This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json) Hash identifier: /nlcyWFKzmpsHCQFQcp2sWtX/qySK6Ca0Ent5VpT1C8= Subject key identifier: B6:CC:53:01:95:D5:8A:DD:A3:A6:C1:B5:D6:B3:CC:77:A0:F8:A7:E9 Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Certificate serial: 019AF1D1958821AC084EF8994C9AF402B98C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=) 2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: 37LHufkc+WjzglepmeXtQrCfTrcAMUDJB2wXNnEW7qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:88:21:ac:08:4e:f8:99:4c:9a:f4:02:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=b6cc530195d58adda3a6c1b5d6b3cc77a0f8a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:a4:6a:a6:5a:42:3c:f6:28:79:a8:2c:e7: ec:32:ea:a5:5b:86:4e:58:12:81:fd:62:1c:ad:8f: 42:f9:c8:d0:17:db:98:af:3a:0b:b4:53:91:3d:10: ac:e1:f2:d2:e5:56:e0:2c:12:b1:ca:ea:ef:4b:f0: 3c:18:eb:be:9f:8b:97:7f:3b:62:7d:06:7a:a6:f1: 3c:9b:70:c3:1e:4f:11:98:23:75:9f:4c:3d:76:29: e8:4b:49:f8:f8:e7:1f:62:7b:db:6d:1c:c5:5d:dd: d6:f4:6f:10:09:5f:68:f2:3b:6e:98:a4:01:8d:59: 5a:38:97:0e:31:91:0d:80:b4:8a:2b:3c:7d:5b:5d: 72:f8:09:b1:19:31:86:b7:6e:58:4d:5d:d1:8b:fc: 06:7a:14:54:c9:cc:ec:9c:52:8b:22:96:19:5b:f4: fd:04:75:af:fa:74:cc:6b:d0:68:10:ed:66:6a:e2: a7:f8:de:78:16:68:88:3e:cc:f3:01:71:7e:28:a8: f1:69:85:fd:27:f3:cb:d4:dd:fa:94:00:25:a8:e5: 7b:d7:3a:2d:72:96:fa:da:30:72:0a:41:e8:e5:ff: bc:e7:22:aa:fe:5e:ff:c4:20:1e:89:2c:75:d0:29: 1b:2d:8d:77:9b:b6:8c:aa:2b:c4:8c:24:d1:56:cd: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:53:01:95:D5:8A:DD:A3:A6:C1:B5:D6:B3:CC:77:A0:F8:A7:E9 X509v3 Authority Key Identifier: keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b3:e6:3e:30:10:01:6b:cb:dc:f0:dc:33:3c:2e:5a:40:26: d3:09:0b:77:df:b2:b4:ef:19:2f:2c:e6:59:78:50:9a:7d:c8: 62:40:b3:0f:5d:51:a8:ef:34:5c:35:90:53:54:e6:6d:2e:79: c4:96:79:bc:6f:03:9f:7e:6e:e5:3f:2a:3a:7b:d0:8b:ee:72: 0a:f2:13:b7:16:78:17:48:17:63:31:31:97:ca:84:ab:6b:03: 6f:3c:75:c2:b8:2c:48:ca:0d:b4:40:ed:e7:3f:72:2a:1b:33: 79:44:59:b7:f2:d8:81:3f:2c:b7:48:37:1e:e2:1d:93:6f:65: 4b:6a:9d:70:19:17:e2:d2:8e:4c:22:cb:6f:3a:80:41:5f:67: fd:81:b3:ec:30:fb:e5:82:6b:78:aa:9f:bf:e3:af:1b:ef:a8: ca:0a:06:81:bf:46:c1:8a:b1:ff:87:ec:34:3d:10:bb:ac:b9: 67:79:e9:1b:7f:99:72:14:f2:ed:eb:d8:11:a7:b1:b9:0c:a5: a4:2c:b8:6c:ec:17:b6:7c:3b:35:91:43:af:f0:23:c3:cc:ce: c0:7f:57:70:7e:e2:c8:6d:72:16:77:6a:96:73:a7:59:42:53: 97:f0:71:b6:5c:a9:58:d8:6f:8d:c8:ac:cf:9f:e2:c5:90:53: 2d:c5:64:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZWIIawITviZTJr0ArmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm OTU3Y2MwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EyhiNmNjNTMwMTk1ZDU4YWRkYTNhNmMxYjVkNmIzY2M3N2EwZjhhN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TOkaqZaQjz2KHmoLOfsMuqlW4ZO WBKB/WIcrY9C+cjQF9uYrzoLtFORPRCs4fLS5VbgLBKxyurvS/A8GOu+n4uXfzti fQZ6pvE8m3DDHk8RmCN1n0w9dinoS0n4+OcfYnvbbRzFXd3W9G8QCV9o8jtumKQB jVlaOJcOMZENgLSKKzx9W11y+AmxGTGGt25YTV3Ri/wGehRUyczsnFKLIpYZW/T9 BHWv+nTMa9BoEO1mauKn+N54FmiIPszzAXF+KKjxaYX9J/PL1N36lAAlqOV71zot cpb62jByCkHo5f+85yKq/l7/xCAeiSx10CkbLY13m7aMqivEjCTRVs1eeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbMUwGV1Yrdo6bBtdazzHeg+KfpMB8GA1UdIwQY MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbPmPjAQ AWvL3PDcMzwuWkAm0wkLd9+ytO8ZLyzmWXhQmn3IYkCzD11RqO80XDWQU1TmbS55 xJZ5vG8Dn35u5T8qOnvQi+5yCvITtxZ4F0gXYzExl8qEq2sDbzx1wrgsSMoNtEDt 5z9yKhszeURZt/LYgT8st0g3HuIdk29lS2qdcBkX4tKOTCLLbzqAQV9n/YGz7DD7 5YJreKqfv+OvG++oygoGgb9GwYqx/4fsND0Qu6y5Z3npG3+ZchTy7evYEaexuQyl pCy4bOwXtnw7NZFDr/Ajw8zOwH9XcH7iyG1yFndqlnOnWUJTl/BxtlypWNhvjcis z5/ixZBTLcVkiA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:29 2025 by rpki-client