This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json) Hash identifier: ftl8U0iNA/VTPjH+O6/mmzyrffRm5nsScJ/VjUaWxws= Subject key identifier: 69:F3:84:98:EE:98:1F:5A:2C:94:5F:E5:E9:0A:7B:80:CF:70:E3:BC Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Certificate serial: 019B1C853ED34BAD482D1A3D95CB8D450C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft Manifest number: 1657 Signing time: Sun 14 Dec 2025 11:00:52 +0000 Manifest this update: Sun 14 Dec 2025 11:00:52 +0000 Manifest next update: Mon 15 Dec 2025 11:00:52 +0000 Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=) 2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: TSzHSWh6J5oaNIw7DT2WwAriEtjYE3pCbztOGtsnSPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:3e:d3:4b:ad:48:2d:1a:3d:95:cb:8d:45:0c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Validity Not Before: Dec 14 11:00:52 2025 GMT Not After : Dec 15 11:00:52 2025 GMT Subject: CN=69f38498ee981f5a2c945fe5e90a7b80cf70e3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:b5:b9:41:6f:2b:fb:a6:61:9a:41:0f:60: 5d:aa:55:c1:d5:ba:1c:ea:77:4b:5b:a8:d6:6a:1e: b7:1d:f1:ef:36:ac:fb:dd:64:b5:2f:24:7b:c3:7c: 45:49:88:75:e8:fb:bb:1d:81:17:a5:68:a7:f9:68: f6:8a:b1:8c:26:fa:ec:f0:50:a7:6b:25:3c:32:4c: a3:ea:6a:7e:ac:77:1b:18:62:5f:41:4c:f5:71:1a: d1:08:fc:8b:40:f8:39:0c:bb:6d:8c:f5:07:d6:20: b6:e4:21:bd:b0:f5:a6:00:ff:2d:0f:b2:8f:b7:1a: b3:6a:a5:a9:b2:09:2c:94:d0:fa:40:63:46:7f:37: bc:a7:b0:39:ad:5f:d9:1e:22:6c:32:42:fd:44:a0: e9:2b:09:76:be:6d:28:77:e6:10:9c:e7:0f:91:64: 7c:59:15:5a:df:4d:06:c8:2b:2b:d4:74:cc:8c:28: 36:44:cc:fc:76:1d:47:5b:55:eb:b0:41:77:00:5d: 36:d4:f2:67:33:f0:d5:2f:91:30:00:44:80:60:87: 64:b5:8e:e9:05:87:bd:03:b6:d7:83:13:07:a0:32: 0e:bb:76:8a:86:72:81:56:57:95:49:c5:69:fb:a0: 17:b8:eb:ee:f5:4a:79:43:7f:71:be:f8:bc:48:a5: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:84:98:EE:98:1F:5A:2C:94:5F:E5:E9:0A:7B:80:CF:70:E3:BC X509v3 Authority Key Identifier: keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f2:67:19:ce:d8:80:d1:82:93:34:bb:ea:f7:7c:30:c7:59: bc:b9:00:12:e0:d5:e6:fe:70:6e:ec:0e:c3:31:e3:2a:3d:56: f0:27:20:8f:c9:dd:da:74:1e:2e:9d:35:9c:15:39:0a:ba:98: 73:f9:82:7c:8c:c3:68:a5:a8:0b:1e:78:6d:a0:ad:eb:df:47: ea:38:a1:1c:49:51:5a:7c:72:4b:c4:6b:17:de:8a:54:b7:ca: 8d:01:4a:55:40:d1:db:18:25:b8:b9:d2:a4:69:01:eb:d3:fc: b2:a4:dd:ca:41:70:6f:82:e9:ca:6d:4c:d5:ff:b8:82:c9:96: c2:f1:4f:87:b3:f3:87:20:82:6d:8f:1a:e4:68:a4:14:0e:3e: ab:46:53:87:80:03:d0:00:9e:48:99:b9:9c:b8:5e:42:23:88: 3d:bf:3a:6c:43:0b:56:1d:d7:56:b8:20:15:4f:65:8b:8a:1f: 9f:c6:d7:ee:a0:d5:b0:14:32:21:69:33:97:63:59:c0:48:f9: aa:fa:0d:80:c9:fe:f5:f1:7b:19:60:05:87:b8:bc:b8:a7:8b: 4c:12:cb:1d:2b:8b:36:b6:4d:ac:76:3b:67:db:81:26:72:a3: fe:c1:fa:5e:66:9a:b2:c9:f7:bf:93:1b:be:16:6c:ac:b1:b0: 3f:81:47:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschT7TS61ILRo9lcuNRQyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0 YmU0MmMwHhcNMjUxMjE0MTEwMDUyWhcNMjUxMjE1MTEwMDUyWjAzMTEwLwYDVQQD Eyg2OWYzODQ5OGVlOTgxZjVhMmM5NDVmZTVlOTBhN2I4MGNmNzBlM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVm1uUFvK/umYZpBD2BdqlXB1boc 6ndLW6jWah63HfHvNqz73WS1LyR7w3xFSYh16Pu7HYEXpWin+Wj2irGMJvrs8FCn ayU8Mkyj6mp+rHcbGGJfQUz1cRrRCPyLQPg5DLttjPUH1iC25CG9sPWmAP8tD7KP txqzaqWpsgkslND6QGNGfze8p7A5rV/ZHiJsMkL9RKDpKwl2vm0od+YQnOcPkWR8 WRVa300GyCsr1HTMjCg2RMz8dh1HW1XrsEF3AF021PJnM/DVL5EwAESAYIdktY7p BYe9A7bXgxMHoDIOu3aKhnKBVleVScVp+6AXuOvu9Up5Q39xvvi8SKVdEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnzhJjumB9aLJRf5ekKe4DPcOO8MB8GA1UdIwQY MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvJnGc7Y gNGCkzS76vd8MMdZvLkAEuDV5v5wbuwOwzHjKj1W8Ccgj8nd2nQeLp01nBU5CrqY c/mCfIzDaKWoCx54baCt699H6jihHElRWnxyS8RrF96KVLfKjQFKVUDR2xgluLnS pGkB69P8sqTdykFwb4Lpym1M1f+4gsmWwvFPh7PzhyCCbY8a5GikFA4+q0ZTh4AD 0ACeSJm5nLheQiOIPb86bEMLVh3XVrggFU9li4ofn8bX7qDVsBQyIWkzl2NZwEj5 qvoNgMn+9fF7GWAFh7i8uKeLTBLLHSuLNrZNrHY7Z9uBJnKj/sH6Xmaassn3v5Mb vhZsrLGwP4FHcQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:16:25 2025 by rpki-client