This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft File: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft (raw, json) Hash identifier: HjO7+CRj1oU+0WWStECAPlw1dMgCtP0r0Xr4GmffgO4= Subject key identifier: 26:26:87:4D:17:75:2C:44:94:04:4D:97:15:B1:7F:DB:03:15:09:A0 Authority key identifier: 2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B Certificate issuer: /CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b Certificate serial: 019B5B2D36A462DA091AA55ECA5670BC35DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft Manifest number: AF Signing time: Fri 26 Dec 2025 15:00:48 +0000 Manifest this update: Fri 26 Dec 2025 15:00:48 +0000 Manifest next update: Sat 27 Dec 2025 15:00:48 +0000 Files and hashes: 1: LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl (hash: 8lc7qYD+WbQ6I9CQfYM50FhERyedXKgRFTHRqdlx4Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:2d:36:a4:62:da:09:1a:a5:5e:ca:56:70:bc:35:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dd5ea3c7530fd08c299d808753f47b8dfb84e0b Validity Not Before: Dec 26 15:00:48 2025 GMT Not After : Dec 27 15:00:48 2025 GMT Subject: CN=2626874d17752c4494044d9715b17fdb031509a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:15:49:20:3f:c5:3b:30:2e:c3:23:32:9e: 75:8c:64:48:fa:21:ac:9c:98:75:4e:9e:85:b1:eb: 44:24:a4:8d:20:c4:9d:c8:9f:84:3c:a6:7d:51:0f: ba:e3:0d:3f:cf:9c:e0:15:25:3b:d5:32:ea:53:65: b9:cf:ee:d5:1f:54:6d:14:65:b1:ba:a8:96:40:4d: d9:3f:5a:27:d0:8c:b9:ac:e1:34:8c:42:0e:4c:a5: 95:d6:32:2a:89:68:1e:02:d5:7b:6e:f4:ac:28:11: 53:cb:45:2a:98:6f:fa:ca:98:83:88:fa:96:87:e9: bf:9f:bc:55:7e:c6:1c:a5:db:a0:2c:fd:32:9d:67: 18:6e:bb:5c:38:24:fd:9c:86:13:23:6a:6a:c4:6e: 9a:a9:9b:ce:14:66:43:f1:23:ff:1e:56:ec:98:e4: e6:34:87:d7:ef:ce:62:2b:5b:fc:97:65:68:23:26: 35:9e:ac:19:30:77:38:cb:f0:6b:7a:74:d8:be:9c: 95:2f:a8:78:f7:52:4b:04:7a:74:01:48:b3:12:72: 81:c0:3a:34:29:dc:4b:10:20:93:ac:3a:ec:20:b4: a2:33:cb:a3:b8:da:a4:43:9d:0f:66:cc:e1:91:31: bc:ff:06:90:e8:48:7a:86:d0:a5:c8:f3:dd:7e:21: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:26:87:4D:17:75:2C:44:94:04:4D:97:15:B1:7F:DB:03:15:09:A0 X509v3 Authority Key Identifier: keyid:2D:D5:EA:3C:75:30:FD:08:C2:99:D8:08:75:3F:47:B8:DF:B8:4E:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1fa038-31ce-4a2e-9d45-fef24c395f91/1/LdXqPHUw_QjCmdgIdT9HuN-4Tgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:aa:1f:29:42:62:d1:a8:d2:7a:46:3c:8e:be:6b:7d:95:01: f3:a8:91:d3:94:75:01:fc:05:ed:f6:7a:6d:34:ea:6e:1c:c9: b1:4e:a1:87:70:ea:ca:fc:a5:ad:5c:2b:c7:ce:eb:f7:e1:25: 4a:42:45:af:6e:11:52:f3:1c:5c:88:06:c5:af:55:6c:57:8c: 3d:a7:a1:a9:79:8f:5b:6f:39:74:ba:ec:82:4b:62:4a:e4:e9: 82:e6:1a:8f:95:1c:31:7f:f5:f1:b4:8e:fa:bc:38:ce:f6:1f: 89:94:27:0b:64:dc:b3:3e:4b:94:7b:39:19:00:67:a7:6f:be: 6b:09:f1:fc:ad:a9:0d:9b:0d:66:92:c0:30:f8:cb:f2:c1:ff: 10:2f:22:eb:25:e2:de:08:67:b7:df:38:7b:1c:b7:37:d7:54: 4d:dd:bd:f9:5d:c8:35:2c:48:c6:57:cd:ed:4b:7b:be:42:48: 34:ef:37:77:77:e9:50:a5:28:c7:fd:d9:3f:7d:dc:89:1f:c2: 12:f4:a7:98:15:8c:f8:62:ae:ed:dd:9d:58:ca:eb:e6:45:a1: 92:82:63:59:33:12:50:1f:87:cb:a0:1c:66:a0:54:ee:05:5f: 20:ec:53:85:21:72:8d:bc:b5:71:bc:27:8e:b5:53:21:6c:15: 09:88:e2:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbLTakYtoJGqVeylZwvDXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZDVlYTNjNzUzMGZkMDhjMjk5ZDgwODc1M2Y0N2I4ZGZi ODRlMGIwHhcNMjUxMjI2MTUwMDQ4WhcNMjUxMjI3MTUwMDQ4WjAzMTEwLwYDVQQD EygyNjI2ODc0ZDE3NzUyYzQ0OTQwNDRkOTcxNWIxN2ZkYjAzMTUwOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PMVSSA/xTswLsMjMp51jGRI+iGs nJh1Tp6FsetEJKSNIMSdyJ+EPKZ9UQ+64w0/z5zgFSU71TLqU2W5z+7VH1RtFGWx uqiWQE3ZP1on0Iy5rOE0jEIOTKWV1jIqiWgeAtV7bvSsKBFTy0UqmG/6ypiDiPqW h+m/n7xVfsYcpdugLP0ynWcYbrtcOCT9nIYTI2pqxG6aqZvOFGZD8SP/HlbsmOTm NIfX785iK1v8l2VoIyY1nqwZMHc4y/BrenTYvpyVL6h491JLBHp0AUizEnKBwDo0 KdxLECCTrDrsILSiM8ujuNqkQ50PZszhkTG8/waQ6Eh6htClyPPdfiGvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYmh00XdSxElARNlxWxf9sDFQmgMB8GA1UdIwQY MBaAFC3V6jx1MP0IwpnYCHU/R7jfuE4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUt ZmVmMjRjMzk1ZjkxLzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xZmEwMzgtMzFjZS00YTJlLTlkNDUtZmVmMjRjMzk1Zjkx LzEvTGRYcVBIVXdfUWpDbWRnSWRUOUh1Ti00VGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaofKUJi 0ajSekY8jr5rfZUB86iR05R1AfwF7fZ6bTTqbhzJsU6hh3DqyvylrVwrx87r9+El SkJFr24RUvMcXIgGxa9VbFeMPaehqXmPW285dLrsgktiSuTpguYaj5UcMX/18bSO +rw4zvYfiZQnC2Tcsz5LlHs5GQBnp2++awnx/K2pDZsNZpLAMPjL8sH/EC8i6yXi 3ghnt984exy3N9dUTd29+V3INSxIxlfN7Ut7vkJINO83d3fpUKUox/3ZP33ciR/C EvSnmBWM+GKu7d2dWMrr5kWhkoJjWTMSUB+Hy6AcZqBU7gVfIOxThSFyjby1cbwn jrVTIWwVCYji2g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:56 2025 by rpki-client