This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json) Hash identifier: L4e5uOj6E2a3JPJzshxQt81tTa6XU0LVH/UM8H6TjR0= Subject key identifier: 7E:B6:52:B4:5A:A0:B0:35:B9:35:69:24:78:8B:BE:E4:27:4B:FF:B9 Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Certificate serial: 019B2DB00420639D534CF648425920981C3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 19:01:08 +0000 Manifest this update: Wed 17 Dec 2025 19:01:08 +0000 Manifest next update: Thu 18 Dec 2025 19:01:08 +0000 Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: F5cj+LUQdoQTt4T9QnhIuw67iyp2IIoZZxmLP4N9jI0=) 2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:04:20:63:9d:53:4c:f6:48:42:59:20:98:1c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66 Validity Not Before: Dec 17 19:01:08 2025 GMT Not After : Dec 18 19:01:08 2025 GMT Subject: CN=7eb652b45aa0b035b9356924788bbee4274bffb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:fa:45:ba:c3:3e:ab:90:15:f7:66:c2:e4: 50:17:d2:49:84:88:19:f4:de:01:31:c9:c9:d7:1d: df:e2:1f:18:5e:b6:5c:42:b7:2a:53:9f:8d:32:bf: c1:1f:3b:b5:8b:6a:ae:83:ba:15:29:e1:3c:f1:d9: ff:da:bd:41:f6:ee:94:fe:ac:ef:e4:38:04:c9:96: 87:dd:2e:30:f3:af:14:c6:79:ff:23:b6:6b:08:bf: b1:05:27:0b:32:8b:77:71:cd:79:81:a4:6a:00:89: bc:fd:88:8c:09:4e:09:4c:7c:ff:c2:1a:2e:4b:55: 9b:37:0b:f0:10:a6:31:8e:d5:bb:a4:df:b1:43:82: c4:c4:f5:80:59:09:ce:e0:19:fc:31:9f:96:c2:ff: 59:ef:23:4d:27:60:9e:13:4e:18:25:9d:0d:d1:94: 0a:79:c5:b1:20:c5:91:83:e3:3a:66:99:f5:f4:66: 85:4d:7b:85:ba:54:4e:39:9c:2e:33:6d:51:02:1d: 53:db:46:9e:6f:80:41:ee:61:a5:63:db:0c:58:32: 37:15:6a:c8:77:4b:d0:94:5e:9d:4b:de:51:b5:78: b9:db:b9:4c:a8:76:87:e2:e4:34:51:c6:12:55:39: a6:d3:7c:8f:86:d3:3c:6b:bb:01:b0:4d:82:50:06: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:52:B4:5A:A0:B0:35:B9:35:69:24:78:8B:BE:E4:27:4B:FF:B9 X509v3 Authority Key Identifier: keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c8:49:7e:6b:70:31:3f:e8:2a:cb:f7:4b:5a:af:74:b0:0b: a6:19:6d:f4:54:cb:c9:17:24:8d:b9:cd:3d:82:1d:82:c6:19: 5c:8e:68:2e:ee:b9:8f:92:3c:d1:67:b7:c3:cb:fd:09:24:5f: e4:f9:71:66:79:f2:37:f4:4a:1a:77:0d:c5:de:0b:54:3a:19: 97:3c:fe:50:31:e6:6f:35:05:f2:8f:61:bd:71:4e:45:60:84: ff:e5:35:8e:ad:50:97:ed:63:93:e1:42:45:d3:7b:2d:0b:01: 26:ff:69:dc:29:9f:83:5a:5c:da:b6:9f:ff:d4:98:83:06:6d: 8d:0c:81:f1:a9:4a:b0:3b:30:64:30:24:22:54:29:9d:e8:1d: eb:03:78:c0:55:5d:42:48:c6:31:a4:de:1b:f7:2b:8b:00:b3: 0f:f1:fd:ad:8b:dc:f2:8b:15:f9:d0:f4:6c:5c:91:9f:1e:b3: 6c:39:d7:e6:ea:8a:82:9d:85:2e:ad:f3:20:30:29:c7:85:0b: 58:e6:a1:f6:91:40:47:3d:52:f8:5e:61:61:9a:1d:9c:58:08: 38:be:6e:62:af:35:79:bc:da:22:05:b0:47:05:6c:13:2f:4f: 8a:4f:08:ce:09:a3:26:5e:72:d8:fd:10:93:4e:ad:9f:07:da: 3e:ca:5d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsAQgY51TTPZIQlkgmBw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5 OWFkNjYwHhcNMjUxMjE3MTkwMTA4WhcNMjUxMjE4MTkwMTA4WjAzMTEwLwYDVQQD Eyg3ZWI2NTJiNDVhYTBiMDM1YjkzNTY5MjQ3ODhiYmVlNDI3NGJmZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiz6RbrDPquQFfdmwuRQF9JJhIgZ 9N4BMcnJ1x3f4h8YXrZcQrcqU5+NMr/BHzu1i2qug7oVKeE88dn/2r1B9u6U/qzv 5DgEyZaH3S4w868Uxnn/I7ZrCL+xBScLMot3cc15gaRqAIm8/YiMCU4JTHz/whou S1WbNwvwEKYxjtW7pN+xQ4LExPWAWQnO4Bn8MZ+Wwv9Z7yNNJ2CeE04YJZ0N0ZQK ecWxIMWRg+M6Zpn19GaFTXuFulROOZwuM21RAh1T20aeb4BB7mGlY9sMWDI3FWrI d0vQlF6dS95RtXi527lMqHaH4uQ0UcYSVTmm03yPhtM8a7sBsE2CUAZJ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH62UrRaoLA1uTVpJHiLvuQnS/+5MB8GA1UdIwQY MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut MTIxMjUzMTJiMmEzLzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFshJfmtw MT/oKsv3S1qvdLALphlt9FTLyRckjbnNPYIdgsYZXI5oLu65j5I80We3w8v9CSRf 5PlxZnnyN/RKGncNxd4LVDoZlzz+UDHmbzUF8o9hvXFORWCE/+U1jq1Ql+1jk+FC RdN7LQsBJv9p3Cmfg1pc2raf/9SYgwZtjQyB8alKsDswZDAkIlQpnegd6wN4wFVd QkjGMaTeG/criwCzD/H9rYvc8osV+dD0bFyRnx6zbDnX5uqKgp2FLq3zIDApx4UL WOah9pFARz1S+F5hYZodnFgIOL5uYq81ebzaIgWwRwVsEy9Pik8IzgmjJl5y2P0Q k06tnwfaPspd8g== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:53 2025 by rpki-client