manifest next update: Sat 20 Dec 2025 15:00:56 +0000 Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=) 2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: gpgarE0ddXVXKlSJTFVutYsWs8K2dLdTBjQruDdS+zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:d2:9f:2b:af:97:b6:f1:33:e4:36:92:86:a2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b Validity Not Before: Dec 19 15:00:56 2025 GMT Not After : Dec 20 15:00:56 2025 GMT Subject: CN=ce87b8e9812bd0372f59a918e43e3a92cd14f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:83:2e:e0:12:96:2a:91:e9:f2:8f:d5:82: e1:65:a8:78:44:77:85:de:af:c5:4f:37:22:ed:a7: fe:2d:bb:ab:1f:58:2f:63:87:b2:47:3f:b4:d3:97: bc:f4:d1:5e:46:44:f3:b4:cd:81:6f:c3:31:62:85: 32:ac:6f:00:91:67:da:14:da:81:17:f7:37:ab:fa: a3:ae:db:cd:9f:81:b9:4c:0a:0e:c8:6e:2b:a4:c6: 73:ff:f3:a3:0e:86:b3:d3:1d:b3:81:43:37:d9:d3: 7a:4a:9e:88:7b:af:b2:70:86:5c:4f:a5:2f:31:e0: 4e:75:62:a0:b0:32:ba:0d:ac:e1:32:14:5e:e5:0e: 69:f3:18:ff:78:b7:e2:3b:0c:72:8a:bd:1e:44:8c: e7:c9:28:c7:a6:72:c7:d7:e5:5b:8c:d6:14:4d:97: b7:4d:c6:a0:b4:79:73:10:e9:01:af:25:e0:79:3b: 16:5e:e0:84:f9:b7:3c:7d:a4:3e:a8:78:71:32:ca: e6:51:17:25:ec:ae:44:09:ea:b6:2d:3b:2c:9d:a1: 3c:d4:a1:75:90:92:41:f9:68:bc:c9:21:55:27:32: b7:eb:2e:ea:41:0d:95:03:c1:7c:3c:be:d2:8e:4e: 18:e4:da:1f:e8:e3:c4:73:bd:36:71:cf:57:84:f7: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:B8:E9:81:2B:D0:37:2F:59:A9:18:E4:3E:3A:92:CD:14:F2:30 X509v3 Authority Key Identifier: keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:09:bf:c5:5b:bf:12:14:7f:34:64:be:21:e8:64:a3:fc:fc: 38:6b:6a:11:6a:51:3f:31:70:d4:c9:aa:9d:55:59:df:5e:01: 6b:29:57:bf:0e:6e:ac:ed:74:2f:ae:81:8b:7e:6d:46:a5:b5: df:cc:c4:38:7b:3d:46:90:b6:5f:f5:1d:3d:9f:c5:48:1c:37: 05:26:94:d2:11:94:55:f9:7f:a6:67:6f:e1:a8:cc:cf:5e:1d: 46:40:ab:ba:66:70:77:80:c1:b2:e1:62:c5:55:ab:da:e5:9d: dd:4a:8a:e7:fe:f3:ae:a1:3c:44:07:1e:1f:4c:fa:f8:1c:a8: a5:b7:56:51:91:da:07:8f:26:da:d1:bd:e1:86:4c:3a:1d:47: c1:3a:8c:3b:e3:08:11:91:8f:dc:7f:e5:d3:ea:f0:6f:4c:ad: 31:6e:87:0a:c2:fd:82:a1:bd:1d:5a:43:81:80:f3:34:65:fa: 86:2d:e7:bc:ba:e0:ed:b4:24:11:d4:46:cc:25:ba:a6:85:23: 69:fb:fb:83:26:2b:2c:59:24:f2:8e:e8:62:fe:e9:11:91:ab: 79:0a:73:b6:08:21:bb:a1:2f:d5:e8:06:27:6b:89:b1:64:2b: 17:98:cf:91:7b:41:1a:41:f2:a8:d2:2e:02:04:6a:c0:09:0c: 27:e2:f3:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3INKfK6+XtvEz5DaShqK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm NTczOWIwHhcNMjUxMjE5MTUwMDU2WhcNMjUxMjIwMTUwMDU2WjAzMTEwLwYDVQQD EyhjZTg3YjhlOTgxMmJkMDM3MmY1OWE5MThlNDNlM2E5MmNkMTRmMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0uDLuASliqR6fKP1YLhZah4RHeF 3q/FTzci7af+LburH1gvY4eyRz+005e89NFeRkTztM2Bb8MxYoUyrG8AkWfaFNqB F/c3q/qjrtvNn4G5TAoOyG4rpMZz//OjDoaz0x2zgUM32dN6Sp6Ie6+ycIZcT6Uv MeBOdWKgsDK6DazhMhRe5Q5p8xj/eLfiOwxyir0eRIznySjHpnLH1+VbjNYUTZe3 TcagtHlzEOkBryXgeTsWXuCE+bc8faQ+qHhxMsrmURcl7K5ECeq2LTssnaE81KF1 kJJB+Wi8ySFVJzK36y7qQQ2VA8F8PL7Sjk4Y5Nof6OPEc702cc9XhPcSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6HuOmBK9A3L1mpGOQ+OpLNFPIwMB8GA1UdIwQY MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt MTBkMTczNGQ3YjgzLzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgm/xVu/ EhR/NGS+Iehko/z8OGtqEWpRPzFw1MmqnVVZ314BaylXvw5urO10L66Bi35tRqW1 38zEOHs9RpC2X/UdPZ/FSBw3BSaU0hGUVfl/pmdv4ajMz14dRkCrumZwd4DBsuFi xVWr2uWd3UqK5/7zrqE8RAceH0z6+ByopbdWUZHaB48m2tG94YZMOh1HwTqMO+MI EZGP3H/l0+rwb0ytMW6HCsL9gqG9HVpDgYDzNGX6hi3nvLrg7bQkEdRGzCW6poUj afv7gyYrLFkk8o7oYv7pEZGreQpztgghu6Ev1egGJ2uJsWQrF5jPkXtBGkHyqNIu AgRqwAkMJ+LzlQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:26:55 2025 by rpki-client