This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json) Hash identifier: F+J1/Jr21CATvFKGMQ2C/oF88tsCBC7FjtuNvhevdgA= Subject key identifier: DC:50:F0:78:79:FE:88:0D:1F:0B:46:D6:36:CB:7B:06:47:0C:2D:F6 Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Certificate serial: 019AF16431BA0367A794B57DDA0D3269F81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: lDcwlnhOOxvY1vV3TdWyJM4AZew1Nn98ZIL77ke9Ogg=) 2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:31:ba:03:67:a7:94:b5:7d:da:0d:32:69:f8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=dc50f07879fe880d1f0b46d636cb7b06470c2df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:4f:6a:53:f0:d8:54:6d:d0:13:bc:ed:0e: 60:e5:75:7e:b6:75:13:ce:c3:7c:a2:2e:03:9a:ea: 04:7c:c7:25:ae:49:7c:5c:46:39:78:92:26:dd:6b: 19:4a:2e:fb:7f:86:7b:f6:02:29:28:7d:f9:c2:c6: ce:77:8a:f0:10:6c:d8:e5:90:76:f2:91:8c:23:8d: 11:86:2a:73:cf:b3:17:cb:52:9f:f0:8c:12:0a:94: 33:76:07:12:33:5d:ed:00:dc:54:40:66:c8:a5:b3: 1e:57:ce:d7:b5:61:0f:b3:17:a4:e1:02:b9:c4:39: a3:d0:a6:04:3d:ac:83:85:83:62:86:64:de:0c:af: 9c:eb:56:59:cf:b1:a0:7b:7e:e7:6e:56:85:cc:0f: 39:9e:63:b9:00:1b:a6:35:0d:e8:b0:94:fb:3b:07: 37:78:8e:e1:49:16:76:83:ec:16:30:8f:5b:23:5c: 43:72:33:9a:f7:5e:36:ad:68:55:d6:2e:47:b9:f5: 6a:74:58:ca:42:c9:99:a0:66:19:28:8a:27:23:1b: 58:71:0e:54:04:58:45:31:a7:f2:27:d0:37:ef:a3: 84:ef:40:84:9b:7b:2d:6a:75:33:0e:18:a4:99:e7: d0:f6:41:ce:62:3c:9b:fe:43:2a:fe:72:c0:b0:23: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:F0:78:79:FE:88:0D:1F:0B:46:D6:36:CB:7B:06:47:0C:2D:F6 X509v3 Authority Key Identifier: keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f0:34:aa:b2:87:f2:10:2e:76:70:72:70:d2:69:2c:63:be: 97:1a:f9:3e:97:b6:08:70:dc:19:a3:7a:9c:36:6f:5f:66:d6: f0:95:dd:d2:53:cb:96:b4:76:d1:5c:73:b9:a8:4a:aa:e2:74: 0e:a8:8f:93:93:92:56:a6:61:2f:42:14:f4:05:ae:ce:de:c5: db:47:64:95:9a:47:d4:c0:4a:35:32:5a:86:e1:4a:70:dd:7f: e1:d8:9a:38:1c:d9:62:af:98:59:d8:e6:37:c5:61:c7:57:11: 5e:77:74:41:ce:0a:32:0e:c0:76:9d:39:f0:b8:3d:d7:1b:f0: 74:dd:55:b2:9c:ac:98:60:f4:15:2b:81:06:9b:18:a5:60:da: 5c:29:89:02:17:ed:9f:10:63:bc:53:09:ec:6f:85:e3:39:3d: 01:05:28:82:c0:05:19:36:07:3c:89:14:46:d2:b3:0f:3c:ff: e2:4f:76:aa:71:47:64:f1:43:b5:b1:4d:62:6b:9b:a8:9c:e1: e2:d4:22:33:9d:95:1d:09:80:47:9b:82:fb:ce:d4:0f:c8:b4: 16:35:a9:bf:27:cc:19:76:be:68:41:d8:27:de:a3:1f:3a:10: fb:ef:14:8b:5a:b2:43:6e:8a:86:42:e7:e8:b4:ca:49:da:c1: d2:b1:5c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDG6A2enlLV92g0yafgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz ZmZmOTYwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhkYzUwZjA3ODc5ZmU4ODBkMWYwYjQ2ZDYzNmNiN2IwNjQ3MGMyZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVRPalPw2FRt0BO87Q5g5XV+tnUT zsN8oi4DmuoEfMclrkl8XEY5eJIm3WsZSi77f4Z79gIpKH35wsbOd4rwEGzY5ZB2 8pGMI40Rhipzz7MXy1Kf8IwSCpQzdgcSM13tANxUQGbIpbMeV87XtWEPsxek4QK5 xDmj0KYEPayDhYNihmTeDK+c61ZZz7Gge37nblaFzA85nmO5ABumNQ3osJT7Owc3 eI7hSRZ2g+wWMI9bI1xDcjOa9142rWhV1i5HufVqdFjKQsmZoGYZKIonIxtYcQ5U BFhFMafyJ9A376OE70CEm3stanUzDhikmefQ9kHOYjyb/kMq/nLAsCP5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxQ8Hh5/ogNHwtG1jbLewZHDC32MB8GA1UdIwQY MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/A0qrKH 8hAudnBycNJpLGO+lxr5Ppe2CHDcGaN6nDZvX2bW8JXd0lPLlrR20VxzuahKquJ0 DqiPk5OSVqZhL0IU9AWuzt7F20dklZpH1MBKNTJahuFKcN1/4diaOBzZYq+YWdjm N8Vhx1cRXnd0Qc4KMg7Adp058Lg91xvwdN1VspysmGD0FSuBBpsYpWDaXCmJAhft nxBjvFMJ7G+F4zk9AQUogsAFGTYHPIkURtKzDzz/4k92qnFHZPFDtbFNYmubqJzh 4tQiM52VHQmAR5uC+87UD8i0FjWpvyfMGXa+aEHYJ96jHzoQ++8Ui1qyQ26KhkLn 6LTKSdrB0rFc2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:50 2025 by rpki-client