This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json) Hash identifier: e/mJcQTONZoPC/SznT88Q7ujmAbkdJN+YADbhtmxXWI= Subject key identifier: B6:44:08:80:B9:C5:F6:FA:C7:1D:61:EE:44:4F:34:07:18:ED:89:EC Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c Certificate serial: 019B2EFA4931B20B15CF8CF98426B34108D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 01:01:53 +0000 Manifest this update: Thu 18 Dec 2025 01:01:53 +0000 Manifest next update: Fri 19 Dec 2025 01:01:53 +0000 Files and hashes: 1: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: UxAoZuMaUYkNW/mTVCTknAKALLG8lkukXEg0W1O3rWs=) 2: x4aksm8H5U_SoWV9w4ojBxWjtSw.roa (hash: DpLDxBcf+XBzD3AIM/0hCbVFFthMKuVEgRBA/YNYRu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:49:31:b2:0b:15:cf:8c:f9:84:26:b3:41:08:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c Validity Not Before: Dec 18 01:01:53 2025 GMT Not After : Dec 19 01:01:53 2025 GMT Subject: CN=b6440880b9c5f6fac71d61ee444f340718ed89ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:7f:e3:b9:b9:fd:d8:3d:c5:2b:5c:d6:2f: 2a:60:cd:cf:4c:22:21:fe:3b:ca:ac:75:b0:c8:85: cd:67:be:08:85:99:24:b8:4a:20:3c:50:ad:ba:ef: 02:19:6e:42:72:af:26:96:02:c0:90:6c:fe:5d:30: 5d:10:d4:45:8c:76:c7:95:e7:c3:03:bd:a6:9d:05: 98:75:5f:ec:ab:19:e0:42:c3:94:f3:48:5b:0d:2e: 17:12:cb:c4:88:db:01:ab:0e:61:40:fe:c7:b7:d1: f5:96:55:c3:c6:27:4b:84:08:d3:40:2e:53:16:20: 6f:55:98:81:bc:34:dd:7d:4d:34:06:b1:20:68:d7: cf:73:e8:73:2b:a2:9c:c0:df:d8:a1:fe:8c:0f:16: c7:c9:0a:67:24:48:50:d3:09:a1:d8:d8:8a:c2:1b: 97:79:17:43:03:77:2f:ee:41:8c:6f:51:96:23:3b: 3a:f9:7c:38:e7:13:c1:e4:13:71:97:36:f0:0d:25: 84:5e:12:3b:40:ec:5a:0e:2f:8c:43:e1:a3:5a:9c: a4:a4:15:95:d3:a8:76:31:75:b7:64:be:00:1f:e6: 58:d9:d6:b5:fc:df:51:5a:79:72:d6:21:50:30:58: 83:ce:a9:5c:2e:2d:db:8d:dc:2c:d1:de:01:7d:2a: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:44:08:80:B9:C5:F6:FA:C7:1D:61:EE:44:4F:34:07:18:ED:89:EC X509v3 Authority Key Identifier: keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e1:98:6c:18:81:78:7a:c1:86:7a:74:51:38:1d:b1:3b:49: eb:a6:bb:1e:17:c2:6a:b9:d3:b0:a0:64:f6:05:8e:f4:f4:9a: be:fe:a3:76:b4:49:0d:18:5e:87:33:9e:b6:0c:66:96:f8:04: a9:3f:30:68:25:41:54:d9:95:41:b2:14:26:00:e4:85:53:6b: 26:3d:b1:4e:a7:1d:b4:b3:c0:76:34:bf:92:f5:de:e2:a1:7a: 68:27:6b:e8:fb:4e:c8:88:25:07:18:95:8c:ee:83:8f:a0:ed: a8:fe:03:b4:eb:fc:b7:26:6a:68:ff:be:dc:5c:3d:2c:e1:f8: 49:d3:aa:5c:29:45:40:69:ba:e2:3b:fb:98:3f:1f:b9:3f:f1: 67:36:a0:72:77:ef:73:9f:0a:68:3c:ab:dc:33:c0:de:20:e2: ce:44:81:a7:d9:b2:0e:6a:97:0e:bf:53:f0:5f:2c:4a:b9:ed: 1a:40:a6:ad:08:eb:4e:22:19:20:26:f0:fe:7a:fc:b9:fc:3e: 92:bd:b5:e5:47:26:d9:ae:fc:c1:76:b7:a8:7c:87:86:00:34: 2a:15:b8:5a:10:79:31:48:71:d8:f7:b4:26:f2:21:1d:af:b4: c9:ae:08:11:22:01:5a:7a:3d:41:8a:5c:2c:30:6b:4b:56:74: 86:1f:8a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+kkxsgsVz4z5hCazQQjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNWNhNGUyYTBhMTgwZWIyZjI5Y2M4ODc0MGFhNzA3Yjg4 MjFkN2MwHhcNMjUxMjE4MDEwMTUzWhcNMjUxMjE5MDEwMTUzWjAzMTEwLwYDVQQD EyhiNjQ0MDg4MGI5YzVmNmZhYzcxZDYxZWU0NDRmMzQwNzE4ZWQ4OWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzx/47m5/dg9xStc1i8qYM3PTCIh /jvKrHWwyIXNZ74IhZkkuEogPFCtuu8CGW5Ccq8mlgLAkGz+XTBdENRFjHbHlefD A72mnQWYdV/sqxngQsOU80hbDS4XEsvEiNsBqw5hQP7Ht9H1llXDxidLhAjTQC5T FiBvVZiBvDTdfU00BrEgaNfPc+hzK6KcwN/Yof6MDxbHyQpnJEhQ0wmh2NiKwhuX eRdDA3cv7kGMb1GWIzs6+Xw45xPB5BNxlzbwDSWEXhI7QOxaDi+MQ+GjWpykpBWV 06h2MXW3ZL4AH+ZY2da1/N9RWnly1iFQMFiDzqlcLi3bjdws0d4BfSrTTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZECIC5xfb6xx1h7kRPNAcY7YnsMB8GA1UdIwQY MBaAFP5cpOKgoYDrLynMiHQKpwe4gh18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEt NjhjMTA1ZDJmMGRiLzEvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85YzdhYTQtYTRjOS00NDdhLThiYzEtNjhjMTA1ZDJmMGRi LzEvX2x5azRxQ2hnT3N2S2N5SWRBcW5CN2lDSFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuGYbBiB eHrBhnp0UTgdsTtJ66a7HhfCarnTsKBk9gWO9PSavv6jdrRJDRhehzOetgxmlvgE qT8waCVBVNmVQbIUJgDkhVNrJj2xTqcdtLPAdjS/kvXe4qF6aCdr6PtOyIglBxiV jO6Dj6DtqP4DtOv8tyZqaP++3Fw9LOH4SdOqXClFQGm64jv7mD8fuT/xZzagcnfv c58KaDyr3DPA3iDizkSBp9myDmqXDr9T8F8sSrntGkCmrQjrTiIZICbw/nr8ufw+ kr215Ucm2a78wXa3qHyHhgA0KhW4WhB5MUhx2Pe0JvIhHa+0ya4IESIBWno9QYpc LDBrS1Z0hh+KXw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:15 2025 by rpki-client