This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json) Hash identifier: s2L2sPZetZmv/WHAVBhr8WAxswnJSlONVrAvEdE/Elo= Subject key identifier: 41:A8:24:90:2E:A2:9C:51:41:51:A7:B8:A6:1C:31:10:B2:78:C0:9B Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Certificate serial: 019B7D82677D4707232B1870F9B4E7BFCDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft Manifest number: 173D Signing time: Fri 02 Jan 2026 07:00:56 +0000 Manifest this update: Fri 02 Jan 2026 07:00:56 +0000 Manifest next update: Sat 03 Jan 2026 07:00:56 +0000 Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: bZFuM8x20slVddgThpDZ8dbIoSGDIuSIKS1yB3gUmQ8=) 2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:67:7d:47:07:23:2b:18:70:f9:b4:e7:bf:cd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04 Validity Not Before: Jan 2 07:00:56 2026 GMT Not After : Jan 3 07:00:56 2026 GMT Subject: CN=41a824902ea29c514151a7b8a61c3110b278c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:09:82:ee:03:4c:4f:ea:c4:75:7c:e9:47: 30:14:59:a1:d3:49:73:e8:b1:94:26:a3:88:7e:3f: 57:de:39:f6:3f:53:36:ec:c1:ee:5e:3c:3f:76:09: 96:20:88:77:75:15:22:8d:e9:89:29:b3:5c:45:19: 58:73:10:c5:71:6a:96:e9:5c:ff:42:45:0b:78:78: 16:8d:3e:c4:42:dc:68:58:52:93:a7:8f:31:9e:bd: 8e:02:f0:a4:36:93:0f:96:c8:b6:b7:08:7c:52:1a: 61:45:b3:32:e2:17:4b:eb:00:b2:a8:59:a8:ee:6c: 1d:a9:50:a3:ac:e7:ac:75:eb:4c:88:bc:23:c3:6b: e1:94:0c:2d:6c:72:ac:5b:ee:00:1b:4d:27:67:d7: f5:12:b8:a0:09:5b:71:15:7b:f7:25:2c:2e:2a:e5: 8d:a2:5d:35:bc:11:7e:24:8a:37:2d:be:86:9d:ee: 8c:fa:53:54:6f:80:be:42:d4:98:8e:2d:42:58:02: b9:8e:c5:44:2a:34:68:8d:ea:14:3a:12:96:a9:3e: 33:0d:e4:2b:db:2e:38:2f:d1:13:c5:16:06:33:b8: 9d:89:52:fd:60:fa:d4:21:62:ce:ee:98:3a:36:e2: 17:2a:70:cb:b6:7f:2f:75:4a:fd:34:38:4a:6d:ac: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:24:90:2E:A2:9C:51:41:51:A7:B8:A6:1C:31:10:B2:78:C0:9B X509v3 Authority Key Identifier: keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:30:dc:8d:1b:44:a9:71:61:b6:80:0e:e2:8b:63:c5:1a: 3c:47:6a:2f:0f:29:0b:c0:82:55:19:5c:d3:af:fd:f2:90:da: 36:08:1d:bb:31:f1:42:4f:a4:ec:d4:3e:a5:39:b1:36:70:ac: d3:f8:2b:6e:20:b8:a4:04:e0:bd:e1:9c:ee:73:c4:0a:32:c6: 27:10:d0:91:8c:37:47:ba:75:5f:08:fd:a0:60:d2:89:74:f6: 03:22:ca:bd:a8:3c:37:1c:4d:b3:fa:34:3f:25:66:c5:17:5a: 3e:ee:f4:11:cb:ca:ab:c5:ca:26:97:09:af:6d:fa:c0:64:67: 26:0c:61:68:64:4f:44:19:dc:d0:e5:bc:89:b9:4a:b4:79:e4: 48:be:b4:f7:51:29:09:f4:f3:00:53:aa:3f:07:72:64:cb:66: cc:89:52:bc:47:7c:ed:04:7e:87:6f:7e:91:9c:42:ad:f4:08: 8b:62:f3:e6:09:5b:7d:ff:34:3f:02:9b:6c:4d:2f:d9:8a:38: ee:bc:cd:fd:99:ce:ce:8c:9e:e9:ca:f8:0f:ef:a7:27:3e:b0: 92:90:3f:cb:3c:8b:30:05:65:b5:5d:85:84:01:9f:26:ee:30: 8a:0c:48:38:88:a5:db:0d:aa:68:26:40:40:76:f3:b3:7e:d5: 52:9d:ff:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9gmd9RwcjKxhw+bTnv83sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YjBjMTFlNjY2NmNmYzFiN2YxYjY5OTRlMGY0MzczMjlh ZGVjMDQwHhcNMjYwMTAyMDcwMDU2WhcNMjYwMTAzMDcwMDU2WjAzMTEwLwYDVQQD Eyg0MWE4MjQ5MDJlYTI5YzUxNDE1MWE3YjhhNjFjMzExMGIyNzhjMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa4Jgu4DTE/qxHV86UcwFFmh00lz 6LGUJqOIfj9X3jn2P1M27MHuXjw/dgmWIIh3dRUijemJKbNcRRlYcxDFcWqW6Vz/ QkULeHgWjT7EQtxoWFKTp48xnr2OAvCkNpMPlsi2twh8UhphRbMy4hdL6wCyqFmo 7mwdqVCjrOesdetMiLwjw2vhlAwtbHKsW+4AG00nZ9f1ErigCVtxFXv3JSwuKuWN ol01vBF+JIo3Lb6Gne6M+lNUb4C+QtSYji1CWAK5jsVEKjRojeoUOhKWqT4zDeQr 2y44L9ETxRYGM7idiVL9YPrUIWLO7pg6NuIXKnDLtn8vdUr9NDhKbaxT+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGoJJAuopxRQVGnuKYcMRCyeMCbMB8GA1UdIwQY MBaAFNSwwR5mZs/Bt/G2mU4PQ3MprewEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2It Nzk0NTNiNDc0ZTJlLzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80ZGI5M2QtZmM4Ny00ZTE2LTliM2ItNzk0NTNiNDc0ZTJl LzEvMUxEQkhtWm16OEczOGJhWlRnOURjeW10N0FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxgw3I0b RKlxYbaADuKLY8UaPEdqLw8pC8CCVRlc06/98pDaNggduzHxQk+k7NQ+pTmxNnCs 0/grbiC4pATgveGc7nPECjLGJxDQkYw3R7p1Xwj9oGDSiXT2AyLKvag8NxxNs/o0 PyVmxRdaPu70EcvKq8XKJpcJr236wGRnJgxhaGRPRBnc0OW8iblKtHnkSL6091Ep CfTzAFOqPwdyZMtmzIlSvEd87QR+h29+kZxCrfQIi2Lz5glbff80PwKbbE0v2Yo4 7rzN/ZnOzoye6cr4D++nJz6wkpA/yzyLMAVltV2FhAGfJu4wigxIOIil2w2qaCZA QHbzs37VUp3/hQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:40 2026 by rpki-client