This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json) Hash identifier: Co5k9gjjzLkRjJSSEsKnTRgukIjg4TE2QcLaHuSe2LE= Subject key identifier: 39:93:6A:A8:05:64:52:96:A5:20:13:36:02:1B:49:0D:0D:92:8D:2E Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Certificate serial: 019AF1D197780387E9EF63D1B1D773A83330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: zFNqQFlxf9jtsf0ZI/a2+atUZ3Hwk57rODIJ460F7rk=) 2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:97:78:03:87:e9:ef:63:d1:b1:d7:73:a8:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=39936aa805645296a5201336021b490d0d928d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:c6:09:54:9b:ca:7f:3b:8f:0f:9e:62:07: 89:36:df:03:69:98:bd:ee:af:da:b3:f7:d0:0a:cf: 96:a6:75:05:9e:f7:46:9a:cc:15:89:ca:d1:92:53: a0:9b:20:f9:26:11:a6:b4:7a:75:15:b4:f1:33:6b: 83:7f:c4:44:77:5c:bb:cf:c8:ab:ae:23:56:d1:ce: 69:ae:6f:02:03:1d:11:9d:53:1a:7b:3a:d9:ae:5b: ee:99:62:52:17:b8:4f:bc:28:d6:9d:ac:e8:f5:1e: a6:87:d2:7b:ec:d9:2a:2f:cb:92:92:7b:37:6f:16: ed:dd:2b:34:a0:b1:f3:26:8a:62:91:e2:52:dd:a1: 5e:a1:85:61:5d:f4:c9:6f:f4:c4:bd:3e:7d:f0:32: e1:42:b2:1d:10:19:05:9a:58:d0:fb:e3:c6:9b:53: 94:3f:0f:59:a3:e3:4b:95:06:f6:4a:08:cd:60:b9: 58:22:01:63:5d:69:6f:95:1c:c3:18:31:17:86:53: 8e:93:2c:41:aa:9a:3a:8a:52:19:b7:ae:85:4d:3b: e1:dc:c2:f0:17:f7:c2:e9:b0:f7:e9:da:19:31:b8: 91:46:c9:15:61:62:a4:77:09:92:4e:15:47:c9:de: fe:29:89:58:bd:b3:44:20:a2:63:ce:d9:4e:b3:3e: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:6A:A8:05:64:52:96:A5:20:13:36:02:1B:49:0D:0D:92:8D:2E X509v3 Authority Key Identifier: keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:75:7c:49:99:97:63:b7:bf:a9:81:4b:de:ec:17:be:85:ad: a0:7f:3d:39:88:52:24:b8:39:9f:d0:45:63:4e:75:99:20:a5: ef:e8:57:fb:f9:31:93:16:04:7d:c8:47:05:e9:50:9d:79:8d: 0f:5c:d8:46:a9:ec:47:be:f1:b4:1c:6c:8d:6d:25:a7:53:74: 2d:ba:5a:1b:7a:5e:e8:d3:f2:fd:ab:22:15:08:54:59:a9:fa: b2:eb:cc:48:14:69:57:1d:c6:b4:c0:de:55:01:06:81:44:a5: f8:e2:1b:ab:87:d4:b4:94:12:a0:fe:4c:7c:28:e8:8e:55:b5: 7d:01:85:bd:2b:42:21:9a:42:6a:26:03:ce:f5:8d:74:10:fa: 0b:6e:1e:a0:a7:b2:9a:e5:52:87:c8:28:15:37:d6:80:cd:e6: fc:4c:d4:e5:6f:06:db:fc:0d:b7:a4:e5:fe:24:a8:2a:ab:39: ec:53:54:2a:48:b4:3c:1d:76:47:6c:99:7e:92:d3:fb:5d:5d: cd:a4:0f:ee:1c:91:28:b4:3a:e0:df:91:8c:af:ee:0b:21:b9: c8:81:40:04:35:19:0f:f4:5f:05:7a:a9:7b:6f:0d:88:73:a0: cf:94:1e:61:72:49:3a:8a:cd:80:54:41:75:ce:3d:f7:13:b4: d4:3a:ac:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zd4A4fp72PRsddzqDMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5 OWFkNjYwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EygzOTkzNmFhODA1NjQ1Mjk2YTUyMDEzMzYwMjFiNDkwZDBkOTI4ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTGCVSbyn87jw+eYgeJNt8DaZi9 7q/as/fQCs+WpnUFnvdGmswVicrRklOgmyD5JhGmtHp1FbTxM2uDf8REd1y7z8ir riNW0c5prm8CAx0RnVMaezrZrlvumWJSF7hPvCjWnazo9R6mh9J77NkqL8uSkns3 bxbt3Ss0oLHzJopikeJS3aFeoYVhXfTJb/TEvT598DLhQrIdEBkFmljQ++PGm1OU Pw9Zo+NLlQb2SgjNYLlYIgFjXWlvlRzDGDEXhlOOkyxBqpo6ilIZt66FTTvh3MLw F/fC6bD36doZMbiRRskVYWKkdwmSThVHyd7+KYlYvbNEIKJjztlOsz7M7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmTaqgFZFKWpSATNgIbSQ0Nko0uMB8GA1UdIwQY MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut MTIxMjUzMTJiMmEzLzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXV8SZmX Y7e/qYFL3uwXvoWtoH89OYhSJLg5n9BFY051mSCl7+hX+/kxkxYEfchHBelQnXmN D1zYRqnsR77xtBxsjW0lp1N0LbpaG3pe6NPy/asiFQhUWan6suvMSBRpVx3GtMDe VQEGgUSl+OIbq4fUtJQSoP5MfCjojlW1fQGFvStCIZpCaiYDzvWNdBD6C24eoKey muVSh8goFTfWgM3m/EzU5W8G2/wNt6Tl/iSoKqs57FNUKki0PB12R2yZfpLT+11d zaQP7hyRKLQ64N+RjK/uCyG5yIFABDUZD/RfBXqpe28NiHOgz5QeYXJJOorNgFRB dc499xO01DqswA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:39 2025 by rpki-client