This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json) Hash identifier: 7PdnOWEF4oxtWwNX+PM9TxLtAxWg8wPJM8eQZpuNwJI= Subject key identifier: 52:1E:CF:E7:EE:C3:C5:B4:6D:51:04:E4:E4:4A:CF:DC:19:8D:7F:2D Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757 Certificate serial: 019AF163F2C3C3ECD9E15D81FAD8B417E2CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft Manifest number: 075F Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: f59Eg1Dn9GDJ6D5YTk9w+B6lqOMCxne2coL0GKMrxbs=) 2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f2:c3:c3:ec:d9:e1:5d:81:fa:d8:b4:17:e2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=521ecfe7eec3c5b46d5104e4e44acfdc198d7f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:3f:b7:f1:e5:17:f3:34:ed:63:cc:97:64: d3:2e:de:af:67:e7:de:59:33:c6:77:1b:3a:34:6b: e7:c1:c6:af:6d:c6:ac:39:f6:17:23:ee:fc:a0:ef: 23:18:bb:3f:02:41:4a:c6:da:be:42:1a:c4:2b:ad: 76:30:c2:da:0a:48:a5:e3:48:f7:4a:ea:6d:c8:04: 64:ca:f8:5f:1b:70:c6:d3:b0:bd:9e:3d:8f:06:c5: 79:4a:76:22:96:14:2f:36:39:08:44:c6:5d:f9:c0: 9f:c7:01:c0:3c:d3:3d:08:90:8d:47:19:f1:64:b3: 85:4e:bb:d5:6f:a6:5e:3a:6a:72:70:78:b0:c4:1f: 10:27:39:55:90:9c:42:ef:68:f9:e7:03:89:17:10: 8e:19:59:e0:e5:2f:dc:2d:d7:24:93:47:0b:d1:8d: 22:72:7f:38:aa:af:3c:27:c9:93:5e:c8:4f:66:47: 12:16:4f:43:29:e9:bd:be:ba:3d:3e:d9:da:7b:76: 19:fd:0e:f9:c1:95:31:d1:25:96:a4:7f:bd:80:ea: 1c:dc:53:23:01:66:c6:35:48:84:c5:ab:3e:3a:71: e1:82:3f:fc:ae:02:1c:f2:b4:ae:e5:02:3c:32:f8: 5b:3d:b4:82:66:68:e2:dd:8f:38:bc:83:d1:80:eb: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:CF:E7:EE:C3:C5:B4:6D:51:04:E4:E4:4A:CF:DC:19:8D:7F:2D X509v3 Authority Key Identifier: keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:22:78:b0:59:7c:96:59:5e:ec:ff:67:82:98:e0:28:e5: 1f:07:fb:b5:51:41:5b:1c:f7:7c:00:52:6d:02:c5:17:c5:f4: 3f:84:23:c7:5b:ad:c9:ed:f2:7b:1c:90:70:86:42:c2:a1:c3: f6:70:42:76:b3:88:3a:b2:21:40:6e:93:13:9d:87:82:b9:b5: 61:5b:f0:da:c9:f3:4b:3a:d8:50:9c:56:9b:45:67:68:b2:10: bc:5d:ff:a0:d0:7d:e4:3e:75:b7:a5:26:75:a8:5d:3d:ff:82: 07:e9:0d:32:40:be:94:d4:41:82:c1:ef:e3:57:e6:b0:d9:d7: 98:98:0a:0f:dc:44:9c:6d:f2:9a:3f:7b:6e:94:74:af:d2:ee: 5a:b3:be:de:8f:62:43:62:9a:0e:6a:bb:60:ef:93:b9:5d:32: 93:52:11:69:ad:6f:1a:1f:ba:82:4e:c9:b4:2a:b6:4b:11:e9: 19:47:22:0a:05:0a:ac:41:5a:c1:fe:41:20:92:16:1a:35:b4: 17:8f:f5:26:2f:c0:2b:56:47:20:d7:17:0f:21:58:e9:c1:b4: 31:b8:45:0d:14:f3:f4:0a:8d:e4:41:ff:d3:22:40:3d:48:d7: 26:82:bc:8f:64:03:2a:c7:a9:d1:bf:60:a2:f8:01:54:24:5c: c0:02:d8:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/LDw+zZ4V2B+ti0F+LOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3 MmQ3NTcwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD Eyg1MjFlY2ZlN2VlYzNjNWI0NmQ1MTA0ZTRlNDRhY2ZkYzE5OGQ3ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBc/t/HlF/M07WPMl2TTLt6vZ+fe WTPGdxs6NGvnwcavbcasOfYXI+78oO8jGLs/AkFKxtq+QhrEK612MMLaCkil40j3 SuptyARkyvhfG3DG07C9nj2PBsV5SnYilhQvNjkIRMZd+cCfxwHAPNM9CJCNRxnx ZLOFTrvVb6ZeOmpycHiwxB8QJzlVkJxC72j55wOJFxCOGVng5S/cLdckk0cL0Y0i cn84qq88J8mTXshPZkcSFk9DKem9vro9Ptnae3YZ/Q75wZUx0SWWpH+9gOoc3FMj AWbGNUiExas+OnHhgj/8rgIc8rSu5QI8MvhbPbSCZmji3Y84vIPRgOu+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIez+fuw8W0bVEE5ORKz9wZjX8tMB8GA1UdIwQY MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt ZDlhMWZhOTA4MTBmLzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+YieLBZ fJZZXuz/Z4KY4CjlHwf7tVFBWxz3fABSbQLFF8X0P4Qjx1utye3yexyQcIZCwqHD 9nBCdrOIOrIhQG6TE52Hgrm1YVvw2snzSzrYUJxWm0VnaLIQvF3/oNB95D51t6Um dahdPf+CB+kNMkC+lNRBgsHv41fmsNnXmJgKD9xEnG3ymj97bpR0r9LuWrO+3o9i Q2KaDmq7YO+TuV0yk1IRaa1vGh+6gk7JtCq2SxHpGUciCgUKrEFawf5BIJIWGjW0 F4/1Ji/AK1ZHINcXDyFY6cG0MbhFDRTz9AqN5EH/0yJAPUjXJoK8j2QDKsep0b9g ovgBVCRcwALYiA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:22 2025 by rpki-client