This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json) Hash identifier: UwTU8v224VPdf7lvx4wl4tXJXSoqpz31fHgkZsDAXFY= Subject key identifier: DE:64:63:AB:21:AE:59:15:0E:57:BD:C8:1D:59:EF:60:B2:9A:5F:9C Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e Certificate serial: 019B27407C90B76FB75DAC4F988DB0C5984C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft Manifest number: 0D82 Signing time: Tue 16 Dec 2025 13:01:36 +0000 Manifest this update: Tue 16 Dec 2025 13:01:36 +0000 Manifest next update: Wed 17 Dec 2025 13:01:36 +0000 Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=) 2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: QFthoy0fbxKKAIvvfxmzBR+Ym7KQx6zInBeSDJK7Z1M=) 3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:7c:90:b7:6f:b7:5d:ac:4f:98:8d:b0:c5:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e Validity Not Before: Dec 16 13:01:36 2025 GMT Not After : Dec 17 13:01:36 2025 GMT Subject: CN=de6463ab21ae59150e57bdc81d59ef60b29a5f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:ee:7b:4a:f0:a4:bf:9f:96:cc:cc:d1:77: 97:65:52:e1:9f:7c:73:a6:5c:77:54:52:9a:58:3d: b4:f6:4a:96:c1:fb:bd:f3:33:0c:c2:b8:78:c3:df: 2c:59:27:d1:e1:55:fc:f9:b7:87:37:1f:bf:e2:4c: cd:5d:3a:18:eb:3c:d2:37:ac:6c:1b:df:43:b1:01: f6:5e:3f:f7:58:c3:e8:26:1f:0a:cc:13:cc:6b:8a: 1c:88:e9:c8:b8:3c:0d:25:7b:b8:44:60:c8:6f:c3: 95:3b:e2:ab:da:75:39:43:61:0e:4d:44:48:50:50: 7c:55:30:47:db:c3:da:cd:f5:54:5a:f7:d1:2c:be: 6f:59:d4:47:d4:eb:99:f4:9e:a3:fe:d0:ac:c4:0e: 76:48:70:d7:ae:5d:29:49:b9:18:11:3b:ae:1b:f1: ff:ab:a4:46:8b:40:e8:29:04:18:8a:bd:da:da:e6: f1:83:97:6a:1d:fe:7e:10:f0:2f:07:e3:92:83:de: 34:c6:a5:4f:8d:df:e6:19:67:d5:96:fa:b8:1b:8b: 07:c4:c7:56:cf:6a:51:a7:2e:c1:a4:64:4c:51:64: ca:04:62:76:7d:26:f9:1f:aa:55:c5:e7:bd:0c:93: 5d:9d:ba:21:46:2c:94:ec:43:82:2a:22:66:45:53: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:64:63:AB:21:AE:59:15:0E:57:BD:C8:1D:59:EF:60:B2:9A:5F:9C X509v3 Authority Key Identifier: keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:fe:f3:2b:c1:ea:80:fd:13:14:22:aa:90:63:5e:80:7d: a7:c3:48:38:29:a8:31:e7:14:05:b9:8b:fe:0f:57:2a:63:47: d4:23:bc:05:05:36:0a:02:8c:a2:f2:1d:7c:5c:fb:c4:f3:03: 16:f4:37:4f:15:b1:fe:ab:7a:b8:01:93:f8:0c:8f:06:ae:5f: b5:ea:44:59:2b:cb:60:c5:bf:33:6b:f2:b6:93:25:d3:4a:4b: 92:c1:8c:44:c1:93:f3:14:f1:ed:b0:73:63:4e:6a:ec:75:4f: 22:6a:c3:83:50:39:e1:cb:4d:1e:f2:24:2f:ca:53:3c:f1:85: d1:51:a2:e6:bc:eb:8e:6e:2b:ba:3e:da:30:77:0a:c5:5a:75: 6d:68:0d:32:f5:12:30:77:5f:e7:48:7c:c0:81:96:4c:d9:f7: 30:49:5d:2b:75:83:87:9b:03:ff:f6:0e:e3:da:8c:a1:b7:05: 1e:b9:53:eb:7f:32:6f:68:3a:e5:07:53:6d:b6:af:d9:7c:19: ac:3c:01:36:a8:e7:41:6f:f0:45:fb:1c:6b:df:27:ec:5a:c8: e0:85:87:8f:bf:df:b6:08:ea:e2:9f:2c:37:92:21:24:f8:4b: 45:07:f0:33:45:8a:c5:f6:b9:dd:ba:c4:3e:f5:38:9c:03:b5: 82:0c:07:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQHyQt2+3XaxPmI2wxZhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjYxMzYzMTVhNTJkNTI0NzEyNGI3Y2YzNjlhYWZiODMx MjIyN2UwHhcNMjUxMjE2MTMwMTM2WhcNMjUxMjE3MTMwMTM2WjAzMTEwLwYDVQQD EyhkZTY0NjNhYjIxYWU1OTE1MGU1N2JkYzgxZDU5ZWY2MGIyOWE1ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqzue0rwpL+flszM0XeXZVLhn3xz plx3VFKaWD209kqWwfu98zMMwrh4w98sWSfR4VX8+beHNx+/4kzNXToY6zzSN6xs G99DsQH2Xj/3WMPoJh8KzBPMa4ociOnIuDwNJXu4RGDIb8OVO+Kr2nU5Q2EOTURI UFB8VTBH28PazfVUWvfRLL5vWdRH1OuZ9J6j/tCsxA52SHDXrl0pSbkYETuuG/H/ q6RGi0DoKQQYir3a2ubxg5dqHf5+EPAvB+OSg940xqVPjd/mGWfVlvq4G4sHxMdW z2pRpy7BpGRMUWTKBGJ2fSb5H6pVxee9DJNdnbohRiyU7EOCKiJmRVM0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5kY6shrlkVDle9yB1Z72Cyml+cMB8GA1UdIwQY MBaAFCz2E2MVpS1SRxJLfPNpqvuDEiJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjIt NzY4ZDNmYjA4ZTcwLzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjItNzY4ZDNmYjA4ZTcw LzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg/+8yvB 6oD9ExQiqpBjXoB9p8NIOCmoMecUBbmL/g9XKmNH1CO8BQU2CgKMovIdfFz7xPMD FvQ3TxWx/qt6uAGT+AyPBq5ftepEWSvLYMW/M2vytpMl00pLksGMRMGT8xTx7bBz Y05q7HVPImrDg1A54ctNHvIkL8pTPPGF0VGi5rzrjm4ruj7aMHcKxVp1bWgNMvUS MHdf50h8wIGWTNn3MEldK3WDh5sD//YO49qMobcFHrlT638yb2g65QdTbbav2XwZ rDwBNqjnQW/wRfsca98n7FrI4IWHj7/ftgjq4p8sN5IhJPhLRQfwM0WKxfa53brE PvU4nAO1ggwHpw== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:31 2025 by rpki-client