This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json) Hash identifier: vSZGxhmbttqepItmsxa6hnaF3G4/PRlQXYoggaxlDWY= Subject key identifier: 4A:FA:A4:D2:5E:1C:10:07:84:16:76:21:5A:53:8F:38:09:69:23:F9 Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Certificate serial: 019B2AAEA725306E831653D8A3FA5A945E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft Manifest number: 103A Signing time: Wed 17 Dec 2025 05:00:47 +0000 Manifest this update: Wed 17 Dec 2025 05:00:47 +0000 Manifest next update: Thu 18 Dec 2025 05:00:47 +0000 Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: mqLCmh7CEEt63E3aPeQvW+wwQdBS3MMdFKleWcCbPQE=) 2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:a7:25:30:6e:83:16:53:d8:a3:fa:5a:94:5e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Validity Not Before: Dec 17 05:00:47 2025 GMT Not After : Dec 18 05:00:47 2025 GMT Subject: CN=4afaa4d25e1c1007841676215a538f38096923f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:92:21:01:b2:2c:61:36:a9:fd:fd:51:dd: 12:9b:7d:60:93:59:c9:89:37:c1:d5:20:32:fb:6b: 2d:f9:f7:d8:bf:f2:a1:d9:e6:d6:6c:a9:fc:44:01: 91:76:5e:ca:f8:b7:9d:18:2a:81:5d:9e:d1:80:66: 06:30:20:88:46:59:b5:78:39:0a:b8:35:c8:90:7d: 8b:8c:23:5a:2c:66:1f:2d:ca:28:35:43:70:94:07: d8:21:f8:b9:ad:e5:6f:ad:cc:8e:18:5e:59:0a:b2: 80:bc:55:ad:0f:84:46:a5:cd:60:50:c1:04:4b:b3: 7c:71:d2:95:23:57:bb:7c:32:6e:8d:42:44:06:e4: d4:4e:1a:1b:fc:81:73:1f:82:a4:f5:60:24:c8:ef: 23:70:59:0d:e7:1e:6e:5e:9d:f1:7d:62:c5:94:62: 28:9d:41:e8:cf:46:95:b0:45:91:48:e7:19:42:44: 47:16:fa:73:d7:96:75:11:8c:66:16:22:64:4d:f5: 67:03:ea:f3:1b:ee:6e:30:ad:03:e0:65:9b:3b:fe: 9b:9f:f8:c0:93:46:f4:99:cc:49:93:75:13:f9:4b: 12:9d:71:76:d5:f0:23:ee:25:e1:c6:cc:23:9d:a0: 67:d8:fc:fe:fb:5b:25:14:ad:bb:58:00:ba:92:ba: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:A4:D2:5E:1C:10:07:84:16:76:21:5A:53:8F:38:09:69:23:F9 X509v3 Authority Key Identifier: keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8a:d1:e0:c7:01:50:2b:d9:14:54:7e:3f:c9:14:ba:63:33: b7:73:bd:99:bc:30:94:c5:e4:33:ad:a2:ae:69:65:cd:2e:ec: 90:a4:3e:d6:62:b8:b5:fb:b3:ac:bf:0c:62:16:e3:27:8c:51: 71:7a:d9:e0:50:69:8a:d6:ab:76:64:0c:f6:bd:19:74:ee:5d: d1:b5:24:f8:b3:c3:e7:ee:f9:5d:e6:78:5f:b0:78:4f:bc:38: e1:8b:1f:c0:61:94:c5:49:90:d5:82:bb:1f:b8:7a:d1:6c:6b: 77:73:78:c0:ff:e5:39:cf:33:ad:7a:6c:bb:c6:ca:ce:01:bd: f2:a0:6b:96:63:47:c1:c7:a4:86:22:41:e6:de:67:8a:1f:8b: 8f:c6:00:17:2f:0d:9c:86:83:45:d5:08:01:2c:1e:1d:ec:1a: 9c:69:49:0f:be:64:68:d1:71:f3:a2:bb:d6:b7:7f:c5:57:59: 3b:c5:af:c9:81:8c:2f:5b:3b:ea:2c:c3:ff:e3:f6:a5:44:e0: ff:bf:ae:c1:b1:01:35:90:c8:e5:07:06:22:00:53:70:54:cf: d9:ff:0a:1a:39:9a:66:e6:a4:dc:cb:d6:c4:c5:69:57:03:a0: 27:31:31:9a:dd:7d:13:ed:84:db:2d:32:08:1d:5c:f1:d6:c4: f5:cc:d8:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrqclMG6DFlPYo/palF4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1 Y2QwZTQwHhcNMjUxMjE3MDUwMDQ3WhcNMjUxMjE4MDUwMDQ3WjAzMTEwLwYDVQQD Eyg0YWZhYTRkMjVlMWMxMDA3ODQxNjc2MjE1YTUzOGYzODA5NjkyM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JeSIQGyLGE2qf39Ud0Sm31gk1nJ iTfB1SAy+2st+ffYv/Kh2ebWbKn8RAGRdl7K+LedGCqBXZ7RgGYGMCCIRlm1eDkK uDXIkH2LjCNaLGYfLcooNUNwlAfYIfi5reVvrcyOGF5ZCrKAvFWtD4RGpc1gUMEE S7N8cdKVI1e7fDJujUJEBuTUThob/IFzH4Kk9WAkyO8jcFkN5x5uXp3xfWLFlGIo nUHoz0aVsEWRSOcZQkRHFvpz15Z1EYxmFiJkTfVnA+rzG+5uMK0D4GWbO/6bn/jA k0b0mcxJk3UT+UsSnXF21fAj7iXhxswjnaBn2Pz++1slFK27WAC6kro5DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr6pNJeHBAHhBZ2IVpTjzgJaSP5MB8GA1UdIwQY MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5 LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4rR4McB UCvZFFR+P8kUumMzt3O9mbwwlMXkM62irmllzS7skKQ+1mK4tfuzrL8MYhbjJ4xR cXrZ4FBpitardmQM9r0ZdO5d0bUk+LPD5+75XeZ4X7B4T7w44YsfwGGUxUmQ1YK7 H7h60Wxrd3N4wP/lOc8zrXpsu8bKzgG98qBrlmNHwcekhiJB5t5nih+Lj8YAFy8N nIaDRdUIASweHewanGlJD75kaNFx86K71rd/xVdZO8WvyYGML1s76izD/+P2pUTg /7+uwbEBNZDI5QcGIgBTcFTP2f8KGjmaZuak3MvWxMVpVwOgJzExmt19E+2E2y0y CB1c8dbE9czYQQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:39 2025 by rpki-client