This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json) Hash identifier: 3mEJIy2JmPwVVQWmBblzi1kUx1mhcftYMCCtKdwI80I= Subject key identifier: DA:F5:3A:C7:21:F2:36:BD:51:1D:BA:68:1E:C4:0A:9A:57:59:F1:4C Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Certificate serial: 019B243F1F0964368167E5ED423F25941DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft Manifest number: 165B Signing time: Mon 15 Dec 2025 23:01:14 +0000 Manifest this update: Mon 15 Dec 2025 23:01:14 +0000 Manifest next update: Tue 16 Dec 2025 23:01:14 +0000 Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=) 2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: poHuI5AT8OqoKsb4z+7Q9b3bNWCsXux2Wdsm7t/aTUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:1f:09:64:36:81:67:e5:ed:42:3f:25:94:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c Validity Not Before: Dec 15 23:01:14 2025 GMT Not After : Dec 16 23:01:14 2025 GMT Subject: CN=daf53ac721f236bd511dba681ec40a9a5759f14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:40:fb:30:a2:4f:f2:1a:62:e5:dc:14:d9: 44:ee:44:44:40:32:59:f4:a2:e3:dc:ac:72:0b:bb: 90:1e:ee:e5:8e:13:4c:f8:51:f1:0b:7e:2e:67:79: 77:da:f7:b2:f3:3c:54:61:93:47:1c:39:45:3f:8d: 86:bf:6a:3f:0b:65:6f:5c:54:a0:d7:57:71:d2:e3: 01:76:f6:a2:b2:83:73:51:41:02:aa:20:19:74:3f: 13:c1:bd:ba:43:08:35:d6:31:0a:ab:e2:e6:c5:5d: 41:7c:bd:b4:97:43:d2:42:9b:7d:94:1c:e4:18:66: a8:ac:fa:63:0d:77:20:4e:e3:13:cd:34:6b:33:3d: 78:9e:bb:71:f6:c7:74:07:79:1b:0e:47:d4:93:80: 97:9f:43:db:68:5a:90:42:c6:9c:2f:37:df:38:a7: d4:73:c5:2e:22:c4:32:da:ec:e7:0f:0e:4f:08:e6: 1d:80:7c:af:b1:c2:5a:36:01:8c:a5:19:cb:fb:46: 64:5c:c9:9f:4c:2b:a9:6c:d4:13:ca:94:63:6c:67: be:22:b5:c5:30:4d:4d:2c:07:d9:29:df:b2:ec:8a: 4b:8f:08:ce:cd:a8:e9:a1:f6:f5:4c:fe:eb:b3:71: bc:a8:df:7c:ef:52:fc:7f:80:fe:60:44:ec:33:ef: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:3A:C7:21:F2:36:BD:51:1D:BA:68:1E:C4:0A:9A:57:59:F1:4C X509v3 Authority Key Identifier: keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c6:e4:7e:a5:8a:74:35:2b:b3:f6:b5:31:07:4a:32:c9:35: 34:b5:17:d6:2b:95:69:92:e4:b8:42:0f:a4:46:8b:47:3a:14: d7:02:66:90:a5:1f:a3:78:ec:c3:5f:b7:c7:81:f0:f3:21:4f: 96:28:70:d5:fe:e3:f1:11:41:62:e7:b7:df:11:c7:35:7b:20: 6b:e8:73:c4:34:2c:d8:f9:36:e5:3b:fd:3e:7d:9a:a2:d8:ba: 1b:aa:5f:47:56:ff:70:ee:ba:f1:23:f8:2d:55:79:4f:49:59: e7:8d:3b:28:cd:5a:6d:f1:ef:d6:3d:21:27:88:5c:6c:ab:da: 9c:58:a5:fd:39:f8:e0:4d:fc:bf:b4:fb:ea:63:2a:69:86:d9: 48:b2:60:87:6d:62:d6:83:71:ae:e0:2c:e2:50:3b:aa:60:6d: cf:fe:32:c4:c4:91:73:b8:26:38:f4:04:60:db:8a:1a:b0:1e: 3c:1b:f2:d0:a5:83:b3:32:47:bb:25:27:8b:04:8e:a9:c4:ba: 4d:c5:cd:4b:18:8b:88:04:88:28:82:06:e6:b1:dc:eb:dd:33: d0:f7:dc:b4:53:60:8a:35:3b:4e:62:57:03:64:8d:e0:ca:15: bf:5b:50:45:9b:1a:00:83:b8:24:41:fe:ec:14:ab:f8:e9:f6: 9b:dd:ba:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPx8JZDaBZ+XtQj8llB3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0 YmU0MmMwHhcNMjUxMjE1MjMwMTE0WhcNMjUxMjE2MjMwMTE0WjAzMTEwLwYDVQQD EyhkYWY1M2FjNzIxZjIzNmJkNTExZGJhNjgxZWM0MGE5YTU3NTlmMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZA+zCiT/IaYuXcFNlE7kREQDJZ 9KLj3KxyC7uQHu7ljhNM+FHxC34uZ3l32vey8zxUYZNHHDlFP42Gv2o/C2VvXFSg 11dx0uMBdvaisoNzUUECqiAZdD8Twb26Qwg11jEKq+LmxV1BfL20l0PSQpt9lBzk GGaorPpjDXcgTuMTzTRrMz14nrtx9sd0B3kbDkfUk4CXn0PbaFqQQsacLzffOKfU c8UuIsQy2uznDw5PCOYdgHyvscJaNgGMpRnL+0ZkXMmfTCupbNQTypRjbGe+IrXF ME1NLAfZKd+y7IpLjwjOzajpofb1TP7rs3G8qN9871L8f4D+YETsM++bUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr1Osch8ja9UR26aB7ECppXWfFMMB8GA1UdIwQY MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8bkfqWK dDUrs/a1MQdKMsk1NLUX1iuVaZLkuEIPpEaLRzoU1wJmkKUfo3jsw1+3x4Hw8yFP lihw1f7j8RFBYue33xHHNXsga+hzxDQs2Pk25Tv9Pn2aoti6G6pfR1b/cO668SP4 LVV5T0lZ5407KM1abfHv1j0hJ4hcbKvanFil/Tn44E38v7T76mMqaYbZSLJgh21i 1oNxruAs4lA7qmBtz/4yxMSRc7gmOPQEYNuKGrAePBvy0KWDszJHuyUniwSOqcS6 TcXNSxiLiASIKIIG5rHc690z0PfctFNgijU7TmJXA2SN4MoVv1tQRZsaAIO4JEH+ 7BSr+On2m9262g== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:40 2025 by rpki-client