This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json) Hash identifier: 34OcY5ZxKL6b1K2nMx6mn3NlQyI735OmhhQ9C/e33C0= Subject key identifier: 27:88:33:F1:DF:C6:2D:A1:00:79:A9:7D:EE:5C:40:3E:5F:B9:68:E1 Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d Certificate serial: 019AF31B5F3DDE7B4A87B5C90A94F3B61D82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=) 2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=) 3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: kr+z/YHj62lWYrWqC3ElMZvEdNseEBfiBfa2zs60xdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5f:3d:de:7b:4a:87:b5:c9:0a:94:f3:b6:1d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585c19915455835457413ef222a7d375b29901d Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=278833f1dfc62da10079a97dee5c403e5fb968e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:9e:56:41:dc:2b:1a:e5:ee:6b:98:6e:85: 30:d6:d1:64:c3:c8:29:ff:ae:17:1b:84:69:60:a3: 3f:d8:4e:8a:b5:69:6a:ba:68:a3:52:8f:6c:cb:c6: d9:cf:ac:d1:58:75:d5:b9:f9:a2:c2:8f:bf:80:c1: e2:1d:d7:a9:34:d0:8f:f0:33:65:f3:f5:2e:40:e9: dc:32:bf:59:ab:15:9a:0f:81:08:bc:83:22:9b:6a: e4:36:44:d5:30:63:43:d1:be:59:0e:f7:72:3e:2e: f4:a4:0c:44:69:a4:ed:6c:f3:97:1e:4b:b3:91:8e: 60:c2:f4:9e:e4:7a:e4:12:5a:82:e8:4d:d9:b5:08: 68:ab:26:83:6b:2e:2f:c3:1e:ed:a9:5f:fb:32:15: ca:8c:b0:1a:67:bd:47:f7:b8:99:96:7c:f1:52:b9: cd:09:b2:2b:a7:9e:ba:49:77:1e:30:8d:31:8c:76: 0f:6c:ae:17:80:fc:1d:fa:8e:d8:60:ce:1a:63:7b: 28:04:79:ca:be:50:3a:a4:59:0b:17:3a:9b:47:91: 3d:6e:20:cd:e3:9c:13:5e:ab:dd:75:94:bf:c8:f8: 32:76:a6:16:87:52:4f:33:a6:bb:31:59:b9:6f:e8: 68:7d:11:7c:0a:a7:fa:e0:c6:f2:a7:89:a0:f8:8b: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:33:F1:DF:C6:2D:A1:00:79:A9:7D:EE:5C:40:3E:5F:B9:68:E1 X509v3 Authority Key Identifier: keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:d4:1c:7c:e3:95:91:3a:e9:ae:6e:3d:07:f7:ae:db:a1: 30:ef:9b:c3:d0:bc:ae:54:a0:47:a4:d5:d1:37:42:d8:c3:3f: 6e:0e:9c:c1:cd:c2:1a:bf:aa:c3:ff:4c:34:36:27:4b:fe:3c: fa:bc:fe:b4:90:49:c5:d6:79:12:11:3c:52:a6:4c:54:1e:fb: 57:98:2d:0e:3c:e1:e8:ef:66:89:01:54:93:67:7c:f8:6e:c1: 57:2b:3a:53:de:80:4a:b9:9d:78:00:e6:87:20:36:57:b1:5c: 6f:46:78:77:32:44:06:bd:88:df:13:a7:61:73:15:c4:10:dd: 69:e7:c3:24:84:40:d6:b4:86:2e:9d:ee:bf:69:79:80:84:9f: d2:55:4d:4a:7c:d3:0e:8d:e7:fa:d8:3b:30:35:2a:37:a6:b1: 27:93:94:25:da:44:55:81:76:e4:ba:7a:1c:80:dc:64:7b:43: 83:f6:34:b6:3c:5d:09:79:dd:b7:85:bd:75:ea:cf:b1:6e:ec: 24:77:53:c4:c2:4d:8d:fb:2c:d7:2c:c3:43:95:b5:8c:a8:75: c2:ee:3a:39:2b:65:5f:71:ee:e5:02:1f:6c:32:61:2c:ea:fe: 41:c3:46:bf:38:35:1f:82:8d:40:25:b4:60:b0:61:7f:11:60: 59:08:16:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1893ntKh7XJCpTzth2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy OTkwMWQwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD EygyNzg4MzNmMWRmYzYyZGExMDA3OWE5N2RlZTVjNDAzZTVmYjk2OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+GeVkHcKxrl7muYboUw1tFkw8gp /64XG4RpYKM/2E6KtWlqumijUo9sy8bZz6zRWHXVufmiwo+/gMHiHdepNNCP8DNl 8/UuQOncMr9ZqxWaD4EIvIMim2rkNkTVMGND0b5ZDvdyPi70pAxEaaTtbPOXHkuz kY5gwvSe5HrkElqC6E3ZtQhoqyaDay4vwx7tqV/7MhXKjLAaZ71H97iZlnzxUrnN CbIrp566SXceMI0xjHYPbK4XgPwd+o7YYM4aY3soBHnKvlA6pFkLFzqbR5E9biDN 45wTXqvddZS/yPgydqYWh1JPM6a7MVm5b+hofRF8Cqf64Mbyp4mg+IuGOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeIM/Hfxi2hAHmpfe5cQD5fuWjhMB8GA1UdIwQY MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt NzcyOTE4ZmZmNTQ0LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0 LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnbUHHzj lZE66a5uPQf3rtuhMO+bw9C8rlSgR6TV0TdC2MM/bg6cwc3CGr+qw/9MNDYnS/48 +rz+tJBJxdZ5EhE8UqZMVB77V5gtDjzh6O9miQFUk2d8+G7BVys6U96ASrmdeADm hyA2V7Fcb0Z4dzJEBr2I3xOnYXMVxBDdaefDJIRA1rSGLp3uv2l5gISf0lVNSnzT Do3n+tg7MDUqN6axJ5OUJdpEVYF25Lp6HIDcZHtDg/Y0tjxdCXndt4W9derPsW7s JHdTxMJNjfss1yzDQ5W1jKh1wu46OStlX3Hu5QIfbDJhLOr+QcNGvzg1H4KNQCW0 YLBhfxFgWQgWEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:30 2025 by rpki-client