This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json) Hash identifier: keiOR2uJ+zxxyTw1ZB5zt/QPlNtuaBdX9KgsMJ3C0S4= Subject key identifier: 69:1E:37:D9:DD:A2:CA:1C:9D:7D:53:6E:0D:D1:5C:84:33:36:8E:66 Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Certificate serial: 019AF2AD634AF225DDDCE10AA9BD9023552A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft Manifest number: 101D Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: wmTmIjxDGd31St6LGuCciLrRE9T5rr5/8pQabC8eLpU=) 2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:63:4a:f2:25:dd:dc:e1:0a:a9:bd:90:23:55:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=691e37d9dda2ca1c9d7d536e0dd15c8433368e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:19:fb:75:5b:81:0c:4f:24:0c:44:70:a6: d1:3d:3c:64:18:9d:18:34:27:db:90:1d:43:8a:1c: 56:a4:c0:8b:a8:c9:02:b1:cc:dc:9b:25:4c:2c:6f: 6f:23:46:c2:6e:ec:b2:b6:27:3c:8c:8e:3e:10:c8: 86:7b:7f:6c:da:c1:d1:97:87:55:34:19:90:5b:2b: c9:ab:dc:48:0a:9e:53:20:4f:42:f0:d9:e1:8e:13: 64:47:af:63:b3:19:e1:f0:b0:e5:a7:74:a4:f3:5d: f6:4c:7f:36:b0:15:94:6e:94:68:79:a1:42:5b:d5: 50:88:6f:40:cc:3d:fa:ad:f0:6c:d1:cc:02:b1:1c: 1d:3d:47:14:54:e4:56:53:c1:93:72:3e:0b:d8:09: ba:40:6d:8d:67:42:a5:44:62:9d:73:72:82:1b:07: 54:dd:ab:2e:56:80:a8:e8:55:63:13:af:33:87:00: 34:01:1e:da:4e:a3:03:04:10:71:0c:1f:c6:58:c4: 0f:3e:8d:b4:ec:40:76:a7:38:4b:75:e6:83:df:4d: fb:cd:90:df:6b:94:0b:de:1f:f5:39:89:5e:a9:18: 04:a0:af:db:ba:8d:37:e7:bc:d0:1a:6f:b0:fa:c7: 32:1b:1d:a0:77:c4:e0:ce:00:74:f6:67:47:32:c1: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:37:D9:DD:A2:CA:1C:9D:7D:53:6E:0D:D1:5C:84:33:36:8E:66 X509v3 Authority Key Identifier: keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:52:69:d8:ac:21:e5:2b:ee:17:14:a1:4a:39:d0:99:b6:b2: b2:0a:96:8a:25:d7:13:f2:00:97:66:b1:a3:2c:08:89:64:fe: ac:26:08:a5:3f:7f:4c:51:a8:ed:a2:75:1b:d9:44:a8:82:7e: 23:15:8a:6c:4a:7a:cd:a4:f0:f9:39:e5:8c:bc:5e:ea:93:a7: f2:23:5c:ed:b9:73:75:5d:bc:b4:b3:0d:c3:9c:4b:af:6d:1f: f6:64:eb:c6:cb:f2:e3:c2:d4:0e:c6:44:43:52:31:62:0e:d0: d0:24:64:1e:0f:bf:4e:c3:39:49:2f:95:96:3e:bf:83:ca:53: 79:b1:8b:1d:89:6b:2b:f8:73:03:b7:f2:33:3d:ef:f2:a5:72: 88:37:ea:94:5c:96:b9:f5:e9:5c:44:ed:76:8d:3f:74:de:68: 8a:dd:0d:ed:76:b2:b3:ed:01:91:3d:84:f4:29:c5:2a:61:89: 7b:a1:97:c3:78:4b:9f:6c:29:55:e3:50:ca:f4:67:c3:b1:51: 02:c1:ae:06:17:c1:43:b0:93:af:27:02:95:2c:09:e2:c8:02: 34:1f:77:20:0c:12:ee:b7:4c:26:02:61:d5:a7:ee:7a:80:97: 6f:54:3a:93:d2:76:14:5c:69:e6:26:dd:6b:92:65:8e:94:ab: e4:10:b4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWNK8iXd3OEKqb2QI1UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1 Y2QwZTQwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD Eyg2OTFlMzdkOWRkYTJjYTFjOWQ3ZDUzNmUwZGQxNWM4NDMzMzY4ZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQZ+3VbgQxPJAxEcKbRPTxkGJ0Y NCfbkB1DihxWpMCLqMkCsczcmyVMLG9vI0bCbuyytic8jI4+EMiGe39s2sHRl4dV NBmQWyvJq9xICp5TIE9C8NnhjhNkR69jsxnh8LDlp3Sk8132TH82sBWUbpRoeaFC W9VQiG9AzD36rfBs0cwCsRwdPUcUVORWU8GTcj4L2Am6QG2NZ0KlRGKdc3KCGwdU 3asuVoCo6FVjE68zhwA0AR7aTqMDBBBxDB/GWMQPPo207EB2pzhLdeaD3037zZDf a5QL3h/1OYleqRgEoK/buo0357zQGm+w+scyGx2gd8TgzgB09mdHMsHjRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkeN9ndosocnX1Tbg3RXIQzNo5mMB8GA1UdIwQY MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5 LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Jp2Kwh 5SvuFxShSjnQmbaysgqWiiXXE/IAl2axoywIiWT+rCYIpT9/TFGo7aJ1G9lEqIJ+ IxWKbEp6zaTw+TnljLxe6pOn8iNc7blzdV28tLMNw5xLr20f9mTrxsvy48LUDsZE Q1IxYg7Q0CRkHg+/TsM5SS+Vlj6/g8pTebGLHYlrK/hzA7fyMz3v8qVyiDfqlFyW ufXpXETtdo0/dN5oit0N7Xays+0BkT2E9CnFKmGJe6GXw3hLn2wpVeNQyvRnw7FR AsGuBhfBQ7CTrycClSwJ4sgCNB93IAwS7rdMJgJh1afueoCXb1Q6k9J2FFxp5ibd a5JljpSr5BC0DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:58 2025 by rpki-client